last executing test programs: 3m25.605317704s ago: executing program 3 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sec\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1024, 0x400) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 3m25.063986257s ago: executing program 3 (id=303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x40000005}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 3m23.975913724s ago: executing program 3 (id=307): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000280)=""/102392, 0x18ff8) r6 = syz_open_dev$video4linux(&(0x7f0000019580), 0x6d682db9, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f00000195c0)={0x0, 0x0, 0x3007, 0x6, 0x805, 0x100000, 0x10001}) sched_setaffinity(r4, 0x8, &(0x7f0000019280)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m22.113294289s ago: executing program 3 (id=310): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3m20.418664201s ago: executing program 3 (id=312): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0) 3m18.793218471s ago: executing program 3 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffe8a, &(0x7f0000000380)={&(0x7f0000000540)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 3m17.900940273s ago: executing program 0 (id=319): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x60181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0xe5, 0x0, 'queue1\x00', 0x10000080}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="268292", 0xfff6}], 0x1) 3m15.97695714s ago: executing program 0 (id=322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000fc0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}], 0x1c) sendto$inet6(r1, &(0x7f0000001040)="c3", 0x1, 0x40811, &(0x7f0000001080)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x200800, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x5}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m14.706056311s ago: executing program 0 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1024, 0x400) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 3m14.231888042s ago: executing program 0 (id=325): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m12.798200788s ago: executing program 0 (id=329): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) renameat2(r2, 0x0, r2, &(0x7f00000002c0)='./file0\x00', 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$rxrpc(r2, &(0x7f0000000440), 0x0, 0x8c010, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m10.783100247s ago: executing program 0 (id=332): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 3m1.795286607s ago: executing program 32 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffe8a, &(0x7f0000000380)={&(0x7f0000000540)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 2m54.7197252s ago: executing program 33 (id=332): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 14.317961679s ago: executing program 2 (id=787): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 14.070727495s ago: executing program 2 (id=788): socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './sec/tomoyo/exception_policy\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) mount$pvfs2(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x2008042, &(0x7f0000000480)=ANY=[@ANYBLOB]) r4 = dup(r3) read(r4, &(0x7f00000004c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) 10.463091034s ago: executing program 4 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv4', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='+p', 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r4, &(0x7f00000007c0)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys', 0x3a) 10.167259581s ago: executing program 6 (id=798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) socket$alg(0x26, 0x5, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x2, 0xa, 0x20, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x80000003, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 9.891191837s ago: executing program 1 (id=800): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0x10) 9.096207177s ago: executing program 6 (id=801): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x296201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 8.947908281s ago: executing program 1 (id=803): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1000021}}]}, 0x20}}, 0x2) 8.899228312s ago: executing program 2 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f000001a980)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000001aa80)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000001aac0)={0x2020}, 0x2020) 8.027451223s ago: executing program 2 (id=806): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x296201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 7.831672718s ago: executing program 1 (id=807): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) syz_emit_vhci(0x0, 0x22) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x127c91937a50e468, 0x0, 0x100000003}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) syz_emit_vhci(&(0x7f0000001180)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 6.394769253s ago: executing program 5 (id=809): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000003c0)=@other={'lock', ' ', 'io+mem'}, 0xc) 6.155687439s ago: executing program 5 (id=810): syz_open_dev$dvb_demux(0x0, 0x0, 0x41) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) socketpair(0x29, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}}, &(0x7f0000000500)=0x84) getpeername$packet(r1, 0x0, &(0x7f0000000040)) 5.781391228s ago: executing program 4 (id=811): r0 = syz_open_dev$mtd(0x0, 0x0, 0x2) ioctl$BLKPG(r0, 0x40084d0b, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0}) 5.73669953s ago: executing program 1 (id=812): r0 = fsopen(&(0x7f0000000480)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mon_addr\x00', &(0x7f0000000540)='127.0.0.1:6789\x00', 0x0) 5.528343705s ago: executing program 1 (id=813): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000075e000/0x2000)=nil, 0x2000, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x4002080) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x2e9, 0x0) 5.207735072s ago: executing program 4 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x80c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x600000e, 0x64c6, 0x3) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000f80), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000fc0)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001000)=0x28) 5.071661836s ago: executing program 5 (id=815): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000000090500050002000000"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100060000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xa2800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x7ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x83, r2}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000009060108ebffffffffffffff023c76ff00020073797a310000000008000940000000390804000000000002100008800c0007800800094000000002"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x44885) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x1, 0x11d, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000e80)=@svm={0x89, 0x1, 0x1080, {0x4, 0xffffffffffffff8f}, {"7972999d4dd9a3bdc3c701347b390677f0aa39fb5a977cc0ff7a7d2b62bbb1e6e95e4760b0f95c6609ca179cf487863a2f2d687c4339fe9cf36ebd8157a9183480c790acebb02ff3f74cb96462003fc4f8a02793a4d96e5e21c2a725652e413f2e2674e3f34cf4348f2b4fd0bb9d7ea805de56061b72d6e2f4df2f833fd0ce977789f17cd74e54b3d61a1996d58d06c6f40396635109d6df8d7d1a04f4c6ff29dda0627cddb444b4303446b0154807011fe57e264045f11b41b661a9320a5cfd48919ad5719b0a3335c07f10985e9a977bb0016f2b15cf61f6ee84f2fb72c1dbdbc8b0954da764907b6b9924dc4d42ab435ee47026de127c161ba6de851f6e8ce3ceef7f3b6845d345c3ba6228548f52e68c2fd9f4c90d9eaa9580631deab0f86211fe38a1f9502c1eb247b21848896cfda417de15aa949947261c0321edce2c61b350af60cf0e455836c1805c2aa38030f61278e1934ca602a0556453f2d34e910035380f6461a4b83265feb5342fe0c78e0848bfedbf0a3bd050b870e54ca7f9bcd904c160356892b36cc2051b39a54faac491876b6ada9426d1eac53567715f168bd08da5e51af911d38ea02796a77abe9c61a12ce9f6dc9277fa7890583eb1872cb6cb144cb67cd30d298d19ffb71e2061927c9f7b3fd43b38efb549d5933e4fd4eb1f504030762324f9159c6c9d99c806184b922636122ac5b69c4aaa74d49916267dc918354ecaf0e94c1baf7f4402b038c9642c9f34c75ab0f5e8f02a39865547bb9d75e2f718f84ea237a7c7f0d32c5a818f48eee87b9191fbabb2ac8af74448f74beeee196622abaff238c4eed150affcc368a9807fddcaa8a4bc1cf2ca945f5184510f6d03d4d09e5969c4f8cbfb90cf8b25601f365dc8ba671a193e0eefb8411b53c8d4536d443ff7207bd561381d3dbffd28d64f34c46b1d50ba6cdf57af42b75e62264e8b34ea04fa5f1187aa30aafb0306dca03638bce266c4cdeea18fae956178222b623298f6385e1c088d4729a2f74195ab574cfa5cb176400f9c38e0d052525aeed20d7dbc0fc996d5b325f5f530ceae912819bf15c6493dfc44e3cc9046566b59dbdbfea34bc95952c0576b6fe559ecb07422f4a919f810dfd722d4d397615fb4d8f30e907f6bda3bf6815d8afe6cd17b0af3c163128390a1687902e620c45a829f6ede3d57f50b6f686b2709c7040abf44a7ca1d7e1b93dd518c184297ad6d3ae1061f38f7a3a921a489295f23fba5ee66f2bb4f52ccd5f6039d8a1fb7441267e8761044d318be56ec0463d6b59beff1578e320d23812f251199ec4c05555e98d090ef0e9e80b17f5838438e5d61027bb2de27bd528c6047bfb9950ca0bc39429fec6decc22d53d636607c6e9f9c4872e3d318e59d311bf60c4fa75e0a89f4026e5d683302002104a024a44baae7782cd89843e52d6fe022a640cbdb1029e0821fc84156bc4007da5ee610b58622e9e254536b57e2fd5185098b6cb825622df9d9013cf4603718717254c14f136b9d98a48e3ce323bebaaf2715d19ebb758ff57520902d00ac4b96b9b40c281d32ef20393bb988b12b8f2195e6343f3f15cffaa991c37a9cc31d44161af044e2cb74c7ead6ef0f623129ff695f269e421a139d3c082a6316439f0251852cd20ea0bfa4f9e421c3f05e10029fe44f51c5ce01119c06806ad2125380d50e5c54f685d43c637935ac2b914b45dfaabd949ecb64d74c513890824b575bd88e44bb6cc0f2960a59538705013c428e787cd03774f0b5b723ca386173935413490ea486e1d928c7d97ab8ed6fe079b4e2db03aed1350360c29c3d443ff68a52513ccee2edca17bbdbaba71b8a2fa96a0c7c722da84e4b15ec4aa3b6ff05dfcc322e63f9bb0e8446d35eed6ba146b4a9522414a16d596fa5214b4cadba946dd41d0b026c6a06b80f343557763ea98f7a8644527f888ccafb38df05520b7e507801551a992bc5431d9e3adc72ada2f566eaee88a6427f4dbaf9676f7a3d6c2080c6e9250b13951e91fd6c3de6a7e4087c536b4c9768225f12d82279b9fcce786ec6ed1756cf8e45b96723ff8665efa40ced50f30163bfb64382b12d4fd4b2efce0909e09044b9cbca08a08a5d58415bf862adfcff7f27db0d1b9e27a0c3582947f24f316b26654743ea31eeb99098a5ed009513fae57aaab9b6e819399eee39b1f8713864b14de8e18780efc9a487b544e85ddd8b1b2f690328c86ed56f60660ae67b1b0f761b321e2dd2e8d5d1f5112e749138ecedbd7ce2ae0760ee8da6e7d94d9ecffb1a993107e80678bb8edc3aae9ff81b2b4dec2581508bf1977e1907768b3bca75686be01e6790c202a49088dce4b97a7cc7249f455a929b148a1e1449283a01f443da23dcf7dd8b2e35ec93355265a59a9a090b3e212b6de9323d9dbc887b887f86885b9bcb61d4a5491d645ea2062c2d25ca37d77ce2c0c3a3aa05bffd3233bf762aaa8d3392135e79d31c4ef5a84cfaa4e1f6d4f46cb7cefd5a92e02535bb9cbf2321c02fde8e85b0c6f70d974314006c37014dc45503000d106db34a548b98cf22dd23ef6313aa84e4cee36f8d1003c8889a391918023b21005f4388a3ca9d7eb13ac356b0cd7011b2efde86b6b290ff2bd355e965335b6925085b3c191719c61585555d66f5cfcf065bcab4504ca0301dfaf4a4264bb8b1192f8beb6eda09f664a7012cf8a77cc7288314f2fd6973c4b480cd680b46c108835dba0a48b2368a4b6a73a348fe3d5a3fc8676e3cdb6f4db37f4527438b45c2a3c0b14054d20fa053183f7378a2ac92c1b82300dafb100b5084947bd0b4df23999665b3bda058f268e8d51259546d659910f0ad85d8753ec4e5a3f4a20c50ca9954e3381ab35f90c272f44031525eb205d6e64b71cc24bf1f36f9e2a8988a532835befaaf99e38eb1f16971c4db69f0b21d5a043d56ee58856560d41cb2e85d73b3d7ed4f1d55bd9353a2daa4755a7c7cf9c2f185a349c55abe56617e5091c83afae12db822d8f5466fbd86d71fc3f30e1308f05014fd9370cf3c3e769f94bd08b8533cedb5fdee18ff817494f0f03f675d17e9c8faf5395f67cfc99acd16dd2d32698f0e0cdf8ff6d2ae9f50e018b619b1d24b42359ff4062e187b03368be4421816053d37f5087fba684ba0fe1921fd5160a95c801ffcc6d469cb651020c59a38435fcb50637ceb6eec243dd3586fab757b1f2e39677c92ae4268ae6ddf8c7ae2382aae791c4f62a0dc817fd0423c5ecea648ddb54e689b01941fae1b849c50c25e62d4f053ad1bba015ab64ee1a8b786d8c527dcbfadc5896e4b31877f13f6711a8c37fdcd19021298f2e87a2bbc79c2a87f394ac237b367480e917373b50f5d1ef7ad21626de61aed35f0030058c047912541b88e10f79334128ad82dd461c15d5d7be9e31f7194be9f512023788cec27e04df07d868852199a77cf11f09fabe6bbb36678a77423be80970bdec8cc0bb820419e0b0b624cbb14d2ac493dbf74eeeb635bfbb5795c8b7f70d205913f0ccd6752de671303745e8f9758b03251883dcf84657683a3c8006172e2d74848ae2a41c93f1417fdb9d7f76afedbdbcd667fc3d164c3b3e706518a66ecc81f54e25174061dc7cfcfa8c7200cc492e5fd0f0ffa1aed55a181db740dc15aae465474c2395de5fca331af35d20f96727b3f1d3995667fcf28959b9bc7a09eed1824e61fa065ac3c91ffa6073bff3945c5105dfac33298db85aaa7a87a61f025788cf5a98fc4d1e081a3e0fc96cd7b57288d7f4240bf254740016005f8eef4c8dff2bbc59bb46a416984d169db513a7d972c63d976fea2ae11d92a2cbd0fd24b8eea619c6b5efc2cd266ca843cd029d318c2ae3971421a93517b20d2933496a05850c7653f0060ef6c84b59a011f04900e499348ba1c4fcc7f1284e9f37f87981790687206c9799ed6ea73919b2e89bf047bb23e384da9ce0aeaab5828d882b5f58d9fb2c2f97158cae1008154c1f1d00a386be88eabfc26478a38f4671e25e68f365db96b7b3ae91c75eaa7da1de220487f98d48e89c161e8121ed373a567051ef1ba3c67cecefc61d6d8034935802a68fb5c10cd1981fc9e32dc27860b4175a493b7a5d878810177863ec75695e68d763aea577d80177efb3ca43bb3e4af230faf65456a1d7ed30cc96fac36806d07be510d48fd988183437c1dc351557df6f75ad4e313c1c1d962792239be3183875aeb0859498dc16a13ec54ff7440d081946054d37b29d12a8ae5af335d6b616b0119ae25e128e38060004354ec21427d1cfa707495ab9ad554d22b1e60c2917837c27623256c412112f9a9f329a60d528b1034d37fd759b53056a6bf2bd422c0746a7c8a161ef427d1266c80f126c683101605d23a6c130f29bbe8c78bc0cf583718742c3dd1f1bd8ce4764c1abcf52b68f7a9d99dce9dd85ea1ea153e718043d284707e0ecc9282e46727636a36fe9f7f4a4cd016ebe051cc46f9fc344b9e2673b4a3b2c0c6ce228252fb4b89b1442de2eafd24b4627dbbb0ab72774a49562b632ce8faabe9eca769a865374cd46d852ba470adaeaad41383ea8358c38a9b420754559816ac9c46830a229c9aaf56fb134f94981e1b6d420df3e9eaccef97f90f14a39593a170112cebeaa8215134415dbddf49d94b694d05326a1ea6269fdaa980d3e7733859acaf7ffee92e320d2062995fe28222981487dc7ee5c3527a2615394aa5169a6aaa30512939f4c1747a113ccfbb8a770d61ac87c16e9ff6b7d4cca35fbfef8a399222aea4db461358e6e8a08a7af6b770c8a8ff76117ba37bf9a61b35e227469ca8c30af912edc12676d17237327880245d64e4e87c245b0608d7ea32da7c121228db043a611b5a312e5dd16d0e2dfbafea976dfad6686bd18cac7abf8cae75c365cece7ee51cb14f741c1d6950c97ae64d7d41acae6dcdffd68188b53ec630a673455f110a64040040d6befa2d1097ad13cdc2d17932803ccd36fea611183599697fb12f9dcf7c13a6a875590db211747dda9c9821288e58f2926a05dce15acfacca22f6bb74231c97347e63e7a83411bb26d1b8bd1ab1ba680b6bf3a96f438cac01dcdcf32594d40f87690dc6cfe7c4f590df8486a5552c7694bf61b0e46ef76e62efdbad90e274d3ce3d18f56a895f8d654dcd059ed88c8fa95fc4b0e738d982c251f39fb888f6070adaefb5b980fbcdff69c924e70f819be04dfd4d506da7f583d164daa3eade161fddbd6d478f223ce3c4cbc621eab26946d1fdabe01fb83ccf0eba14925d973a8455545c5a4c4e2206b8e4bc569df522f98d9c771c5cfccab5a5a416e46b6c7e20cd59cb2aa78173ba3f5c4655032a73f47970bbf3dfba3066c80d5a2b76ad1eb834235b7495f14a14f1297ae626a776d3917005f79eb9dd263fd4e5f5961484970317b486b66e53974d7bb946106523ec89167a93457a95c5486e526c71adceb8a00311c4dd86999febc7a9e3bd8ee4232affa06740f8f1e17b88a5d8d996893373083afc4dbcfca0cc0d81d430bc1e53a2258b2dc4360f0c6337fc38acf8ef29084246d2804c615f4037b6f232af0b41557f054f242b2c1e29a3bde65c8a92d7af0988c45ece537d453f04d15abfabba7e9cacf7812244eb88a012d979d09b09d14bf36350e7613c461f35b80e573d56b9377ba3f7f4112c00cbd27e7d13c69430bf15f741b960af9d22c871eb74446953a8d5de3ccf5d77f5a077a08731884462889eb6a3ca529e609e76c6fc035a9977c0d1d038fabf1993d6452c359ac394"}}) fanotify_mark(r5, 0x105, 0x9165, r6, 0x0) mq_getsetattr(r4, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000002200)={0x14, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000002440)={0x44, &(0x7f0000002240)={0x40, 0x3, 0xe, "c2b8caf7a7ca6c13f86207b160f8"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0xe1}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002300)={0x20, 0x81, 0x1, 'e'}, &(0x7f0000002340)={0x20, 0x82, 0x3, "3bc556"}, &(0x7f0000002380)={0x20, 0x83, 0x1, "f4"}, &(0x7f00000023c0)={0x20, 0x84, 0x3, "b9be36"}, &(0x7f0000002400)={0x20, 0x85, 0x3, "e80d6e"}}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d657"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000905010400000000000000000a0000040900010073797a3100000000080005400000000209000200735d7a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 5.019036977s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f000001a980)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000001aa80)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000001aac0)={0x2020}, 0x2020) 3.797390437s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1d2000", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x33, 0x0, 0x0, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000180)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 3.423945096s ago: executing program 6 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) 2.471479969s ago: executing program 6 (id=819): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000600)={0x0, r1}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)=' ,1\t', 0x4}], 0x1) 2.43294979s ago: executing program 1 (id=820): sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x1, 0x5, &(0x7f0000000340)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.168105342s ago: executing program 4 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv4', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='127.0.0.1', 0x9) write(0xffffffffffffffff, &(0x7f00000006c0)='4420', 0x4) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='+p', 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r4, &(0x7f00000007c0)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys', 0x3a) 985.464376ms ago: executing program 2 (id=822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}], 0x1c) sendto$inet6(r1, &(0x7f0000001040)="c3", 0x1, 0x40811, &(0x7f0000001080)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) 950.325857ms ago: executing program 5 (id=823): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000500)='mon_addr\x00', &(0x7f0000000540)='127.0.0.1:6789\x00', 0x0) 949.204417ms ago: executing program 6 (id=824): add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x1bb, 0xfffffffffffffffe) 753.695321ms ago: executing program 6 (id=825): syz_open_dev$dvb_demux(0x0, 0x0, 0x41) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) socketpair(0x29, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}}, &(0x7f0000000500)=0x84) getpeername$packet(r1, 0x0, &(0x7f0000000040)) 699.635483ms ago: executing program 5 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x80c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x600000e, 0x64c6, 0x3) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000f80), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000fc0)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001000)=0x28) 45.454629ms ago: executing program 5 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f000001a980)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000001aa80)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000001aac0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=828): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x296201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x5b) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): with address 0x0, skipping [ 105.456511][ T1171] usb 5-1: config 0 interface 1 has no altsetting 0 [ 105.486147][ T1171] usb 5-1: string descriptor 0 read error: -71 [ 105.493700][ T1171] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 105.523383][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.570627][ T1171] usb 5-1: config 0 descriptor?? [ 105.584952][ T1171] usb 5-1: can't set config #0, error -71 [ 105.651023][ T1171] usb 5-1: USB disconnect, device number 8 [ 105.952235][ T4348] usbhid 3-1:0.0: can't add hid device: -71 [ 105.960635][ T4348] usbhid: probe of 3-1:0.0 failed with error -71 [ 105.969037][ T4348] usb 3-1: USB disconnect, device number 6 [ 107.241067][ T4983] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 107.248900][ T4983] Error parsing options; rc = [-22] [ 107.272422][ T4348] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.739783][ T4348] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.762680][ T4348] usb 3-1: config 0 has no interface number 0 [ 107.893094][ T4348] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 107.907740][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.916335][ T4348] usb 3-1: Product: syz [ 107.920630][ T4348] usb 3-1: Manufacturer: syz [ 107.926834][ T4348] usb 3-1: SerialNumber: syz [ 107.933745][ T4348] usb 3-1: config 0 descriptor?? [ 108.230541][ T4348] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 108.281861][ T4348] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.923868][ T4348] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 108.932824][ T4348] usb 3-1: media controller created [ 108.950064][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.992508][ T4348] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 109.160875][ T4348] usb 3-1: USB disconnect, device number 7 [ 110.364060][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.677896][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 110.842204][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.918054][ T126] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 110.978489][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.083229][ T126] usb 4-1: config 0 descriptor?? [ 111.517872][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.537035][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.552441][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.569953][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.581473][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.588802][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.596501][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.612465][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.629603][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.640051][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.658327][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.686215][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.699419][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.717973][ T126] asus 0003:0B05:19B6.0001: unknown main item tag 0x0 [ 111.732170][ T126] asus 0003:0B05:19B6.0001: unbalanced collection at end of report description [ 111.752478][ T126] asus 0003:0B05:19B6.0001: Asus hid parse failed: -22 [ 111.759801][ T126] asus: probe of 0003:0B05:19B6.0001 failed with error -22 [ 111.788030][ T126] usb 4-1: USB disconnect, device number 4 [ 113.235480][ T5060] vivid-000: kernel_thread() failed [ 113.722003][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.913703][ T126] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 113.930130][ T126] usb 4-1: config 1 has no interface number 0 [ 113.959564][ T126] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 113.990760][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.045302][ T126] usb 4-1: Product: syz [ 114.055251][ T126] usb 4-1: Manufacturer: syz [ 114.059878][ T126] usb 4-1: SerialNumber: syz [ 114.101995][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.304302][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.330606][ T126] usb 4-1: 3:0 : does not exist [ 114.335766][ T126] usb 4-1: 3:0 : does not exist [ 114.353399][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 114.382567][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 114.408034][ T22] usb 3-1: Product: syz [ 114.427594][ T22] usb 3-1: Manufacturer: syz [ 114.434784][ T126] usb 4-1: USB disconnect, device number 5 [ 114.459658][ T22] usb 3-1: SerialNumber: syz [ 114.745165][ T22] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.085321][ T1171] usb 3-1: USB disconnect, device number 8 [ 115.221459][ T5086] overlayfs: missing 'workdir' [ 115.922818][ T5084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.944302][ T1171] usblp0: removed [ 116.011437][ T5084] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.077666][ T5084] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.116950][ T5084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.143665][ T5084] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.191258][ T5084] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.219370][ T5084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.240469][ T5084] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.268806][ T5084] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.295456][ T5084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.317627][ T5084] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.343321][ T5084] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.377881][ T5084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.493889][ T5084] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.514210][ T5084] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.272374][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.551972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.571970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.581963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.591966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.601966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.611975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.621968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.631969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.641970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 117.651967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 118.203791][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.242080][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.312090][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.392067][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.542153][ T1171] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.755069][ T1171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.775484][ T1171] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 118.805792][ T1171] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.851039][ T1171] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 118.870659][ T1171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 118.889137][ T1171] usb 1-1: Product: syz [ 118.893615][ T1171] usb 1-1: Manufacturer: syz [ 118.903851][ T5111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.913119][ T1171] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 118.942123][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.942773][ T1171] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 119.133610][ T22] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.163570][ T22] usb 3-1: config 0 has no interface number 0 [ 119.173211][ T22] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 119.199966][ T1171] usb 1-1: USB disconnect, device number 13 [ 119.201762][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.216570][ T1171] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 119.239777][ T22] usb 3-1: Product: syz [ 119.248080][ T5122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 119.252044][ T22] usb 3-1: Manufacturer: syz [ 119.261745][ T22] usb 3-1: SerialNumber: syz [ 119.263018][ T1171] garmin_gps 1-1:1.0: device disconnected [ 119.294373][ T22] usb 3-1: config 0 descriptor?? [ 119.353377][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 119.386925][ T5122] device veth0_to_bond entered promiscuous mode [ 119.527687][ T22] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 119.530254][ T22] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.530460][ T22] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 119.530508][ T22] usb 3-1: media controller created [ 119.561730][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.731428][ T22] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 119.801294][ T22] usb 3-1: USB disconnect, device number 9 [ 120.207401][ T5135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.203'. [ 120.233356][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 120.322337][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 120.392010][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 120.472515][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 121.432141][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 122.633175][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 122.639266][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 122.642106][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 122.645334][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 122.994361][ T5168] kvm [5167]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x71 [ 123.026236][ T5168] kvm [5167]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2a8a [ 123.045972][ T5168] kvm [5167]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 123.063062][ T5168] kvm [5167]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x70bd [ 123.081634][ T5168] kvm [5167]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 123.102457][ T5168] kvm [5167]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1b8e [ 123.192243][ T126] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 123.388134][ T126] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 123.406373][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.421999][ T126] usb 4-1: Product: syz [ 123.433578][ T126] usb 4-1: Manufacturer: syz [ 123.443798][ T126] usb 4-1: SerialNumber: syz [ 123.453307][ T126] usb 4-1: config 0 descriptor?? [ 123.664914][ T126] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 006 [ 123.777363][ T5178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.216'. [ 123.948180][ T4348] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.168661][ T4348] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.190152][ T4348] usb 3-1: config 0 has no interface number 0 [ 124.204275][ T4348] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 124.229092][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.242063][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.242137][ T4260] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 124.264542][ T4348] usb 3-1: Product: syz [ 124.268933][ T4348] usb 3-1: Manufacturer: syz [ 124.277445][ T4348] usb 3-1: SerialNumber: syz [ 124.288078][ T4348] usb 3-1: config 0 descriptor?? [ 124.434037][ T22] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 124.449246][ T22] usb 5-1: can't read configurations, error -61 [ 124.477041][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 124.498782][ T4260] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.521383][ T4348] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 124.541510][ T4260] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 124.551599][ T4348] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.563982][ T4348] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 124.575262][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.583634][ T4348] usb 3-1: media controller created [ 124.593083][ T4260] usb 1-1: config 0 descriptor?? [ 124.612029][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.613087][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.723571][ T4348] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 124.814161][ T22] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 124.825335][ T4348] usb 3-1: USB disconnect, device number 10 [ 124.832042][ T22] usb 5-1: can't read configurations, error -61 [ 124.842269][ T22] usb usb5-port1: attempt power cycle [ 125.020181][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.030829][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.056361][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.068909][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.091993][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.107288][ T4260] asus 0003:0B05:19B6.0002: unknown main item tag 0x0 [ 125.127248][ T4260] asus 0003:0B05:19B6.0002: unbalanced collection at end of report description [ 125.147769][ T4260] asus 0003:0B05:19B6.0002: Asus hid parse failed: -22 [ 125.155013][ T4260] asus: probe of 0003:0B05:19B6.0002 failed with error -22 [ 125.246784][ T41] usb 1-1: USB disconnect, device number 14 [ 125.262097][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.305379][ T22] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 125.317756][ T22] usb 5-1: can't read configurations, error -61 [ 126.262120][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.330734][ T22] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 126.341071][ T22] usb 5-1: can't read configurations, error -61 [ 126.366406][ T22] usb usb5-port1: unable to enumerate USB device [ 127.276844][ T5206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.288258][ T5206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.742429][ T4348] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 129.983544][ T4348] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.002243][ T4348] usb 1-1: config 0 has no interface number 0 [ 130.025919][ T4348] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.038100][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.049201][ T4348] usb 1-1: Product: syz [ 130.058770][ T4348] usb 1-1: Manufacturer: syz [ 130.065817][ T4348] usb 1-1: SerialNumber: syz [ 130.074607][ T4348] usb 1-1: config 0 descriptor?? [ 130.291412][ T4348] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 130.308013][ T5228] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 130.308013][ T5228] [ 130.343758][ T4348] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.372323][ T4348] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 130.380400][ T4348] usb 1-1: media controller created [ 130.399711][ T5228] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 130.448320][ T5228] CIFS: Attempting to mount \\172.20.20.170\share [ 130.467632][ T5228] CIFS: VFS: Error connecting to socket. Aborting operation. [ 130.483091][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.502491][ T5228] CIFS: VFS: cifs_mount failed w/return code = -111 [ 130.644510][ T4348] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 130.762193][ T4348] usb 1-1: USB disconnect, device number 15 [ 131.032013][ T41] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.223912][ T41] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.231527][ T41] usb 5-1: can't read configurations, error -61 [ 132.112007][ T41] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.335530][ T41] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 132.355384][ T41] usb 5-1: can't read configurations, error -61 [ 132.394038][ T41] usb usb5-port1: attempt power cycle [ 132.594330][ T5259] rnbd_client L600: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 132.635871][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642467][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789265][ T4454] rtrs_client L1789: : Resolving route failed, err: -19 [ 132.832138][ T41] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.863949][ T5259] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 132.885746][ T41] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 132.903627][ T41] usb 5-1: can't read configurations, error -61 [ 133.093207][ T41] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.155736][ T41] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 133.192176][ T41] usb 5-1: can't read configurations, error -61 [ 133.212274][ T41] usb usb5-port1: unable to enumerate USB device [ 133.572688][ T4260] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.653118][ T4260] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.676101][ T5275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.765111][ T5275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.775573][ T5280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.932522][ T5280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.941680][ T5280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.954558][ T5280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.962468][ T5280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.034589][ T5292] device syzkaller0 entered promiscuous mode [ 135.170745][ T5297] tipc: Started in network mode [ 135.203743][ T5297] tipc: Node identity ce81ea5ab5d9, cluster identity 4711 [ 135.247489][ T5297] tipc: Enabled bearer , priority 0 [ 135.381554][ T5299] tipc: Resetting bearer [ 135.393598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.402115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.410222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.418384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.426607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.434843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.543344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.551615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.320560][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.351029][ T5309] mmap: syz.3.256 (5309) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.608920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.617458][ T4344] tipc: Node number set to 2069424730 [ 136.667268][ T5291] tipc: Resetting bearer [ 136.819694][ T5291] tipc: Disabling bearer [ 136.825901][ T5321] syz.0.262 uses obsolete (PF_INET,SOCK_PACKET) [ 136.952265][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.958683][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.032051][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.038178][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.112469][ T4344] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.197863][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.230350][ C1] hrtimer: interrupt took 1016955 ns [ 137.255973][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.314402][ T4344] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 137.334880][ T4344] usb 5-1: can't read configurations, error -61 [ 137.515371][ T4344] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 137.887750][ T4348] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 137.898980][ T4344] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 137.922041][ T4344] usb 5-1: can't read configurations, error -61 [ 137.941244][ T4344] usb usb5-port1: attempt power cycle [ 138.153615][ T4348] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 138.229304][ T4348] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 138.274317][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.324382][ T4348] usb 3-1: Product: syz [ 138.359122][ T4348] usb 3-1: Manufacturer: syz [ 138.388888][ T4348] usb 3-1: SerialNumber: syz [ 138.409670][ T4348] usb 3-1: config 0 descriptor?? [ 138.422002][ T4344] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.470317][ T4348] powermate: probe of 3-1:0.0 failed with error -22 [ 138.484100][ T4344] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.526834][ T4344] usb 5-1: can't read configurations, error -61 [ 138.568852][ T5328] Set syz1 is full, maxelem 6117 reached [ 138.702159][ T4344] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 138.710730][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.787154][ T4344] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.824299][ T4344] usb 5-1: can't read configurations, error -61 [ 138.861419][ T4344] usb usb5-port1: unable to enumerate USB device [ 138.890190][ T4348] usb 3-1: USB disconnect, device number 11 [ 143.926344][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.162462][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.444565][ T4353] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 145.703374][ T4353] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 145.730578][ T4353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.742466][ T4353] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 145.813699][ T4353] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 145.833988][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.855361][ T4353] usb 5-1: Product: syz [ 145.865086][ T4353] usb 5-1: Manufacturer: syz [ 145.875644][ T4353] usb 5-1: SerialNumber: syz [ 146.444541][ T22] usb 5-1: USB disconnect, device number 21 [ 146.917359][ T5417] binder: 5410:5417 ioctl 81f8943c 2000000005c0 returned -22 [ 147.078982][ T5419] binder: 5410:5419 ioctl c0306201 200000000380 returned -14 [ 147.350944][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.359749][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.352633][ T4352] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 149.565734][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 149.612103][ T4352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.658012][ T4352] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 149.732102][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.754369][ T4352] usb 5-1: config 0 descriptor?? [ 151.190439][ T4352] asus 0003:0B05:19B6.0004: unknown main item tag 0x0 [ 151.213558][ T4352] asus 0003:0B05:19B6.0004: unknown main item tag 0x0 [ 151.221684][ T4352] asus 0003:0B05:19B6.0004: unbalanced collection at end of report description [ 151.225592][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.233077][ T4352] asus 0003:0B05:19B6.0004: Asus hid parse failed: -22 [ 151.258547][ T4352] asus: probe of 0003:0B05:19B6.0004 failed with error -22 [ 151.503059][ T4352] usb 5-1: USB disconnect, device number 22 [ 151.525501][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.389854][ T5447] input: syz0 as /devices/virtual/input/input5 [ 152.475979][ T5401] device vlan0 left promiscuous mode [ 153.120803][ T5401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.149011][ T5401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.189492][ T5401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.229949][ T5401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.986372][ T5460] netlink: 64 bytes leftover after parsing attributes in process `syz.4.302'. [ 154.072144][ T4344] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.264851][ T4344] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 154.302592][ T4344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.359891][ T4344] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 154.407157][ T4344] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 154.541681][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.550818][ T4344] usb 1-1: Product: syz [ 154.556239][ T4344] usb 1-1: Manufacturer: syz [ 154.562786][ T4344] usb 1-1: SerialNumber: syz [ 154.712157][ T4349] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 155.002219][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.032540][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.042919][ T4349] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 155.052869][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.062430][ T4344] usb 1-1: USB disconnect, device number 16 [ 155.138619][ T4349] usb 5-1: config 0 descriptor?? [ 155.588744][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 155.607693][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 155.750775][ T5479] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 155.759744][ T5479] Error parsing options; rc = [-22] [ 156.100970][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 156.196325][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 156.318684][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 156.494012][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 156.503897][ T4349] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 156.522754][ T4349] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 156.733614][ T4349] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 157.042114][ T4353] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.255273][ T4353] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.283984][ T4353] usb 1-1: config 0 has no interface number 0 [ 157.329956][ T4353] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 157.388479][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.417405][ T4353] usb 1-1: Product: syz [ 157.426329][ T4353] usb 1-1: Manufacturer: syz [ 157.433960][ T4353] usb 1-1: SerialNumber: syz [ 157.456566][ T4353] usb 1-1: config 0 descriptor?? [ 157.699979][ T4353] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 157.724884][ T4353] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.777246][ T4353] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 157.835670][ T4353] usb 1-1: media controller created [ 157.928579][ T4353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.235781][ T4377] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 158.284478][ T4377] dvb_usb_ec168: probe of 2-1:0.1 failed with error -110 [ 158.308889][ T4377] usb 2-1: USB disconnect, device number 3 [ 158.722331][ T4377] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 