last executing test programs: 13.013644621s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='naa.5001405000000002\n\x00', 0x16) write(r0, &(0x7f0000000380)='NULL\n\x00', 0x5) 12.910550933s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver\x00', &(0x7f0000000200), 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/driver\x00', &(0x7f0000000400), 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', &(0x7f0000000600), 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver\x00', &(0x7f0000000800), 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:05.0/driver\x00', &(0x7f0000000a00), 0x100) readlinkat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/devices/0000:00:1f.0/driver\x00', &(0x7f0000000c00), 0x100) 12.872853354s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/hid/drivers/hid-logitech\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/hid/drivers/logitech\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/hid/drivers/hid-generic\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/hid/drivers/generic\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/hid/drivers/hid-lg\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/hid/drivers/lg\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/hid/drivers/logitech-djreceiver\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/hid/drivers/logitech-hidpp\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/hid/drivers/lg4ff\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/hid/drivers/hid-lg4ff\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/hid/drivers/hid-corsair\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/hid/drivers/corsair\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/hid/drivers/hid-asus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/hid/drivers/asus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/hid/drivers/hid-lenovo\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/hid/drivers/lenovo\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/drivers/hid-roccat\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/hid/drivers/roccat\x00', 0x0, 0x0) 12.789377026s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='lapic\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/clockevents/clockevent1/unbind_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='lapic\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='0\n\x00', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) 12.2169395s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="0400"/800, 0x320, 0xfffffffffffffffd) mount(&(0x7f0000000400)=@filename='./lower\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000600)='ecryptfs\x00', 0x0, &(0x7f0000000700)='ecryptfs_sig=1000100010001000,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') setxattr(&(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)=@known='user.syz\x00', &(0x7f0000000a00)='val\x00', 0x3, 0x0) 11.388973271s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='freeze\n', 0x7) close(r2) 11.138456577s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:04.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:05.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:1f.2\x00', 0x0, 0x0) 10.930590612s ago: executing program 2 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) unshare(0x40000000) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) close(r1) close(r2) unshare(0x40000000) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 8.254423298s ago: executing program 1 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) nanosleep(&(0x7f0000000300)={0x0, 0x2faf0800}, 0x0) 8.117476511s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x38) read(r0, &(0x7f0000800000)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 8.037754913s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='naa.5001405000000002\n\x00', 0x16) write(r0, &(0x7f0000000380)='NULL\n\x00', 0x5) 7.942657335s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='lapic\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/clockevents/clockevent1/unbind_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='lapic\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='0\n\x00', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) 7.858286417s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='- - -\n', 0x6) close(r0) 7.808489929s ago: executing program 3 (id=32): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "0102030405060708090a0b0c0d0e0f1011121314"}}]}, 0x150}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x32) sendto$inet6(r2, &(0x7f0000000200)="000012340000000100000000000000010000000000000000003b00"/42, 0x2a, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) 7.35062425s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2200071900050000000018d90b84362cb51df662dbec5dcd22256294a2379e0d7b7db0cc888069a7c381b332e4e394bfc56dbf01a8f1f00229542fff9d666f4101aed9bbdd1f7b509b1e1e6a25ecd0a09b4caa33ba04a4637997f4faa22f524756823ca45036815b20189ba9"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001010000e75abe8826ad088b093053f7d4488400ac111c00511343b2d9a0ced47bcd15d053acec54259911c80bde5b22618d4d2508ec4896378139e4a746bc8587f1b1ab7ca1516c7eb3"], 0xb8}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x3, "1f938a7b853b3a0a00000000000000000000fc00", 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6}) listen(r1, 0x8) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x73, 0x983a}, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5.31428689s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd2\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd2\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 5.186147183s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/driver\x00', &(0x7f0000000300)=""/100, 0x100) 5.138305164s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x38) read(r0, &(0x7f0000800000)=""/64, 0x40) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 5.012895887s ago: executing program 3 (id=38): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv4\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='127.0.0.1\n', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='4420\n', 0x5) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 4.993872687s ago: executing program 1 (id=39): mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='naa.5001405000000002\n\x00', 0x16) write(r0, &(0x7f0000000380)='NULL\n\x00', 0x5) 4.878634081s ago: executing program 4 (id=40): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 4.878506831s ago: executing program 1 (id=41): syz_usb_connect(0x1, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900001000000010902320001010080320904000002ff0000000705020200020007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.815339672s ago: executing program 4 (id=42): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='/dev/ram0,65536\n\x00', 0x11) close(r0) r1 = syz_open_dev$mtd(&(0x7f0000000180), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000200)={0x0, 0x400000}) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000280)="000000000100"/24) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) 4.730203184s ago: executing program 3 (id=43): syz_usb_connect(0x3, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040801b09e300010102000109021900010100803209040000010000000007058202000200"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) 3.878617845s ago: executing program 4 (id=44): syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) 3.801681487s ago: executing program 4 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/hpet_acpi\x00', 0x0, 0x0) close(r0) 3.724378618s ago: executing program 4 (id=46): r0 = syz_usb_connect(0x3, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040670812980001010203010902350001010080fa0904000005ff0000000705810240000007050202400000070583024000000705040240000007058502400000"], 0x0) syz_usb_ep_write(r0, 0x83, 0x1, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x83, 0x2, &(0x7f0000000120)) syz_usb_ep_write(r0, 0x83, 0x2, &(0x7f0000000140)) syz_usb_ep_write(r0, 0x83, 0x2, &(0x7f0000000160)) syz_usb_ep_write(r0, 0x83, 0x4, &(0x7f0000000180)) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xf, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xf, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) 1.898463243s ago: executing program 3 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2200071900050000000018d90b84362cb51df662dbec5dcd22256294a2379e0d7b7db0cc888069a7c381b332e4e394bfc56dbf01a8f1f00229542fff9d666f4101aed9bbdd1f7b509b1e1e6a25ecd0a09b4caa33ba04a4637997f4faa22f524756823ca45036815b20189ba9"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001010000e75abe8826ad088b093053f7d4488400ac111c00511343b2d9a0ced47bcd15d053acec54259911c80bde5b22618d4d2508ec4896378139e4a746bc8587f1b1ab7ca1516c7eb3"], 0xb8}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x3, "1f938a7b853b3a0a00000000000000000000fc00", 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6}) listen(r1, 0x8) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x73, 0x983a}, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 667.630024ms ago: executing program 1 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) close(r0) 0s ago: executing program 4 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)={[{0xc, 0x4e00, "155038aad51c1e2bedcda6bd"}]}) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='freeze\n', 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. syzkaller login: [ 64.475414][ T4172] cgroup: Unknown subsys name 'net' [ 64.629518][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.188797][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.803243][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.877546][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 67.888239][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.944627][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.011017][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.053207][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.061623][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.070662][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.116382][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.124028][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.132525][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.148727][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.156730][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.165638][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.173788][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.181389][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.189627][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.222497][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.230274][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.239639][ T4198] device bridge_slave_0 entered promiscuous mode [ 68.249094][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.258321][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.268462][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.279088][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.291012][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.301559][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.317673][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.335494][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.343897][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.352748][ T4198] device bridge_slave_1 entered promiscuous mode [ 68.372903][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.430559][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.442622][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.460597][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.471304][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.479499][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.488128][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.499088][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.517894][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.530751][ T4192] team0: Port device team_slave_0 added [ 68.538879][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.548287][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.557119][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.568190][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.594533][ T4192] team0: Port device team_slave_1 added [ 68.610069][ T4191] team0: Port device team_slave_0 added [ 68.634428][ T4185] team0: Port device team_slave_0 added [ 68.650337][ T4191] team0: Port device team_slave_1 added [ 68.673012][ T4185] team0: Port device team_slave_1 added [ 68.682599][ T4198] team0: Port device team_slave_0 added [ 68.699453][ T4198] team0: Port device team_slave_1 added [ 68.716737][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.756645][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.763810][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.792725][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.807302][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.827412][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.835257][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.864962][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.889299][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.898470][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.933306][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.952457][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.960960][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.990322][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.003763][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.011044][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.040717][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.055422][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.062785][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.092286][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.116393][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.124937][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.152158][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.170997][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.179230][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.207813][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.222929][ T4184] team0: Port device team_slave_0 added [ 69.261296][ T4184] team0: Port device team_slave_1 added [ 69.279469][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.287790][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.347105][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.354871][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.362170][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.370397][ T4191] Cannot create hsr debugfs directory [ 69.386537][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.394165][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.400966][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.409065][ T4185] Cannot create hsr debugfs directory [ 69.419991][ T4198] device hsr_slave_0 entered promiscuous mode [ 69.428054][ T4198] device hsr_slave_1 entered promiscuous mode [ 69.435231][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.443982][ T4198] Cannot create hsr debugfs directory [ 69.455233][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 69.463631][ T2300] Bluetooth: hci1: command 0x0409 tx timeout [ 69.470346][ T2300] Bluetooth: hci2: command 0x0409 tx timeout [ 69.477901][ T2300] Bluetooth: hci0: command 0x0409 tx timeout [ 69.484552][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.491835][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.518762][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.531864][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.533893][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 69.539380][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.573986][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.675701][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.684823][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.692229][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.700648][ T4184] Cannot create hsr debugfs directory [ 69.979690][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.008079][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.026427][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.036785][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.084857][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.101966][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.121615][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.145537][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.171420][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.181934][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.206561][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.217550][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.298170][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.311115][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.329100][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.341717][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.352088][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.391150][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.401825][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.441920][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.450497][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.488010][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.499084][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.508947][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.516710][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.527851][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.537604][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.546774][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.555971][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.564762][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.578188][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.590165][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.615099][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.624496][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.633709][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.643974][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.655966][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.690087][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.698898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.709980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.721412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.730620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.750145][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.771310][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.787803][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.802571][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.812518][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.829199][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.842837][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.859370][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.870825][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.886947][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.902395][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.915863][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.927947][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.937172][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.954943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.968337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.990917][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.013452][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.027879][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.044694][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.056804][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.064895][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.073085][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.083410][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.094027][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