last executing test programs: 8.089800971s ago: executing program 3 (id=352): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) socket$rds(0x15, 0x5, 0x0) 6.423696975s ago: executing program 3 (id=362): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0xc0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x1) sendfile(r4, r6, 0x0, 0x1000a3) 4.824020029s ago: executing program 2 (id=373): mkdir(0x0, 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 4.494804874s ago: executing program 2 (id=376): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000"], 0x18}, 0x0) 4.284033687s ago: executing program 2 (id=377): gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 3.889902023s ago: executing program 3 (id=381): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) 3.650459616s ago: executing program 4 (id=384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xffff, 0x736c, 0x8, 0xffff, 0x10001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.313876981s ago: executing program 4 (id=389): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) close(0x3) 3.289316201s ago: executing program 2 (id=390): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x12) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'batadv_slave_0\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mq_open(&(0x7f00000000c0)='.(-\x97\x00', 0x0, 0xef, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 3.073814845s ago: executing program 4 (id=392): gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.801541999s ago: executing program 4 (id=395): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="000200002a00000728bd7000fbdbdf250800000008003b00", @ANYBLOB="a364d737a67b6e8e2644c5873e9bb28b7c33800961fabcb8debd92a3198dfe2c9c2f6b54024f3baa7eea6a5a0b8d5a634109ec52025d991b533576bb5042d15df726f8c185253a46d3c203a434d8ce51de8bc78052a60f7a69d84c852098cd96ae09af6e82dd05d465a580b1d5f9559261a2178df408daf5d0a07bade781f3255edcc06d22dd3e2000a6806e689654658a412fc22bafd1c1928bd9ecb6e9f60dce837df9c4913ae0239c01d6632323b55c1f656fc55eeaf54996a40dda8abdffb4d5153e24c41fbd970c7ac570b52e15d913c4cc8149f4fdb779a52210e8233d6d607802276b3f68cafb45278ee7bfcb8333c215a6d6c659a27bb65e72a33066ce97c4ace6cb5a02d9f9a2b5cde478a5"], 0x200}, 0x1, 0x0, 0x0, 0x40006}, 0xe8e6034b79696ec6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002122, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40090) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_create1(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000580)={{0x8, 0x3, 0x3, 0xfffffffe, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x5, 0x4, 0x7ff, 0x8, 0x2, 0x101, 0x3, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0xb40000, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffffb, 0x5, 0x7, 0x3ff, 0x2, 0x2, 0xe, 0x5, 0x1, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x1b9315a1, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa5, 0x6, 0x2, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x5, 0x0, 0x2, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x2, 0x4, 0x4, 0x11, 0xae9, 0x3, 0x2, 0x6, 0x9, 0x7, 0x5, 0x0, 0x7ff, 0x4, 0x9, 0x4, 0x9, 0x65, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x9, 0x7, 0x8000000000000000, 0x800000000009, 0x2, 0x8, 0x7, 0x8, 0x1ff, 0x0, 0x2, 0x8, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x1, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1d9f, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xffffffffffffffff, 0x7]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.678183261s ago: executing program 0 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.419796734s ago: executing program 0 (id=397): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000580)=[@dead_binder_done], 0x0, 0x0, 0x0}) 2.320314336s ago: executing program 4 (id=398): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x10, {0x10, 0xe, "425196a5c184f21265760be5a1b3"}}, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.204242937s ago: executing program 2 (id=399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xffff, 0x736c, 0x8, 0xffff, 0x10001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.125528849s ago: executing program 0 (id=400): gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2.125174189s ago: executing program 1 (id=401): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2c, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x4, 0x4089, 0x5, 0x8, 0x7, 0x4, 0x0, 0x7f, 0x2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 1.921970922s ago: executing program 1 (id=402): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) 1.870079033s ago: executing program 2 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011) 1.777858944s ago: executing program 1 (id=404): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE '], 0xbb) close(r0) 1.649849776s ago: executing program 1 (id=405): gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.537123617s ago: executing program 1 (id=406): openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x3) 1.486958858s ago: executing program 4 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.166881353s ago: executing program 0 (id=408): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb9, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xc3, 0x8, 0x0, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 967.964155ms ago: executing program 0 (id=409): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x23820000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x58) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000280)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 705.91383ms ago: executing program 3 (id=410): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000580)=[@dead_binder_done], 0x0, 0x0, 0x0}) 673.18472ms ago: executing program 3 (id=411): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 600.527141ms ago: executing program 1 (id=412): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 37.892539ms ago: executing program 3 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xffff, 0x736c, 0x8, 0xffff, 0x10001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 0 (id=414): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2c, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x4, 0x4089, 0x5, 0x8, 0x7, 0x4, 0x0, 0x7f, 0x2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. syzkaller login: [ 76.926244][ T4261] cgroup: Unknown subsys name 'net' [ 77.066208][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.673573][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.519226][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.527253][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.538513][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.545865][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.553614][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.570362][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.578152][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.585568][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.593649][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.601265][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.609414][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.616465][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.624399][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.626154][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.633333][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.640267][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.653371][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.661299][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.669361][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.677095][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.684643][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.692767][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.700066][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.707261][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.717095][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.769398][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.777273][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.787099][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.800152][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.807450][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.134611][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 81.240583][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 81.330555][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 81.341793][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.349038][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.358778][ T4283] device bridge_slave_0 entered promiscuous mode [ 81.395361][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.402897][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.411370][ T4283] device bridge_slave_1 entered promiscuous mode [ 81.486007][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 81.498200][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.507865][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.515641][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.523827][ T4284] device bridge_slave_0 entered promiscuous mode [ 81.534727][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 81.564679][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.574267][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.581907][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.590182][ T4284] device bridge_slave_1 entered promiscuous mode [ 81.613759][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.621309][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.629769][ T4286] device bridge_slave_0 entered promiscuous mode [ 81.669085][ T4283] team0: Port device team_slave_0 added [ 81.682217][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.689337][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.697912][ T4286] device bridge_slave_1 entered promiscuous mode [ 81.719843][ T4283] team0: Port device team_slave_1 added [ 81.743142][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.790441][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.813662][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.820995][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.847489][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.861150][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.881181][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.905124][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.915771][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.945283][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.956701][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.967954][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.976098][ T4274] device bridge_slave_0 entered promiscuous mode [ 82.005553][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.012767][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.024302][ T4276] device bridge_slave_0 entered promiscuous mode [ 82.036879][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.044416][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.052848][ T4274] device bridge_slave_1 entered promiscuous mode [ 82.062436][ T4284] team0: Port device team_slave_0 added [ 82.078468][ T4286] team0: Port device team_slave_0 added [ 82.088087][ T4286] team0: Port device team_slave_1 added [ 82.094664][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.102214][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.110624][ T4276] device bridge_slave_1 entered promiscuous mode [ 82.143679][ T4284] team0: Port device team_slave_1 added [ 82.175462][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.198035][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.214828][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.222051][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.248353][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.261883][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.286650][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.296284][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.303867][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.330009][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.347606][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.354798][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.380816][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.410412][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.417410][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.444017][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.460712][ T4283] device hsr_slave_0 entered promiscuous mode [ 82.468205][ T4283] device hsr_slave_1 entered promiscuous mode [ 82.512326][ T4276] team0: Port device team_slave_0 added [ 82.531917][ T4286] device hsr_slave_0 entered promiscuous mode [ 82.539050][ T4286] device hsr_slave_1 entered promiscuous mode [ 82.546041][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.554096][ T4286] Cannot create hsr debugfs directory [ 82.562022][ T4274] team0: Port device team_slave_0 added [ 82.574784][ T4276] team0: Port device team_slave_1 added [ 82.599385][ T4274] team0: Port device team_slave_1 added [ 82.619874][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.627046][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.653470][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.704240][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.711334][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.737595][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.750325][ T4294] Bluetooth: hci2: command 0x0409 tx timeout [ 82.763860][ T4284] device hsr_slave_0 entered promiscuous mode [ 82.770923][ T4284] device hsr_slave_1 entered promiscuous mode [ 82.777487][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.786236][ T4284] Cannot create hsr debugfs directory [ 82.792292][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.799264][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.826059][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.832160][ T4294] Bluetooth: hci1: command 0x0409 tx timeout [ 82.836952][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 82.843004][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 82.848780][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 82.883819][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.891339][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.918037][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.029952][ T4276] device hsr_slave_0 entered promiscuous mode [ 83.036963][ T4276] device hsr_slave_1 entered promiscuous mode [ 83.043942][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.051659][ T4276] Cannot create hsr debugfs directory [ 83.076839][ T4274] device hsr_slave_0 entered promiscuous mode [ 83.084050][ T4274] device hsr_slave_1 entered promiscuous mode [ 83.091015][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.098601][ T4274] Cannot create hsr debugfs directory [ 83.378803][ T4283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.395246][ T4283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.417297][ T4283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.432587][ T4283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.453537][ T4286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.468938][ T4286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.479293][ T4286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.490477][ T4286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.614041][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.625736][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.636135][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.647795][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.706379][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.716629][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.746548][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.757129][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.768994][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.806994][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.818788][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.833450][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.847507][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.873093][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.885526][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.895431][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.905743][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.916516][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.929160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.938415][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.945702][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.979239][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.987754][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.996984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.006494][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.013674][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.028001][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.041323][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.076064][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.091103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.102090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.119807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.130604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.158218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.166407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.175623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.185655][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.192865][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.201511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.210850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.219600][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.226745][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.234567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.244913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.255020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.291591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.303826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.312673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.322480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.335222][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.346528][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.356942][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.383653][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.402379][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.420978][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.428986][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.438044][