last executing test programs: 14.340065099s ago: executing program 0 (id=534): socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2001ed00120013070000000000000000e00000"], 0x120}}, 0x8008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 13.119949135s ago: executing program 0 (id=538): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40400, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00') write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './bus'}, 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x4a01, 0x0) io_uring_setup(0x4aec, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x160) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(0x0, 0x4, 0x14000) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x2a, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r5, 0x10000201, 0x0, 0x81, 0x3, [0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r6}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122780000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 11.764003549s ago: executing program 1 (id=541): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x8000}, {0x2, 0x2}], 0xee00}, 0x18, 0x1) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf21963aaf523cb02) listen(r4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r6 = fsopen(&(0x7f0000000180)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r5], 0x2b) 11.342451874s ago: executing program 3 (id=544): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 10.959181883s ago: executing program 0 (id=546): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0x6e09, 0xb5, &(0x7f0000000240)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409ea706b665945461437464ad4a16f867ea0ff0e33665bb6378cd9b2957427ee7f35f80400c9b8242cc33be0bc4b1b4039e069ccf4c75f10653c0036fe1dbb9d7f1"}, {0x4, 0xd809, 0x0, 0x0}], 0x3}) syz_usb_control_io(r0, 0x0, 0x0) 9.631992333s ago: executing program 3 (id=549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 9.591892858s ago: executing program 1 (id=550): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x10, 0x4}, {0x3, 0x9}}}}, 0x11) 9.1922124s ago: executing program 1 (id=551): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0) 9.03076496s ago: executing program 3 (id=553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x400c4) 8.943942431s ago: executing program 1 (id=554): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x21182, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r8, 0x29, 0x43, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1, 0x0, 0x0) 8.166052431s ago: executing program 3 (id=556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 6.062418821s ago: executing program 0 (id=558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000001}) close(r1) 6.058029082s ago: executing program 1 (id=560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 6.057664332s ago: executing program 3 (id=561): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000800076c1a456c8da7c323a86e9d2548000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007ffd}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240)=0x7fe) mkdir(&(0x7f0000000140)='./control\x00', 0x191) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') recvmsg$unix(r5, &(0x7f0000000280)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000000c0)}, 0xef239436a02dc7d6) syz_open_dev$vim2m(0x0, 0x3, 0x2) getegid() lstat(&(0x7f000001de80)='./control\x00', 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 5.832042341s ago: executing program 4 (id=563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fd", 0xa4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.831863251s ago: executing program 0 (id=564): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 4.730318932s ago: executing program 4 (id=566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6eb3bb70}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.116840831s ago: executing program 4 (id=568): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.106239572s ago: executing program 0 (id=569): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0)={0x20, 0xb, 0x1, "04"}, 0x0, 0x0}) 2.267980478s ago: executing program 2 (id=571): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xf) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) 2.148653634s ago: executing program 4 (id=572): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.584513446s ago: executing program 4 (id=573): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000015) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d60000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a800", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.412071318s ago: executing program 2 (id=574): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x105, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x59455247}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x29, 0x1000, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) 1.357925365s ago: executing program 4 (id=575): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000074, 0x0, 0x2000006}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @local, 0x67c6}}, 0x401, 0xa, 0xb, 0x8, 0x7}, &(0x7f0000000040)=0x98) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) unshare(0x66000080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18) sendmmsg$inet(r9, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) gettid() sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r12, @ANYRESOCT=r11, @ANYBLOB="63ab9108551552d62fc08c84b078c29d1ad9dfd04030f68b5674dcba70", @ANYBLOB="5000000000000000080001000000000008000100010000000800010002000000080001000200000008000100020000000800010000000000080001000200"/80, @ANYRES8=r6], 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x20000004) 1.188980047s ago: executing program 2 (id=576): socket$kcm(0x10, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) bind$unix(r2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 1.108123317s ago: executing program 3 (id=577): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa38009050402100000fa000905820240"], 0x0) 971.832995ms ago: executing program 1 (id=578): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x2000, 0x0, 0x4) kexec_load(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x5, 0x81, 0xa6f, 0x14000, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x2, 0x2, 0x2, 0x0, @void, @value, @value=r3}, 0x50) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8001"], 0x50) syz_open_procfs$namespace(0x0, 0x0) flock(0xffffffffffffffff, 0x5) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$USBDEVFS_RESET(r5, 0x5514) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) 664.928454ms ago: executing program 2 (id=579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 181.098866ms ago: executing program 2 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000080600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x20000800) 0s ago: executing program 2 (id=581): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 48.694430][ T4170] cgroup: Unknown subsys name 'net' [ 48.845764][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.105625][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.558258][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.599283][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.616916][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.655781][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.699781][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.796573][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.803986][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.812377][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.823130][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.830359][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.837958][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.855539][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.862837][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.871717][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.884297][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.891615][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.899286][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.906394][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.913541][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.921499][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.960882][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.967955][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.976175][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.998331][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.005845][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.014260][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.036150][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.043359][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.051453][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.060541][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.069844][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.077307][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.085063][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.093895][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.108571][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.115810][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.123848][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.133146][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.156981][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.167812][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.202875][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.221627][ T4188] team0: Port device team_slave_0 added [ 52.229746][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.243355][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.265338][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.283887][ T4188] team0: Port device team_slave_1 added [ 52.298184][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.309751][ T4182] team0: Port device team_slave_0 added [ 52.331221][ T4181] team0: Port device team_slave_0 added [ 52.344130][ T4182] team0: Port device team_slave_1 added [ 52.352631][ T4184] team0: Port device team_slave_0 added [ 52.365717][ T4181] team0: Port device team_slave_1 added [ 52.385042][ T4184] team0: Port device team_slave_1 added [ 52.391888][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.398862][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.425065][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.446329][ T4183] team0: Port device team_slave_0 added [ 52.465570][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.472845][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.499334][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.519247][ T4183] team0: Port device team_slave_1 added [ 52.525719][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.532925][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.559055][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.587720][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.594873][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.621064][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.639374][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.646654][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.673236][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.684909][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.691981][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.718155][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.730632][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.737582][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.764039][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.791311][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.798268][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.825309][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.840747][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.847698][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.873758][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.903244][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.910191][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.936207][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.982371][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.989080][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.006358][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.013497][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.019998][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.027957][ T4182] Cannot create hsr debugfs directory [ 53.043905][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.051210][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.057779][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.065368][ T4184] Cannot create hsr debugfs directory [ 53.091233][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.097898][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.104858][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.112593][ T4181] Cannot create hsr debugfs directory [ 53.139976][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.147174][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.153905][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.161792][ T4183] Cannot create hsr debugfs directory [ 53.211140][ T4172] Bluetooth: hci4: command 0x0409 tx timeout [ 53.211140][ T2237] Bluetooth: hci3: command 0x0409 tx timeout [ 53.211670][ T2237] Bluetooth: hci1: command 0x0409 tx timeout [ 53.217300][ T4172] Bluetooth: hci0: command 0x0409 tx timeout [ 53.225002][ T2237] Bluetooth: hci2: command 0x0409 tx timeout [ 53.476417][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.493142][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.508731][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.517990][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.552936][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.571851][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.588182][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.597965][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.632777][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.642417][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.657604][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.667027][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.758823][ T4181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.789262][ T4181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.798739][ T4181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.814353][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.831835][ T4181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.859944][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.877516][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.887435][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.907349][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.916159][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.926280][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.935984][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.944919][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.952192][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.963020][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.973239][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.982311][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.994169][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.001280][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.014218][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.023737][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.035224][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.046722][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.066319][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.098561][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.109159][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.118721][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.128135][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.136705][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.145549][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.154311][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.162268][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.169936][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.186750][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.201759][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.209938][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.218168][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.227148][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.236130][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.246817][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.256147][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.263341][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.272556][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.305600][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.317285][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.334649][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.344007][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.353277][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.360586][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.368231][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.377218][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.385923][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.393150][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.401018][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.409549][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.418701][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.425824][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.434960][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.444104][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.452560][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.461150][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.469714][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.494482][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.503820][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.514427][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.526037][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.555126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.566101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.576138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.591150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.599879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.609109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.618559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.629372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.640994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.649506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.663199][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.672707][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.693901][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.703617][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.718275][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.736864][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.755056][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.766927][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.775834][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.785189][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.804040][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.812588][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.840917][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.852490][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.865156][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.873981][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.883971][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.916899][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.943136][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.952908][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.962227][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.969469][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.977597][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.989097][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.998815][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.005914][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.014500][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.022407][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.030089][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.051911][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.061080][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.093813][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.102877][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.118029][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.127174][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.134306][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.148741][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.157595][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.167042][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.174141][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.207262][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.219833][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.228966][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.239363][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.247740][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.256211][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.265392][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.276071][ T4188] device veth0_vlan entered promiscuous mode [ 55.291762][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 55.297907][ T4248] Bluetooth: hci4: command 0x041b tx timeout [ 55.305515][ T4247] Bluetooth: hci0: command 0x041b tx timeout [ 55.308063][ T4188] device veth1_vlan entered promiscuous mode [ 55.318177][ T4248] Bluetooth: hci3: command 0x041b tx timeout [ 55.318282][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 55.333260][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.341981][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.349769][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.357826][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.365744][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.373918][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.381749][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.390486][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.399159][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.407859][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.416856][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.425950][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.434913][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.451223][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.464608][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.475231][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.504072][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.516886][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.525895][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.555750][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.571979][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.581109][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.589307][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.597919][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.606274][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.614403][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.623441][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.636212][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.658755][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.669623][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.710962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.719650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.769379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.788317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.804704][ T4188] device veth0_macvtap entered promiscuous mode [ 55.817466][ T4188] device veth1_macvtap entered promiscuous mode [ 55.839355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.865451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.876526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.889303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.900109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.912594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.922176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.929936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.941026][ T4183] device veth0_vlan entered promiscuous mode [ 55.959921][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.974075][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.982605][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.992366][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.006365][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.026576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.036292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.045528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.054366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.070174][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.079356][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.088379][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.097371][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.109702][ T4183] device veth1_vlan entered promiscuous mode [ 56.156613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.165513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.176628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.184746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.192614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.200933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.209190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.217967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.230393][ T4182] device veth0_vlan entered promiscuous mode [ 56.259514][ T4182] device veth1_vlan entered promiscuous mode [ 56.270076][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.278596][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.287672][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.301253][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.324851][ T4183] device veth0_macvtap entered promiscuous mode [ 56.345807][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.357668][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.366395][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.380527][ T4183] device veth1_macvtap entered promiscuous mode [ 56.413534][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.421995][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.433581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.438738][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.449476][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.458469][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.467174][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.475202][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.483642][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.495326][ T4181] device veth0_vlan entered promiscuous mode [ 56.516435][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.528257][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.543070][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.557122][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.566763][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.577986][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.589202][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.600729][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.613995][ T4182] device veth0_macvtap entered promiscuous mode [ 56.624663][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.634427][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.644872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.659024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.668596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.677353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.685994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.694902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.704588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.713359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.721750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.729916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.740122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.748044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.759990][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.771039][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779997][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.789106][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.814046][ T4184] device veth0_vlan entered promiscuous mode [ 56.823100][ T4182] device veth1_macvtap entered promiscuous mode [ 56.852192][ T4181] device veth1_vlan entered promiscuous mode [ 56.912988][ T4184] device veth1_vlan entered promiscuous mode [ 56.937581][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.958979][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.969804][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.981804][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.994547][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.140144][ T1486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.140149][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.140194][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.155777][ T1486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.169506][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.194646][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.206411][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.219965][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.250465][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.259054][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.287200][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.303549][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.315738][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.329151][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.342446][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.373343][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 57.384524][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 57.405021][ T4181] device veth0_macvtap entered promiscuous mode [ 57.448577][ T4181] device veth1_macvtap entered promiscuous mode [ 57.519478][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.541206][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.555960][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.567968][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.580325][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.591115][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.616631][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.631998][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 57.638606][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 57.644778][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 57.652361][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.666228][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.675379][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.683877][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.694045][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.703747][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.713703][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.725163][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.735178][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.745665][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.756226][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.766967][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.779919][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.808100][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817264][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.830129][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.844174][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.903803][ T4184] device veth0_macvtap entered promiscuous mode [ 57.920997][ T4184] device veth1_macvtap entered promiscuous mode [ 57.941387][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.994982][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.211477][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.242330][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.290483][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.296004][ T4303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.301669][ T4181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.366628][ T4181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.383199][ T4181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.396915][ T4181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.519571][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.530738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.539720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.548778][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 58.557676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 58.566786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 58.576248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.585177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.594072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.603049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.612114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 58.627169][ T4303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.681852][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.693994][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.710952][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.721627][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.748950][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.762261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.772230][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.782879][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.794314][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.804696][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.815992][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.826765][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.838424][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.848410][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.859542][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.873088][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.887051][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.899604][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.908624][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.918033][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.927391][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.936178][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.974727][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.987865][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.996941][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.006005][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.050616][ T4292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.096342][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.105064][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.156376][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.182555][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.195143][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.214095][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.243693][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.271571][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.302475][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.304217][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.312524][ T4292] usb 2-1: Using ep0 maxpacket: 8 [ 59.319788][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.331000][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.345223][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.345645][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.363835][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.368260][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.383716][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.391847][ T730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.451214][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 59.457301][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 59.470811][ T4292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.667313][ T4323] mmap: syz.2.10 (4323) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 59.696802][ T4292] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 59.707062][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 59.716677][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 59.722818][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 59.729510][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 59.733506][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.073196][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 60.083771][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 60.091375][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.101433][ T4198] Workqueue: hci0 hci_rx_work [ 60.106151][ T4198] Call Trace: [ 60.109425][ T4198] [ 60.112351][ T4198] dump_stack_lvl+0x168/0x230 [ 60.117026][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 60.122662][ T4198] ? show_regs_print_info+0x20/0x20 [ 60.127955][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 60.133600][ T4198] sysfs_create_dir_ns+0x252/0x280 [ 60.138726][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 60.143418][ T4198] kobject_add_internal+0x662/0xd00 [ 60.148721][ T4198] kobject_add+0x152/0x210 [ 60.153139][ T4198] ? kobject_init+0x1d0/0x1d0 [ 60.157818][ T4198] ? klist_children_get+0x50/0x50 [ 60.162879][ T4198] ? get_device_parent+0x121/0x3f0 [ 60.167994][ T4198] device_add+0x483/0xfb0 [ 60.172364][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 60.177331][ T4198] le_conn_complete_evt+0xcbc/0x1590 [ 60.182823][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 60.187959][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 60.193185][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 60.198841][ T4198] hci_le_meta_evt+0x289/0x3b80 [ 60.203709][ T4198] ? hci_event_packet+0x36d/0x12f0 [ 60.208834][ T4198] ? hci_event_packet+0x2e2/0x12f0 [ 60.214066][ T4198] ? __lock_acquire+0x7c60/0x7c60 [ 60.219153][ T4198] ? mark_lock+0x94/0x320 [ 60.223499][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 60.229597][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 60.235340][ T4198] ? mark_lock+0x94/0x320 [ 60.239680][ T4198] ? mutex_unlock+0x10/0x10 [ 60.244201][ T4198] ? mark_lock+0x94/0x320 [ 60.248539][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 60.254540][ T4198] hci_event_packet+0xe05/0x12f0 [ 60.259583][ T4198] ? rcu_lock_release+0x20/0x20 [ 60.264453][ T4198] hci_rx_work+0x255/0xa10 [ 60.268892][ T4198] process_one_work+0x863/0x1000 [ 60.274278][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 60.279920][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 60.285216][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 60.290240][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 60.295614][ T4198] ? wq_worker_running+0x97/0x170 [ 60.300645][ T4198] worker_thread+0xaa8/0x12a0 [ 60.305416][ T4198] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 60.311313][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 60.316522][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 60.321724][ T4198] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 60.327642][ T4198] kthread+0x436/0x520 [ 60.331735][ T4198] ? rcu_lock_release+0x20/0x20 [ 60.336602][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 60.341220][ T4198] ret_from_fork+0x1f/0x30 [ 60.345671][ T4198] [ 60.358474][ T4198] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.372774][ T4198] Bluetooth: hci0: failed to register connection device [ 60.390387][ T4292] usb 2-1: Product: syz [ 60.394831][ T4292] usb 2-1: Manufacturer: syz [ 60.401004][ T4292] usb 2-1: SerialNumber: syz [ 60.416259][ T23] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 60.458796][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.479617][ T23] usb 1-1: config 0 descriptor?? [ 60.571563][ T4247] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.593792][ T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 60.731717][ T4292] usb 2-1: USB disconnect, device number 2 [ 60.979023][ T26] audit: type=1326 audit(1768444282.