.103251][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.120956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.130996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.140948][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.148380][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.160999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.171599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.182124][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.190607][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.204464][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.230243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.240363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.252338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.262377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.305037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.322269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.333163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.345974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.356458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.370916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.381779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.391760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.401914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.412128][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.419776][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.428817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.438262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.447052][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456042][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.466704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.475689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.493005][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.507251][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.534871][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 71.541369][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 71.554709][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 71.561033][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 71.561355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.585286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.599571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.609288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.617909][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 71.618564][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.630939][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.641529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.650845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.659592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.670097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.679011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.689166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.698215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.707692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.717704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.737502][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.751981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.772210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.790452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.799132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.815977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.828048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.842176][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.887332][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.903182][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.913983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.922974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.934044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.941966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.962237][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.976028][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.999559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.011980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.062328][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.091311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.111452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.144300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.152681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.167658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.177608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.187936][ T4192] device veth0_vlan entered promiscuous mode [ 72.212774][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.228850][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.261658][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.285806][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.304648][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.327711][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.335940][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.353151][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.361817][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.372129][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.381428][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.389160][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.401634][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.414614][ T4192] device veth1_vlan entered promiscuous mode [ 72.451045][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.460894][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.470624][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.482613][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.494416][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.539677][ T4192] device veth0_macvtap entered promiscuous mode [ 72.547878][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.556922][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.569221][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.578250][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.586926][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.596426][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.605198][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.612701][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.622898][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.632581][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.665272][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.673152][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.684949][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.709515][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.721961][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.743039][ T4192] device veth1_macvtap entered promiscuous mode [ 72.751790][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.762435][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.771734][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.781017][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.791249][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.799951][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.809579][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.821509][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.831108][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.872968][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.898408][ T4198] device veth0_vlan entered promiscuous mode [ 72.913935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.931780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.941158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.951998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.962593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.971554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.982459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.994228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.007184][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.032142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.042449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.052442][ T4185] device veth0_vlan entered promiscuous mode [ 73.068659][ T4198] device veth1_vlan entered promiscuous mode [ 73.081501][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.093169][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.104054][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.113360][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.131414][ T4184] device veth0_vlan entered promiscuous mode [ 73.145053][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.159946][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.187252][ T4184] device veth1_vlan entered promiscuous mode [ 73.240561][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.249676][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.260515][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.272878][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.282384][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.291172][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.301835][ T4185] device veth1_vlan entered promiscuous mode [ 73.326683][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.358360][ T4198] device veth0_macvtap entered promiscuous mode [ 73.372535][ T4198] device veth1_macvtap entered promiscuous mode [ 73.392536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.402911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.412510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.450425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.470126][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.486131][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.492100][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.508387][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.521178][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.538356][ T4185] device veth0_macvtap entered promiscuous mode [ 73.550681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.560397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.569662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.580505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.589778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.599545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.610416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.614321][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 73.621678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.637071][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 73.640160][ T4184] device veth0_macvtap entered promiscuous mode [ 73.652132][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 73.659328][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 73.672903][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.684914][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.695849][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 73.704698][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.717139][ T4185] device veth1_macvtap entered promiscuous mode [ 73.728176][ T4184] device veth1_macvtap entered promiscuous mode [ 73.739453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.749404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.758795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.768580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.778474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.788158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.798990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.816327][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.827122][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.837635][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.848473][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.889093][ T387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.897685][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.909426][ T387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.910633][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.930318][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.942429][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.955002][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.977946][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.999354][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.012077][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.024972][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.036634][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.049301][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.062484][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.072369][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.082050][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.092210][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.107072][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.116820][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.127563][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.139104][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.149249][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.158101][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.171344][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.192588][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.204418][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.217110][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.230285][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.247031][ T4191] device veth0_vlan entered promiscuous mode [ 74.275346][ T4191] device veth1_vlan entered promiscuous mode [ 74.287512][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.301385][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.312619][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.329089][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.342368][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.355464][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.368610][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.376919][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.386343][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.396270][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.406787][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.425819][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.446448][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.455564][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465420][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.482703][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.496255][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.506344][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.515891][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.639977][ T4191] device veth0_macvtap entered promiscuous mode [ 74.655629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.674400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.707032][ T4191] device veth1_macvtap entered promiscuous mode [ 74.718292][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.740422][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.765031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.777694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.787534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.834403][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.856810][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.867924][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.878690][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.888896][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.899957][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.910207][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.921682][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.933919][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.944771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.954888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.985962][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.999151][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.017405][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.019753][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.037748][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.054963][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.065752][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.078155][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.089544][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.101675][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.121631][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.147913][ T4273] smpboot: CPU 1 is now offline [ 75.182197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.200021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.230546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.258046][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.287293][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.308421][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.320797][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.386963][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.429930][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.486368][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512996][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.541067][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.551375][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.592197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.632796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.643866][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 75.665622][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 75.686807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.703360][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 75.773378][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 75.785268][ T4277] Could not find key with description: [1000100010001000] [ 75.801108][ T387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.833442][ T387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.850732][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.863334][ T1330] Bluetooth: hci4: command 0x0419 tx timeout [ 75.880886][ T4277] process_request_key_err: No key [ 75.917626][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.934726][ T4277] Could not find valid key in user session keyring for sig specified in mount option: [1000100010001000] [ 76.004120][ T4277] One or more global auth toks could not properly register; rc = [-2] [ 76.027289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.060194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.072698][ T4277] Error parsing options; rc = [-2] [ 76.131728][ T387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.197604][ T387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.208108][ T4294] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 76.270123][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.316755][ T4300] Zero length message leads to an empty skb [ 76.341302][ T4299] PM: suspend entry (s2idle) [ 76.365842][ T4301] PM: suspend entry (s2idle) [ 76.389825][ T4299] PM: suspend exit [ 76.629218][ T4311] nvmet: adding nsid 1 to subsystem testsubsys [ 78.695021][ T4314] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 78.760077][ T4301] Filesystems sync: 2.389 seconds [ 78.868674][ T4311] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 78.936476][ T4311] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 79.058889][ T4311] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 79.139237][ T4314] nvme nvme0: failed to connect socket: -111 [ 79.195357][ T4338] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 79.383649][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.506423][ T4344] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.562944][ T4344] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 79.605148][ T4344] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 