158.924679][ T4377] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 158.969673][ T4377] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 159.032791][ T4353] i2c i2c-3: ec100: i2c rd failed=-110 reg=33 [ 159.041806][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.122271][ T5463] i2c i2c-1: failure writing data [ 159.124962][ T4377] usb 2-1: Product: syz [ 159.134074][ T5487] i2c i2c-1: failure writing data [ 159.183624][ T4377] usb 2-1: Manufacturer: syz [ 159.204861][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.225347][ T4377] usb 2-1: SerialNumber: syz [ 159.246215][ T4353] usb 1-1: USB disconnect, device number 17 [ 159.258210][ T4377] usb 2-1: config 0 descriptor?? [ 159.277073][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.284720][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.295854][ T4349] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 159.295926][ T4377] powermate: probe of 2-1:0.0 failed with error -22 [ 159.313517][ T4349] usb 5-1: USB disconnect, device number 23 [ 159.403016][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.540408][ T4385] usb 2-1: USB disconnect, device number 4 [ 160.095790][ T5502] FAULT_INJECTION: forcing a failure. [ 160.095790][ T5502] name failslab, interval 1, probability 0, space 0, times 0 [ 160.224892][ T5502] CPU: 0 PID: 5502 Comm: syz.0.315 Not tainted syzkaller #0 [ 160.232757][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.243470][ T5502] Call Trace: [ 160.246762][ T5502] [ 160.249879][ T5502] dump_stack_lvl+0x188/0x24e [ 160.254593][ T5502] ? show_regs_print_info+0x12/0x12 [ 160.259816][ T5502] ? load_image+0x410/0x410 [ 160.264346][ T5502] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.269395][ T5502] should_fail_ex+0x390/0x4c0 [ 160.274096][ T5502] should_failslab+0x5/0x20 [ 160.278612][ T5502] slab_pre_alloc_hook+0x59/0x300 [ 160.283658][ T5502] ? __vb2_queue_alloc+0x142/0x1410 [ 160.288876][ T5502] __kmem_cache_alloc_node+0x4f/0x270 [ 160.294268][ T5502] ? __vb2_queue_alloc+0x142/0x1410 [ 160.299491][ T5502] __kmalloc+0xa3/0x240 [ 160.303695][ T5502] __vb2_queue_alloc+0x142/0x1410 [ 160.308754][ T5502] vb2_core_reqbufs+0x9ff/0x10e0 [ 160.313718][ T5502] ? trace_contention_end+0x5f/0x170 [ 160.319029][ T5502] ? vb2_verify_memory_type+0x570/0x570 [ 160.324808][ T5502] ? __mutex_lock+0x1ab/0xae0 [ 160.329528][ T5502] ? do_vfs_ioctl+0x1be3/0x1d40 [ 160.334429][ T5502] ? vb2_verify_memory_type+0x1f8/0x570 [ 160.340007][ T5502] vb2_ioctl_reqbufs+0x470/0x780 [ 160.344985][ T5502] __video_do_ioctl+0xa10/0xe40 [ 160.349869][ T5502] ? __lock_acquire+0x7ea0/0x7ea0 [ 160.354917][ T5502] ? video_ioctl2+0x30/0x30 [ 160.359447][ T5502] ? __might_fault+0xc2/0x120 [ 160.364142][ T5502] ? __might_fault+0xa6/0x120 [ 160.368848][ T5502] video_usercopy+0x987/0x1450 [ 160.373657][ T5502] ? video_ioctl2+0x30/0x30 [ 160.378913][ T5502] ? v4l_printk_ioctl+0x130/0x130 [ 160.384089][ T5502] v4l2_ioctl+0x183/0x1d0 [ 160.389772][ T5502] ? v4l2_poll+0x2b0/0x2b0 [ 160.394520][ T5502] __se_sys_ioctl+0xfa/0x170 [ 160.399153][ T5502] do_syscall_64+0x4c/0xa0 [ 160.403609][ T5502] ? clear_bhb_loop+0x60/0xb0 [ 160.408305][ T5502] ? clear_bhb_loop+0x60/0xb0 [ 160.413631][ T5502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.420100][ T5502] RIP: 0033:0x7f7e4299e559 [ 160.424565][ T5502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.444205][ T5502] RSP: 002b:00007f7e437ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.452653][ T5502] RAX: ffffffffffffffda RBX: 00007f7e42c25fa0 RCX: 00007f7e4299e559 [ 160.460844][ T5502] RDX: 000020000001aa40 RSI: 00000000c0145608 RDI: 0000000000000004 [ 160.468838][ T5502] RBP: 00007f7e42a35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 160.476826][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.484917][ T5502] R13: 00007f7e42c26038 R14: 00007f7e42c25fa0 R15: 00007ffcd490f598 [ 160.493283][ T5502] [ 160.942046][ T22] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 161.543980][ T22] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 161.564003][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.743942][ T22] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 162.787632][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 162.826057][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.852184][ T22] usb 5-1: Product: syz [ 162.875379][ T22] usb 5-1: Manufacturer: syz [ 162.880881][ T22] usb 5-1: SerialNumber: syz [ 163.192864][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.196415][ T22] usb 5-1: USB disconnect, device number 24 [ 163.395103][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.335846][ T5492] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.350096][ T5492] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.361696][ T5492] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.386110][ T5492] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.442221][ T5539] nvmet: transport type 0 not supported [ 167.595082][ T5559] FAULT_INJECTION: forcing a failure. [ 167.595082][ T5559] name failslab, interval 1, probability 0, space 0, times 0 [ 167.595128][ T5559] CPU: 0 PID: 5559 Comm: syz.4.331 Not tainted syzkaller #0 [ 167.615331][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.625400][ T5559] Call Trace: [ 167.628702][ T5559] [ 167.631641][ T5559] dump_stack_lvl+0x188/0x24e [ 167.636333][ T5559] ? show_regs_print_info+0x12/0x12 [ 167.641536][ T5559] ? load_image+0x410/0x410 [ 167.646073][ T5559] ? __might_sleep+0xd0/0xd0 [ 167.650675][ T5559] ? __lock_acquire+0x7ea0/0x7ea0 [ 167.655728][ T5559] should_fail_ex+0x390/0x4c0 [ 167.660464][ T5559] should_failslab+0x5/0x20 [ 167.664998][ T5559] slab_pre_alloc_hook+0x59/0x300 [ 167.670037][ T5559] ? x509_get_sig_params+0x254/0x4c0 [ 167.675345][ T5559] __kmem_cache_alloc_node+0x4f/0x270 [ 167.680737][ T5559] ? x509_get_sig_params+0x254/0x4c0 [ 167.686029][ T5559] __kmalloc+0xa3/0x240 [ 167.690190][ T5559] x509_get_sig_params+0x254/0x4c0 [ 167.695314][ T5559] x509_cert_parse+0x4ab/0x7a0 [ 167.700085][ T5559] x509_key_preparse+0x60/0x660 [ 167.704939][ T5559] ? down_read+0x1a8/0x2d0 [ 167.709365][ T5559] asymmetric_key_preparse+0xa5/0x140 [ 167.714745][ T5559] key_create_or_update+0x432/0xa40 [ 167.719943][ T5559] ? security_key_permission+0x7c/0xa0 [ 167.725408][ T5559] ? key_type_put+0x20/0x20 [ 167.730001][ T5559] ? lookup_user_key_possessed+0x40/0x40 [ 167.735649][ T5559] ? __might_fault+0xc2/0x120 [ 167.740328][ T5559] ? __might_fault+0xa6/0x120 [ 167.745008][ T5559] __se_sys_add_key+0x34b/0x410 [ 167.749902][ T5559] ? __x64_sys_add_key+0xc0/0xc0 [ 167.754868][ T5559] ? lockdep_hardirqs_on+0x94/0x140 [ 167.760086][ T5559] ? __x64_sys_add_key+0x1c/0xc0 [ 167.765055][ T5559] do_syscall_64+0x4c/0xa0 [ 167.769506][ T5559] ? clear_bhb_loop+0x60/0xb0 [ 167.774191][ T5559] ? clear_bhb_loop+0x60/0xb0 [ 167.778881][ T5559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.784778][ T5559] RIP: 0033:0x7fe71819e559 [ 167.789195][ T5559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.808802][ T5559] RSP: 002b:00007fe719058028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 167.817219][ T5559] RAX: ffffffffffffffda RBX: 00007fe718425fa0 RCX: 00007fe71819e559 [ 167.825196][ T5559] RDX: 0000200000001ac0 RSI: 0000000000000000 RDI: 0000200000000880 [ 167.833166][ T5559] RBP: 00007fe718235ad8 R08: ffffffffffffffff R09: 0000000000000000 [ 167.841132][ T5559] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 167.849097][ T5559] R13: 00007fe718426038 R14: 00007fe718425fa0 R15: 00007ffc3e88f348 [ 167.857088][ T5559] [ 169.918653][ T5567] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 171.214586][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 171.232065][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.675877][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 174.793508][ C1] net_ratelimit: 23 callbacks suppressed [ 177.532261][ T4260] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.734146][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.769165][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.826554][ T4260] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 177.882011][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.923099][ T4260] usb 3-1: config 0 descriptor?? [ 178.087399][ T4353] usb 4-1: USB disconnect, device number 6 [ 178.149929][ T5597] kvm_msr_ignored_check: 102 callbacks suppressed [ 178.308834][ T5597] kvm [5596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7958 [ 178.337416][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.362159][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.407503][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.448489][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.486756][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.497668][ T5597] kvm [5596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7958 [ 178.563790][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.626586][ T4260] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 178.672844][ T4260] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 178.802917][ T4260] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 179.300670][ T4260] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 179.335998][ T4260] usb 3-1: USB disconnect, device number 12 [ 179.354910][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.366872][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.380574][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.391504][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.960088][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.968863][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.969589][ C1] net_ratelimit: 25 callbacks suppressed [ 180.343008][ T5604] rxe_eth0 speed is unknown, defaulting to 1000 [ 180.916939][ T5616] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 180.924689][ T5616] Error parsing options; rc = [-22] [ 180.931126][ T5616] device vlan0 entered promiscuous mode [ 182.073200][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 182.931684][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 183.194486][ T5604] chnl_net:caif_netlink_parms(): no params data found [ 184.152054][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 184.786152][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.902210][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.932524][ T5604] device bridge_slave_0 entered promiscuous mode [ 185.009959][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.038497][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.058755][ T5604] device bridge_slave_1 entered promiscuous mode [ 185.111989][ C0] net_ratelimit: 21 callbacks suppressed [ 185.399571][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.469641][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.457234][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 187.815347][ T5604] team0: Port device team_slave_0 added [ 187.893703][ T5604] team0: Port device team_slave_1 added [ 188.310003][ T5649] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 188.317817][ T5649] Error parsing options; rc = [-22] [ 188.408957][ T4289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.421836][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.431464][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.448008][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.458138][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 188.466168][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.524384][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.531358][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.650655][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.668678][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.676779][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.707886][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.150583][ T5650] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.277823][ T5604] device hsr_slave_0 entered promiscuous mode [ 189.383540][ T5604] device hsr_slave_1 entered promiscuous mode [ 189.429771][ T5604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.470831][ T5604] Cannot create hsr debugfs directory [ 189.553640][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 190.323381][ C1] net_ratelimit: 22 callbacks suppressed [ 190.552304][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 191.432199][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 192.632221][ T4284] Bluetooth: hci6: command 0x041b tx timeout [ 194.620542][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.627827][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.722069][ T4284] Bluetooth: hci6: command 0x040f tx timeout [ 194.822375][ T4353] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.886482][ T5604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.983640][ T5604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.045231][ T4353] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.067575][ T4353] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.131427][ T5604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.135547][ T4353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.211108][ T4353] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 195.211173][ T4353] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.242409][ T5604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.345582][ T4353] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.371168][ T5650] chnl_net:caif_netlink_parms(): no params data found [ 195.377114][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.443993][ T4353] usb 3-1: Product: syz [ 195.449050][ T4353] usb 3-1: Manufacturer: syz [ 195.543869][ T4353] cdc_wdm 3-1:1.0: skipping garbage [ 195.550002][ T4353] cdc_wdm 3-1:1.0: skipping garbage [ 195.645491][ T4353] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 195.679023][ T4353] cdc_wdm 3-1:1.0: Unknown control protocol [ 195.686092][ C1] net_ratelimit: 23 callbacks suppressed [ 195.775516][ T4353] usb 3-1: USB disconnect, device number 13 [ 196.192112][ T4385] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 196.372141][ T4385] usb 5-1: Using ep0 maxpacket: 32 [ 196.384586][ T4385] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.403406][ T4385] usb 5-1: config 0 has no interface number 0 [ 196.432140][ T4385] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 196.442973][ T4385] usb 5-1: config 0 interface 1 has no altsetting 0 [ 196.453464][ T4385] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 196.480207][ T4385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.502351][ T4385] usb 5-1: Product: syz [ 196.520995][ T4385] usb 5-1: Manufacturer: syz [ 196.534081][ T4385] usb 5-1: SerialNumber: syz [ 196.584633][ T4385] usb 5-1: config 0 descriptor?? [ 196.792207][ T4284] Bluetooth: hci6: command 0x0419 tx timeout [ 196.848914][ T4385] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 196.915726][ T4385] cx231xx 5-1:0.1: Failed to read PCB config [ 196.921821][ T4385] cx231xx: probe of 5-1:0.1 failed with error -71 [ 196.996319][ T4385] usb 5-1: USB disconnect, device number 25 [ 197.250560][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.306422][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.315758][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.327002][ T5650] device bridge_slave_0 entered promiscuous mode [ 197.364517][ T5703] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 197.373533][ T5703] Error parsing options; rc = [-22] [ 197.424911][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.434268][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.444777][ T5650] device bridge_slave_1 entered promiscuous mode [ 197.536110][ T5698] nvme nvme0: failed to connect socket: -512 [ 197.643426][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.657286][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.831708][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.945175][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.042154][ T4344] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.105174][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.246333][ T4344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.267977][ T4344] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.299379][ T4344] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.337932][ T4344] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 198.392817][ T4344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.442117][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.442180][ T4344] usb 3-1: Product: syz [ 198.442196][ T4344] usb 3-1: Manufacturer: syz [ 198.442211][ T4344] usb 3-1: SerialNumber: syz [ 198.647254][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.694783][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.714177][ T5705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.751754][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.760065][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.835160][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.002698][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.030956][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.073274][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.080450][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.149672][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.215183][ T5650] team0: Port device team_slave_0 added [ 199.261018][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.291498][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.331144][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.400429][ T5650] team0: Port device team_slave_1 added [ 199.550814][ T4344] cdc_ncm 3-1:1.0: bind() failure [ 199.604959][ T4344] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 199.611761][ T4344] cdc_ncm 3-1:1.1: bind() failure [ 199.692486][ T4344] usb 3-1: USB disconnect, device number 14 [ 199.814827][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.900095][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.950514][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.002679][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.020428][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.088313][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.164222][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.353166][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.484358][ T4517] device hsr_slave_0 left promiscuous mode [ 200.511450][ T4517] device hsr_slave_1 left promiscuous mode [ 200.592178][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.615683][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.674955][ T4517] device bridge_slave_1 left promiscuous mode [ 200.692606][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.754176][ T4517] device bridge_slave_0 left promiscuous mode [ 200.792099][ C0] net_ratelimit: 32 callbacks suppressed [ 200.800025][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.562194][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.775525][ T22] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.792603][ T22] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.804845][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.816041][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.829204][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.967643][ T22] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.019237][ T22] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.032175][ T22] usb 2-1: Product: syz [ 202.036818][ T22] usb 2-1: Manufacturer: syz [ 202.058752][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 202.088700][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 202.149786][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 202.926605][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 202.939716][ T22] usb 2-1: USB disconnect, device number 5 [ 203.848174][ T4517] team0 (unregistering): Port device vlan0 removed [ 205.032344][ T41] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.251552][ T41] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.302110][ T41] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.337599][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 205.382002][ T41] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.419394][ T41] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 205.486246][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 205.505632][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.515252][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.526701][ T41] usb 2-1: Product: syz [ 205.530873][ T41] usb 2-1: Manufacturer: syz [ 205.530888][ T41] usb 2-1: SerialNumber: syz [ 205.795187][ T5755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.803292][ T4517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.999343][ T4517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.162142][ C1] net_ratelimit: 28 callbacks suppressed [ 206.436952][ T41] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 206.462547][ T41] cdc_ncm 2-1:1.0: bind() failure [ 206.484760][ T41] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 206.502005][ T41] cdc_ncm 2-1:1.1: bind() failure [ 206.536135][ T41] usb 2-1: USB disconnect, device number 6 [ 207.474259][ T4517] bond0 (unregistering): Released all slaves [ 207.706464][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.738959][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.774641][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.794978][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.814156][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.889135][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.955689][ T4289] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 208.457930][ T5650] device hsr_slave_0 entered promiscuous mode [ 208.492130][ T5650] device hsr_slave_1 entered promiscuous mode [ 208.517635][ T5650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.545991][ T5650] Cannot create hsr debugfs directory [ 209.092773][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.100327][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.179869][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.385892][ T5785] capability: warning: `syz.4.394' uses deprecated v2 capabilities in a way that may be insecure [ 209.904590][ T5650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.031445][ T5650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.163991][ T4517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.283221][ T5650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.373279][ T4517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.419518][ T5650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.352131][ C1] net_ratelimit: 30 callbacks suppressed [ 211.662567][ T4517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.877220][ T4517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.097434][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.109180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.202210][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.222691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.289151][ T5604] device veth0_vlan entered promiscuous mode [ 212.303641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.316517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.374344][ T5604] device veth1_vlan entered promiscuous mode [ 212.395343][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.488115][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.511125][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.527636][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.538547][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.558529][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.692061][ T4353] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.745734][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.766414][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.809784][ T5604] device veth0_macvtap entered promiscuous mode [ 212.879930][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.896822][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.909358][ T4353] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.951216][ T4353] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.966839][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.979252][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.982025][ T4353] usb 3-1: Product: syz [ 213.002593][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.009733][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.047037][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.076628][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.109451][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.116685][ T4896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.151817][ T4353] usb 3-1: Manufacturer: syz [ 213.156801][ T4353] usb 3-1: SerialNumber: syz [ 213.163090][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.205481][ T5650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.215933][ T5650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.256860][ T5604] device veth1_macvtap entered promiscuous mode [ 213.359740][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.384274][ T4353] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 213.400117][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.427419][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.454386][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.483490][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.502593][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.518314][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.533468][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.543757][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.564011][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.598683][ T22] usb 3-1: USB disconnect, device number 15 [ 213.623047][ T22] usblp0: removed [ 213.657330][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.703882][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.718230][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.730161][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.740521][ T41] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 213.749129][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.760636][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.774822][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.785993][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.795959][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.804473][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.821056][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.956156][ T41] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 213.974185][ T41] usb 5-1: config 0 has no interface number 0 [ 213.980329][ T41] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.025046][ T41] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 214.036741][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.055054][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.067812][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.077825][ T41] usb 5-1: Product: syz [ 214.088372][ T41] usb 5-1: Manufacturer: syz [ 214.093206][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.110250][ T41] usb 5-1: SerialNumber: syz [ 214.117204][ T41] usb 5-1: config 0 descriptor?? [ 214.129281][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.139633][ T5604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.168160][ T41] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 214.189367][ T5604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.208866][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.238039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.257106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.272043][ T4385] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 214.324718][ T5604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.336344][ T5604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.350375][ T5604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.371815][ T5604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.461133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.481546][ T4385] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.491327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.508315][ T4385] usb 2-1: config 0 has no interface number 0 [ 214.524460][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.538937][ T4385] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 214.559576][ T4385] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 214.581076][ T4385] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.618700][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.640845][ T4385] usb 2-1: config 0 descriptor?? [ 214.660448][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.702490][ T4385] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 214.940130][ T4363] usb 2-1: USB disconnect, device number 7 [ 215.118984][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.147718][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.183974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.376834][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.410393][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.449891][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.873059][ T5865] FAULT_INJECTION: forcing a failure. [ 215.873059][ T5865] name failslab, interval 1, probability 0, space 0, times 0 [ 215.873087][ T5865] CPU: 0 PID: 5865 Comm: syz.5.341 Not tainted syzkaller #0 [ 215.873107][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.873119][ T5865] Call Trace: [ 215.873126][ T5865] [ 215.873135][ T5865] dump_stack_lvl+0x188/0x24e [ 215.873168][ T5865] ? show_regs_print_info+0x12/0x12 [ 215.873191][ T5865] ? load_image+0x410/0x410 [ 215.873213][ T5865] ? __might_sleep+0xd0/0xd0 [ 215.873234][ T5865] ? __lock_acquire+0x7ea0/0x7ea0 [ 215.873266][ T5865] should_fail_ex+0x390/0x4c0 [ 215.873297][ T5865] should_failslab+0x5/0x20 [ 215.873315][ T5865] slab_pre_alloc_hook+0x59/0x300 [ 215.873338][ T5865] ? vc_allocate+0x19c/0x700 [ 215.873361][ T5865] __kmem_cache_alloc_node+0x4f/0x270 [ 215.873386][ T5865] ? vc_allocate+0x19c/0x700 [ 215.873407][ T5865] kmalloc_trace+0x26/0xe0 [ 215.873427][ T5865] vc_allocate+0x19c/0x700 [ 215.873449][ T5865] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 215.873469][ T5865] ? _raw_spin_unlock+0x40/0x40 [ 215.873488][ T5865] ? vc_cons_allocated+0x70/0x70 [ 215.873518][ T5865] con_install+0x9c/0x720 [ 215.873541][ T5865] ? mutex_lock_nested+0x10/0x10 [ 215.873565][ T5865] ? show_tty_active+0x30/0x30 [ 215.873596][ T5865] tty_init_dev+0xcf/0x4c0 [ 215.873619][ T5865] tty_open+0x7d3/0xcb0 [ 215.873655][ T5865] ? __lock_acquire+0x7ea0/0x7ea0 [ 215.873685][ T5865] ? tty_compat_ioctl+0x5a0/0x5a0 [ 215.873713][ T5865] ? do_raw_spin_unlock+0x11d/0x230 [ 215.873738][ T5865] chrdev_open+0x585/0x5f0 [ 215.873764][ T5865] ? cd_forget+0x160/0x160 [ 215.873791][ T5865] ? fsnotify_perm+0x39b/0x550 [ 215.873815][ T5865] ? cd_forget+0x160/0x160 [ 215.873837][ T5865] do_dentry_open+0x7dd/0x10b0 [ 215.873875][ T5865] path_openat+0x2674/0x2f10 [ 215.873914][ T5865] ? kasan_set_track+0x60/0x70 [ 215.873940][ T5865] ? verify_lock_unused+0x140/0x140 [ 215.873962][ T5865] ? do_sys_openat2+0xdd/0x4f0 [ 215.873993][ T5865] ? do_filp_open+0x420/0x420 [ 215.874034][ T5865] do_filp_open+0x1ee/0x420 [ 215.874060][ T5865] ? vfs_tmpfile+0x470/0x470 [ 215.874105][ T5865] ? _raw_spin_unlock+0x24/0x40 [ 215.874124][ T5865] ? alloc_fd+0x590/0x640 [ 215.874157][ T5865] do_sys_openat2+0x14b/0x4f0 [ 215.874185][ T5865] ? do_sys_open+0xe0/0xe0 [ 215.874209][ T5865] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.874238][ T5865] ? lock_chain_count+0x20/0x20 [ 215.874268][ T5865] __x64_sys_openat+0x135/0x160 [ 215.874298][ T5865] do_syscall_64+0x4c/0xa0 [ 215.874319][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 215.874338][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 215.874359][ T5865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.874379][ T5865] RIP: 0033:0x7f5427d5ed8e [ 215.874398][ T5865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.874412][ T5865] RSP: 002b:00007f5428cbeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.874435][ T5865] RAX: ffffffffffffffda RBX: 00007f5428cbf6c0 RCX: 00007f5427d5ed8e [ 215.874449][ T5865] RDX: 0000000000000002 RSI: 00007f5428cbec00 RDI: ffffffffffffff9c [ 215.874463][ T5865] RBP: 00007f5427e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 215.874476][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.874488][ T5865] R13: 00007f5428026038 R14: 00007f5428025fa0 R15: 00007ffd0f7ebee8 [ 215.874515][ T5865] [ 216.237643][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.284558][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.349171][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.363288][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.415814][ T5650] device veth0_vlan entered promiscuous mode [ 216.439431][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.448211][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.481974][ C1] net_ratelimit: 62 callbacks suppressed [ 216.497774][ T5650] device veth1_vlan entered promiscuous mode [ 216.689653][ T4363] usb 5-1: USB disconnect, device number 26 [ 216.740821][ T4517] device hsr_slave_0 left promiscuous mode [ 216.760561][ T4517] device hsr_slave_1 left promiscuous mode [ 216.771128][ T4363] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 216.787791][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.822117][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.011691][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.020383][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.127079][ T5877] rnbd_client L600: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 217.205786][ T4517] device bridge_slave_1 left promiscuous mode [ 217.213907][ T4444] rtrs_client L1789: : Resolving route failed, err: -19 [ 217.234954][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.283186][ T4517] device bridge_slave_0 left promiscuous mode [ 217.285113][ T5877] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 217.291797][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.443764][ T4517] device veth1_macvtap left promiscuous mode [ 217.459313][ T4517] device veth0_macvtap left promiscuous mode [ 217.473680][ T4517] device veth1_vlan left promiscuous mode [ 217.740126][ T5896] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 218.284228][ T4517] team0 (unregistering): Port device vlan0 removed [ 219.222835][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 219.350321][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 220.623668][ T4517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.770958][ T4517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.839900][ T5934] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 221.592251][ C1] net_ratelimit: 33 callbacks suppressed [ 221.604749][ T4517] bond0 (unregistering): Released all slaves [ 221.732172][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 222.774413][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.791329][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.858777][ T5650] device veth0_macvtap entered promiscuous mode [ 222.895979][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.916335][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.943247][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.998325][ T5650] device veth1_macvtap entered promiscuous mode [ 223.070995][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.112149][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.172018][ T4377] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 223.196168][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.268347][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.279313][ T4344] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 223.309697][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.330519][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.354837][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.840263][ T5961] vivid-004: kernel_thread() failed [ 223.862167][ T4377] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 223.895075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.923496][ T4344] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.943806][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.952230][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.967538][ T4344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 223.972920][ T4377] usb 2-1: Product: syz [ 223.983106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.991637][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 224.008427][ T4344] usb 5-1: Product: syz [ 224.012841][ T4377] usb 2-1: Manufacturer: syz [ 224.012861][ T4377] usb 2-1: SerialNumber: syz [ 224.022195][ T4344] usb 5-1: Manufacturer: syz [ 224.031290][ T4344] usb 5-1: SerialNumber: syz [ 224.045261][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.075663][ T4377] usb 2-1: config 0 descriptor?? [ 224.087120][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.226245][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.249581][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.274796][ T4344] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.366888][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.409479][ T4377] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008 [ 224.458886][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.522763][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.558976][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.572916][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.613817][ T5650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.639326][ T5650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.658495][ T5650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.678623][ T5650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.899123][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.917905][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.962317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.051837][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.107934][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.128245][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.717111][ C1] net_ratelimit: 65 callbacks suppressed [ 227.032720][ T4353] usb 2-1: USB disconnect, device number 8 [ 229.097944][ T4349] usb 5-1: USB disconnect, device number 27 [ 229.106982][ T6011] vivid-004: kernel_thread() failed [ 229.177899][ T4349] usblp0: removed [ 229.218881][ T6018] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 229.236344][ T4377] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 229.444402][ T4377] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.472030][ T4377] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 229.523793][ T4377] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.557242][ T4377] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 229.592138][ T4377] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.622575][ T4377] usb 7-1: config 0 descriptor?? [ 229.628361][ T6010] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 229.693060][ T4284] Bluetooth: hci0: sending frame failed (-49) [ 229.700880][ T4289] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 229.975691][ T6037] device vlan0 entered promiscuous mode [ 229.991581][ T6037] team0: Port device vlan0 added [ 230.059577][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 230.067819][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 230.077792][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 230.085171][ T4377] usbhid 7-1:0.0: can't add hid device: -32 [ 230.096810][ T4377] usbhid: probe of 7-1:0.0 failed with error -32 [ 230.139220][ T4377] usb 7-1: USB disconnect, device number 2 [ 231.801738][ T6064] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 231.905659][ T6064] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 231.950851][ T6064] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 232.312010][ C0] net_ratelimit: 50 callbacks suppressed [ 233.252234][ T4377] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 233.503384][ T4377] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.743529][ T6084] vivid-008: kernel_thread() failed [ 233.783932][ T4377] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 233.808583][ T4377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 233.840525][ T4377] usb 7-1: Product: syz [ 233.860554][ T4377] usb 7-1: Manufacturer: syz [ 233.885102][ T4377] usb 7-1: SerialNumber: syz [ 234.120270][ T4377] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.177799][ T6128] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 237.213307][ T6128] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 237.249917][ T6128] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 237.267363][ T4363] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 237.344289][ T4348] usb 7-1: USB disconnect, device number 3 [ 237.386849][ T4348] usblp0: removed [ 237.480590][ T4363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.508123][ T4363] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.586682][ T4363] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.597287][ C1] net_ratelimit: 42 callbacks suppressed [ 237.874388][ T4363] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 238.067738][ T4363] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.200426][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.296721][ T4363] usb 5-1: Product: syz [ 238.300940][ T4363] usb 5-1: Manufacturer: syz [ 238.318983][ T4363] usb 5-1: SerialNumber: syz [ 239.268015][ T6121] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.722221][ T22] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 239.776936][ T4363] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 239.776982][ T4363] cdc_ncm 5-1:1.0: bind() failure [ 239.808361][ T4363] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 239.831983][ T4363] cdc_ncm 5-1:1.1: bind() failure [ 239.853221][ T4363] usb 5-1: USB disconnect, device number 28 [ 239.892172][ T4377] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 239.938597][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.962150][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.982766][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.013147][ T22] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 240.033943][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.049522][ T22] usb 7-1: config 0 descriptor?? [ 240.062937][ T6148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 240.095578][ T4377] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 240.115009][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.136001][ T4377] usb 3-1: Product: syz [ 240.140271][ T4377] usb 3-1: Manufacturer: syz [ 240.156298][ T4377] usb 3-1: SerialNumber: syz [ 240.177806][ T4377] usb 3-1: config 0 descriptor?? [ 240.389433][ T4377] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 016 [ 241.374358][ T22] usbhid 7-1:0.0: can't add hid device: -71 [ 241.376746][ T6169] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 241.391439][ T6169] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 241.433492][ T22] usbhid: probe of 7-1:0.0 failed with error -71 [ 241.441499][ T6169] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 241.457312][ T22] usb 7-1: USB disconnect, device number 4 [ 242.711996][ C0] net_ratelimit: 42 callbacks suppressed [ 247.455392][ T6216] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 247.524607][ T6216] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 247.542805][ T6216] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 248.024722][ T6234] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 248.123977][ T22] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 248.552000][ C1] net_ratelimit: 45 callbacks suppressed [ 248.688961][ T22] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 249.084345][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.092572][ T22] usb 5-1: Product: syz [ 249.096753][ T22] usb 5-1: Manufacturer: syz [ 249.106105][ T22] usb 5-1: SerialNumber: syz [ 249.114168][ T22] usb 5-1: config 0 descriptor?? [ 249.350243][ T22] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 029 [ 250.524211][ T6253] rxe_eth0 speed is unknown, defaulting to 1000 [ 251.518170][ T6273] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 251.542827][ T6273] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 251.591545][ T6273] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 