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779b047749 code=0x7fc00000 [ 61.630867][ T4247] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.959894][ T4247] usb 4-1: config 0 has no interface number 0 [ 62.310580][ T4247] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 62.337632][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.485709][ T4247] usb 4-1: Product: syz [ 62.639760][ T4247] usb 4-1: Manufacturer: syz [ 63.173753][ T4354] vivid-003: disconnect [ 63.397327][ T4352] vivid-003: reconnect [ 63.907961][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 63.929810][ T4247] usb 4-1: SerialNumber: syz [ 63.936792][ T4247] usb 4-1: config 0 descriptor?? [ 63.967232][ T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 63.970605][ T4247] usb 4-1: can't set config #0, error -71 [ 63.989127][ T4247] usb 4-1: USB disconnect, device number 2 [ 64.190675][ T4260] usb 1-1: USB disconnect, device number 2 [ 64.311004][ T4364] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.415708][ T4388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28'. [ 66.691060][ T4226] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.876971][ T4419] Zero length message leads to an empty skb [ 67.490331][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 67.780472][ T4226] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 67.817080][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.826393][ T4226] usb 4-1: Product: syz [ 67.831927][ T4226] usb 4-1: Manufacturer: syz [ 67.836543][ T4226] usb 4-1: SerialNumber: syz [ 67.851213][ T4226] usb 4-1: config 0 descriptor?? [ 68.647235][ T4226] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 68.672452][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.752091][ T4226] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 68.771300][ T4226] usb 4-1: media controller created [ 68.888762][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.102946][ T4460] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.45'. [ 69.146068][ T4226] zl10353_read_register: readreg error (reg=127, ret==0) [ 69.153433][ T4226] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 69.162088][ T4226] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 69.290491][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.560539][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 69.681026][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 69.697711][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.731924][ T4247] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.738821][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.760013][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.798558][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.906992][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.916480][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.031638][ T4247] usb 1-1: Using ep0 maxpacket: 32 [ 71.300743][ T4226] usb 4-1: USB disconnect, device number 3 [ 71.352631][ T4453] udc-core: couldn't find an available UDC or it's busy [ 71.352685][ T4226] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 71.359716][ T4453] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.386741][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388822][ T23] usb 5-1: usb_control_msg returned -32 [ 71.395213][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.410378][ T4247] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 71.436112][ T4247] usb 1-1: config 0 has no interface number 0 [ 71.440435][ T23] usbtmc 5-1:16.0: can't read capabilities [ 71.449254][ T4247] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 71.650711][ T4247] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 71.661077][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.669925][ T4247] usb 1-1: Product: syz [ 71.675297][ T4247] usb 1-1: Manufacturer: syz [ 71.680071][ T4247] usb 1-1: SerialNumber: syz [ 71.698216][ T4247] usb 1-1: config 0 descriptor?? [ 71.730832][ T4460] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.759497][ T4247] asix: probe of 1-1:0.191 failed with error -22 [ 71.780409][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.821030][ T4247] usb 1-1: USB disconnect, device number 3 [ 72.270858][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.282880][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.296052][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.320656][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.348569][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.401280][ T23] usb 3-1: config 0 descriptor?? [ 72.810851][ T4226] usb 5-1: USB disconnect, device number 2 [ 72.904972][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 73.085900][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 75.531608][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 75.655721][ T4247] usb 3-1: USB disconnect, device number 2 [ 76.494000][ T1108] cfg80211: failed to load regulatory.db [ 77.352537][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 77.523579][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 77.706269][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 77.811190][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 77.877305][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 77.903707][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 78.125690][ T4541] device syzkaller0 entered promiscuous mode [ 79.440467][ T1108] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 79.543330][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 79.895392][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 80.617140][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.710523][ T1108] usb 3-1: config 8 has an invalid interface number: 72 but max is 0 [ 81.056822][ T1108] usb 3-1: config 8 has an invalid descriptor of length 10, skipping remainder of the config [ 81.160467][ T1108] usb 3-1: config 8 has no interface number 0 [ 81.216027][ T1108] usb 3-1: config 8 interface 72 has no altsetting 0 [ 81.435991][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 82.541321][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.549749][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.680374][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 82.687309][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=a2.4c [ 82.833737][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.837211][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 82.904004][ T1108] usb 3-1: can't set config #8, error -71 [ 82.930604][ T1108] usb 3-1: USB disconnect, device number 3 [ 84.049475][ T4634] comedi comedi1: aio_iiro_16: a I/O base address must be specified [ 85.327589][ T4652] process 'syz.3.99' launched './file0' with NULL argv: empty string added [ 86.150776][ T4260] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.430290][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 86.551340][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.635485][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.702205][ T4260] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.750343][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.793846][ T4260] usb 3-1: config 0 descriptor?? [ 86.856870][ T4260] hub 3-1:0.0: USB hub found [ 87.840473][ T4260] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 88.386968][ T4260] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 88.771482][ T4260] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 88.901851][ T4260] usb 3-1: USB disconnect, device number 4 [ 88.934019][ T4702] ======================================================= [ 88.934019][ T4702] WARNING: The mand mount option has been deprecated and [ 88.934019][ T4702] and is ignored by this kernel. Remove the mand [ 88.934019][ T4702] option from the mount to silence this warning. [ 88.934019][ T4702] ======================================================= [ 89.033628][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 89.057583][ T4705] fido_id[4705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.103176][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 89.148464][ T4708] device syzkaller0 entered promiscuous mode [ 89.171299][ T4708] 0: reclassify loop, rule prio 0, protocol 800 [ 89.299224][ T26] audit: type=1326 audit(1768444311.213:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 89.400795][ T26] audit: type=1326 audit(1768444311.243:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 89.472197][ T26] audit: type=1326 audit(1768444311.243:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 89.705076][ T26] audit: type=1326 audit(1768444311.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 89.741286][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.003411][ T26] audit: type=1326 audit(1768444311.243:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.177826][ T26] audit: type=1326 audit(1768444311.243:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.282813][ T26] audit: type=1326 audit(1768444311.253:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.614942][ T26] audit: type=1326 audit(1768444311.253:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.701996][ T26] audit: type=1326 audit(1768444311.253:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.742981][ T26] audit: type=1326 audit(1768444311.253:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7ffc0000 [ 90.892271][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.924107][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.231665][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.329172][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.415776][ T4714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.940367][ T4763] fuse: Unknown parameter '0xffffffffffffffffS' [ 92.750514][ T2237] usb 4-1: USB disconnect, device number 4 [ 92.875760][ T4780] fuse: Bad value for 'fd' [ 92.965726][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 93.131490][ T4771] udevd[4771]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.390366][ T4742] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 96.409987][ T4826] batman_adv: batadv0: Adding interface: gretap1 [ 96.416618][ T4826] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.466423][ T4826] batman_adv: batadv0: Interface activated: gretap1 [ 97.629649][ T4742] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 97.663752][ T4742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.700282][ T4742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.738133][ T4742] usb 1-1: config 1 has no interface number 0 [ 97.766573][ T4742] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.991542][ T4742] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.012908][ T4742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.058672][ T4742] usb 1-1: Product: syz [ 98.081421][ T4742] usb 1-1: Manufacturer: syz [ 98.104063][ T4742] usb 1-1: SerialNumber: syz [ 98.263341][ T4742] cdc_wdm 1-1:1.128: skipping garbage [ 98.286671][ T4742] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 98.464366][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.491771][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.514720][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.549900][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.577653][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.593063][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.610333][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.622951][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.643820][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.663216][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.680416][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.713560][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.736802][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.755277][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.775863][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.790293][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.813224][ T4742] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 98.835195][ T4742] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 98.894442][ T21] usb 1-1: USB disconnect, device number 4 [ 99.059214][ T4858] fido_id[4858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.344391][ T4865] virtio-fs: tag not found [ 103.090550][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 105.781964][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.789545][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.803562][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 108.102471][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.143820][ T4890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.503705][ T4890] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.513036][ T4890] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.524598][ T4890] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.534445][ T4890] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.612336][ T4890] batman_adv: batadv0: Interface deactivated: gretap1 [ 108.626763][ T4894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.627000][ T4890] syz.3.171 (4890) used greatest stack depth: 20320 bytes left [ 108.634338][ T4894] IPv6: NLM_F_CREATE should be set when creating new route [ 108.694017][ T4742] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 108.873733][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.927353][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.990990][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.218973][ T4946] device bridge_slave_0 left promiscuous mode [ 109.300875][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.335668][ T4946] device bridge_slave_1 left promiscuous mode [ 109.344771][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.353041][ T4742] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 109.362454][ T4742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.370693][ T4742] usb 3-1: Product: syz [ 109.375025][ T4742] usb 3-1: Manufacturer: syz [ 109.379828][ T4742] usb 3-1: SerialNumber: syz [ 109.387331][ T4742] usb 3-1: config 0 descriptor?? [ 109.410960][ T4946] bond0: (slave bond_slave_0): Releasing backup interface [ 109.443134][ T4742] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 109.493162][ T4946] bond0: (slave bond_slave_1): Releasing backup interface [ 109.843483][ T4946] team0: Port device team_slave_0 removed [ 109.862018][ T4946] team0: Port device team_slave_1 removed [ 109.871706][ T4946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.879165][ T4946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.887831][ T4946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.890660][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.895516][ T4946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.310902][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.350322][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.561735][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.572478][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 110.580771][ T23] usb 5-1: Product: syz [ 110.586213][ T23] usb 5-1: Manufacturer: syz [ 110.593740][ T23] usb 5-1: SerialNumber: syz [ 110.750649][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 