79.784113][ T4228] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 79.829290][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.643643][ T4228] usb 5-1: usb_control_msg returned -71 [ 80.893756][ T4301] Bluetooth: hci1: Timed out waiting for suspend events [ 81.720004][ T4363] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 82.093649][ T4228] usbtmc 5-1:1.0: can't read capabilities [ 82.134922][ T4301] Bluetooth: hci1: Suspend timeout bit: 4 [ 82.197016][ T4301] Bluetooth: hci1: Suspend timeout bit: 6 [ 82.376131][ T4228] usb 5-1: USB disconnect, device number 2 [ 82.403453][ T4301] Bluetooth: hci1: Suspend notifier action (3) failed: -110 [ 82.487855][ T4229] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.626921][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 82.718542][ T4392] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 82.798172][ T4392] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 82.866867][ T4396] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 83.071150][ T4401] ftl_cs: FTL header not found. [ 83.106198][ T4228] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.176559][ T4401] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 83.353647][ T4321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.373711][ T4228] usb 2-1: Invalid ep0 maxpacket: 64 [ 83.540118][ T4228] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 83.805224][ T4228] usb 2-1: Invalid ep0 maxpacket: 64 [ 83.818630][ T4228] usb usb2-port1: attempt power cycle [ 83.844071][ T4321] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice= 1.00 [ 83.884469][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.923953][ T4321] usb 4-1: Product: syz [ 83.933394][ T4321] usb 4-1: Manufacturer: syz [ 83.984997][ T4321] em28xx 4-1:1.0: New device syz syz @ 480 Mbps (1b80:e309, interface 0, class 0) [ 84.014385][ T4321] em28xx 4-1:1.0: Video interface 0 found: bulk [ 84.283853][ T4228] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 84.323900][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.383832][ T4228] usb 2-1: Invalid ep0 maxpacket: 64 [ 84.494860][ T4261] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.501109][ T4301] Bluetooth: hci0: Timed out waiting for suspend events [ 84.520779][ T4301] Bluetooth: hci0: Suspend timeout bit: 4 [ 84.533901][ T4228] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 84.558779][ T4301] Bluetooth: hci0: Suspend timeout bit: 6 [ 84.574216][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 84.598118][ T4301] Bluetooth: hci0: Suspend notifier action (3) failed: -110 [ 84.636750][ T4228] usb 2-1: Invalid ep0 maxpacket: 64 [ 84.651770][ T4228] usb usb2-port1: unable to enumerate USB device [ 84.704664][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 84.730397][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 84.760862][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 84.789401][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 84.826872][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 85.013732][ T4229] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice= 1.00 [ 85.037550][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.070618][ T4229] usb 5-1: Product: syz [ 85.081225][ T4229] usb 5-1: Manufacturer: syz [ 85.097877][ T4229] usb 5-1: SerialNumber: syz [ 85.133844][ T4414] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.153169][ T4414] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.173322][ T4414] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.181229][ T4321] em28xx 4-1:1.0: unknown em28xx chip ID (0) [ 85.213885][ T4414] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.231476][ T4414] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.366916][ T4321] em28xx 4-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 85.387640][ T4321] em28xx 4-1:1.0: board has no eeprom [ 85.513565][ T4321] em28xx 4-1:1.0: Identified as Easy Cap Capture DC-60 (card=64) [ 85.532507][ T4321] em28xx 4-1:1.0: analog set to bulk mode. [ 85.571697][ T4321] usb 4-1: USB disconnect, device number 2 [ 85.607386][ T4321] em28xx 4-1:1.0: Disconnecting em28xx [ 85.636759][ T4228] em28xx 4-1:1.0: Registering V4L2 extension [ 85.727901][ T4228] em28xx 4-1:1.0: Config register raw data: 0xffffffed [ 85.751232][ T4228] em28xx 4-1:1.0: AC97 chip type couldn't be determined [ 85.789721][ T4228] em28xx 4-1:1.0: No AC97 audio processor [ 85.993813][ T4229] comedi comedi5: unable to reset configuration [ 86.000895][ T4229] dt9812 5-1:1.0: driver 'dt9812' failed to auto-configure device. [ 86.653754][ T4301] Bluetooth: hci2: Timed out waiting for suspend events [ 86.661708][ T4301] Bluetooth: hci2: Suspend timeout bit: 4 [ 86.983387][ T7] cfg80211: failed to load regulatory.db [ 87.014069][ T4228] usb 4-1: Decoder not found [ 87.018946][ T4228] em28xx 4-1:1.0: failed to create media graph [ 87.695430][ T4229] dt9812: probe of 5-1:1.0 failed with error -22 [ 87.720857][ T4301] Bluetooth: hci2: Suspend timeout bit: 6 [ 87.753014][ T4228] em28xx 4-1:1.0: V4L2 device video103 deregistered [ 87.781861][ T4301] Bluetooth: hci2: Suspend notifier action (3) failed: -110 [ 87.813959][ T4229] usb 5-1: USB disconnect, device number 3 [ 87.848821][ T4422] ================================================================== [ 87.861417][ T4422] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340 [ 87.870274][ T4422] Read of size 4 at addr ffff8880610589b0 by task v4l_id/4422 [ 87.880341][ T4422] [ 87.883382][ T4422] CPU: 0 PID: 4422 Comm: v4l_id Not tainted syzkaller #0 [ 87.892347][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.903253][ T4422] Call Trace: [ 87.906649][ T4422] [ 87.909606][ T4422] dump_stack_lvl+0x188/0x250 [ 87.914664][ T4422] ? show_regs_print_info+0x20/0x20 [ 87.920301][ T4422] ? _printk+0xda/0x130 [ 87.924608][ T4422] ? load_image+0x410/0x410 [ 87.929309][ T4422] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 87.934964][ T4422] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 87.941152][ T4422] print_address_description+0x60/0x2d0 [ 87.947425][ T4422] ? v4l2_open+0x32d/0x340 [ 87.951995][ T4422] kasan_report+0xdf/0x130 [ 87.956535][ T4422] ? v4l2_open+0x32d/0x340 [ 87.961207][ T4422] v4l2_open+0x32d/0x340 [ 87.965496][ T4422] chrdev_open+0x585/0x5f0 [ 87.970139][ T4422] ? cd_forget+0x160/0x160 [ 87.974982][ T4422] ? fsnotify_perm+0x3a7/0x560 [ 87.979788][ T4422] ? cd_forget+0x160/0x160 [ 87.984282][ T4422] do_dentry_open+0x7f7/0xf90 [ 87.988989][ T4422] ? vfs_open+0x2b/0x80 [ 87.993257][ T4422] path_openat+0x2718/0x2fb0 [ 87.998066][ T4422] ? __kasan_slab_alloc+0xa9/0xc0 [ 88.003257][ T4422] ? do_filp_open+0x400/0x400 [ 88.008102][ T4422] do_filp_open+0x1df/0x400 [ 88.013016][ T4422] ? vfs_tmpfile+0x300/0x300 [ 88.017982][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 88.023104][ T4422] ? alloc_fd+0x59e/0x650 [ 88.027628][ T4422] do_sys_openat2+0x14b/0x500 [ 88.032726][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 88.037845][ T4422] ? do_sys_open+0xe0/0xe0 [ 88.042686][ T4422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.049188][ T4422] ? lock_chain_count+0x20/0x20 [ 88.054387][ T4422] __x64_sys_openat+0x135/0x160 [ 88.059904][ T4422] do_syscall_64+0x4c/0xa0 [ 88.065093][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.070244][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.075248][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.084575][ T4422] RIP: 0033:0x7f002ae1c407 [ 88.090566][ T4422] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 88.113953][ T4422] RSP: 002b:00007ffd53c617f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 88.123279][ T4422] RAX: ffffffffffffffda RBX: 00007f002ad2e880 RCX: 00007f002ae1c407 [ 88.132459][ T4422] RDX: 0000000000000000 RSI: 00007ffd53c61f1e RDI: ffffffffffffff9c [ 88.141960][ T4422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 88.150661][ T4422] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.159913][ T4422] R13: 00007ffd53c61a40 R14: 00007f002b5aa000 R15: 0000564a9d6ac4d8 [ 88.168380][ T4422] [ 88.171760][ T4422] [ 88.174360][ T4422] The buggy address belongs to the page: [ 88.180341][ T4422] page:ffffea0001841600 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61058 [ 88.190709][ T4422] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.198045][ T4422] raw: 00fff00000000000 ffffea0001834708 ffff8880b90409f0 0000000000000000 [ 88.207183][ T4422] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.215880][ T4422] page dumped because: kasan: bad access detected [ 88.223559][ T4422] page_owner tracks the page as freed [ 88.229033][ T4422] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 4228, ts 85653358574, free_ts 87848092724 [ 88.247073][ T4422] get_page_from_freelist+0x24f6/0x2670 [ 88.254481][ T4422] __alloc_pages+0x1ee/0x480 [ 88.260012][ T4422] kmalloc_order+0x40/0x150 [ 88.266167][ T4422] kmalloc_order_trace+0x14/0xf0 [ 88.271544][ T4422] em28xx_v4l2_init+0xd5/0x2cd0 [ 88.277909][ T4422] em28xx_init_extension+0x118/0x1c0 [ 88.285138][ T4422] process_one_work+0x867/0xff0 [ 88.292383][ T4422] worker_thread+0xe01/0x12a0 [ 88.299941][ T4422] kthread+0x42e/0x520 [ 88.305945][ T4422] ret_from_fork+0x1f/0x30 [ 88.311328][ T4422] page last free stack trace: [ 88.317691][ T4422] free_unref_page_prepare+0x637/0x6c0 [ 88.323777][ T4422] free_unref_page+0x8f/0x2a0 [ 88.328639][ T4422] free_nonslab_page+0xde/0x150 [ 88.333624][ T4422] em28xx_v4l2_init+0x155a/0x2cd0 [ 88.340066][ T4422] em28xx_init_extension+0x118/0x1c0 [ 88.346968][ T4422] process_one_work+0x867/0xff0 [ 88.352016][ T4422] worker_thread+0xe01/0x12a0 [ 88.357058][ T4422] kthread+0x42e/0x520 [ 88.362199][ T4422] ret_from_fork+0x1f/0x30 [ 88.366869][ T4422] [ 88.369352][ T4422] Memory state around the buggy address: [ 88.376412][ T4422] ffff888061058880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.384985][ T4422] ffff888061058900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.393697][ T4422] >ffff888061058980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.401852][ T4422] ^ [ 88.407756][ T4422] ffff888061058a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.416010][ T4422] ffff888061058a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.425044][ T4422] ================================================================== [ 88.433197][ T4422] Disabling lock debugging due to kernel taint [ 88.451060][ T4228] em28xx 4-1:1.0: Remote control support is not available for this card. [ 88.486468][ T4321] em28xx 4-1:1.0: Closing input extension [ 88.497429][ T4321] em28xx 4-1:1.0: Freeing device [ 88.509577][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 88.517161][ T13] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.526393][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 88.668875][ T4422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.676912][ T4422] CPU: 0 PID: 4422 Comm: v4l_id Tainted: G B syzkaller #0 [ 88.687120][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.698667][ T4422] Call Trace: [ 88.702886][ T4422] [ 88.706183][ T4422] dump_stack_lvl+0x188/0x250 [ 88.711716][ T4422] ? show_regs_print_info+0x20/0x20 [ 88.717494][ T4422] ? load_image+0x410/0x410 [ 88.722896][ T4422] panic+0x2f8/0x850 [ 88.727055][ T4422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.733367][ T4422] ? bpf_jit_dump+0xd0/0xd0 [ 88.738089][ T4422] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 88.744499][ T4422] ? _raw_spin_unlock+0x40/0x40 [ 88.749378][ T4422] ? v4l2_open+0x32d/0x340 [ 88.754416][ T4422] check_panic_on_warn+0x80/0xa0 [ 88.759999][ T4422] ? v4l2_open+0x32d/0x340 [ 88.765354][ T4422] end_report+0x6d/0xf0 [ 88.771540][ T4422] kasan_report+0x102/0x130 [ 88.777194][ T4422] ? v4l2_open+0x32d/0x340 [ 88.781919][ T4422] v4l2_open+0x32d/0x340 [ 88.787533][ T4422] chrdev_open+0x585/0x5f0 [ 88.792627][ T4422] ? cd_forget+0x160/0x160 [ 88.798776][ T4422] ? fsnotify_perm+0x3a7/0x560 [ 88.804830][ T4422] ? cd_forget+0x160/0x160 [ 88.809838][ T4422] do_dentry_open+0x7f7/0xf90 [ 88.815957][ T4422] ? vfs_open+0x2b/0x80 [ 88.820825][ T4422] path_openat+0x2718/0x2fb0 [ 88.825922][ T4422] ? __kasan_slab_alloc+0xa9/0xc0 [ 88.832123][ T4422] ? do_filp_open+0x400/0x400 [ 88.838277][ T4422] do_filp_open+0x1df/0x400 [ 88.844946][ T4422] ? vfs_tmpfile+0x300/0x300 [ 88.850243][ T4422] ? _raw_spin_unlock+0x24/0x40 [ 88.856657][ T4422] ? alloc_fd+0x59e/0x650 [ 88.861545][ T4422] do_sys_openat2+0x14b/0x500 [ 88.866841][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 88.873530][ T4422] ? do_sys_open+0xe0/0xe0 [ 88.881724][ T4422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.888927][ T4422] ? lock_chain_count+0x20/0x20 [ 88.894700][ T4422] __x64_sys_openat+0x135/0x160 [ 88.900685][ T4422] do_syscall_64+0x4c/0xa0 [ 88.905220][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.910624][ T4422] ? clear_bhb_loop+0x30/0x80 [ 88.916119][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.923149][ T4422] RIP: 0033:0x7f002ae1c407 [ 88.927813][ T4422] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 88.950041][ T4422] RSP: 002b:00007ffd53c617f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 88.959257][ T4422] RAX: ffffffffffffffda RBX: 00007f002ad2e880 RCX: 00007f002ae1c407 [ 88.967578][ T4422] RDX: 0000000000000000 RSI: 00007ffd53c61f1e RDI: ffffffffffffff9c [ 88.976397][ T4422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 88.985068][ T4422] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.993481][ T4422] R13: 00007ffd53c61a40 R14: 00007f002b5aa000 R15: 0000564a9d6ac4d8 [ 89.002106][ T4422] [ 89.005599][ T4422] Kernel Offset: disabled [ 89.010029][ T4422] Rebooting in 86400 seconds..