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.448211][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.457642][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.485953][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.498543][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.507711][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.518438][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.547805][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.563158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.573709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.589856][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.620288][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.628993][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.665286][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.672489][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.687998][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.713787][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.751739][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.767084][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.777227][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.784421][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.801435][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.820217][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.830132][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 84.867472][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.902638][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.910332][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 84.916375][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 84.922573][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 84.928600][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 84.940213][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.950879][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.967871][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.990837][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.030177][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.037782][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.056343][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.068503][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.075730][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.091321][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.111561][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.142995][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.150196][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.166062][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.176949][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.192163][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.204645][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.215962][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.228408][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.245984][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.256132][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.295902][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.305795][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.316989][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.324174][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.335487][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.344930][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.353581][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.360775][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.369223][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.378746][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.387411][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.400930][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.437934][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.446301][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.456190][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.464303][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.472995][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.483899][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.493773][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.501643][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.509114][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.520583][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.529187][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.543635][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.604699][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.618573][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.634358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.647759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.659158][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.675065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.685361][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.698799][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.716383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.727321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.742169][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.754298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.765387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.777237][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.791239][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.811289][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.828174][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.840323][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.880386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.899093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.991686][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.002345][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.039159][ T4283] device veth0_vlan entered promiscuous mode [ 86.061642][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.087699][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.126324][ T4283] device veth1_vlan entered promiscuous mode [ 86.213047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.230525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.267446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.278422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.298179][ T4283] device veth0_macvtap entered promiscuous mode [ 86.310729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.344036][ T4283] device veth1_macvtap entered promiscuous mode [ 86.413802][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.438810][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.458396][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.485234][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.530063][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.560272][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.582664][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.619844][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.628626][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.689721][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.748693][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.797983][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.811212][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.892483][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.910362][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.917896][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.926404][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 86.950252][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.964763][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.979989][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.988829][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.997306][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 87.003742][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 87.003958][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 87.010367][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 87.099218][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.139436][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.147052][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.194945][ T4274] device veth0_vlan entered promiscuous mode [ 87.221399][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.241993][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.260548][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.268826][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.321995][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.342070][ T4286] device veth0_vlan entered promiscuous mode [ 87.349434][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.349876][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.376949][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.386381][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.399428][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.409154][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.423612][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.433005][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.482586][ T4274] device veth1_vlan entered promiscuous mode [ 87.509119][ T4286] device veth1_vlan entered promiscuous mode [ 