251.601230][ T6223] i2c i2c-1: failure writing data [ 251.677362][ T22] usb 5-1: USB disconnect, device number 29 [ 252.411990][ T4260] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 252.606728][ T4260] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 252.632132][ T4344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 252.651042][ T4260] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 252.683071][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.697545][ T4260] usb 5-1: Product: syz [ 252.701731][ T4260] usb 5-1: Manufacturer: syz [ 252.716901][ T4260] usb 5-1: SerialNumber: syz [ 252.728811][ T4260] usb 5-1: config 0 descriptor?? [ 252.745024][ T4260] powermate: probe of 5-1:0.0 failed with error -22 [ 252.854060][ T4344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.872013][ T4344] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.891274][ T4344] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 252.911538][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.948509][ T4344] usb 6-1: 0:1 : does not exist [ 252.978375][ T1171] usb 5-1: USB disconnect, device number 30 [ 253.163796][ T4344] usb 6-1: USB disconnect, device number 2 [ 253.591986][ C0] net_ratelimit: 54 callbacks suppressed [ 255.517566][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.532274][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.541926][ C1] sched: RT throttling activated [ 255.906660][ T6317] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 255.964795][ T6317] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 257.162985][ T6317] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 257.422169][ T4344] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 257.635412][ T4344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.669188][ T4344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.718312][ T4344] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 257.867989][ T4344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.185955][ T4344] usb 7-1: config 0 descriptor?? [ 258.305693][ T6334] vivid-008: kernel_thread() failed [ 258.608440][ T4377] net_ratelimit: 62 callbacks suppressed [ 258.618326][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 258.632988][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 258.649638][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 259.362448][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 259.369476][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 259.638385][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 259.645473][ T4344] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 259.655607][ T4344] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 259.784161][ T4344] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 260.799803][ T4344] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 260.809287][ T4344] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 260.821012][ T4344] usb 7-1: USB disconnect, device number 5 [ 263.263649][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.832038][ C0] net_ratelimit: 65 callbacks suppressed [ 264.315451][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.897913][ T6416] vivid-008: kernel_thread() failed [ 265.132858][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.352201][ T4348] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 265.582204][ T4348] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 265.598459][ T4348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.616883][ T4348] usb 7-1: Product: syz [ 265.621110][ T4348] usb 7-1: Manufacturer: syz [ 265.652007][ T4348] usb 7-1: SerialNumber: syz [ 265.668960][ T4348] usb 7-1: config 0 descriptor?? [ 266.215124][ T4348] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 006 [ 266.327187][ T6410] i2c i2c-1: failure writing data [ 268.409481][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 268.419771][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 268.427373][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.437433][ T4289] Workqueue: hci5 hci_rx_work [ 268.437577][ T4289] Call Trace: [ 268.437585][ T4289] [ 268.437594][ T4289] dump_stack_lvl+0x188/0x24e [ 268.437633][ T4289] ? show_regs_print_info+0x12/0x12 [ 268.437662][ T4289] ? load_image+0x410/0x410 [ 268.437701][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 268.437768][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 268.437796][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 268.437850][ T4289] kobject_add_internal+0x617/0xca0 [ 268.437919][ T4289] kobject_add+0x160/0x230 [ 268.437947][ T4289] ? kobject_init+0x1c0/0x1c0 [ 268.437980][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 268.437997][ T4289] ? klist_children_get+0x50/0x50 [ 268.438050][ T4289] ? get_device_parent+0x121/0x3e0 [ 268.438104][ T4289] device_add+0x470/0x1050 [ 268.448994][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 268.468449][ T4289] le_conn_complete_evt+0xf93/0x15c0 [ 268.483533][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 268.483564][ T4289] ? param_get_dyndbg_classes+0x160/0x160 [ 268.498843][ T4289] ? mutex_unlock+0x10/0x10 [ 268.540085][ T4289] hci_le_conn_complete_evt+0x183/0x440 [ 268.545646][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 268.545680][ T4289] hci_event_packet+0x7b3/0x1290 [ 268.545708][ T4289] ? lock_chain_count+0x20/0x20 [ 268.552001][ T4289] ? bis_list+0x280/0x280 [ 268.552036][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 268.561850][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 268.576666][ T4289] hci_rx_work+0x3eb/0xd40 [ 268.581106][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 268.585974][ T4289] ? process_one_work+0x7b4/0x1160 [ 268.591196][ T4289] process_one_work+0x8ab/0x1160 [ 268.596163][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 268.601803][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 268.606829][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 268.606856][ T4289] ? wq_worker_running+0x97/0x190 [ 268.617668][ T4289] worker_thread+0xaf5/0x12a0 [ 268.622387][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 268.628307][ T4289] kthread+0x29d/0x330 [ 268.632371][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 268.637405][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 268.637434][ T4289] ret_from_fork+0x1f/0x30 [ 268.646453][ T4289] [ 268.647660][ T4289] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 268.662729][ T4289] Bluetooth: hci5: failed to register connection device [ 269.012195][ T4348] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 269.103433][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.116959][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.203807][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.259263][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 269.271986][ C0] net_ratelimit: 40 callbacks suppressed [ 269.372827][ T4348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.492177][ T4348] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 269.566449][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.647113][ T4348] usb 2-1: config 0 descriptor?? [ 269.674980][ T6473] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.684976][ T1171] usb 7-1: USB disconnect, device number 6 [ 269.772137][ T4377] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 270.053866][ T4377] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 270.072158][ T1171] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 270.631785][ T4348] usbhid 2-1:0.0: can't add hid device: -71 [ 270.645978][ T4348] usbhid: probe of 2-1:0.0 failed with error -71 [ 270.657518][ T4377] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 270.669131][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.690236][ T4377] usb 6-1: Product: syz [ 270.700844][ T4377] usb 6-1: Manufacturer: syz [ 270.707253][ T4348] usb 2-1: USB disconnect, device number 9 [ 270.707522][ T4377] usb 6-1: SerialNumber: syz [ 270.796816][ T4377] usb 6-1: config 0 descriptor?? [ 270.804579][ T1171] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.830107][ T4377] powermate: probe of 6-1:0.0 failed with error -22 [ 270.845004][ T1171] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.889103][ T1171] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 270.979954][ T1171] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.076807][ T4377] usb 6-1: USB disconnect, device number 3 [ 271.130045][ T1171] usb 7-1: config 0 descriptor?? [ 272.075904][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.130395][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.148053][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.208219][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.247914][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.286422][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.316821][ T1171] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 272.358007][ T1171] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 272.472784][ T1171] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 272.625646][ T1171] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 272.646218][ T1171] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 272.746867][ T1171] usb 7-1: USB disconnect, device number 7 [ 274.616473][ C1] net_ratelimit: 60 callbacks suppressed [ 275.882225][ T4363] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 276.865500][ T6542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.909412][ T4363] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 276.919737][ T4363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.927801][ T4363] usb 7-1: Product: syz [ 276.932377][ T4363] usb 7-1: Manufacturer: syz [ 276.939665][ T4363] usb 7-1: config 0 descriptor?? [ 276.945902][ T6542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.952546][ T4363] usb 7-1: can't set config #0, error -71 [ 276.959997][ T4363] usb 7-1: USB disconnect, device number 8 [ 276.999848][ T6542] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.034096][ T6542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.120729][ T6542] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 277.184261][ T6542] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 277.241311][ T6542] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 277.288851][ T6542] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 277.344801][ T6542] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 277.391855][ T6542] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 277.429911][ T6542] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 277.695082][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.714260][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.732026][ T4344] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 277.992951][ T4344] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.034852][ T4344] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 278.064560][ T4344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 278.115417][ T4344] usb 7-1: Product: syz [ 278.122164][ T4344] usb 7-1: Manufacturer: syz [ 278.137104][ T4344] usb 7-1: SerialNumber: syz [ 278.232018][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.371022][ T4344] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.652125][ T4363] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.122789][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.128901][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.162030][ T4260] usb 7-1: USB disconnect, device number 9 [ 279.173237][ T4260] usblp0: removed [ 279.203613][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 279.246603][ T4363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.356848][ T4363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.356969][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 279.379864][ T4363] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 279.398086][ T4363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.152014][ C1] net_ratelimit: 122 callbacks suppressed [ 281.133784][ T4363] usb 6-1: config 0 descriptor?? [ 281.192269][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 281.205002][ T4363] usb 6-1: can't set config #0, error -71 [ 281.240896][ T4363] usb 6-1: USB disconnect, device number 4 [ 281.272190][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 281.442034][ T4284] Bluetooth: hci6: command 0x0406 tx timeout [ 282.818576][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 283.352546][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 283.904173][ T4289] Bluetooth: hci6: command 0x0406 tx timeout [ 284.182918][ T4289] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 284.425841][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.581267][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.192148][ C0] net_ratelimit: 44 callbacks suppressed [ 285.432056][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 286.323911][ T6650] overlayfs: missing 'workdir' [ 288.148851][ T6649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.247961][ T6649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.333164][ T6649] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 288.347143][ T6649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.379849][ T6649] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.387357][ T6649] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 288.417957][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.437574][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.722276][ T4260] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 289.512030][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.252150][ C1] net_ratelimit: 95 callbacks suppressed [ 290.312186][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.322123][ T4344] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 290.392295][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 290.398355][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.412007][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.512238][ T4344] usb 6-1: device descriptor read/64, error -71 [ 291.543239][ T4344] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.722508][ T4344] usb 6-1: device descriptor read/64, error -71 [ 291.969288][ T4344] usb usb6-port1: attempt power cycle [ 292.392387][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 293.393773][ T6689] device syzkaller0 entered promiscuous mode [ 295.044822][ T6718] overlayfs: missing 'workdir' [ 295.832065][ C1] net_ratelimit: 77 callbacks suppressed [ 295.843007][ T6717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.987441][ T6717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.023407][ T6717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.162273][ T6717] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 296.175926][ T6717] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 296.998811][ T6717] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 297.112292][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.142488][ T6729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.182762][ T6729] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 297.197666][ T6729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.235523][ T6729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.254737][ T6729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 297.265650][ T6729] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 297.494936][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.654'. [ 297.562139][ T4344] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 297.721997][ T4344] usb 2-1: device descriptor read/64, error -71 [ 297.761618][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.799284][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.822945][ T4363] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 297.850301][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.903969][ T6732] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.992113][ T4344] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 298.043931][ T4363] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 298.064127][ T4363] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 298.074911][ T4363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.091688][ T4363] usb 7-1: Product: syz [ 298.104333][ T4363] usb 7-1: Manufacturer: syz [ 298.108965][ T4363] usb 7-1: SerialNumber: syz [ 298.150166][ T4363] usb 7-1: config 0 descriptor?? [ 298.159774][ T4363] powermate: probe of 7-1:0.0 failed with error -22 [ 298.161993][ T4344] usb 2-1: device descriptor read/64, error -71 [ 298.315846][ T4344] usb usb2-port1: attempt power cycle [ 298.363881][ T4363] usb 7-1: USB disconnect, device number 10 [ 298.732306][ T4344] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 298.775351][ T4344] usb 2-1: device descriptor read/8, error -71 [ 299.107472][ T4344] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 299.202031][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.282243][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 299.282243][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.294361][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.352115][ T4284] Bluetooth: hci6: command 0x0406 tx timeout [ 299.546650][ T4344] usb 2-1: device descriptor read/8, error -71 [ 300.002391][ T4344] usb usb2-port1: unable to enumerate USB device [ 300.881999][ C1] net_ratelimit: 68 callbacks suppressed [ 302.047121][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 302.053398][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 302.512323][ T4377] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 303.165495][ T6767] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.376894][ T4377] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 303.425600][ T6767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.442391][ T4377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.456011][ T6767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.506504][ T4377] usb 7-1: Product: syz [ 303.510716][ T4377] usb 7-1: Manufacturer: syz [ 303.533016][ T6767] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 303.561101][ T4377] usb 7-1: SerialNumber: syz [ 303.579298][ T4377] usb 7-1: config 0 descriptor?? [ 303.630667][ T6767] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 304.454013][ T4377] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 011 [ 304.482138][ T6767] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 304.552235][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.432952][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.439114][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.672088][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.242203][ C1] net_ratelimit: 76 callbacks suppressed [ 306.449425][ T6797] process 'syz.2.671' launched '/dev/fd/3' with NULL argv: empty string added [ 306.562006][ T4276] Bluetooth: hci6: command 0x0c1a tx timeout [ 307.664543][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 307.867088][ T4377] usb 7-1: USB disconnect, device number 11 [ 311.818176][ C1] net_ratelimit: 68 callbacks suppressed [ 311.914795][ T6832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.928889][ T6832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.987885][ T6832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.027561][ T6832] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 312.063584][ T6832] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 312.445112][ T6845] 0x0000000000ec-0x0000000000f2 : "" [ 312.542445][ T6845] ftl_cs: FTL header corrupt! [ 313.112622][ T6851] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 313.143742][ T6851] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 313.172638][ T6851] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 313.292160][ T41] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 313.523090][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.696432][ T41] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 313.721546][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 314.441997][ T6851] nvme nvme0: failed to connect socket: -512 [ 314.449154][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.455215][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.461310][ T4276] Bluetooth: hci6: command 0x0c1a tx timeout [ 314.462109][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 314.473320][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.480550][ T41] usb 7-1: Product: syz [ 314.484815][ T41] usb 7-1: Manufacturer: syz [ 314.489421][ T41] usb 7-1: SerialNumber: syz [ 314.663007][ T6860] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 314.689249][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 314.726387][ T41] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 315.637186][ T4377] usb 7-1: USB disconnect, device number 12 [ 315.670261][ T4377] usblp0: removed [ 315.952252][ T1171] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 316.146125][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 316.178431][ T1171] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 316.958031][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.965377][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.102680][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.110726][ T1171] usb 5-1: Product: syz [ 317.181982][ T1171] usb 5-1: Manufacturer: syz [ 317.192593][ T6885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.217122][ T6885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.227457][ T1171] usb 5-1: SerialNumber: syz [ 317.233109][ T6885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.255169][ T4348] net_ratelimit: 86 callbacks suppressed [ 317.283294][ T1171] usb 5-1: config 0 descriptor?? [ 317.313404][ T6885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 317.343872][ T1171] powermate: probe of 5-1:0.0 failed with error -22 [ 317.362094][ T6885] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 317.503349][ T1171] usb 5-1: USB disconnect, device number 31 [ 318.066142][ T6903] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 318.082590][ T6903] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 318.109557][ T6903] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 318.966795][ T6903] nvme nvme0: failed to connect socket: -512 [ 319.700025][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.706098][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.712319][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 