110.832149][ T2237] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 110.842275][ T2237] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.886891][ T23] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.001675][ T4742] gspca_stk1135: reg_w 0xf err -71 [ 111.010942][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.018336][ T4742] gspca_stk1135: Sensor write failed [ 111.028010][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.030545][ T1108] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.035036][ T4742] gspca_stk1135: Sensor write failed [ 111.049285][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.056653][ T4742] gspca_stk1135: Sensor read failed [ 111.062324][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.065122][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.068661][ T4742] gspca_stk1135: Sensor read failed [ 111.068672][ T4742] gspca_stk1135: Detected sensor type unknown (0x0) [ 111.097279][ T1108] usb 1-1: Product: syz [ 111.097556][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.106386][ T1108] usb 1-1: Manufacturer: syz [ 111.108466][ T4742] gspca_stk1135: Sensor read failed [ 111.118224][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.124961][ T4742] gspca_stk1135: Sensor read failed [ 111.125137][ T1108] usb 1-1: SerialNumber: syz [ 111.130925][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.142148][ T4742] gspca_stk1135: Sensor write failed [ 111.148320][ T4742] gspca_stk1135: serial bus timeout: status=0x00 [ 111.155201][ T4742] gspca_stk1135: Sensor write failed [ 111.160987][ T4742] stk1135: probe of 3-1:0.0 failed with error -71 [ 111.177202][ T1108] usb 1-1: config 0 descriptor?? [ 111.202504][ T4742] usb 3-1: USB disconnect, device number 5 [ 111.600810][ T1108] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.985974][ T4260] usb 5-1: USB disconnect, device number 3 [ 112.031748][ T4260] usblp0: removed [ 112.034688][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.044166][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.052421][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.071895][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.089697][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.106561][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.128259][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.137465][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.138611][ T5006] ipt_CLUSTERIP: Please specify destination IP [ 112.151673][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.160192][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.173592][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.183876][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.195406][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.205624][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.217028][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.227458][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.238813][ T4742] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 112.251356][ T4742] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 112.389151][ T5014] fido_id[5014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.410372][ T4742] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.550327][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.700346][ T4260] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.790452][ T4742] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 112.800189][ T4742] usb 4-1: config 0 has no interface number 0 [ 112.806746][ T4742] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 112.820646][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 112.829869][ T4742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.841993][ T4742] usb 4-1: config 0 descriptor?? [ 112.898496][ T4742] HFC-S_USB: probe of 4-1:0.170 failed with error -5 [ 112.960479][ T23] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.968857][ T23] usb 2-1: config 0 has no interface number 0 [ 113.093974][ T4742] usb 4-1: USB disconnect, device number 5 [ 113.120495][ T4260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.170719][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.180629][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.188805][ T23] usb 2-1: Product: syz [ 113.193685][ T23] usb 2-1: Manufacturer: syz [ 113.198283][ T23] usb 2-1: SerialNumber: syz [ 113.200764][ T4260] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1024 [ 113.214574][ T23] usb 2-1: config 0 descriptor?? [ 113.218353][ T4260] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.232975][ T4260] usb 5-1: config 1 interface 0 has no altsetting 0 [ 113.267070][ T23] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.393942][ T4260] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.404032][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.420322][ T4260] usb 5-1: Product: syz [ 113.425205][ T4260] usb 5-1: Manufacturer: syz [ 113.435383][ T4260] usb 5-1: SerialNumber: syz [ 113.471397][ T5018] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 113.489293][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.509041][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.590575][ T1108] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 113.606564][ T1108] usb 1-1: USB disconnect, device number 5 [ 113.830737][ T4260] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 113.854241][ T4260] usb 5-1: USB disconnect, device number 4 [ 113.901567][ T1108] usb 2-1: USB disconnect, device number 3 [ 113.910409][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 113.925974][ T1108] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.969850][ T1108] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 113.985912][ T1108] quatech2 2-1:0.51: device disconnected [ 114.378965][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.840538][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 114.943096][ T5060] capability: warning: `syz.1.223' uses deprecated v2 capabilities in a way that may be insecure [ 114.970979][ T23] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 114.980028][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.023147][ T23] usb 3-1: config 0 descriptor?? [ 115.097187][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 115.320913][ T23] gspca_vc032x: reg_r err -71 [ 115.437599][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.572469][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.589351][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.597013][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.638506][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.649901][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.657437][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.667089][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.687352][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.693944][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.699809][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.711756][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.723633][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.729037][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.736137][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.742223][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.747692][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.753501][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 115.758978][ T23] gspca_vc032x: Unknown sensor... [ 115.764501][ T23] vc032x: probe of 3-1:0.0 failed with error -22 [ 115.788472][ T23] usb 3-1: USB disconnect, device number 6 [ 116.414030][ T5091] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.465591][ T5093] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.673026][ T5097] binder: 5096:5097 ioctl c0306201 200000000080 returned -14 [ 119.229962][ T5125] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.637586][ T5130] overlayfs: failed to resolve './file2': -2 [ 123.920997][ T4260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.185613][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 124.350664][ T4260] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 124.373543][ T4260] usb 4-1: config 0 has no interface number 0 [ 124.400125][ T4260] usb 4-1: config 0 interface 12 has no altsetting 0 [ 124.590500][ T4260] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 124.607319][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.650762][ T4260] usb 4-1: Product: syz [ 124.654996][ T4260] usb 4-1: Manufacturer: syz [ 124.684658][ T4260] usb 4-1: SerialNumber: syz [ 124.701482][ T4260] usb 4-1: config 0 descriptor?? [ 124.820345][ T2237] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.160517][ T4292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.241517][ T2237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.351051][ T2237] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 125.380051][ T2237] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 125.395556][ T2237] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 125.416394][ T2237] usb 3-1: config 129 has no interface number 0 [ 125.435257][ T2237] usb 3-1: config 129 has no interface number 1 [ 125.452777][ T2237] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.460312][ T4292] usb 2-1: Using ep0 maxpacket: 8 [ 125.480391][ T2237] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 125.512756][ T2237] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 125.544257][ T2237] usb 3-1: config 129 interface 135 has no altsetting 0 [ 125.564077][ T2237] usb 3-1: config 129 interface 5 has no altsetting 0 [ 125.650609][ T4292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.690442][ T4260] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 125.709145][ T4260] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 125.730393][ T4292] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 125.738510][ T4292] usb 2-1: config 0 has no interface number 0 [ 125.750656][ T4260] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 125.788915][ T4292] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 125.803887][ T4260] f81534: probe of 4-1:0.12 failed with error -71 [ 125.819556][ T4260] usb 4-1: USB disconnect, device number 6 [ 125.825659][ T4292] usb 2-1: config 0 interface 88 has no altsetting 0 [ 125.830752][ T2237] usb 3-1: string descriptor 0 read error: -22 [ 125.838609][ T2237] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 125.861848][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 125.876622][ T2237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.965205][ T2237] usb 3-1: MIDIStreaming interface descriptor not found [ 126.103655][ T4292] usb 2-1: language id specifier not provided by device, defaulting to English [ 126.228243][ T4742] usb 3-1: USB disconnect, device number 7 [ 126.360340][ T2237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.710451][ T4292] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 126.740401][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 126.760549][ T2237] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.814067][ T4292] usb 2-1: Product: syz [ 126.834986][ T4292] usb 2-1: config 0 descriptor?? [ 126.971189][ T2237] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 127.022422][ T2237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.033798][ T2237] usb 4-1: Product: syz [ 127.038118][ T2237] usb 4-1: Manufacturer: syz [ 127.064177][ T2237] usb 4-1: SerialNumber: syz [ 127.172244][ T4292] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input6 [ 127.340640][ T4292] usb 2-1: USB disconnect, device number 4 [ 127.347489][ T2237] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 128.258943][ T4742] usb 4-1: USB disconnect, device number 7 [ 128.295111][ T4742] usblp0: removed [ 129.303007][ T5260] ptrace attach of "./syz-executor exec"[5265] was attempted by "./syz-executor exec"[5260] [ 129.680561][ T2237] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 130.051213][ T2237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.310363][ T2237] usb 5-1: config 0 has no interfaces? [ 130.470708][ T2237] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 131.210510][ T2237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.248933][ T2237] usb 5-1: Product: syz [ 131.278169][ T2237] usb 5-1: Manufacturer: syz [ 131.306960][ T2237] usb 5-1: SerialNumber: syz [ 131.414574][ T2237] usb 5-1: config 0 descriptor?? [ 133.119397][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127430][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.198225][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 134.290626][ T5311] 8021q: VLANs not supported on nlmon0 [ 134.296302][ T5314] device bridge_slave_0 left promiscuous mode [ 134.355192][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.069521][ T5314] device bridge_slave_1 left promiscuous mode [ 135.104129][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.116118][ T5314] bond0: (slave bond_slave_0): Releasing backup interface [ 135.133062][ T5314] bond0: (slave bond_slave_1): Releasing backup interface [ 135.181708][ T5314] team0: Port device team_slave_0 removed [ 135.228276][ T5314] team0: Port device team_slave_1 removed [ 135.237938][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.257090][ T5314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.276418][ T5314] batman_adv: batadv0: Removing interface: gretap1 [ 135.336025][ T5315] team0: Mode changed to "broadcast" [ 136.671152][ T7] usb 5-1: USB disconnect, device number 5 [ 136.718908][ T4260] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.748992][ T4260] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.865785][ T5350] device geneve2 entered promiscuous mode [ 136.999628][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 137.352438][ T5346] hid-generic 0000:0000:0000.0006: pid 5346 passed too short report [ 138.162136][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.412704][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 138.693444][ T7] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 138.706736][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.727688][ T7] usb 5-1: Product: syz [ 138.741052][ T7] usb 5-1: Manufacturer: syz [ 138.752910][ T7] usb 5-1: SerialNumber: syz [ 138.764457][ T7] usb 5-1: config 0 descriptor?? [ 138.814126][ T7] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 139.927201][ T5416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.329'. [ 140.350568][ T7] gspca_topro: Sensor cx0342 [ 140.596088][ T4260] usb 5-1: USB disconnect, device number 6 [ 140.643055][ T5440] fuse: Unknown parameter 'f’' [ 140.813030][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 140.933009][ T4292] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.157749][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 141.180989][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.191172][ T4292] usb 1-1: Using ep0 maxpacket: 8 [ 141.209235][ T7] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.290069][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.313354][ T7] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 141.322985][ T4292] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 141.336954][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.377778][ T7] usb 2-1: config 0 descriptor?? [ 141.432618][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.490423][ T4292] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.514829][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.564533][ T4292] usb 1-1: Product: syz [ 141.569960][ T4292] usb 1-1: Manufacturer: syz [ 141.581631][ T4292] usb 1-1: SerialNumber: syz [ 141.611702][ T4292] usb 1-1: config 0 descriptor?? [ 141.692308][ T4292] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 141.708354][ T4292] usb 1-1: setting power ON [ 141.724152][ T4292] dvb-usb: bulk message failed: -22 (2/0) [ 141.756791][ T4292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.810755][ T4292] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 141.834541][ T4292] usb 1-1: media controller created [ 141.882245][ T4292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.898662][ T5443] dvb-usb: bulk message failed: -22 (3/0) [ 141.908839][ T5443] dvb-usb: bulk message failed: -22 (3/0) [ 141.944868][ T4292] usb 1-1: selecting invalid altsetting 6 [ 141.977403][ T4292] usb 1-1: digital interface selection failed (-22) [ 141.992221][ T4292] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 142.877183][ T4292] usb 1-1: setting power OFF [ 142.942176][ T4292] dvb-usb: bulk message failed: -22 (2/0) [ 142.953172][ T4292] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 142.966399][ T4292] (NULL device *): no alternate interface [ 142.986998][ T4247] usb 2-1: USB disconnect, device number 5 [ 143.054696][ T4292] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.591735][ T5493] lo speed is unknown, defaulting to 1000 [ 143.597878][ T5493] lo speed is unknown, defaulting to 1000 [ 143.605285][ T5493] lo speed is unknown, defaulting to 1000 [ 143.614034][ T5493] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.624683][ T5493] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 143.767054][ T5493] lo speed is unknown, defaulting to 1000 [ 143.774182][ T5493] lo speed is unknown, defaulting to 1000 [ 143.780904][ T5493] lo speed is unknown, defaulting to 1000 [ 143.787505][ T5493] lo speed is unknown, defaulting to 1000 [ 143.793984][ T5493] lo speed is unknown, defaulting to 1000 [ 144.372320][ T4292] usb 1-1: USB disconnect, device number 6 [ 145.319064][ T5512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.294110][ T5554] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 149.655175][ T5567] program syz.4.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.922148][ T5577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.091049][ T5601] comedi comedi1: Minor 0 could not be opened [ 155.494678][ T4248] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.589628][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 155.740384][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 155.860519][ T4248] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.634642][ T4248] usb 4-1: config 0 has no interface number 0 [ 156.883302][ T4248] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 157.180573][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.203599][ T4248] usb 4-1: Product: syz [ 157.216283][ T4248] usb 4-1: Manufacturer: syz [ 157.255863][ T4248] usb 4-1: SerialNumber: syz [ 157.335556][ T4248] usb 4-1: config 0 descriptor?? [ 157.425697][ T4248] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 157.473434][ T4248] usb 4-1: selecting invalid altsetting 1 [ 157.502165][ T4248] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 157.542292][ T21] libceph: connect (1)[c::]:6789 error -101 [ 157.553772][ T5662] ceph: No mds server is up or the cluster is laggy [ 157.669465][ T4248] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.681749][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 158.765198][ T5639] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 158.774855][ T4248] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 158.791024][ T4248] usb 4-1: media controller created [ 158.860504][ T4248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.460457][ T4248] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 159.576520][ T4248] zl10353_read_register: readreg error (reg=127, ret==-71) [ 159.628041][ T4248] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 159.741327][ T4248] usb 4-1: USB disconnect, device number 8 [ 162.410702][ T4247] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.771031][ T4247] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.829251][ T4247] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.110920][ T4247] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.164395][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.275659][ T4247] usb 5-1: Product: syz [ 163.375592][ T4247] usb 5-1: Manufacturer: syz [ 163.447198][ T4247] usb 5-1: SerialNumber: syz [ 164.890961][ T4247] usb 5-1: invalid UAC_HEADER (v1) [ 165.011856][ T4247] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 165.026345][ T4247] usb 5-1: USB disconnect, device number 7 [ 165.251042][ T4770] udevd[4770]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.818631][ T5774] loop9: detected capacity change from 0 to 8 [ 166.844123][ T5774] Dev loop9: unable to read RDB block 8 [ 166.850341][ T5774] loop9: unable to read partition table [ 166.856780][ T5774] loop9: partition table beyond EOD, truncated [ 166.886570][ T5774] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 168.568547][ T5794] kernel read not supported for file /eth0 (pid: 5794 comm: syz.4.420) [ 168.648183][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 168.648198][ T26] audit: type=1800 audit(1768444390.563:46): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.420" name="eth0" dev="mqueue" ino=37480 res=0 errno=0 [ 169.694099][ T4248] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 169.714662][ T4248] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.745101][ T5802] affs: No valid root block on device nullb0 [ 172.434956][ T5831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 175.346929][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 175.710383][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.770471][ T4742] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 175.850494][ T2237] Bluetooth: hci4: command 0x0406 tx timeout [ 175.886071][ T2237] Bluetooth: hci3: command 0x0406 tx timeout [ 175.920426][ T2237] Bluetooth: hci1: command 0x0406 tx timeout [ 175.926648][ T2237] Bluetooth: hci0: command 0x0406 tx timeout [ 175.970363][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 176.100516][ T7] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.149262][ T7] usb 4-1: config 0 has no interface number 0 [ 176.150414][ T4742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.230597][ T4742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.304540][ T4742] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.310721][ T7] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.347713][ T4742] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.460159][ T4742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.468611][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.482971][ T7] usb 4-1: Product: syz [ 176.487292][ T7] usb 4-1: Manufacturer: syz [ 176.500367][ T7] usb 4-1: SerialNumber: syz [ 176.503866][ T4742] usb 3-1: config 0 descriptor?? [ 176.538692][ T7] usb 4-1: config 0 descriptor?? [ 176.613437][ T7] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.202033][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 177.281462][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 177.603597][ T21] usb 4-1: USB disconnect, device number 9 [ 177.610437][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 177.646743][ T21] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.660837][ T4742] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 177.683517][ T4742] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 177.698744][ T21] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.736016][ T21] quatech2 4-1:0.51: device disconnected [ 178.228781][ T4248] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 178.485690][ T1108] usb 3-1: USB disconnect, device number 8 [ 178.637789][ T5901] fido_id[5901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 178.657821][ T5910] misc userio: Invalid payload size [ 178.702549][ T5910] misc userio: No port type given on /dev/userio [ 178.780939][ T4248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.214348][ T4248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.260706][ T4248] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 179.300399][ T4248] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 179.367996][ T5927] netlink: 'syz.4.460': attribute type 4 has an invalid length. [ 180.207480][ T4248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.218982][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.227085][ T4248] usb 1-1: Product: syz [ 180.240365][ T4248] usb 1-1: Manufacturer: syz [ 180.246528][ T4248] usb 1-1: SerialNumber: syz [ 180.290662][ T5898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.410485][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.537417][ T5898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.566971][ T5898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.788852][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.800175][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.833571][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 180.842840][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.876006][ T21] usb 2-1: config 0 descriptor?? [ 180.910349][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.506575][ T5953] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.522696][ T5953] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.562693][ T21] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 5/7 [ 181.571252][ T21] pyra 0003:1E7D:2CF6.0009: parse failed [ 181.577093][ T21] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -22 [ 181.730969][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.741327][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 181.755510][ T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 181.765605][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.770813][ T21] usb 2-1: USB disconnect, device number 6 [ 181.776420][ T7] usb 5-1: config 0 descriptor?? [ 181.835405][ T4248] cdc_ncm 1-1:1.0: failed to get mac address [ 181.860490][ T4248] cdc_ncm 1-1:1.0: bind() failure [ 182.696577][ T4248] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 182.720505][ T4248] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 182.748770][ T4248] usbtest: probe of 1-1:1.1 failed with error -71 [ 182.767137][ T4248] usb 1-1: USB disconnect, device number 7 [ 182.862606][ T7] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 183.066643][ T7] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 183.080491][ T7] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 183.103537][ T7] kovaplus: probe of 0003:1E7D:2D50.000A failed with error -71 [ 183.255506][ T7] usb 5-1: USB disconnect, device number 8 [ 183.357960][ T5979] fido_id[5979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 184.456411][ T5986] syz.4.481 sent an empty control message without MSG_MORE. [ 184.840332][ T4248] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.810571][ T4248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.871461][ T4248] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.936801][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.957566][ T4248] usb 4-1: config 0 descriptor?? [ 186.002515][ T4248] pwc: Askey VC010 type 2 USB webcam detected. [ 186.260339][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.624660][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.711622][ T4248] pwc: recv_control_msg error -71 req 02 val 2700 [ 186.740476][ T4248] pwc: recv_control_msg error -71 req 02 val 2c00 [ 186.770462][ T4248] pwc: recv_control_msg error -71 req 04 val 1000 [ 186.790550][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.800955][ T4248] pwc: recv_control_msg error -71 req 04 val 1300 [ 186.812976][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.827581][ T21] usb 3-1: Product: syz [ 186.832374][ T4248] pwc: recv_control_msg error -71 req 04 val 1400 [ 186.844940][ T21] usb 3-1: Manufacturer: syz [ 186.849733][ T21] usb 3-1: SerialNumber: syz [ 186.860496][ T4248] pwc: recv_control_msg error -71 req 02 val 2000 [ 186.890590][ T4248] pwc: recv_control_msg error -71 req 02 val 2100 [ 186.923555][ T21] usb 3-1: config 0 descriptor?? [ 186.937071][ T4248] pwc: recv_control_msg error -71 req 04 val 1500 [ 186.990592][ T4248] pwc: recv_control_msg error -71 req 02 val 2500 [ 187.009571][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 187.021228][ T4248] pwc: recv_control_msg error -71 req 02 val 2400 [ 187.058379][ T4248] pwc: recv_control_msg error -71 req 02 val 2600 [ 187.140575][ T4248] pwc: recv_control_msg error -71 req 02 val 2900 [ 187.160689][ T4248] pwc: recv_control_msg error -71 req 02 val 2800 [ 187.250803][ T4248] pwc: recv_control_msg error -71 req 04 val 1100 [ 187.370696][ T4248] pwc: recv_control_msg error -71 req 04 