87.518391][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.528140][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.537707][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.548496][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.567398][ T4284] device veth0_vlan entered promiscuous mode [ 87.591449][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.611074][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.646009][ T4284] device veth1_vlan entered promiscuous mode [ 87.664010][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.673720][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.681929][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.693152][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.703332][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.715494][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.724322][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.734276][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.750356][ T4276] device veth0_vlan entered promiscuous mode [ 87.765635][ T4274] device veth0_macvtap entered promiscuous mode [ 87.782887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.793037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.810140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.818966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.847159][ T4274] device veth1_macvtap entered promiscuous mode [ 87.859318][ T4286] device veth0_macvtap entered promiscuous mode [ 87.868468][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.880420][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.889037][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.898619][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.908316][ T4276] device veth1_vlan entered promiscuous mode [ 87.928796][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.943146][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.956001][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.966488][ T4286] device veth1_macvtap entered promiscuous mode [ 88.006278][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.022438][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.037245][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.053396][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.062718][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.072119][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.093645][ T4284] device veth0_macvtap entered promiscuous mode [ 88.104279][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.116235][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.131386][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.148215][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158714][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.172248][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.181882][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.198153][ T4284] device veth1_macvtap entered promiscuous mode [ 88.206296][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.217632][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.226101][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.236348][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.246719][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.266908][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.280380][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.291674][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.303228][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.315296][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.329826][ T3600] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.356426][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.367101][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.385166][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.397824][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.413401][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.424434][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.436819][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.452402][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.462283][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472897][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.482242][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.495354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.506160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.524355][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.535584][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.546562][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.560254][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.570771][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.583893][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.594573][ T3600] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.604149][ T3600] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.616287][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.626091][ T3600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.635379][ T3600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.646738][ T3600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.671515][ T4276] device veth0_macvtap entered promiscuous mode [ 88.683991][ T3600] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.698277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.706499][ T3600] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.715386][ T3600] usb 2-1: Product: syz [ 88.719949][ T3600] usb 2-1: Manufacturer: syz [ 88.726390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.743803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.758097][ T3600] cdc_wdm 2-1:1.0: skipping garbage [ 88.758190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.764232][ T3600] cdc_wdm 2-1:1.0: skipping garbage [ 88.774395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.788487][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.805793][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.816817][ T3600] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 88.822845][ T3600] cdc_wdm 2-1:1.0: Unknown control protocol [ 88.829969][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.845803][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.856337][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.867074][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.879111][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.892932][ T4276] device veth1_macvtap entered promiscuous mode [ 88.903913][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.914811][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.924030][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.957171][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.973823][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.987454][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.996408][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 89.002772][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.028800][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.044363][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.070659][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 89.070679][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 89.076710][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 89.076775][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 89.109642][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.121069][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.133524][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.143812][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.155132][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.165755][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.176731][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.193253][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.206628][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.224298][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.266116][ T4322] usb 2-1: USB disconnect, device number 2 [ 89.280584][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.305736][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.319423][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.338635][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.348582][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.362343][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.372645][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.383397][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.393961][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.404843][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.416638][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.445593][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.460167][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.472004][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.481332][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.492419][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.506804][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.532411][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553263][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.580912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.613075][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.622553][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.630995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.729833][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.737727][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.775556][ T4374] [U]  [ 89.778563][ T4374] [U] K{ [ 89.780917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.810989][ T4374] [U] t 1ŠFfˊ`GJgo/mC [ 89.817383][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.831559][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.839260][ T4374] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 89.861753][ T4374] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 89.877497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.886431][ T4374] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 89.950298][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.965881][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.992899][ T4374] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 90.032151][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.041842][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051600][ T4374] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 90.063085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.072073][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.080114][ T4374] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 90.115809][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.153182][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.162169][ T4374] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 90.420067][ T4380] binder_alloc: 4379: binder_alloc_buf, no vma [ 90.452443][ T4382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.459964][ T4374] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 90.461346][ T4382] bridge0: port 3(bond1) entered blocking state [ 90.475214][ T4382] bridge0: port 3(bond1) entered disabled state [ 90.485266][ T4382] device bond1 entered promiscuous mode [ 90.487773][ T4387] loop7: detected capacity change from 0 to 16384 [ 90.492727][ T4382] bridge0: port 3(bond1) entered blocking state [ 90.504147][ T4382] bridge0: port 3(bond1) entered forwarding state [ 90.527242][ T4388] loop2: detected capacity change from 0 to 7 [ 90.532019][ T4374] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 90.548651][ T4388] Dev loop2: unable to read RDB block 7 [ 90.556218][ T4388] loop2: AHDI p1 p2 p3 [ 90.560518][ T4388] loop2: partition table partially beyond EOD, truncated [ 90.566590][ T56] bridge0: port 3(bond1) entered disabled state [ 90.570628][ T4388] loop2: p1 start 1601398130 is beyond EOD, truncated [ 90.581104][ T4388] loop2: p2 start 1702059890 is beyond EOD, truncated [ 90.609516][ T4374] [U] 22Ʃx?0;3u [ 90.613805][ T4374] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 90.770948][ T125] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.785595][ T4374] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 90.795877][ T4374] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 90.806867][ T4374] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 90.826102][ T4374] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 90.890736][ T4374] [U] ec [ 90.893940][ T4374] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 90.959033][ T4374] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 90.969753][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 90.981837][ T4387] loop7: detected capacity change from 16384 to 0 [ 91.010422][ T125] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 91.049698][ T125] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 91.058383][ T125] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.059931][ T4396] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9'. [ 91.103989][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.139757][ T4396] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 91.146006][ T125] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.183955][ T125] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.249581][ T125] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.258712][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.321869][ T125] usb 2-1: config 0 descriptor?? [ 91.350129][ T4400] device syzkaller0 entered promiscuous mode [ 91.548171][ T125] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.793223][ T14] cfg80211: failed to load regulatory.db [ 91.810955][ T4326] usb 2-1: USB disconnect, device number 3 [ 91.826619][ T4326] usblp0: removed [ 92.750468][ T4339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.949570][ T4339] usb 3-1: Using ep0 maxpacket: 8 [ 92.962687][ T4339] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 92.996266][ T4339] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 93.016460][ T4339] usb 3-1: config 3 has no interface number 0 [ 93.033501][ T4339] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.068417][ T4339] usb 3-1: config 3 interface 45 has no altsetting 0 [ 93.103083][ T4339] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 93.131771][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.140361][ T4339] usb 3-1: Product: syz [ 93.144667][ T4339] usb 3-1: Manufacturer: syz [ 93.151453][ T4339] usb 3-1: SerialNumber: syz [ 93.625657][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.696686][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.021010][ T4440] binder_alloc: 4439: binder_alloc_buf, no vma [ 94.087850][ T4441] binder_alloc: 4439: binder_alloc_buf, no vma [ 94.458624][ T4445] [U]  [ 94.461476][ T4445] [U] K{ [ 94.476058][ T4445] [U] t 1ŠFfˊ`GJgo/mC [ 94.488213][ T4445] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 94.514445][ T4445] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 94.546644][ T4339] usb 3-1: USB disconnect, device number 2 [ 94.547500][ T4445] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 94.756211][ T4445] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 94.862791][ T4445] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 94.911212][ T4445] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 95.031816][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.058463][ T4445] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 95.592854][ T4445] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 95.635298][ T4445] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 95.688459][ T4445] [U] 22Ʃx?0;3u [ 95.706549][ T4445] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 95.744305][ T4445] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 95.776602][ T4445] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 95.788945][ T4460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.25'. [ 95.813190][ T4445] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 95.834163][ T4445] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 95.867323][ T4445] [U] ec [ 95.870516][ T4445] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 95.898315][ T4445] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 95.989751][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.148110][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.156444][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.183915][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 96.194423][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.217335][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.239442][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.258799][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.288703][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.313757][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.343846][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.361206][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.388495][ T7] usb 5-1: config 0 descriptor?? [ 96.610896][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.888358][ T125] usb 5-1: USB disconnect, device number 2 [ 96.921744][ T125] usblp0: removed [ 97.189134][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.303937][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.298296][ T4453] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.313660][ T4453] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.324028][ T4453] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.340273][ T4453] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.526525][ T4470] device syzkaller0 entered promiscuous mode [ 98.562955][ T4476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.576300][ T4476] bridge0: port 3(bond1) entered blocking state [ 98.592923][ T4476] bridge0: port 3(bond1) entered disabled state [ 98.601853][ T4476] device bond1 entered promiscuous mode [ 98.607885][ T4476] bridge0: port 3(bond1) entered blocking state [ 98.614323][ T4476] bridge0: port 3(bond1) entered forwarding state [ 98.902811][ T4489] binder_alloc: 4488: binder_alloc_buf, no vma [ 99.253110][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 99.380202][ T4278] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 99.557340][ T56] bridge0: port 3(bond1) entered disabled state [ 99.628181][ T4509] loop2: detected capacity change from 0 to 7 [ 99.678917][ T4366] Dev loop2: unable to read RDB block 7 [ 99.688593][ T4366] loop2: unable to read partition table [ 99.725867][ T4366] loop2: partition table beyond EOD, truncated [ 99.753113][ T4509] Dev loop2: unable to read RDB block 7 [ 99.784933][ T4509] loop2: unable to read partition table [ 99.807868][ T4509] loop2: partition table beyond EOD, truncated [ 99.853863][ T4509] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 100.828986][ T4525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.40'. [ 101.384792][ T4532] device syzkaller0 entered promiscuous mode [ 101.945198][ T4538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.036128][ T4538] bridge0: port 3(bond1) entered blocking state [ 102.127115][ T4538] bridge0: port 3(bond1) entered disabled state [ 102.186099][ T4538] device bond1 entered promiscuous mode [ 102.237269][ T4538] bridge0: port 3(bond1) entered blocking state [ 102.243929][ T4538] bridge0: port 3(bond1) entered forwarding state [ 102.307710][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 102.378350][ T4547] device syzkaller0 entered promiscuous mode [ 102.757878][ T9] bridge0: port 3(bond1) entered disabled state [ 103.275722][ T4568] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.288016][ T4596] device syzkaller0 entered promiscuous mode [ 105.177842][ T4610] device syzkaller0 entered promiscuous mode [ 105.218838][ T4610] tipc: Started in network mode [ 105.244185][ T4610] tipc: Node identity 66bf175ca804, cluster identity 4711 [ 105.284641][ T4610] tipc: Enabled bearer , priority 0 [ 105.344621][ T4610] tipc: Resetting bearer [ 105.430013][ T4610] tipc: Disabling bearer [ 106.051843][ T4621] loop2: detected capacity change from 0 to 7 [ 106.094304][ T4621] Dev loop2: unable to read RDB block 7 [ 106.100675][ T4621] loop2: unable to read partition table [ 106.106518][ T4621] loop2: partition table beyond EOD, truncated [ 106.143584][ T4621] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 106.288783][ T4625] device syzkaller0 entered promiscuous mode [ 106.917291][ T4636] xt_recent: Unsupported userspace flags (000000b1) [ 106.935875][ T4633] kvm: pic: non byte write [ 107.229763][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.329380][ T4641] binder: BINDER_SET_CONTEXT_MGR already set [ 107.336715][ T4641] binder: 4640:4641 ioctl 4018620d 200000001000 returned -16 [ 107.442151][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 107.457594][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.501838][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.549596][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.597150][ T22] usb 5-1: config 0 descriptor?? [ 107.628183][ T4636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.645765][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 107.845819][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.909139][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.101323][ T4653] capability: warning: `syz.1.85' uses deprecated v2 capabilities in a way that may be insecure [ 108.402179][ T4658] device syzkaller0 entered promiscuous mode [ 109.554697][ T4679] kvm: pic: non byte write [ 109.978656][ T4367] usb 5-1: USB disconnect, device number 3 [ 111.433959][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 111.899442][ T4729] input: syz1 as /devices/virtual/input/input5 [ 113.361192][ T4692] tipc: Started in network mode [ 113.366154][ T4692] tipc: Node identity 92eac893d0c6, cluster identity 4711 [ 113.419873][ T4692] tipc: Enabled bearer , priority 0 [ 113.459858][ T4694] device syzkaller0 entered promiscuous mode [ 113.545286][ T4738] device syzkaller0 entered promiscuous mode [ 114.371025][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.583098][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 114.612156][ T22] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 114.621442][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.635728][ T22] usb 4-1: Product: syz [ 114.640011][ T22] usb 4-1: Manufacturer: syz [ 114.644653][ T22] usb 4-1: SerialNumber: syz [ 114.924527][ T22] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 114.955283][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.975493][ T22] usb 4-1: USB disconnect, device number 2 [ 115.642994][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 115.775693][ T4694] tipc: Resetting bearer [ 115.841911][ T4694] tipc: Disabling bearer [ 115.903335][ T4748] device syzkaller0 entered promiscuous mode [ 116.279626][ T3600] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.479658][ T3600] usb 3-1: Using ep0 maxpacket: 8 [ 116.488860][ T3600] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 116.504752][ T3600] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 116.514092][ T3600] usb 3-1: config 3 has no interface number 0 [ 116.521746][ T3600] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.535836][ T3600] usb 3-1: config 3 interface 45 has no altsetting 0 [ 116.545883][ T3600] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 116.555383][ T3600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.563891][ T3600] usb 3-1: Product: syz [ 116.568222][ T3600] usb 3-1: Manufacturer: syz [ 116.573399][ T3600] usb 3-1: SerialNumber: syz [ 116.884581][ T3600] usb 3-1: USB disconnect, device number 3 [ 117.032658][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.614615][ T4367] tipc: Node number set to 1110231187 [ 117.694388][ T4804] device syzkaller0 entered promiscuous mode [ 117.750431][ T4798] tipc: Started in network mode [ 117.795321][ T4798] tipc: Node identity 3a026c6ee2a1, cluster identity 4711 [ 117.809061][ T4798] tipc: Enabled bearer , priority 0 [ 118.016483][ T4798] tipc: Resetting bearer [ 118.131679][ T4798] tipc: Disabling bearer [ 118.408607][ T4827] device syzkaller0 entered promiscuous mode [ 118.421785][ T4828] device syzkaller0 entered promiscuous mode [ 118.913407][ T4837] device syzkaller0 entered promiscuous mode [ 119.085507][ T4839] netlink: 48 bytes leftover after parsing attributes in process `syz.2.127'. [ 119.138393][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 119.218596][ T4848] binder: BINDER_SET_CONTEXT_MGR already set [ 119.246909][ T4848] binder: 4844:4848 ioctl 4018620d 200000001000 returned -16 [ 119.615884][ T4859] tipc: Enabled bearer , priority 0 [ 119.636018][ T4859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.137'. [ 119.680236][ T4859] tipc: Resetting bearer [ 119.730682][ T4858] tipc: Disabling bearer [ 119.836533][ T4863] device syzkaller0 entered promiscuous mode [ 120.446859][ T4879] binder: BINDER_SET_CONTEXT_MGR already set [ 120.453144][ T4879] binder: 4878:4879 ioctl 4018620d 200000001000 returned -16 [ 120.517721][ T4881] device syzkaller0 entered promiscuous mode [ 120.757573][ T4887] xt_connbytes: Forcing CT accounting to be enabled [ 120.777932][ T4887] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 120.935660][ T4894] device syzkaller0 entered promiscuous mode [ 120.971751][ T4895] kvm: pic: non byte write [ 121.637698][ T4909] Zero length message leads to an empty skb [ 121.660276][ T4909] device syzkaller0 entered promiscuous mode [ 121.741675][ T4912] device syzkaller0 entered promiscuous mode [ 121.946394][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 122.296011][ T26] audit: type=1326 audit(1782574744.213:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.356149][ T26] audit: type=1326 audit(1782574744.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.392788][ T26] audit: type=1326 audit(1782574744.243:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.448810][ T4929] device syzkaller0 entered promiscuous mode [ 122.478406][ T26] audit: type=1326 audit(1782574744.243:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.507900][ T26] audit: type=1326 audit(1782574744.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.533388][ T26] audit: type=1326 audit(1782574744.243:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.640949][ T26] audit: type=1326 audit(1782574744.243:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.717750][ T4931] process 'syz.4.164' launched './file2' with NULL argv: empty string added [ 122.746432][ T26] audit: type=1326 audit(1782574744.243:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.792823][ T4935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.896030][ T26] audit: type=1326 audit(1782574744.243:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 122.926389][ T26] audit: type=1326 audit(1782574744.243:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.164" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 123.477867][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 123.553134][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.603087][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.644402][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.699401][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.726322][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.788620][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.809567][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.913601][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.013535][ T4950] device vlan2 entered promiscuous mode [ 124.099675][ T4950] device batadv_slave_0 entered promiscuous mode [ 124.189282][ T4978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.172'. [ 124.763359][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 125.017145][ T4993] device syzkaller0 entered promiscuous mode [ 125.322885][ T4999] tipc: Enabled bearer , priority 0 [ 125.335239][ T4999] device syzkaller0 entered promiscuous mode [ 125.393958][ T5001] device syzkaller0 entered promiscuous mode [ 125.422773][ T4999] netem: change failed [ 125.437701][ T4999] tipc: Resetting bearer [ 125.453933][ T5005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.181'. [ 125.463722][ T5001] netem: change failed [ 125.469756][ T5001] tipc: Started in network mode [ 125.493710][ T5001] tipc: Node identity fa5253116654, cluster identity 4711 [ 125.508855][ T5001] tipc: Enabled bearer , priority 0 [ 125.527964][ T4998] tipc: Resetting bearer [ 125.560850][ T4998] tipc: Disabling bearer [ 125.623448][ T5000] tipc: Resetting bearer [ 