319.712359][ T4276] Bluetooth: hci6: command 0x0c1a tx timeout [ 319.725537][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 320.737076][ T6929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.773489][ T6929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.812248][ T6929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.824274][ T6929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 320.890917][ T6929] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 321.459985][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'. [ 321.753506][ T41] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 321.958209][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 322.343431][ T6956] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 322.363513][ T6956] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 322.393930][ T41] usb 2-1: device descriptor read/64, error -32 [ 322.420740][ T6956] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 322.435723][ T6958] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 322.455161][ T6958] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 322.472809][ T6958] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 322.552256][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.572195][ T4363] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 322.579776][ T4377] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 322.637684][ T6956] nvme nvme0: failed to connect socket: -111 [ 322.672015][ T41] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 322.711981][ C1] net_ratelimit: 47 callbacks suppressed [ 322.765070][ T4377] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 322.784385][ T4363] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 322.793567][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.817959][ T4363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.826475][ T4363] usb 6-1: Product: syz [ 322.833717][ T4377] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 322.852129][ T4363] usb 6-1: Manufacturer: syz [ 322.856988][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.865065][ T4363] usb 6-1: SerialNumber: syz [ 322.872392][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 322.878442][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.886808][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.907804][ T4363] usb 6-1: config 0 descriptor?? [ 322.912944][ T4377] usb 5-1: Product: syz [ 322.920239][ T4377] usb 5-1: Manufacturer: syz [ 322.940282][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 322.952078][ T4276] Bluetooth: hci6: command 0x0c1a tx timeout [ 322.961222][ T4377] usb 5-1: SerialNumber: syz [ 322.983120][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 322.993425][ T4377] usb 5-1: config 0 descriptor?? [ 323.025223][ T4377] powermate: probe of 5-1:0.0 failed with error -22 [ 323.052982][ T41] usb 2-1: Product: syz [ 323.057583][ T6958] nvme nvme0: failed to connect socket: -111 [ 323.095708][ T41] usb 2-1: Manufacturer: syz [ 323.100355][ T41] usb 2-1: SerialNumber: syz [ 323.136526][ T4363] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 008 [ 323.227928][ T4363] usb 5-1: USB disconnect, device number 32 [ 323.336642][ T6954] i2c i2c-1: failure writing data [ 323.380803][ T41] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 324.144451][ T4348] usb 2-1: USB disconnect, device number 16 [ 324.252828][ T4348] usblp0: removed [ 324.567265][ T41] usb 6-1: USB disconnect, device number 8 [ 325.822342][ T6977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.829820][ T6977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.850929][ T6977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.904396][ T6977] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 325.953024][ T6977] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 326.282081][ T4348] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 327.541190][ T4348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.553178][ T4348] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.566173][ T4348] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 327.575315][ T4348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.625332][ T6994] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 327.669796][ T6994] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 327.754489][ T6994] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 327.822377][ T4348] usb 6-1: USB disconnect, device number 9 [ 327.832117][ T4455] net_ratelimit: 60 callbacks suppressed [ 327.842101][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.922162][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 327.922352][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.934713][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.991997][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 328.147796][ T6994] nvme nvme0: failed to connect socket: -111 [ 328.450180][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.530042][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.553191][ T4348] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 328.607406][ T7007] i2c i2c-1: failure writing data [ 328.777798][ T4348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.805806][ T4348] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.835489][ T4348] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 328.891861][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 328.920377][ T4348] usb 2-1: Product: syz [ 328.934334][ T4348] usb 2-1: config 0 descriptor?? [ 330.119064][ T4363] usb 2-1: USB disconnect, device number 17 [ 331.338762][ T7037] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 331.421269][ T7037] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 331.477511][ T7037] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 331.832473][ T4363] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 332.292243][ T7042] nvme nvme0: failed to connect socket: -512 [ 332.464010][ T4363] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.539784][ T4363] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 332.580147][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 332.610487][ T4363] usb 2-1: Product: syz [ 332.630813][ T4363] usb 2-1: Manufacturer: syz [ 332.651145][ T4363] usb 2-1: SerialNumber: syz [ 332.742862][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'. [ 332.951692][ T7053] net_ratelimit: 40 callbacks suppressed [ 333.723184][ T4363] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 333.822522][ T7053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.880149][ T7053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.902607][ T7053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.947775][ T7053] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.992928][ T7053] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 335.001077][ T4363] usb 2-1: USB disconnect, device number 18 [ 335.023126][ T4363] usblp0: removed [ 335.377085][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 335.672863][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.691831][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.832080][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.912060][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.912182][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.937991][ T7080] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 335.951169][ T7080] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 335.988452][ T7080] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 336.185360][ T7080] nvme nvme0: failed to connect socket: -111 [ 337.032225][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 337.038317][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 338.022344][ T7092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.037006][ T7092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.072015][ C1] net_ratelimit: 73 callbacks suppressed [ 338.113648][ T7092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.171581][ T7092] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.272530][ T7092] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 338.695383][ T7103] sctp: failed to load transform for md5: -2 [ 339.722159][ T1171] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 339.922127][ T1171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.937157][ T7141] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 339.951570][ T1171] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.996289][ T1171] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 340.019830][ T7141] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 340.060598][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 340.072016][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.078053][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.112167][ T1171] usb 2-1: Product: syz [ 340.134015][ T1171] usb 2-1: config 0 descriptor?? [ 340.152114][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.242690][ T4284] Bluetooth: hci5: command 0x0c1a tx timeout [ 340.369264][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 340.697181][ T4363] usb 2-1: USB disconnect, device number 19 [ 340.786369][ T7142] nvme nvme0: failed to connect socket: -512 [ 342.098856][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.157132][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.208107][ T7163] i2c i2c-1: failure writing data [ 342.462136][ T4363] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 342.697754][ T4363] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.745311][ T4363] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 342.782143][ T4363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.818091][ T4363] usb 6-1: Product: syz [ 342.841302][ T4363] usb 6-1: Manufacturer: syz [ 342.865501][ T4363] usb 6-1: SerialNumber: syz [ 343.111119][ T4363] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 343.192483][ T33] net_ratelimit: 67 callbacks suppressed [ 343.328963][ T4363] usb 6-1: USB disconnect, device number 10 [ 343.351259][ T4363] usblp0: removed [ 344.822742][ T4344] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 345.053997][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.087451][ T4344] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.157960][ T4344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 345.202058][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 345.229095][ T4344] usb 2-1: Product: syz [ 345.258645][ T4344] usb 2-1: Manufacturer: syz [ 345.289607][ T4344] usb 2-1: SerialNumber: syz [ 347.304384][ T4344] usb 2-1: USB disconnect, device number 20 [ 348.802328][ C1] net_ratelimit: 45 callbacks suppressed [ 349.779016][ T7245] syz.6.798 (7245) used greatest stack depth: 20048 bytes left [ 351.393566][ T4377] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 351.913586][ T4377] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.948873][ T4377] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 351.981490][ T4377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 352.005022][ T4284] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 352.017585][ T4377] usb 7-1: Product: syz [ 352.174166][ T4377] usb 7-1: Manufacturer: syz [ 352.811433][ T4377] usb 7-1: SerialNumber: syz [ 352.811846][ T7272] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 352.900276][ T7272] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 353.334040][ T7267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.342249][ T7267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.372242][ T7267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.378556][ T7267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.420493][ T7267] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 353.667859][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.691062][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.991970][ C0] net_ratelimit: 94 callbacks suppressed [ 354.152114][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.333989][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 355.446607][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 355.446625][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 355.458681][ T4284] Bluetooth: hci6: command 0x0c1a tx timeout [ 355.465281][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 355.788324][ T4344] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 355.805105][ T4377] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 355.875472][ T4377] usb 7-1: USB disconnect, device number 13 [ 356.019996][ T4377] usblp0: removed [ 356.113788][ T4344] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 356.656269][ T4344] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 356.709099][ T4344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.742009][ T4344] usb 6-1: Product: syz [ 356.746218][ T4344] usb 6-1: Manufacturer: syz [ 356.750819][ T4344] usb 6-1: SerialNumber: syz [ 356.812390][ T4344] usb 6-1: config 0 descriptor?? [ 356.858885][ T4344] powermate: probe of 6-1:0.0 failed with error -22 [ 357.038237][ T4260] usb 6-1: USB disconnect, device number 11 [ 357.272175][ T4377] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 358.247838][ T4377] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 358.276330][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.304898][ T4377] usb 2-1: Product: syz [ 358.309083][ T4377] usb 2-1: Manufacturer: syz [ 358.309100][ T4377] usb 2-1: SerialNumber: syz [ 358.356323][ T4377] usb 2-1: config 0 descriptor?? [ 358.579949][ T4377] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 021 [ 358.912816][ T7311] i2c i2c-1: failure writing data [ 359.111970][ C0] net_ratelimit: 48 callbacks suppressed [ 359.269190][ T7336] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 359.279316][ T7336] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 359.381132][ T53] [ 359.383492][ T53] ====================================================== [ 359.390514][ T53] WARNING: possible circular locking dependency detected [ 359.397548][ T53] syzkaller #0 Not tainted [ 359.401970][ T53] ------------------------------------------------------ [ 359.409004][ T53] kworker/0:1H/53 is trying to acquire lock: [ 359.414986][ T53] ffff888026adfd38 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: __flush_workqueue+0x14c/0x1380 [ 359.425185][ T53] [ 359.425185][ T53] but task is already holding lock: [ 359.432552][ T53] ffffc90000be7d00 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 359.443614][ T53] [ 359.443614][ T53] which lock already depends on the new lock. [ 359.443614][ T53] [ 359.454085][ T53] [ 359.454085][ T53] the existing dependency chain (in reverse order) is: [ 359.463098][ T53] [ 359.463098][ T53] -> #2 ((work_completion)(&queue->io_work)){+.+.}-{0:0}: [ 359.472378][ T53] __flush_work+0x122/0xac0 [ 359.477477][ T53] __cancel_work_timer+0x3f4/0x560 [ 359.483091][ T53] nvmet_tcp_release_queue_work+0x2ef/0xf30 [ 359.488036][ T7343] kcov: kcov_start: t = ffff88802c32bc00, size = 524288, area = ffffc9001d087000 [ 359.489597][ T53] process_one_work+0x8ab/0x1160 [ 359.504142][ T53] worker_thread+0xaf5/0x12a0 [ 359.509352][ T53] kthread+0x29d/0x330 [ 359.513963][ T53] ret_from_fork+0x1f/0x30 [ 359.519003][ T53] [ 359.519003][ T53] -> #1 ((work_completion)(&queue->release_work)){+.+.}-{0:0}: [ 359.528751][ T53] process_one_work+0x7ec/0x1160 [ 359.534224][ T53] worker_thread+0xaf5/0x12a0 [ 359.539436][ T53] kthread+0x29d/0x330 [ 359.544025][ T53] ret_from_fork+0x1f/0x30 [ 359.548967][ T53] [ 359.548967][ T53] -> #0 ((wq_completion)nvmet-wq){+.+.}-{0:0}: [ 359.557315][ T53] __lock_acquire+0x3a03/0x7ea0 [ 359.562718][ T53] lock_acquire+0x1bc/0x4a0 [ 359.567762][ T53] __flush_workqueue+0x165/0x1380 [ 359.573309][ T53] nvmet_tcp_install_queue+0x7e/0x380 [ 359.579203][ T53] nvmet_install_queue+0x335/0x760 [ 359.584925][ T53] nvmet_execute_admin_connect+0x332/0x7e0 [ 359.591290][ T53] nvmet_tcp_io_work+0x1a65/0x88a0 [ 359.597029][ T53] process_one_work+0x8ab/0x1160 [ 359.602501][ T53] worker_thread+0xaf5/0x12a0 [ 359.607716][ T53] kthread+0x29d/0x330 [ 359.612315][ T53] ret_from_fork+0x1f/0x30 [ 359.617281][ T53] [ 359.617281][ T53] other info that might help us debug this: [ 359.617281][ T53] [ 359.627517][ T53] Chain exists of: [ 359.627517][ T53] (wq_completion)nvmet-wq --> (work_completion)(&queue->release_work) --> (work_completion)(&queue->io_work) [ 359.627517][ T53] [ 359.645006][ T53] Possible unsafe locking scenario: [ 359.645006][ T53] [ 359.652469][ T53] CPU0 CPU1 [ 359.657840][ T53] ---- ---- [ 359.663206][ T53] lock((work_completion)(&queue->io_work)); [ 359.669287][ T53] lock((work_completion)(&queue->release_work)); [ 359.678318][ T53] lock((work_completion)(&queue->io_work)); [ 359.686933][ T53] lock((wq_completion)nvmet-wq); [ 359.692064][ T53] [ 359.692064][ T53] *** DEADLOCK *** [ 359.692064][ T53] [ 359.700216][ T53] 2 locks held by kworker/0:1H/53: [ 359.705329][ T53] #0: ffff888026ae8538 ((wq_completion)nvmet_tcp_wq){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 359.716236][ T53] #1: ffffc90000be7d00 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 359.727770][ T53] [ 359.727770][ T53] stack backtrace: [ 359.733670][ T53] CPU: 0 PID: 53 Comm: kworker/0:1H Not tainted syzkaller #0 [ 359.741050][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.751122][ T53] Workqueue: nvmet_tcp_wq nvmet_tcp_io_work [ 359.757054][ T53] Call Trace: [ 359.760344][ T53] [ 359.763297][ T53] dump_stack_lvl+0x188/0x24e [ 359.767995][ T53] ? load_image+0x410/0x410 [ 359.772599][ T53] ? show_regs_print_info+0x12/0x12 [ 359.777814][ T53] ? print_circular_bug+0x12b/0x1a0 [ 359.783028][ T53] check_noncircular+0x2f8/0x400 [ 359.787981][ T53] ? print_deadlock_bug+0x5d0/0x5d0 [ 359.793192][ T53] ? lockdep_lock+0xf1/0x1f0 [ 359.797795][ T53] ? _find_first_zero_bit+0xd2/0x100 [ 359.803130][ T53] __lock_acquire+0x3a03/0x7ea0 [ 359.808011][ T53] ? verify_lock_unused+0x140/0x140 [ 359.813226][ T53] ? verify_lock_unused+0x140/0x140 [ 359.818448][ T53] ? __mod_timer+0x925/0xd20 [ 359.823137][ T53] lock_acquire+0x1bc/0x4a0 [ 359.827652][ T53] ? __flush_workqueue+0x14c/0x1380 [ 359.832865][ T53] ? read_lock_is_recursive+0x10/0x10 [ 359.838255][ T53] ? __init_swait_queue_head+0xa4/0x140 [ 359.843850][ T53] ? __flush_workqueue+0x14c/0x1380 [ 359.849061][ T53] __flush_workqueue+0x165/0x1380 [ 359.854096][ T53] ? __flush_workqueue+0x14c/0x1380 [ 359.859307][ T53] ? __mutex_lock+0x1ab/0xae0 [ 359.864000][ T53] ? rcu_work_rcufn+0x120/0x120 [ 359.868868][ T53] nvmet_tcp_install_queue+0x7e/0x380 [ 359.874249][ T53] ? nvmet_sq_setup+0x24/0x120 [ 359.879114][ T53] ? nvmet_tcp_disc_port_addr+0xc0/0xc0 [ 359.884674][ T53] nvmet_install_queue+0x335/0x760 [ 359.889803][ T53] nvmet_execute_admin_connect+0x332/0x7e0 [ 359.895623][ T53] ? iov_iter_bvec+0x4a/0x1f0 [ 359.900404][ T53] ? aa_sock_msg_perm+0x94/0x150 [ 359.905449][ T53] ? nvmet_parse_connect_cmd+0x290/0x290 [ 359.911099][ T53] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 359.916470][ T53] ? sock_recvmsg+0x6f/0xf0 [ 359.921059][ T53] nvmet_tcp_io_work+0x1a65/0x88a0 [ 359.926200][ T53] ? mark_lock+0x94/0x320 [ 359.930546][ T53] ? nvmet_tcp_release_queue_work+0xf30/0xf30 [ 359.936625][ T53] ? register_lock_class+0xc0/0x870 [ 359.941836][ T53] ? is_dynamic_key+0x260/0x260 [ 359.946699][ T53] ? mark_lock+0x94/0x320 [ 359.951044][ T53] ? __lock_acquire+0x142d/0x7ea0 [ 359.956090][ T53] ? sbitmap_any_bit_set+0xfd/0x140 [ 359.961387][ T53] ? verify_lock_unused+0x140/0x140 [ 359.966623][ T53] ? _raw_spin_unlock_irq+0x1f/0x40 [ 359.971833][ T53] ? process_one_work+0x7b4/0x1160 [ 359.976958][ T53] process_one_work+0x8ab/0x1160 [ 359.982012][ T53] ? worker_detach_from_pool+0x240/0x240 [ 359.987658][ T53] ? _raw_spin_lock_irq+0xb7/0xf0 [ 359.992699][ T53] ? _raw_spin_lock_irqsave+0x100/0x100 [ 359.998253][ T53] ? wq_worker_running+0x97/0x190 [ 360.003308][ T53] worker_thread+0xaf5/0x12a0 [ 360.008006][ T53] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 360.013921][ T53] kthread+0x29d/0x330 [ 360.018006][ T53] ? worker_clr_flags+0x1a0/0x1a0 [ 360.023052][ T53] ? kthread_blkcg+0xd0/0xd0 [ 360.027743][ T53] ret_from_fork+0x1f/0x30 [ 360.032182][ T53] [ 360.035278][ C0] virtqueue callback for ffff888142ee5800 (ffffffff858ab7a0) [ 360.042732][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 360.050166][ C0] virtqueue interrupt with no work for ffff888141241800 [ 360.057109][ C0] virtqueue interrupt with no work for ffff888141241600 [ 360.064175][ C0] tcp_conntracks: [ 360.064191][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.073548][ C0] nf_conntrack: normal packet for ffff88807340d200 [ 360.080157][ C0] tcp_conntracks: [ 360.080173][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.091949][ C0] No more buffers in queue [ 360.096406][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 360.102263][ C0] Receiving skb proto 0x0800 len 104 type 0 [ 360.108265][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 360.114166][ C0] Receiving skb proto 0x0800 len 104 type 0 [ 360.120083][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 360.125955][ C0] Receiving skb proto 0x0800 len 104 type 0 [ 360.131862][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 360.132319][ T7311] raw-gadget.1 gadget.1: event fetching interrupted [ 360.137696][ C0] No more buffers in queue [ 360.148751][ C0] tcp_conntracks: [ 360.148765][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 360.157100][ T7342] kcov: kcov_start: t = ffff888077c58000, size = 524288, area = ffffc9000cdc1000 [ 360.157885][ C0] nf_conntrack: normal packet for ffff88823bcd8ec0 [ 360.169860][ T7328] kcov: kcov_task_exit: t = ffff88802f281e00, kcov->t = ffff88802f281e00 [ 360.173570][ C0] tcp_conntracks: [ 360.182095][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.191201][ C0] tcp_conntracks: [ 360.191218][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 360.200340][ C0] nf_conntrack: normal packet for ffff88823bcd8ec0 [ 360.205710][ T7337] raw-gadget.1 gadget.1: event fetching interrupted [ 360.206911][ C0] tcp_conntracks: [ 360.213514][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.215254][ T7333] kcov: kcov_task_exit: t = ffff888026d29e00, kcov->t = ffff888026d29e00 [ 360.217243][ C0] tcp_conntracks: [ 360.231047][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 360.232903][ T7346] kcov: kcov_start: t = ffff88802d2c3c00, size = 524288, area = ffffc9000f85b000 [ 360.234826][ C0] nf_conntrack: normal packet for ffff88823bcd8ec0 [ 360.240625][ T7337] kcov: kcov_task_exit: t = ffff88807973da00, kcov->t = ffff88807973da00 [ 360.249248][ C0] tcp_conntracks: [ 360.262346][ T7331] vidtv vidtv.0: Stopped streaming [ 360.264166][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.278151][ T7347] kcov: kcov_start: t = ffff888028495a00, size = 524288, area = ffffc90010c60000 [ 360.278493][ C0] tcp_conntracks: [ 360.287514][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.296659][ C0] No more buffers in queue [ 360.301061][ C0] eth0: xmit ffff888057958500 42:01:0a:80:00:01 [ 360.307314][ C0] Added buffer head 0 to ffff888142ee5a00 [ 360.313019][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 360.320473][ C0] nf_conntrack: normal packet for ffff888078a1a300 [ 360.327005][ C0] tcp_conntracks: [ 360.327013][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 360.336133][ C0] Sent skb ffff888057958500 [ 360.340634][ C0] No more buffers in queue [ 360.345044][ C0] eth0: xmit ffff888057958280 42:01:0a:80:00:01 [ 360.351264][ C0] Added buffer head 0 to ffff888142ee5a00 [ 360.356976][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 360.364469][ C0] Sent skb ffff888057958280 [ 360.369016][ C0] No more buffers in queue [ 360.373490][ C0] eth0: xmit ffff888057958140 42:01:0a:80:00:01 [ 360.379758][ C0] Added buffer head 0 to ffff888142ee5a00 [ 360.380132][ T7331] kcov: kcov_task_exit: t = ffff88802f1eda00, kcov->t = ffff88802f1eda00 [ 360.385531][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 360.401487][ T4344] Added buffer head 0 to ffff888141241a00 [ 360.407392][ C0] nf_conntrack: normal packet for ffff88807340d200 [ 360.410767][ T7311] kcov: kcov_task_exit: t = ffff88802b519e00, kcov->t = ffff88802b519e00 [ 360.413927][ C0] tcp_conntracks: [ 360.422346][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.431796][ C0] tcp_conntracks: [ 360.431811][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.441035][ C0] tcp_conntracks: [ 360.441045][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.450616][ C0] Sent skb ffff888057958140 [ 360.455163][ C0] No more buffers in queue [ 360.459907][ T53] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:6378566e-9e2d-470b-a6eb-af7e929fefb6. [ 360.460096][ T4377] nf_conntrack: normal packet for ffff88807b328c00 [ 360.474970][ T53] tcp_conntracks: [ 360.480770][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.481127][ T22] nf_conntrack: normal packet for ffff88807b329200 [ 360.484673][ C0] No more buffers in queue [ 360.501620][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.508222][ T53] tcp_conntracks: [ 360.508231][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.517455][ C0] tcp_conntracks: [ 360.517465][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.526874][ T53] tcp_conntracks: [ 360.526885][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.536328][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.542881][ T53] tcp_conntracks: [ 360.542891][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.551976][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 360.563994][ T4454] nf_conntrack: normal packet for ffff888078a1b080 [ 360.564145][ T53] tcp_conntracks: [ 360.570513][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.580041][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.586636][ T53] tcp_conntracks: [ 360.586648][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.596216][ T53] tcp_conntracks: [ 360.596227][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.605763][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.612311][ T53] tcp_conntracks: [ 360.612324][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.621660][ T53] tcp_conntracks: [ 360.621670][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.631317][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.637884][ T53] tcp_conntracks: [ 360.637896][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.647376][ T53] tcp_conntracks: [ 360.647387][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.656891][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.663463][ T53] tcp_conntracks: [ 360.663474][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.672952][ T53] tcp_conntracks: [ 360.672963][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.682890][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.689412][ T53] tcp_conntracks: [ 360.689424][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.700340][ T53] tcp_conntracks: [ 360.700352][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.737922][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.744525][ T53] tcp_conntracks: [ 360.744535][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.754048][ T53] tcp_conntracks: [ 360.754060][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.765813][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 360.772386][ T53] tcp_conntracks: [ 360.772395][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.781735][ T53] tcp_conntracks: [ 360.781746][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.791682][ T7336] device: 'nvme-subsys0': device_add [ 360.791741][ T4257] tcp_conntracks: [ 360.797018][ T4257] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.797265][ T7336] kobject: 'nvme-subsystem' (ffff888056b8a600): kobject_add_internal: parent: 'virtual', set: '(null)' [ 360.801273][ T4257] No more buffers in queue [ 360.807048][ T7343] kcov: kcov_task_exit: t = ffff88802c32bc00, kcov->t = ffff88802c32bc00 [ 360.817218][ T4257] eth0: xmit ffff888057c6c000 42:01:0a:80:00:01 [ 360.836276][ T4257] Added buffer head 0 to ffff888142ee5a00 [ 360.842006][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 360.849578][ C0] nf_conntrack: normal packet for ffff88807340d200 [ 360.856106][ C0] tcp_conntracks: [ 360.856114][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.865249][ C0] Sent skb ffff888057c6c000 [ 360.869764][ C0] No more buffers in queue [ 360.874340][ T7340] kcov: kcov_task_exit: t = ffff8880569b8000, kcov->t = ffff8880569b8000 [ 360.912747][ T4257] tcp_conntracks: [ 360.912765][ T4257] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.921985][ T4257] No more buffers in queue [ 360.923203][ T3600] sd 0:0:1:0: cmd ffff888028705760 CDB: 0x2a [ 360.926415][ T4257] eth0: xmit ffff88805d8c5140 42:01:0a:80:00:01 [ 360.938668][ T4257] Added buffer head 0 to ffff888142ee5a00 [ 360.943276][ T7348] kcov: kcov_start: t = ffff88802d549e00, size = 524288, area = ffffc90012065000 [ 360.944436][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 360.961131][ C0] Sent skb ffff88805d8c5140 [ 360.965691][ C0] No more buffers in queue [ 360.970208][ T3600] Added buffer head 170 to ffff888025f11800 [ 360.970335][ T4257] tcp_conntracks: [ 360.976140][ T4257] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 360.985328][ T4257] No more buffers in queue [ 360.986351][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): kobject_add_internal: parent: 'nvme-subsystem', set: 'devices' [ 360.989733][ T4257] eth0: xmit ffff88806076aff0 42:01:0a:80:00:01 [ 361.007692][ T4257] Added buffer head 0 to ffff888142ee5a00 [ 361.013452][ C0] virtqueue callback for ffff888142ee5800 (ffffffff858ab7a0) [ 361.013482][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 361.024739][ C1] virtqueue callback for ffff888025f11800 (ffffffff85445db0) [ 361.028360][ C0] Sent skb ffff88806076aff0 [ 361.035658][ C1] sd 0:0:1:0: cmd ffff888028705760 response 0 status 0x0 sense_len 0 [ 361.035679][ C1] No more buffers in queue [ 361.037369][ T1271] sd 0:0:1:0: cmd ffff888026a57120 CDB: 0x35 [ 361.040164][ C0] No more buffers in queue [ 361.048240][ T1271] Added buffer head 170 to ffff888025f11800 [ 361.048245][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 361.048299][ C0] virtqueue interrupt with no work for ffff888141241800 [ 361.048308][ C0] virtqueue interrupt with no work for ffff888141241600 [ 361.048321][ C1] virtqueue callback for ffff888025f11800 (ffffffff85445db0) [ 361.048339][ C1] sd 0:0:1:0: cmd ffff888026a57120 response 0 status 0x0 sense_len 0 [ 361.052768][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 361.058674][ C1] No more buffers in queue [ 361.063093][ C0] No more buffers in queue [ 361.069055][ T1271] sd 0:0:1:0: cmd ffff888028705b20 CDB: 0x2a [ 361.076313][ C0] nf_conntrack: normal packet for ffff88823bcd8ec0 [ 361.083305][ T1271] Added buffer head 170 to ffff888025f11800 [ 361.090212][ C0] tcp_conntracks: [ 361.098863][ C1] virtqueue callback for ffff888025f11800 (ffffffff85445db0) [ 361.105639][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.111396][ C1] sd 0:0:1:0: cmd ffff888028705b20 response 0 status 0x0 sense_len 0 [ 361.116675][ T4344] Added buffer head 0 to ffff888141241a00 [ 361.120177][ C1] No more buffers in queue [ 361.126254][ C0] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 13) [ 361.137964][ T7311] kernfs bind: removing [ 361.138543][ C0] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15) [ 361.142323][ T7311] kernfs unbind: removing [ 361.149621][ C0] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 361.162023][ T7311] kernfs uevent: removing [ 361.163652][ C0] No more buffers in queue [ 361.192017][ T7311] bus: 'gadget': remove driver raw-gadget.1 [ 361.205650][ T7336] nvme-subsystem nvme-subsys0: No ACPI support [ 361.205920][ T7336] PM: Adding info for No Bus:nvme-subsys0 [ 361.205937][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): kobject_uevent_env [ 361.205967][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): fill_kobj_path: path = '/devices/virtual/nvme-subsystem/nvme-subsys0' [ 361.218815][ T4454] nf_conntrack: normal packet for ffff88807fb56f00 [ 361.225084][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 361.266498][ T4258] nf_conntrack: normal packet for ffff888078a1a300 [ 361.271073][ T53] tcp_conntracks: [ 361.284465][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.294016][ T53] tcp_conntracks: [ 361.294029][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.303469][ C0] nf_conntrack: normal packet for ffff88807340d200 [ 361.309995][ C0] tcp_conntracks: [ 361.310005][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.320032][ T7336] nvme nvme0: ANA group 1: optimized. [ 361.337370][ T53] nf_conntrack: normal packet for ffff88807340d200 [ 361.343953][ T53] tcp_conntracks: [ 361.343963][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.353450][ T53] tcp_conntracks: [ 361.353466][ T53] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.362881][ T7336] nvme nvme0: creating 2 I/O queues. [ 361.368877][ T7347] bus: 'gadget': add driver raw-gadget.3 [ 361.375331][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 361.394201][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): kobject_uevent_env [ 361.394373][ T7336] nvme nvme0: connecting queue 1 [ 361.411996][ C0] nf_conntrack: normal packet for ffff88807340d200 [ 361.418547][ C0] tcp_conntracks: [ 361.418561][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 361.427792][ T4258] tcp_conntracks: [ 361.427806][ T4258] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 361.427937][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.3' [ 361.431747][ T7311] kernfs gadget.1: removing [ 361.462062][ T4258] No more buffers in queue [ 361.466499][ T4258] eth0: xmit ffff8880541dfdc0 42:01:0a:80:00:01 [ 361.472742][ T4258] Added buffer head 19 to ffff888142ee5e00 [ 361.478524][ C1] virtqueue callback for ffff888142ee5e00 (ffffffff858ab890) [ 361.486035][ C1] Sent skb ffff8880541dfdc0 [ 361.490544][ C1] No more buffers in queue [ 361.496478][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.512217][ T4377] nf_conntrack: normal packet for ffff88807b329200 [ 361.520101][ T22] nf_conntrack: normal packet for ffff88807b328c00 [ 361.522432][ T7336] nf_conntrack: new packet for ffff88807340c000 [ 361.535331][ T7336] tcp_conntracks: [ 361.535347][ T7336] syn=1 ack=0 fin=0 rst=0 old=0 new=1 [ 361.545719][ T7336] nf_conntrack: Confirming conntrack ffff88807340c000 [ 361.552770][ C0] nf_nat: Already setup manip DST for ct ffff88807340c000 (status bits 0x188) [ 361.561697][ C0] nf_nat: Already setup manip SRC for ct ffff88807340c000 (status bits 0x188) [ 361.570730][ C0] tcp_conntracks: [ 361.570745][ C0] syn=1 ack=1 fin=0 rst=0 old=1 new=2 [ 361.582012][ T7311] kernfs driver: removing [ 361.582411][ T7336] nf_conntrack: normal packet for ffff88807340c000 [ 361.586438][ T7311] udc dummy_udc.1: unbinding gadget driver [USB Raw Gadget] [ 361.593462][ T4344] nf_conntrack: normal packet for ffff88807340d080 [ 361.609088][ T7336] tcp_conntracks: [ 361.609106][ T7336] syn=0 ack=1 fin=0 rst=0 old=2 new=3 [ 361.619314][ T7311] dummy_hcd dummy_hcd.1: port status 0x00010100 has changes [ 361.619384][ T7336] nvme nvme0: failed to connect socket: -512 [ 361.634610][ T7336] nf_conntrack: normal packet for ffff88807340c000 [ 361.641225][ T7336] tcp_conntracks: [ 361.641241][ T7336] syn=0 ack=1 fin=0 rst=1 old=3 new=8 [ 361.650725][ T7347] kernfs bind: removing [ 361.656559][ T7347] kernfs unbind: removing [ 361.660985][ T7347] kernfs uevent: removing [ 361.671120][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 361.679287][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 361.688487][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 91 [ 361.696912][ T4377] kcov: kcov_remote_start: handle = 100000000000002, context: task [ 361.704797][ T4377] kcov: kcov_start: t = ffff88802c025a00, size = 1048576, area = ffffc9001b483000 [ 361.714999][ T7311] kobject: 'dummy_udc.1' (ffff8881463d8018): kobject_uevent_env [ 361.741964][ T7311] kobject: 'dummy_udc.1' (ffff8881463d8018): fill_kobj_path: path = '/devices/platform/dummy_udc.1/udc/dummy_udc.1' [ 361.754195][ T4377] hub 2-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 361.760724][ T7347] bus: 'gadget': remove driver raw-gadget.3 [ 361.771991][ T4377] dummy_hcd dummy_hcd.1: port status 0x00010100 has changes [ 361.774474][ T7336] nf_conntrack: normal packet for ffff88807340d200 [ 361.781949][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 361.793978][ C1] kcov: kcov_start: t = ffff88807bda9e00, size = 262144, area = ffffc90002121000 [ 361.803393][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 97 [ 361.811951][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 361.820118][ C1] kcov: kcov_start: t = ffff88807bda9e00, size = 262144, area = ffffc90002121000 [ 361.829381][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 12 [ 361.841388][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): kobject_cleanup, parent ffff8881436af350 [ 361.854390][ T7311] kobject: 'gadget.1' (ffff888145790cd8): kobject_uevent_env [ 361.863384][ T7311] kobject: 'gadget.1' (ffff888145790cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.1/gadget.1' [ 361.874835][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 361.883264][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 361.892496][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 2 [ 361.900897][ T4377] usb usb2-port1: status 0100, change 0001, 12 Mb/s [ 361.907534][ T4377] usb 2-1: USB disconnect, device number 21 [ 361.913528][ T4377] usb 2-1: unregistering device [ 361.920145][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): kobject_cleanup, parent ffff8881436af350 [ 361.929858][ T4377] usb 2-1: unregistering interface 2-1:0.0 [ 361.936288][ T7336] tcp_conntracks: [ 361.936306][ T7336] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 361.947144][ T4377] kernfs power: removing [ 361.951408][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): auto cleanup kobject_del [ 361.961031][ T4377] kernfs uevent: removing [ 361.965673][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): auto cleanup kobject_del [ 361.975670][ T4377] kernfs bInterfaceNumber: removing [ 361.980927][ T4377] kernfs bAlternateSetting: removing [ 361.986408][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): auto cleanup 'remove' event [ 361.996589][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): auto cleanup 'remove' event [ 361.996688][ T7336] nf_conntrack: normal packet for ffff88807340d200 [ 362.002063][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 362.023174][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): kobject_uevent_env [ 362.031722][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): kobject_uevent_env [ 362.039682][ T4377] kernfs bNumEndpoints: removing [ 362.041184][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 362.044860][ T4377] kernfs bInterfaceClass: removing [ 362.052037][ C0] virtqueue interrupt with no work for ffff888141241800 [ 362.057360][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 362.064068][ C0] virtqueue interrupt with no work for ffff888141241600 [ 362.064358][ T4344] Added buffer head 0 to ffff888141241a00 [ 362.075394][ C1] tcp_conntracks: [ 362.087988][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 362.097598][ C1] nf_conntrack: normal packet for ffff88807340d200 [ 362.104119][ C1] tcp_conntracks: [ 362.104133][ C1] syn=0 ack=0 fin=0 rst=1 old=5 new=8 [ 362.116438][ T7336] tcp_conntracks: [ 362.116455][ T7336] syn=0 ack=1 fin=0 rst=1 old=8 new=8 [ 362.125769][ T4377] kernfs bInterfaceSubClass: removing [ 362.131829][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.3' [ 362.144682][ T4377] kernfs bInterfaceProtocol: removing [ 362.150103][ T4377] kernfs modalias: removing [ 362.152171][ T4344] nf_conntrack: normal packet for ffff8880781af200 [ 362.155538][ T7336] kernfs runtime_status: removing [ 362.161353][ T4260] nf_conntrack: normal packet for ffff88807340c900 [ 362.183478][ T4377] kernfs supports_autosuspend: removing [ 362.189088][ T4377] kernfs authorized: removing [ 362.194266][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 362.202716][ T22] nvmet: ctrl 1 stop keep-alive [ 362.209321][ T7336] kernfs control: removing [ 362.214122][ T7311] kernfs raw-gadget.1: removing [ 362.219026][ T7311] kobject: 'raw-gadget.1' (ffff88807fa24c00): calling ktype release [ 362.230022][ T4377] kernfs subsystem: removing [ 362.234887][ T7336] kernfs runtime_suspended_time: removing [ 362.240934][ T4377] kernfs 2-1:0.0: removing [ 362.247013][ T7311] driver: 'raw-gadget.1': driver_release [ 362.252913][ T4377] bus: 'usb': remove device 2-1:0.0 [ 362.258259][ T4377] kernfs 2-1:0.0: removing [ 362.263858][ T7311] kobject: 'raw-gadget.1': free name [ 362.269277][ T7336] kernfs runtime_active_time: removing [ 362.275283][ T7336] kernfs autosuspend_delay_ms: removing [ 362.280899][ T7336] kernfs power: removing [ 362.293594][ T7347] kernfs raw-gadget.3: removing [ 362.307699][ T4377] kernfs driver: removing [ 362.314057][ T7336] kernfs 511:0: removing [ 362.319617][ T7336] kernfs dev: removing [ 362.324578][ T7347] kobject: 'raw-gadget.3' (ffff88801e28b600): calling ktype release [ 362.329846][ T4377] kernfs new_device: removing [ 362.337803][ T4377] kernfs i2c-2: removing [ 362.347841][ T7347] driver: 'raw-gadget.3': driver_release [ 362.353653][ T7336] kernfs device: removing [ 362.358018][ T7336] kernfs subsystem: removing [ 362.363824][ T4377] i2c i2c-2: adapter [OSIF at bus 002 device 021] unregistered [ 362.379148][ T4377] device: 'i2c-2': device_unregister [ 362.385108][ T7336] kernfs nvme0: removing [ 362.386959][ T7348] kcov: kcov_task_exit: t = ffff88802d549e00, kcov->t = ffff88802d549e00 [ 362.389398][ T7342] kcov: kcov_task_exit: t = ffff888077c58000, kcov->t = ffff888077c58000 [ 362.398369][ T4260] nf_conntrack: normal packet for ffff88807340d980 [ 362.412106][ T7336] kernfs uevent: removing [ 362.417248][ T7347] kobject: 'raw-gadget.3': free name [ 362.425142][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.435679][ T7347] kcov: kcov_task_exit: t = ffff888028495a00, kcov->t = ffff888028495a00 [ 362.446561][ T4377] kernfs runtime_status: removing [ 362.451621][ T4377] kernfs control: removing [ 362.495553][ T4377] kernfs runtime_suspended_time: removing [ 362.551320][ T7346] kcov: kcov_task_exit: t = ffff88802d2c3c00, kcov->t = ffff88802d2c3c00 [ 362.563732][ T7336] kernfs reset_controller: removing [ 362.570636][ T22] nf_conntrack: normal packet for ffff88807b328c00 [ 362.577447][ T41] nf_conntrack: normal packet for ffff88807b329200 [ 362.586513][ T4377] kernfs runtime_active_time: removing [ 362.594294][ T4377] kernfs autosuspend_delay_ms: removing [ 362.600032][ T7336] kernfs rescan_controller: removing [ 362.605559][ T7336] kernfs model: removing [ 362.609886][ T4377] kernfs power: removing [ 362.615256][ T7336] kernfs serial: removing [ 362.619688][ T7336] kernfs firmware_rev: removing [ 362.624863][ T4377] kernfs 89:2: removing [ 362.629059][ T4377] kernfs dev: removing [ 362.635254][ T7336] kernfs cntlid: removing [ 362.640178][ T4377] kernfs device: removing [ 362.644930][ T7336] kernfs delete_controller: removing [ 362.650878][ T4377] kernfs subsystem: removing [ 362.657633][ T4377] kernfs i2c-2: removing [ 362.662121][ T7336] kernfs transport: removing [ 362.666733][ T7336] kernfs subsysnqn: removing [ 362.671529][ T4377] kernfs uevent: removing [ 362.678866][ T4377] kernfs name: removing [ 362.683208][ T7336] kernfs address: removing [ 362.687638][ T7336] kernfs state: removing [ 362.691897][ T4377] PM: Removing info for No Bus:i2c-2 [ 362.698773][ T4377] kobject: 'i2c-2' (ffff888074a81018): kobject_uevent_env [ 362.702501][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 362.706091][ T7336] kernfs numa_node: removing [ 362.720617][ T7336] kernfs queue_count: removing [ 362.725646][ T4377] kobject: 'i2c-2' (ffff888074a81018): fill_kobj_path: path = '/devices/i2c-2/i2c-dev/i2c-2' [ 362.737391][ T7336] kernfs sqsize: removing [ 362.742714][ T7336] kernfs hostnqn: removing [ 362.747173][ T7336] kernfs hostid: removing [ 362.751531][ T7336] kernfs ctrl_loss_tmo: removing [ 362.758310][ T4377] kernfs i2c-2: removing [ 362.762745][ T4377] kernfs i2c-dev: removing [ 362.767199][ T4377] kobject: 'i2c-dev' (ffff888025f36b80): kobject_cleanup, parent 0000000000000000 [ 362.777974][ T7336] kernfs reconnect_delay: removing [ 362.785138][ T7336] kernfs fast_io_fail_tmo: removing [ 362.790378][ T7336] kernfs kato: removing [ 362.796137][ T4377] kobject: 'i2c-dev' (ffff888025f36b80): calling ktype release [ 362.803880][ T7336] kernfs cntrltype: removing [ 362.808501][ T7336] kernfs dctype: removing [ 362.814394][ T4377] kobject: 'i2c-dev': free name [ 362.819288][ T4377] kobject: '(null)' (ffff888074a81488): kobject_cleanup, parent ffff888074a81018 [ 362.828624][ T7336] PM: Removing info for No Bus:nvme0 [ 362.835625][ T7336] kobject: 'nvme0' (ffff8880740b8510): kobject_uevent_env [ 362.842919][ T4377] kobject: '(null)' (ffff888074a81488): calling ktype release [ 362.851292][ T7336] kobject: 'nvme0' (ffff8880740b8510): fill_kobj_path: path = '/devices/virtual/nvme-fabrics/ctl/nvme0' [ 362.864131][ T4377] kobject: 'i2c-2' (ffff888074a81018): kobject_cleanup, parent 0000000000000000 [ 362.873440][ T7336] kernfs nvme0: removing [ 362.877720][ T7336] kobject: '(null)' (ffff8880740b8988): kobject_cleanup, parent ffff8880740b8510 [ 362.888392][ T4377] kobject: 'i2c-2' (ffff888074a81018): calling ktype release [ 362.897823][ T4377] kobject: 'i2c-2': free name [ 362.904022][ T7336] kobject: '(null)' (ffff8880740b8988): calling ktype release [ 362.911513][ T7336] kobject: 'nvme0' (ffff8880740b8510): kobject_cleanup, parent 0000000000000000 [ 362.920771][ T4377] i2c_dev: adapter [OSIF at bus 002 device 021] unregistered [ 362.929704][ T4377] kernfs power: removing [ 362.934134][ T4377] kernfs uevent: removing [ 362.938509][ T4377] kernfs name: removing [ 362.941993][ T7336] kobject: 'nvme0' (ffff8880740b8510): calling ktype release [ 362.944221][ T4377] kernfs delete_device: removing [ 362.950402][ T7336] kobject: '(null)' (ffff88802620ba30): kobject_cleanup, parent 0000000000000000 [ 362.956144][ T4377] kernfs subsystem: removing [ 362.970828][ T4377] kernfs i2c-2: removing [ 362.975242][ T4377] bus: 'i2c': remove device i2c-2 [ 362.980282][ T4377] PM: Removing info for i2c:i2c-2 [ 362.985474][ T7336] kobject: '(null)' (ffff88802620ba30): calling ktype release [ 362.986907][ T4377] kobject: 'i2c-2' (ffff88801e65b168): kobject_uevent_env [ 363.000217][ T4377] kobject: 'i2c-2' (ffff88801e65b168): fill_kobj_path: path = '/devices/i2c-2' [ 363.001989][ T7336] kobject: '(null)' (ffff88807d617a58): kobject_cleanup, parent 0000000000000000 [ 363.019342][ T4377] kernfs i2c-2: removing [ 363.024224][ T7336] kobject: '(null)' (ffff88807d617a58): calling ktype release [ 363.031783][ T7336] kobject: '(null)' (ffffe8ffffc5d7f8): kobject_cleanup, parent 0000000000000000 [ 363.041126][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 363.041172][ C0] virtqueue interrupt with no work for ffff888141241800 [ 363.041183][ C0] virtqueue interrupt with no work for ffff888141241600 [ 363.041233][ T4260] Added buffer head 0 to ffff888141241a00 [ 363.041632][ T4260] nf_conntrack: normal packet for ffff88807340c900 [ 363.076573][ T4377] kobject: 'i2c-2' (ffff88801e65b168): kobject_cleanup, parent 0000000000000000 [ 363.085790][ T4377] kobject: 'i2c-2' (ffff88801e65b168): calling ktype release [ 363.094725][ T4377] kobject: 'i2c-2': free name [ 363.099460][ T4377] kobject: '2-1:0.0' (ffff88801e658030): kobject_uevent_env [ 363.106951][ T4377] kobject: '2-1:0.0' (ffff88801e658030): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 363.120616][ T4377] PM: Removing info for usb:2-1:0.0 [ 363.125997][ T7336] kobject: '(null)' (ffffe8ffffc5d7f8): calling ktype release [ 363.133664][ T4377] kobject: '2-1:0.0' (ffff88801e658030): kobject_uevent_env [ 363.140990][ T4377] kobject: '2-1:0.0' (ffff88801e658030): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 363.153491][ T7336] kobject: '(null)' (ffffe8ffffd5d7f8): kobject_cleanup, parent 0000000000000000 [ 363.162807][ T7336] kobject: '(null)' (ffffe8ffffd5d7f8): calling ktype release [ 363.170285][ T7336] kobject: '(null)' (ffff888023946100): kobject_cleanup, parent 0000000000000000 [ 363.179716][ T4377] kernfs 2-1:0.0: removing [ 363.182045][ T7336] kobject: '(null)' (ffff888023946100): calling ktype release [ 363.184325][ T4377] kobject: '2-1:0.0' (ffff88801e658030): kobject_cleanup, parent 0000000000000000 [ 363.195838][ T7336] kobject: '(null)' (ffff88802620c5a0): kobject_cleanup, parent 0000000000000000 [ 363.202424][ T4377] kobject: '2-1:0.0' (ffff88801e658030): calling ktype release [ 363.218986][ T4377] kobject: '2-1:0.0': free name [ 363.222024][ T7336] kobject: '(null)' (ffff88802620c5a0): calling ktype release [ 363.225704][ T4377] usb 2-1: usb_disable_device nuking all URBs [ 363.237689][ T7336] kobject: '(null)' (ffff88807d612258): kobject_cleanup, parent 0000000000000000 [ 363.238911][ T4377] kernfs port: removing [ 363.251203][ T4377] kernfs device: removing [ 363.257955][ T7336] kobject: '(null)' (ffff88807d612258): calling ktype release [ 363.257983][ T4377] device: 'ep_00': device_unregister [ 363.271026][ T4377] kernfs runtime_status: removing [ 363.271102][ T7336] kobject: '(null)' (ffffe8ffffc5e3f8): kobject_cleanup, parent 0000000000000000 [ 363.287371][ T4377] kernfs control: removing [ 363.292180][ T4377] kernfs runtime_suspended_time: removing [ 363.298002][ T4377] kernfs runtime_active_time: removing [ 363.301999][ T7336] kobject: '(null)' (ffffe8ffffc5e3f8): calling ktype release [ 363.305065][ T4377] kernfs autosuspend_delay_ms: removing [ 363.317523][ T4377] kernfs power: removing [ 363.317536][ T7336] kobject: '(null)' (ffffe8ffffd5e3f8): kobject_cleanup, parent 0000000000000000 [ 363.324843][ T4377] kernfs uevent: removing [ 363.331254][ T7336] kobject: '(null)' (ffffe8ffffd5e3f8): calling ktype release [ 363.345284][ T7336] kobject: '(null)' (ffff888023946e80): kobject_cleanup, parent 0000000000000000 [ 363.353300][ T4377] kernfs bLength: removing [ 363.356032][ T7336] kobject: '(null)' (ffff888023946e80): calling ktype release [ 363.372840][ T4377] kernfs bEndpointAddress: removing [ 363.378121][ T7336] kernfs nvme0: removing [ 363.388474][ T4377] kernfs bmAttributes: removing [ 363.393420][ T4377] kernfs bInterval: removing [ 363.398048][ T4377] kernfs wMaxPacketSize: removing [ 363.403217][ T7336] kernfs runtime_status: removing [ 363.408276][ T7336] kernfs control: removing [ 363.414077][ T4377] kernfs interval: removing [ 363.418621][ T4377] kernfs type: removing [ 363.422867][ T7336] kernfs runtime_suspended_time: removing [ 363.428620][ T7336] kernfs runtime_active_time: removing [ 363.435521][ T4377] kernfs direction: removing [ 363.440153][ T4377] PM: Removing info for No Bus:ep_00 [ 363.446430][ T7336] kernfs autosuspend_delay_ms: removing [ 363.452152][ T4377] kobject: 'ep_00' (ffff888074a83010): kobject_uevent_env [ 363.459581][ T4377] kobject: 'ep_00' (ffff888074a83010): kobject_uevent_env: filter function caused the event to drop! [ 363.470536][ T7336] kernfs power: removing [ 363.474893][ T7336] kernfs subsystem: removing [ 363.479528][ T7336] kernfs nvme-subsys0: removing [ 363.484465][ T7336] kernfs uevent: removing [ 363.488832][ T7336] kernfs model: removing [ 363.493280][ T4377] kernfs ep_00: removing [ 363.497574][ T4377] kobject: 'ep_00' (ffff888074a83010): kobject_cleanup, parent 0000000000000000 [ 363.506671][ T7336] kernfs serial: removing [ 363.511033][ T7336] kernfs firmware_rev: removing [ 363.515965][ T4377] kobject: 'ep_00' (ffff888074a83010): calling ktype release [ 363.523422][ T7336] kernfs subsysnqn: removing [ 363.528046][ T7336] kernfs subsystype: removing [ 363.532921][ T4377] kobject: 'ep_00': free name [ 363.537723][ T4377] kernfs autosuspend: removing [ 363.542588][ T4377] kernfs level: removing [ 363.546874][ T4377] kernfs connected_duration: removing [ 363.552361][ T4377] kernfs active_duration: removing [ 363.557490][ T7336] kernfs iopolicy: removing [ 363.562726][ T7336] PM: Removing info for No Bus:nvme-subsys0 [ 363.562810][ T4377] kernfs persist: removing [ 363.568712][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): kobject_uevent_env [ 363.582660][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): fill_kobj_path: path = '/devices/virtual/nvme-subsystem/nvme-subsys0' [ 363.592207][ T4377] kernfs descriptors: removing [ 363.599629][ T7336] kernfs nvme-subsys0: removing [ 363.606229][ T41] nf_conntrack: normal packet for ffff88807b329200 [ 363.613037][ T22] nf_conntrack: normal packet for ffff88807b328c00 [ 363.621206][ T4377] kernfs runtime_status: removing [ 363.626331][ T4377] kernfs control: removing [ 363.630779][ T4377] kernfs runtime_suspended_time: removing [ 363.636718][ T7336] kernfs nvme-subsystem: removing [ 363.641793][ T7336] kobject: 'nvme-subsystem' (ffff888056b8a600): kobject_cleanup, parent 0000000000000000 [ 363.652673][ T4377] kernfs runtime_active_time: removing [ 363.658278][ T4377] kernfs autosuspend_delay_ms: removing [ 363.664660][ T4377] kernfs power: removing [ 363.669162][ T7336] kobject: 'nvme-subsystem' (ffff888056b8a600): calling ktype release [ 363.671938][ C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 363.678111][ T4377] kernfs 189:148: removing [ 363.691653][ T4344] firmware_class: device_uncache_fw_images [ 363.694181][ T7336] kobject: 'nvme-subsystem': free name [ 363.706690][ T4377] kernfs dev: removing [ 363.710791][ T4377] kernfs uevent: removing [ 363.715213][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): kobject_cleanup, parent 0000000000000000 [ 363.725159][ T4377] kernfs removable: removing [ 363.729798][ T4377] kernfs configuration: removing [ 363.734920][ T7336] kobject: 'nvme-subsys0' (ffff88807d08b008): calling ktype release [ 363.743161][ T4377] kernfs bNumInterfaces: removing [ 363.748306][ T4377] kernfs bConfigurationValue: removing [ 363.753886][ T7336] kobject: 'nvme-subsys0': free name [ 363.759305][ T7336] kobject: 'nvme0': free name [ 363.764086][ T4377] kernfs bmAttributes: removing [ 363.769590][ T7336] kcov: kcov_task_exit: t = ffff88807d110000, kcov->t = ffff88807d110000 [ 363.778996][ T4377] kernfs bMaxPower: removing [ 363.783748][ T4377] kernfs urbnum: removing [ 363.791992][ T4377] kernfs idVendor: removing [ 363.796554][ T4377] kernfs idProduct: removing [ 363.801181][ T4377] kernfs bcdDevice: removing [ 363.813006][ T4377] kernfs bDeviceClass: removing [ 363.817932][ T4377] kernfs bDeviceSubClass: removing [ 363.823151][ T4377] kernfs bDeviceProtocol: removing [ 363.828385][ T4377] kernfs bNumConfigurations: removing [ 363.833921][ T4377] kernfs bMaxPacketSize0: removing [ 363.839060][ T4377] kernfs speed: removing [ 363.843495][ T4377] kernfs rx_lanes: removing [ 363.848033][ T4377] kernfs tx_lanes: removing [ 363.852621][ T4377] kernfs busnum: removing [ 363.857073][ T4377] kernfs devnum: removing [ 363.861429][ T4377] kernfs devpath: removing [ 363.865930][ T4377] kernfs version: removing [ 363.870918][ T4377] kernfs maxchild: removing [ 363.875548][ T4377] kernfs quirks: removing [ 363.879972][ T4377] kernfs avoid_reset_quirk: removing [ 363.885411][ T4377] kernfs authorized: removing [ 363.890219][ T4377] kernfs remove: removing [ 363.894650][ T4377] kernfs ltm_capable: removing [ 363.899600][ T4377] kernfs devspec: removing [ 363.904355][ T4377] kernfs manufacturer: removing [ 363.909325][ T4377] kernfs product: removing [ 363.914070][ T4377] kernfs serial: removing [ 363.918501][ T4377] kernfs subsystem: removing [ 363.923565][ T4377] kernfs 2-1: removing [ 363.927719][ T4377] bus: 'usb': remove device 2-1 [ 363.932980][ T4377] kernfs 2-1: removing [ 363.937148][ T4377] kernfs driver: removing [ 363.941568][ T4377] kobject: '2-1' (ffff88801e65c0a8): kobject_uevent_env [ 363.948873][ T4377] kobject: '2-1' (ffff88801e65c0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1' [ 363.960123][ T4377] PM: Removing info for usb:2-1 [ 363.965260][ T4377] kobject: '2-1' (ffff88801e65c0a8): kobject_uevent_env [ 363.972761][ T4377] kobject: '2-1' (ffff88801e65c0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1' [ 363.983970][ T4377] kernfs 2-1: removing [ 363.988190][ T4377] kobject: '2-1' (ffff88801e65c0a8): kobject_cleanup, parent 0000000000000000 [ 363.997759][ T4377] kobject: '2-1' (ffff88801e65c0a8): calling ktype release [ 364.005320][ T4377] kobject: '2-1': free name [ 364.009951][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.018126][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.027303][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 2 [ 364.041076][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 364.048473][ C0] virtqueue interrupt with no work for ffff888141241800 [ 364.055395][ C0] virtqueue interrupt with no work for ffff888141241600 [ 364.062583][ T4344] Added buffer head 0 to ffff888141241a00 [ 364.092095][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.100819][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.110041][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 12 [ 364.162061][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.170263][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.179615][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 12 [ 364.231935][ C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 364.243947][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.252210][ C1] kcov: kcov_start: t = ffff88801de79e00, size = 262144, area = ffffc90002121000 [ 364.261397][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 12 [ 364.270170][ T4454] net_ratelimit: 39 callbacks suppressed [ 364.270184][ T4454] wireguard: wg1: Sending handshake initiation to peer 21 ([::1]:20001/0%0) [ 364.287864][ T4454] nf_conntrack: normal packet for ffff888078a1b200 [ 364.313393][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.321636][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.330806][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 12 [ 364.339384][ T4377] usb usb2-port1: debounce total 100ms stable 100ms status 0x100 [ 364.347257][ T4377] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc9001b483000 1048575 [ 364.362549][ T4377] kcov: kcov_remote_start: handle = 100000000000002, context: task [ 364.371004][ T4377] kcov: kcov_start: t = ffff88802c025a00, size = 1048576, area = ffffc9001b483000 [ 364.382601][ T4377] hub 2-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 364.389146][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.397319][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.406484][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 2 [ 364.415028][ T4377] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc9001b483000 9315 [ 364.423802][ T4377] hub 2-0:1.0: hub_suspend [ 364.428268][ C1] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 364.436436][ C1] kcov: kcov_start: t = ffff888018749e00, size = 262144, area = ffffc90002121000 [ 364.445629][ C1] kcov: kcov_move_area: ffffc9001887d000 1048576 <= ffffc90002121000 3 [ 364.454460][ T4377] usb usb2: bus auto-suspend, wakeup 1 [ 364.459948][ T4377] usb usb2: dummy_bus_suspend [ 364.632072][ C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0) [ 364.640659][ T4344] nf_conntrack: normal packet for ffff88807340d080 [ 364.641959][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 364.649058][ C0] wireguard: wg2: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) [ 364.655447][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 364.672470][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 364.680898][ T4377] nf_conntrack: normal packet for ffff88807b328c00 [ 364.687558][ T4377] nf_conntrack: normal packet for ffff88807b329200 [ 364.694327][ C0] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 364.704562][ C1] wireguard: wg1: Receiving keepalive packet from peer 39 ([::1]:20001/0%0) [ 364.713342][ C1] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 365.041041][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 365.048485][ C0] virtqueue interrupt with no work for ffff888141241800 [ 365.055436][ C0] virtqueue interrupt with no work for ffff888141241600 [ 365.062680][ T4344] Added buffer head 0 to ffff888141241a00 [ 365.191994][ C0] wireguard: wg0: Sending keepalive packet to peer 32 ([::1]:20003/0%0) [ 365.200635][ T4344] nf_conntrack: normal packet for ffff8880781af200 [ 365.752114][ T5840] nf_conntrack: normal packet for ffff88807b329200 [ 365.758843][ T41] nf_conntrack: normal packet for ffff88807b328c00 [ 365.977112][ C0] virtqueue callback for ffff888142ee5800 (ffffffff858ab7a0) [ 365.984588][ C0] No more buffers in queue [ 365.989024][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 365.994882][ C0] No more buffers in queue [ 365.999416][ C0] No more buffers in queue [ 366.003958][ C0] eth0: xmit ffff8880594b78c0 42:01:0a:80:00:01 [ 366.010216][ C0] Added buffer head 0 to ffff888142ee5a00 [ 366.015965][ C0] virtqueue callback for ffff888142ee5a00 (ffffffff858ab890) [ 366.024061][ C0] Sent skb ffff8880594b78c0 [ 366.028623][ C0] No more buffers in queue [ 366.040977][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 366.048415][ C0] virtqueue interrupt with no work for ffff888141241800 [ 366.055363][ C0] virtqueue interrupt with no work for ffff888141241600 [ 366.062444][ T4344] Added buffer head 0 to ffff888141241a00 [ 366.073040][ T4344] nf_conntrack: normal packet for ffff88807340c900 [ 366.231947][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 366.244093][ T9] nf_conntrack: normal packet for ffff888078a1b080 [ 366.792194][ T41] nf_conntrack: normal packet for ffff88807b329200 [ 366.798874][ T41] nf_conntrack: normal packet for ffff88807b328c00 [ 366.871999][ C1] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 366.883645][ C1] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 366.883927][ T9] nf_conntrack: normal packet for ffff88807fb56f00 [ 366.895288][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 367.040924][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 367.048360][ C0] virtqueue interrupt with no work for ffff888141241800 [ 367.055312][ C0] virtqueue interrupt with no work for ffff888141241600 [ 367.062743][ T4344] Added buffer head 0 to ffff888141241a00 [ 367.513923][ T4344] nf_conntrack: normal packet for ffff8880781af500 [ 367.520535][ T4344] nf_conntrack: normal packet for ffff88807340c780 [ 367.674468][ T4344] nf_conntrack: normal packet for ffff88807340d080 [ 367.833359][ T41] nf_conntrack: normal packet for ffff88807b328c00 [ 367.840152][ T4377] nf_conntrack: normal packet for ffff88807b329200 [ 368.040872][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 368.048312][ C0] virtqueue interrupt with no work for ffff888141241800 [ 368.055260][ C0] virtqueue interrupt with no work for ffff888141241600 [ 368.062457][ T4260] Added buffer head 0 to ffff888141241a00 [ 368.152317][ C0] nf_conntrack: new packet for ffff88807340c480 [ 368.158643][ C0] nf_conntrack: Confirming conntrack ffff88807340c480 [ 368.167736][ C0] nf_nat: Already setup manip DST for ct ffff88807340c480 (status bits 0x188) [ 368.176675][ C0] nf_nat: Already setup manip SRC for ct ffff88807340c480 (status bits 0x188) [ 368.232086][ T4260] nf_conntrack: normal packet for ffff8880781af200 [ 368.791942][ C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 15) [ 368.882212][ T4377] nf_conntrack: normal packet for ffff88807b329200 [ 368.889332][ T41] nf_conntrack: normal packet for ffff88807b328c00 [ 369.032722][ T1271] sd 0:0:1:0: cmd ffff888028705ee0 CDB: 0x2a [ 369.038769][ T1271] Added buffer head 170 to ffff888025f11800 [ 369.040786][ C0] virtqueue callback for ffff888141241a00 (ffffffff84767210) [ 369.045415][ T1271] sd 0:0:1:0: cmd ffff8880287062a0 CDB: 0x2a [ 369.052039][ C0] virtqueue interrupt with no work for ffff888141241800 [ 369.057993][ T1271] Added buffer head 48 to ffff888025f11800 [ 369.064896][ C0] virtqueue interrupt with no work for ffff888141241600 [ 369.071036][ T1271] sd 0:0:1:0: cmd ffff888028706660 CDB: 0x2a [ 369.077829][ T4344] Added buffer head 0 to ffff888141241a00 [ 369.083570][ T1271] Added buffer head 55 to ffff888025f11800 [ 369.083600][ T1271] sd 0:0:1:0: cmd ffff888028706a20 CDB: 0x2a [ 369.101132][ T1271] Added buffer head 166 to ffff888025f11800 [ 369.107094][ T1271] sd 0:0:1:0: cmd ffff888028706de0 CDB: 0x2a [ 369.112051][ T4344] nf_conntrack: normal packet for ffff88807340c900 [ 369.113092][ T1271] Added buffer head 173 to ffff888025f11800 [ 369.125502][ T1271] sd 0:0:1:0: cmd ffff8880287071a0 CDB: 0x2a [ 369.131494][ T1271] Added buffer head 62 to ffff888025f11800 [ 369.137353][ T1271] sd 0:0:1:0: cmd ffff888028707560 CDB: 0x2a [ 369.143361][ T1271] Added buffer head 147 to ffff888025f11800 [ 369.149276][ T1271] sd 0:0:1:0: cmd ffff888028707920 CDB: 0x2a [ 369.155295][ T1271] Added buffer head 58 to ffff888025f11800 [ 369.162420][ C1] virtqueue callback for ffff888025f11800 (ffffffff85445db0) [ 369.162461][ T53] sd 0:0:1:0: cmd ffff8880286e1f20 CDB: 0x2a [ 369.169808][ C1] sd 0:0:1:0: cmd ffff8880287071a0 response 0 status 0x0 sense_len 0 [ 369.183820][ C1] sd 0:0:1:0: cmd ffff888028706de0 response 0 status 0x0 sense_len 0 [ 369.191866][ C1] sd 0:0:1:0: cmd ffff8880287062a0 response 0 status 0x0 sense_len 0 [ 369.199907][ C1] sd 0:0:1:0: cmd ffff888028706a20 response 0 status 0x0 sense_len 0 [ 369.207946][ C1] sd 0:0:1:0: cmd ffff888028707560 response 0 status 0x0 sense_len 0 [ 369.215996][ C1] sd 0:0:1:0: cmd ffff888028706660 response 0 status 0x0 sense_len 0 [ 369.224047][ C1] sd 0:0:1:0: cmd ffff888028707920 response 0 status 0x0 sense_len 0 [ 369.232087][ C1] sd 0:0:1:0: cmd ffff888028705ee0 response 0 status 0x0 sense_len 0 [ 369.240126][ C1] No more buffers in queue [ 369.244549][ T53] Added buffer head 170 to ffff888025f11800 [ 369.253541][ T53] sd 0:0:1:0: cmd ffff8880286e22e0 CDB: 0x2a [ 369.259528][ T53] Added buffer head 58 to ffff888025f11800 [ 369.265413][ T53] sd 0:0:1:0: cmd ffff8880286e26a0 CDB: 0x2a [ 369.271396][ T53] Added buffer head 55 to ffff888025f11800 [ 369.278456][ T53] sd 0:0:1:0: cmd ffff8880286e2a60 CDB: 0x2a [ 369.284502][ T53] Added buffer head 147 to ffff888025f11800 [ 369.290420][ T53] sd 0:0:1:0: cmd ffff8880286e2e20 CDB: 0x2a [ 369.296854][ T53] Added buffer head 166 to ffff888025f11800 [ 369.302921][ T53] sd 0:0:1:0: cmd ffff8880286e31e0 CDB: 0x2a [ 369.308919][ T53] Added buffer head 48 to ffff888025f11800 [ 369.314807][ T53] sd 0:0:1:0: cmd ffff8880286e35a0 CDB: 0x2a [ 369.320796][ T53] Added buffer head 173 to ffff888025f11800 [ 369.326775][ T53] sd 0:0:1:0: cmd ffff8880286e3960 CDB: 0x2a [ 369.332792][ T53] Added buffer head 62 to ffff888025f11800 [ 369.338828][ T53] sd 0:0:1:0: cmd ffff8880286e3d20 CDB: 0x2a [ 369.339868][ C1] virtqueue callback for ffff888025f11800 (ffffffff85445db0) [ 369.344859][ T53] Added buffer head 134 to ffff888025f11800 [ 369.358051][ C1] sd 0:0:1:0: cmd ffff8880286e31e0 response 0 status 0x0 sense_len 0 [ 369.358269][ T53] sd 0:0:1:0: cmd ffff8880286e40e0 CDB: 0x2a [ 369.366109][ C1] sd 0:0:1:0: cmd ffff8880286e2e20 response 0 status 0x0 sense_len 0