val 1200 [ 187.592802][ T4248] pwc: Registered as video103. [ 187.598455][ T4248] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 187.657937][ T4248] usb 4-1: USB disconnect, device number 10 [ 187.920488][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.090398][ T4742] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.170454][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 188.340343][ T4742] usb 2-1: Using ep0 maxpacket: 16 [ 188.450535][ T21] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 188.460487][ T4742] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.471163][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.493053][ T4742] usb 2-1: config 0 has no interfaces? [ 188.510523][ T21] usb 5-1: Product: syz [ 188.514908][ T21] usb 5-1: Manufacturer: syz [ 188.519578][ T21] usb 5-1: SerialNumber: syz [ 188.660515][ T4742] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 188.675901][ T4742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.703546][ T4742] usb 2-1: Product: syz [ 188.707815][ T4742] usb 2-1: Manufacturer: syz [ 188.712831][ T4742] usb 2-1: SerialNumber: syz [ 189.236601][ T4742] usb 2-1: config 0 descriptor?? [ 189.912613][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 190.043333][ T21] usb 5-1: USB disconnect, device number 9 [ 190.300521][ T6064] udc-core: couldn't find an available UDC or it's busy [ 190.359950][ T6064] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.460547][ T6064] syz.1.500 uses obsolete (PF_INET,SOCK_PACKET) [ 192.413378][ T7] usb 2-1: USB disconnect, device number 7 [ 192.560356][ T6013] usb 3-1: 0:0: usb_set_interface failed (-110) [ 192.626048][ T4247] usb 3-1: USB disconnect, device number 9 [ 192.733227][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'. [ 194.230257][ C0] sched: RT throttling activated [ 194.288795][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298369][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.896115][ T6092] ODEBUG: Out of memory. ODEBUG disabled [ 195.045972][ T4247] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.485427][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 195.497663][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 195.580503][ T4292] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.821388][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.140469][ T4247] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.150619][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.164256][ T4247] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.510387][ T4247] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 197.531649][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.735443][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 197.747978][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 197.776892][ T4247] usb 3-1: Product: syz [ 198.368124][ T4247] usb 3-1: config 0 descriptor?? [ 198.396454][ T4247] usb 3-1: can't set config #0, error -71 [ 198.405154][ T4247] usb 3-1: USB disconnect, device number 10 [ 201.450474][ T4247] Bluetooth: hci2: command 0x0406 tx timeout [ 202.206388][ T6157] comedi comedi1: Minor 0 could not be opened [ 203.228800][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.245632][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.254010][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.007111][ T6188] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.095153][ T6188] overlayfs: missing 'lowerdir' [ 206.868131][ T6200] hfs: can't find a HFS filesystem on dev nullb0 [ 206.970298][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.118716][ T4197] Bluetooth: Wrong link type (-22) [ 207.210390][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 207.289229][ T26] audit: type=1326 audit(1768444429.203:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 207.330633][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 207.370375][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.379444][ T26] audit: type=1326 audit(1768444429.203:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 207.419097][ T23] usb 1-1: config 0 descriptor?? [ 207.490394][ T26] audit: type=1326 audit(1768444429.203:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 207.607008][ T26] audit: type=1326 audit(1768444429.203:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 207.610345][ T2237] Bluetooth: hci4: command 0x0405 tx timeout [ 207.778371][ T26] audit: type=1326 audit(1768444429.203:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 207.805933][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 207.991163][ T26] audit: type=1326 audit(1768444429.203:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 208.067738][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.133215][ T26] audit: type=1326 audit(1768444429.203:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 208.311871][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 208.421165][ T23] usb 1-1: media controller created [ 208.557649][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.560370][ T26] audit: type=1326 audit(1768444429.203:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 210.610402][ T23] DVB: Unable to find symbol dib7000p_attach() [ 210.616613][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 210.718686][ T26] audit: type=1326 audit(1768444429.203:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 210.830368][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 210.836477][ T23] Registered IR keymap rc-empty [ 210.870496][ T23] dvb-usb: could not initialize remote control. [ 210.874425][ T26] audit: type=1326 audit(1768444429.203:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b1c7749 code=0x7fc00000 [ 211.022985][ T23] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 211.188815][ T23] usb 1-1: USB disconnect, device number 8 [ 211.260078][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 211.278706][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 211.290550][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 211.715779][ T6262] infiniband syz2: set active [ 211.721069][ T6262] infiniband syz2: added vxcan1 [ 211.922215][ T6262] RDS/IB: syz2: added [ 211.927378][ T6262] smc: adding ib device syz2 with port count 1 [ 211.933906][ T6262] smc: ib device syz2 port 1 has pnetid [ 211.957988][ T23] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 212.008187][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 212.016519][ T21] vxcan1 speed is unknown, defaulting to 1000 [ 212.070493][ T2237] vxcan1 speed is unknown, defaulting to 1000 [ 212.079973][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 212.143619][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 212.195188][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 212.246789][ T6262] vxcan1 speed is unknown, defaulting to 1000 [ 214.100328][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.116057][ T6276] delete_channel: no stack [ 214.350387][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 214.490394][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.811216][ T23] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 215.001215][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.009477][ T23] usb 1-1: Product: syz [ 215.019597][ T23] usb 1-1: Manufacturer: syz [ 215.029745][ T23] usb 1-1: SerialNumber: syz [ 215.094059][ T23] usb 1-1: config 0 descriptor?? [ 215.148428][ T6293] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 215.172369][ T23] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 215.390458][ T6297] kvm [6296]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000074 data 0x2000006 [ 215.545575][ T6297] lo speed is unknown, defaulting to 1000 [ 215.564494][ T6297] vxcan1 speed is unknown, defaulting to 1000 [ 215.790356][ T2237] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.899036][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 215.899050][ T26] audit: type=1326 audit(1768444437.813:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 215.927440][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.000364][ T26] audit: type=1326 audit(1768444437.853:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 216.032128][ T26] audit: type=1326 audit(1768444437.853:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 216.060052][ T26] audit: type=1326 audit(1768444437.853:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 216.113065][ T2237] usb 4-1: Using ep0 maxpacket: 16 [ 216.118368][ T26] audit: type=1326 audit(1768444437.943:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 216.143733][ T26] audit: type=1326 audit(1768444437.943:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.1.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa05e8749 code=0x7ffc0000 [ 216.223659][ T26] audit: type=1326 audit(1768444438.123:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7fc00000 [ 216.270474][ T2237] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 216.293237][ T2237] usb 4-1: config 1 has no interface number 0 [ 216.319862][ T26] audit: type=1326 audit(1768444438.123:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd01e7749 code=0x7fc00000 [ 216.330102][ T2237] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.380574][ T7] usb 5-1: config 128 has no interfaces? [ 216.386498][ T26] audit: type=1326 audit(1768444438.123:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7fc00000 [ 216.400279][ T2237] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.431757][ T2237] usb 4-1: config 1 interface 105 has no altsetting 0 [ 216.458117][ T26] audit: type=1326 audit(1768444438.123:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01e7749 code=0x7fc00000 [ 216.540556][ T7] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 216.600401][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.640437][ T2237] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 216.653979][ T7] usb 5-1: Product: syz [ 216.669985][ T7] usb 5-1: Manufacturer: syz [ 216.670089][ T2237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.679999][ T7] usb 5-1: SerialNumber: syz [ 216.697992][ T2237] usb 4-1: Product: syz [ 216.709533][ T2237] usb 4-1: Manufacturer: syz [ 216.719075][ T2237] usb 4-1: SerialNumber: syz [ 216.723950][ T23] gspca_sunplus: reg_w_1 err -71 [ 216.729075][ T23] sunplus: probe of 1-1:0.0 failed with error -71 [ 216.760576][ T6302] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.770673][ T23] usb 1-1: USB disconnect, device number 9 [ 216.776727][ T6302] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.802189][ T6321] [ 216.804613][ T6321] ====================================================== [ 216.811617][ T6321] WARNING: possible circular locking dependency detected [ 216.818833][ T6321] syzkaller #0 Not tainted [ 216.823270][ T6321] ------------------------------------------------------ [ 216.830273][ T6321] syz.2.581/6321 is trying to acquire lock: [ 216.836153][ T6321] ffff888025dbc120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 216.845582][ T6321] [ 216.845582][ T6321] but task is already holding lock: [ 216.852934][ T6321] ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 216.861261][ T6321] [ 216.861261][ T6321] which lock already depends on the new lock. [ 216.861261][ T6321] [ 216.871653][ T6321] [ 216.871653][ T6321] the existing dependency chain (in reverse order) is: [ 216.880812][ T6321] [ 216.880812][ T6321] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 216.888000][ T6321] __mutex_lock_common+0x1eb/0x2390 [ 216.893708][ T6321] mutex_lock_nested+0x17/0x20 [ 216.898977][ T6321] ax25_setsockopt+0x830/0xa40 [ 216.904334][ T6321] __sys_setsockopt+0x2bf/0x3d0 [ 216.909692][ T6321] __x64_sys_setsockopt+0xb1/0xc0 [ 216.915352][ T6321] do_syscall_64+0x4c/0xa0 [ 216.920281][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.926688][ T6321] [ 216.926688][ T6321] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 216.934313][ T6321] __lock_acquire+0x2c33/0x7c60 [ 216.939676][ T6321] lock_acquire+0x197/0x3f0 [ 216.944773][ T6321] lock_sock_nested+0x44/0x100 [ 216.950068][ T6321] ax25_device_event+0x217/0x4f0 [ 216.955611][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 216.961776][ T6321] __dev_notify_flags+0x178/0x2d0 [ 216.967314][ T6321] dev_change_flags+0xe3/0x1a0 [ 216.972696][ T6321] dev_ifsioc+0x147/0xe70 [ 216.977545][ T6321] dev_ioctl+0x55f/0xe50 [ 216.982296][ T6321] sock_do_ioctl+0x222/0x2f0 [ 216.987389][ T6321] sock_ioctl+0x4ed/0x6e0 [ 216.992227][ T6321] __se_sys_ioctl+0xfa/0x170 [ 216.997324][ T6321] do_syscall_64+0x4c/0xa0 [ 217.002253][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.008676][ T6321] [ 217.008676][ T6321] other info that might help us debug this: [ 217.008676][ T6321] [ 217.019148][ T6321] Possible unsafe locking scenario: [ 217.019148][ T6321] [ 217.026694][ T6321] CPU0 CPU1 [ 217.032046][ T6321] ---- ---- [ 217.037391][ T6321] lock(rtnl_mutex); [ 217.041355][ T6321] lock(sk_lock-AF_AX25); [ 217.048281][ T6321] lock(rtnl_mutex); [ 217.054766][ T6321] lock(sk_lock-AF_AX25); [ 217.059162][ T6321] [ 217.059162][ T6321] *** DEADLOCK *** [ 217.059162][ T6321] [ 217.067295][ T6321] 1 lock held by syz.2.581/6321: [ 217.072221][ T6321] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 217.080988][ T6321] [ 217.080988][ T6321] stack backtrace: [ 217.086864][ T6321] CPU: 1 PID: 6321 Comm: syz.2.581 Not tainted syzkaller #0 [ 217.094135][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.104345][ T6321] Call Trace: [ 217.107646][ T6321] [ 217.110572][ T6321] dump_stack_lvl+0x168/0x230 [ 217.115245][ T6321] ? load_image+0x3b0/0x3b0 [ 217.119739][ T6321] ? show_regs_print_info+0x20/0x20 [ 217.124936][ T6321] ? print_circular_bug+0x12b/0x1a0 [ 217.130119][ T6321] check_noncircular+0x274/0x310 [ 217.135036][ T6321] ? add_chain_block+0x940/0x940 [ 217.139953][ T6321] ? lockdep_lock+0xdc/0x1e0 [ 217.144613][ T6321] ? lockdep_unlock+0x134/0x2d0 [ 217.149447][ T6321] ? mark_lock+0x94/0x320 [ 217.153859][ T6321] __lock_acquire+0x2c33/0x7c60 [ 217.158810][ T6321] ? lock_chain_count+0x20/0x20 [ 217.163639][ T6321] ? rose_device_event+0x5ec/0x680 [ 217.168732][ T6321] ? verify_lock_unused+0x140/0x140 [ 217.173915][ T6321] ? verify_lock_unused+0x140/0x140 [ 217.179100][ T6321] ? preempt_schedule+0xa7/0xb0 [ 