125.687842][ T5000] tipc: Disabling bearer [ 126.095384][ T5019] device syzkaller0 entered promiscuous mode [ 126.302334][ T5023] device syzkaller0 entered promiscuous mode [ 126.341525][ T5023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.188'. [ 126.413028][ T5027] tipc: Enabling of bearer rejected, failed to enable media [ 126.556148][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 126.964608][ T5038] device syzkaller0 entered promiscuous mode [ 127.121172][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 127.131708][ T5043] device syzkaller0 entered promiscuous mode [ 127.234782][ T5055] loop2: detected capacity change from 0 to 7 [ 127.243757][ T4366] Dev loop2: unable to read RDB block 7 [ 127.255680][ T4366] loop2: unable to read partition table [ 127.255936][ T4278] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 127.327514][ T4366] loop2: partition table beyond EOD, truncated [ 127.384891][ T5055] Dev loop2: unable to read RDB block 7 [ 127.405539][ T5059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.199'. [ 127.408119][ T5055] loop2: unable to read partition table [ 127.472536][ T5055] loop2: partition table beyond EOD, truncated [ 127.490254][ T5055] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 127.592043][ T5061] device syzkaller0 entered promiscuous mode [ 127.782978][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 127.857704][ T5071] device syzkaller0 entered promiscuous mode [ 127.904452][ T5071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.203'. [ 128.349106][ T5080] device syzkaller0 entered promiscuous mode [ 128.724728][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 128.845888][ T4278] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 129.037199][ T5102] device syzkaller0 entered promiscuous mode [ 129.346447][ T5113] device syzkaller0 entered promiscuous mode [ 129.366796][ T5113] __nla_validate_parse: 2 callbacks suppressed [ 129.366812][ T5113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.220'. [ 129.484512][ T5119] device syzkaller0 entered promiscuous mode [ 130.311078][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 130.565208][ T5145] binder: BINDER_SET_CONTEXT_MGR already set [ 130.597488][ T5145] binder: 5144:5145 ioctl 4018620d 200000001000 returned -16 [ 130.643933][ T5148] netlink: 68 bytes leftover after parsing attributes in process `syz.3.235'. [ 130.883226][ T5152] device syzkaller0 entered promiscuous mode [ 132.109759][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.117329][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.752811][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759688][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.046445][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.102592][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.384935][ T5201] netlink: 68 bytes leftover after parsing attributes in process `syz.3.251'. [ 133.955580][ T5160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.964813][ T5160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.974148][ T5160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.983594][ T5160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.288556][ T5206] device syzkaller0 entered promiscuous mode [ 134.487580][ T5226] binder: BINDER_SET_CONTEXT_MGR already set [ 134.526035][ T5226] binder: 5225:5226 ioctl 4018620d 200000001000 returned -16 [ 137.054411][ T5246] tipc: Enabling of bearer rejected, failed to enable media [ 137.069323][ T5267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.259'. [ 137.102226][ T5262] device syzkaller0 entered promiscuous mode [ 137.539155][ T5287] device syzkaller0 entered promiscuous mode [ 137.663686][ T4339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.750219][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.890306][ T4339] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 137.921211][ T4339] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 137.939631][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 137.948041][ T14] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 137.953225][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.970187][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.977100][ T14] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 137.996165][ T4339] usb 2-1: Product: syz [ 137.998646][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.010666][ T4339] usb 2-1: Manufacturer: syz [ 138.027642][ T4339] usb 2-1: SerialNumber: syz [ 138.048923][ T14] usb 5-1: config 0 descriptor?? [ 138.060633][ T5289] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 138.323967][ T5309] tipc: Enabling of bearer rejected, failed to enable media [ 138.343007][ T4339] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 138.370564][ T4339] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 138.424149][ T4339] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 138.456367][ T4339] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 138.487718][ T4339] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 138.505806][ T5311] ALSA: mixer_oss: invalid OSS volume '' [ 138.548016][ T4339] lan78xx: probe of 2-1:1.0 failed with error -71 [ 138.548255][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.596491][ T4339] usb 2-1: USB disconnect, device number 4 [ 138.613063][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.660028][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.669593][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.676615][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.729510][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.736560][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.768836][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.792548][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.800236][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.807561][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.824299][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.839534][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.854388][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.876410][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.883584][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.905262][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.926568][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.947738][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.968634][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.978244][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 138.992159][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.002365][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.013154][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.022713][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.034544][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.049644][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.057889][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.066040][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.085100][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.105182][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.131774][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.145889][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.154031][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.167046][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.174479][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.194539][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.206015][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.219976][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.234878][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.251985][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.267840][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.282994][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.298089][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.314239][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.328137][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.344266][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.357212][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.372119][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.386973][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.402173][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.419563][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.426635][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.441027][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.448067][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.465679][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.473235][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.480297][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.487297][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.494390][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.501479][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.508489][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.515586][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.522708][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.529789][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.536798][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.544728][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.551939][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.558946][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.568915][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