217.184034][ T6321] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 217.190015][ T6321] ? mark_lock+0x94/0x320 [ 217.194330][ T6321] lock_acquire+0x197/0x3f0 [ 217.198818][ T6321] ? ax25_device_event+0x217/0x4f0 [ 217.203916][ T6321] ? lock_chain_count+0x20/0x20 [ 217.208754][ T6321] ? read_lock_is_recursive+0x10/0x10 [ 217.214200][ T6321] ? __local_bh_enable_ip+0x12a/0x1b0 [ 217.219563][ T6321] ? lockdep_hardirqs_on+0x94/0x140 [ 217.224762][ T6321] ? __local_bh_enable_ip+0x12a/0x1b0 [ 217.230126][ T6321] ? _local_bh_enable+0xa0/0xa0 [ 217.234970][ T6321] lock_sock_nested+0x44/0x100 [ 217.239726][ T6321] ? ax25_device_event+0x217/0x4f0 [ 217.244830][ T6321] ax25_device_event+0x217/0x4f0 [ 217.249763][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 217.255210][ T6321] __dev_notify_flags+0x178/0x2d0 [ 217.260229][ T6321] ? __dev_change_flags+0x6a0/0x6a0 [ 217.265430][ T6321] ? __dev_change_flags+0x4bb/0x6a0 [ 217.270612][ T6321] ? dev_get_flags+0x1c0/0x1c0 [ 217.275389][ T6321] ? dev_ioctl+0x54e/0xe50 [ 217.279900][ T6321] ? dev_ioctl+0x54e/0xe50 [ 217.284316][ T6321] dev_change_flags+0xe3/0x1a0 [ 217.289101][ T6321] dev_ifsioc+0x147/0xe70 [ 217.293424][ T6321] ? dev_ioctl+0xe50/0xe50 [ 217.297969][ T6321] ? apparmor_capable+0x12c/0x190 [ 217.303018][ T6321] ? full_name_hash+0x8e/0xe0 [ 217.307692][ T6321] dev_ioctl+0x55f/0xe50 [ 217.311927][ T6321] ? _copy_from_user+0x111/0x170 [ 217.316864][ T6321] sock_do_ioctl+0x222/0x2f0 [ 217.321450][ T6321] ? sock_show_fdinfo+0xb0/0xb0 [ 217.326401][ T6321] sock_ioctl+0x4ed/0x6e0 [ 217.330724][ T6321] ? sock_poll+0x3f0/0x3f0 [ 217.335266][ T6321] ? bpf_lsm_file_ioctl+0x5/0x10 [ 217.340195][ T6321] ? security_file_ioctl+0x7c/0xa0 [ 217.345309][ T6321] ? sock_poll+0x3f0/0x3f0 [ 217.349732][ T6321] __se_sys_ioctl+0xfa/0x170 [ 217.354341][ T6321] do_syscall_64+0x4c/0xa0 [ 217.358770][ T6321] ? clear_bhb_loop+0x30/0x80 [ 217.363524][ T6321] ? clear_bhb_loop+0x30/0x80 [ 217.368207][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.374100][ T6321] RIP: 0033:0x7fccd01e7749 [ 217.378512][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.398274][ T6321] RSP: 002b:00007fccce44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.406673][ T6321] RAX: ffffffffffffffda RBX: 00007fccd043dfa0 RCX: 00007fccd01e7749 [ 217.414627][ T6321] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 217.422585][ T6321] RBP: 00007fccd026bf91 R08: 0000000000000000 R09: 0000000000000000 [ 217.430570][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.438539][ T6321] R13: 00007fccd043e038 R14: 00007fccd043dfa0 R15: 00007ffc8318f1a8 [ 217.446599][ T6321] [ 217.511548][ T6321] ================================================================== [ 217.519736][ T6321] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 217.527468][ T6321] Write of size 4 at addr ffff888022d008b8 by task syz.2.581/6321 [ 217.535275][ T6321] [ 217.537598][ T6321] CPU: 1 PID: 6321 Comm: syz.2.581 Not tainted syzkaller #0 [ 217.544947][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.555005][ T6321] Call Trace: [ 217.558287][ T6321] [ 217.561217][ T6321] dump_stack_lvl+0x168/0x230 [ 217.565906][ T6321] ? show_regs_print_info+0x20/0x20 [ 217.571120][ T6321] ? load_image+0x3b0/0x3b0 [ 217.575632][ T6321] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 217.581020][ T6321] print_address_description+0x60/0x2d0 [ 217.586590][ T6321] ? ax25_dev_device_down+0x35e/0x520 [ 217.592029][ T6321] kasan_report+0xdf/0x130 [ 217.596457][ T6321] ? ax25_dev_device_down+0x35e/0x520 [ 217.601833][ T6321] ? kfree+0xef/0x2a0 [ 217.601858][ T6321] kasan_check_range+0x27b/0x290 [ 217.610797][ T6321] ax25_dev_device_down+0x35e/0x520 [ 217.616001][ T6321] ax25_device_event+0x4b4/0x4f0 [ 217.620955][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 217.626605][ T6321] __dev_notify_flags+0x178/0x2d0 [ 217.631666][ T6321] ? __dev_change_flags+0x6a0/0x6a0 [ 217.636877][ T6321] ? __dev_change_flags+0x4bb/0x6a0 [ 217.642089][ T6321] ? dev_get_flags+0x1c0/0x1c0 [ 217.646860][ T6321] ? dev_ioctl+0x54e/0xe50 [ 217.651278][ T6321] ? dev_ioctl+0x54e/0xe50 [ 217.655788][ T6321] dev_change_flags+0xe3/0x1a0 [ 217.660568][ T6321] dev_ifsioc+0x147/0xe70 [ 217.664908][ T6321] ? dev_ioctl+0xe50/0xe50 [ 217.669401][ T6321] ? apparmor_capable+0x12c/0x190 [ 217.674457][ T6321] ? full_name_hash+0x8e/0xe0 [ 217.679120][ T6321] dev_ioctl+0x55f/0xe50 [ 217.683349][ T6321] ? _copy_from_user+0x111/0x170 [ 217.688271][ T6321] sock_do_ioctl+0x222/0x2f0 [ 217.692934][ T6321] ? sock_show_fdinfo+0xb0/0xb0 [ 217.697770][ T6321] sock_ioctl+0x4ed/0x6e0 [ 217.702088][ T6321] ? sock_poll+0x3f0/0x3f0 [ 217.706545][ T6321] ? bpf_lsm_file_ioctl+0x5/0x10 [ 217.711464][ T6321] ? security_file_ioctl+0x7c/0xa0 [ 217.716583][ T6321] ? sock_poll+0x3f0/0x3f0 [ 217.720983][ T6321] __se_sys_ioctl+0xfa/0x170 [ 217.725813][ T6321] do_syscall_64+0x4c/0xa0 [ 217.730227][ T6321] ? clear_bhb_loop+0x30/0x80 [ 217.734920][ T6321] ? clear_bhb_loop+0x30/0x80 [ 217.739592][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.745558][ T6321] RIP: 0033:0x7fccd01e7749 [ 217.749958][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.769558][ T6321] RSP: 002b:00007fccce44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.778055][ T6321] RAX: ffffffffffffffda RBX: 00007fccd043dfa0 RCX: 00007fccd01e7749 [ 217.786185][ T6321] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 217.794143][ T6321] RBP: 00007fccd026bf91 R08: 0000000000000000 R09: 0000000000000000 [ 217.802114][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.810070][ T6321] R13: 00007fccd043e038 R14: 00007fccd043dfa0 R15: 00007ffc8318f1a8 [ 217.818039][ T6321] [ 217.821090][ T6321] [ 217.823395][ T6321] Allocated by task 5224: [ 217.827793][ T6321] __kasan_kmalloc+0xb5/0xf0 [ 217.832375][ T6321] ax25_dev_device_up+0x50/0x580 [ 217.837304][ T6321] ax25_device_event+0x483/0x4f0 [ 217.842338][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 217.847707][ T6321] __dev_notify_flags+0x178/0x2d0 [ 217.852728][ T6321] dev_change_flags+0xe3/0x1a0 [ 217.857603][ T6321] dev_ifsioc+0x147/0xe70 [ 217.861927][ T6321] dev_ioctl+0x55f/0xe50 [ 217.866154][ T6321] sock_do_ioctl+0x222/0x2f0 [ 217.870723][ T6321] sock_ioctl+0x4ed/0x6e0 [ 217.875032][ T6321] __se_sys_ioctl+0xfa/0x170 [ 217.879603][ T6321] do_syscall_64+0x4c/0xa0 [ 217.883995][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.889878][ T6321] [ 217.892231][ T6321] Freed by task 6321: [ 217.896187][ T6321] kasan_set_track+0x4b/0x70 [ 217.900872][ T6321] kasan_set_free_info+0x1f/0x40 [ 217.905797][ T6321] ____kasan_slab_free+0xd5/0x110 [ 217.910812][ T6321] slab_free_freelist_hook+0xea/0x170 [ 217.916274][ T6321] kfree+0xef/0x2a0 [ 217.920065][ T6321] ax25_dev_device_down+0x1c0/0x520 [ 217.925340][ T6321] ax25_device_event+0x4b4/0x4f0 [ 217.930276][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 217.935651][ T6321] __dev_notify_flags+0x178/0x2d0 [ 217.940666][ T6321] dev_change_flags+0xe3/0x1a0 [ 217.945418][ T6321] dev_ifsioc+0x147/0xe70 [ 217.949736][ T6321] dev_ioctl+0x55f/0xe50 [ 217.953965][ T6321] sock_do_ioctl+0x222/0x2f0 [ 217.958539][ T6321] sock_ioctl+0x4ed/0x6e0 [ 217.962859][ T6321] __se_sys_ioctl+0xfa/0x170 [ 217.967444][ T6321] do_syscall_64+0x4c/0xa0 [ 217.971840][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.977720][ T6321] [ 217.980025][ T6321] Last potentially related work creation: [ 217.985801][ T6321] kasan_save_stack+0x35/0x60 [ 217.990465][ T6321] kasan_record_aux_stack+0xb8/0x100 [ 217.995730][ T6321] insert_work+0x54/0x3d0 [ 218.000035][ T6321] __queue_work+0x9c5/0xd50 [ 218.004517][ T6321] queue_work_on+0x11d/0x1d0 [ 218.009171][ T6321] inetaddr_event+0xe0/0x140 [ 218.013746][ T6321] blocking_notifier_call_chain+0x103/0x1b0 [ 218.019716][ T6321] __inet_insert_ifa+0x9e9/0xbc0 [ 218.024629][ T6321] inet_rtm_newaddr+0x940/0x1800 [ 218.029549][ T6321] rtnetlink_rcv_msg+0x7ff/0xe90 [ 218.034471][ T6321] netlink_rcv_skb+0x1e0/0x430 [ 218.039220][ T6321] netlink_unicast+0x774/0x920 [ 218.043967][ T6321] netlink_sendmsg+0x8ab/0xbc0 [ 218.048723][ T6321] __sys_sendto+0x423/0x580 [ 218.053228][ T6321] __x64_sys_sendto+0xda/0xf0 [ 218.058003][ T6321] do_syscall_64+0x4c/0xa0 [ 218.062418][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.068303][ T6321] [ 218.070607][ T6321] The buggy address belongs to the object at ffff888022d00800 [ 218.070607][ T6321] which belongs to the cache kmalloc-192 of size 192 [ 218.084640][ T6321] The buggy address is located 184 bytes inside of [ 218.084640][ T6321] 192-byte region [ffff888022d00800, ffff888022d008c0) [ 218.097990][ T6321] The buggy address belongs to the page: [ 218.103614][ T6321] page:ffffea00008b4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022d00000 pfn:0x22d00 [ 218.115219][ T6321] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 218.122767][ T6321] raw: 00fff00000000200 ffffea0000940308 ffffea00008b9dc8 ffff888016841a00 [ 218.131344][ T6321] raw: ffff888022d00000 0000000000100008 00000001ffffffff 0000000000000000 [ 218.139913][ T6321] page dumped because: kasan: bad access detected [ 218.146316][ T6321] page_owner tracks the page as allocated [ 218.152009][ T6321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 23, ts 8614648745, free_ts 8586365611 [ 218.167569][ T6321] get_page_from_freelist+0x1b77/0x1c60 [ 218.173120][ T6321] __alloc_pages+0x1e1/0x470 [ 218.177708][ T6321] new_slab+0xc0/0x4b0 [ 218.181799][ T6321] ___slab_alloc+0x81e/0xdf0 [ 218.186374][ T6321] __kmalloc+0x1cd/0x330 [ 218.190602][ T6321] usb_alloc_urb+0x3f/0x140 [ 218.195129][ T6321] usb_control_msg+0x115/0x3e0 [ 218.199969][ T6321] hub_ext_port_status+0x103/0x6d0 [ 218.205169][ T6321] hub_activate+0x6e9/0x1a30 [ 218.209753][ T6321] process_one_work+0x863/0x1000 [ 218.214675][ T6321] worker_thread+0xaa8/0x12a0 [ 218.219334][ T6321] kthread+0x436/0x520 [ 218.223379][ T6321] ret_from_fork+0x1f/0x30 [ 218.227778][ T6321] page last free stack trace: [ 218.232423][ T6321] free_unref_page_prepare+0x637/0x6c0 [ 218.237864][ T6321] free_unref_page_list+0x122/0x7e0 [ 218.243046][ T6321] release_pages+0x184b/0x1bb0 [ 218.247795][ T6321] tlb_finish_mmu+0x164/0x2e0 [ 218.252552][ T6321] exit_mmap+0x3a6/0x5f0 [ 218.256772][ T6321] __mmput+0x115/0x3b0 [ 218.260817][ T6321] free_bprm+0x141/0x300 [ 218.265033][ T6321] kernel_execve+0x380/0x900 [ 218.269603][ T6321] call_usermodehelper_exec_async+0x207/0x350 [ 218.275650][ T6321] ret_from_fork+0x1f/0x30 [ 218.280044][ T6321] [ 218.282343][ T6321] Memory state around the buggy address: [ 218.287946][ T6321] ffff888022d00780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.296068][ T6321] ffff888022d00800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 218.304117][ T6321] >ffff888022d00880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.312274][ T6321] ^ [ 218.318143][ T6321] ffff888022d00900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 218.326179][ T6321] ffff888022d00980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 218.334220][ T6321] ================================================================== [ 218.364076][ T6321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.371302][ T6321] CPU: 1 PID: 6321 Comm: syz.2.581 Tainted: G B syzkaller #0 [ 218.379980][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.390038][ T6321] Call Trace: [ 218.393324][ T6321] [ 218.396270][ T6321] dump_stack_lvl+0x168/0x230 [ 218.400958][ T6321] ? show_regs_print_info+0x20/0x20 [ 218.406158][ T6321] ? load_image+0x3b0/0x3b0 [ 218.410664][ T6321] panic+0x2c9/0x7f0 [ 218.414634][ T6321] ? bpf_jit_dump+0xd0/0xd0 [ 218.419253][ T6321] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 218.425139][ T6321] ? _raw_spin_unlock+0x40/0x40 [ 218.429975][ T6321] ? ax25_dev_device_down+0x35e/0x520 [ 218.435338][ T6321] check_panic_on_warn+0x80/0xa0 [ 218.440267][ T6321] ? ax25_dev_device_down+0x35e/0x520 [ 218.445632][ T6321] end_report+0x6d/0xf0 [ 218.450045][ T6321] kasan_report+0x102/0x130 [ 218.454599][ T6321] ? ax25_dev_device_down+0x35e/0x520 [ 218.460180][ T6321] ? kfree+0xef/0x2a0 [ 218.464156][ T6321] kasan_check_range+0x27b/0x290 [ 218.469088][ T6321] ax25_dev_device_down+0x35e/0x520 [ 218.474305][ T6321] ax25_device_event+0x4b4/0x4f0 [ 218.479259][ T6321] raw_notifier_call_chain+0xcb/0x160 [ 218.484659][ T6321] __dev_notify_flags+0x178/0x2d0 [ 218.489684][ T6321] ? __dev_change_flags+0x6a0/0x6a0 [ 218.492517][ T7] usb 5-1: USB disconnect, device number 10 [ 218.494878][ T6321] ? __dev_change_flags+0x4bb/0x6a0 [ 218.494908][ T6321] ? dev_get_flags+0x1c0/0x1c0 [ 218.510730][ T6321] ? dev_ioctl+0x54e/0xe50 [ 218.515168][ T6321] ? dev_ioctl+0x54e/0xe50 [ 218.519603][ T6321] dev_change_flags+0xe3/0x1a0 [ 218.524385][ T6321] dev_ifsioc+0x147/0xe70 [ 218.528810][ T6321] ? dev_ioctl+0xe50/0xe50 [ 218.533218][ T6321] ? apparmor_capable+0x12c/0x190 [ 218.538274][ T6321] ? full_name_hash+0x8e/0xe0 [ 218.542954][ T6321] dev_ioctl+0x55f/0xe50 [ 218.547275][ T6321] ? _copy_from_user+0x111/0x170 [ 218.552200][ T6321] sock_do_ioctl+0x222/0x2f0 [ 218.556786][ T6321] ? sock_show_fdinfo+0xb0/0xb0 [ 218.561628][ T6321] sock_ioctl+0x4ed/0x6e0 [ 218.565948][ T6321] ? sock_poll+0x3f0/0x3f0 [ 218.570355][ T6321] ? bpf_lsm_file_ioctl+0x5/0x10 [ 218.575278][ T6321] ? security_file_ioctl+0x7c/0xa0 [ 218.580507][ T6321] ? sock_poll+0x3f0/0x3f0 [ 218.585019][ T6321] __se_sys_ioctl+0xfa/0x170 [ 218.589647][ T6321] do_syscall_64+0x4c/0xa0 [ 218.594055][ T6321] ? clear_bhb_loop+0x30/0x80 [ 218.598808][ T6321] ? clear_bhb_loop+0x30/0x80 [ 218.603471][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.609350][ T6321] RIP: 0033:0x7fccd01e7749 [ 218.613758][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.633345][ T6321] RSP: 002b:00007fccce44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.641839][ T6321] RAX: ffffffffffffffda RBX: 00007fccd043dfa0 RCX: 00007fccd01e7749 [ 218.649814][ T6321] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 218.657766][ T6321] RBP: 00007fccd026bf91 R08: 0000000000000000 R09: 0000000000000000 [ 218.665740][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.673693][ T6321] R13: 00007fccd043e038 R14: 00007fccd043dfa0 R15: 00007ffc8318f1a8 [ 218.681654][ T6321] [ 218.685172][ T6321] Kernel Offset: disabled [ 218.689530][ T6321] Rebooting in 86400 seconds..