.576932][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.587594][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.595581][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.605723][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.613762][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.624283][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.632232][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.639251][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.647337][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.656857][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.663916][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.671168][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.678200][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.686940][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.694048][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.701396][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.708462][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.715671][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.722785][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.729965][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.737051][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.744332][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.752002][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.759115][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.766249][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.773365][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.780444][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.787488][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.795242][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.802353][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.809345][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x4 [ 139.816393][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.823445][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.830520][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.837520][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.844610][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.852641][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.859722][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.868977][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.876317][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.886583][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.893656][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.900893][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.907887][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.914971][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.922001][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.928973][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.936029][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.944541][ T14] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 139.951801][ T14] hid_mf 0003:0079:1801.0001: unexpected long global item [ 139.960308][ T14] hid_mf 0003:0079:1801.0001: HID parse failed. [ 139.966622][ T14] hid_mf: probe of 0003:0079:1801.0001 failed with error -22 [ 140.215398][ T5330] device syzkaller0 entered promiscuous mode [ 140.223667][ T7] usb 5-1: USB disconnect, device number 4 [ 140.350641][ T5344] xt_recent: Unsupported userspace flags (000000b1) [ 140.669654][ T4325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.881456][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 140.915561][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.966304][ T4325] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.998075][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.026082][ T4325] usb 2-1: config 0 descriptor?? [ 141.032097][ T5344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.045904][ T4325] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.268774][ T5344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.289842][ T5344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.501050][ T5338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.279'. [ 142.887891][ T5383] ALSA: mixer_oss: invalid OSS volume '' [ 143.414424][ T4339] usb 2-1: USB disconnect, device number 5 [ 143.499779][ T4326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.646162][ T5400] tipc: Enabling of bearer rejected, failed to enable media [ 143.709869][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 143.736602][ T4326] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 143.763622][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.786408][ T4326] usb 3-1: Product: syz [ 143.800716][ T4326] usb 3-1: Manufacturer: syz [ 143.815686][ T4326] usb 3-1: SerialNumber: syz [ 144.069064][ T4326] snd-usb-audio: probe of 3-1:222.0 failed with error -71 [ 144.108068][ T4326] usb 3-1: USB disconnect, device number 4 [ 144.260341][ T5410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.303696][ T5414] device syzkaller0 entered promiscuous mode [ 144.344361][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.439927][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.629575][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 144.646487][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.675780][ T14] usb 4-1: config 0 has no interfaces? [ 144.681463][ T14] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 144.699581][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.729148][ T14] usb 4-1: config 0 descriptor?? [ 146.033876][ T5415] device syzkaller0 entered promiscuous mode [ 146.122885][ T5425] device syzkaller0 entered promiscuous mode [ 146.142866][ T5431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'. [ 146.342731][ T26] kauditd_printk_skb: 207 callbacks suppressed [ 146.342747][ T26] audit: type=1326 audit(1782574768.263:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.392431][ T26] audit: type=1326 audit(1782574768.303:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.430458][ T26] audit: type=1326 audit(1782574768.303:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.479609][ T26] audit: type=1326 audit(1782574768.303:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.519683][ T4263] usb 4-1: USB disconnect, device number 3 [ 146.546485][ T26] audit: type=1326 audit(1782574768.303:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.699584][ T26] audit: type=1326 audit(1782574768.303:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.807368][ T26] audit: type=1326 audit(1782574768.303:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.921048][ T26] audit: type=1326 audit(1782574768.303:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.956252][ T26] audit: type=1326 audit(1782574768.303:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 146.984107][ T26] audit: type=1326 audit(1782574768.303:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.4.299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38c99ce59 code=0x7ffc0000 [ 147.848876][ T5469] device syzkaller0 entered promiscuous mode [ 148.001155][ T5471] device syzkaller0 entered promiscuous mode [ 148.187068][ T5471] tipc: Enabling of bearer rejected, failed to enable media [ 148.483883][ T5478] device syzkaller0 entered promiscuous mode [ 148.550437][ T5478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.310'. [ 148.835184][ T5488] loop2: detected capacity change from 0 to 7 [ 148.912023][ T5488] Dev loop2: unable to read RDB block 7 [ 148.926958][ T5488] loop2: unable to read partition table [ 149.009785][ T5488] loop2: partition table beyond EOD, truncated [ 149.033432][ T5488] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 150.065218][ T5504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'. [ 150.086903][ T4278] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 150.259599][ T4325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.459588][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 150.468922][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.540773][ T4325] usb 2-1: config 0 has no interfaces? [ 150.557436][ T4325] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 150.576866][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.605961][ T4325] usb 2-1: config 0 descriptor?? [ 150.679307][ T5512] device syzkaller0 entered promiscuous mode [ 150.783457][ T5514] device syzkaller0 entered promiscuous mode [ 150.794332][ T5514] tipc: Enabling of bearer rejected, failed to enable media [ 151.070226][ T3535] usb 2-1: USB disconnect, device number 6 [ 151.102948][ T5523] binder: BINDER_SET_CONTEXT_MGR already set [ 151.116925][ T5523] binder: 5522:5523 ioctl 4018620d 200000001000 returned -16 [ 151.698527][ T5534] loop2: detected capacity change from 0 to 7 [ 151.731961][ T5534] Dev loop2: unable to read RDB block 7 [ 151.739825][ T4326] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.743693][ T5534] loop2: unable to read partition table [ 151.765700][ T5534] loop2: partition table beyond EOD, truncated [ 151.775673][ T5536] xt_recent: Unsupported userspace flags (000000b1) [ 151.794882][ T5534] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 151.944974][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 151.956202][ T4326] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 151.985272][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.998909][ T4326] usb 3-1: Product: syz [ 152.003332][ T4326] usb 3-1: Manufacturer: syz [ 152.008375][ T4326] usb 3-1: SerialNumber: syz [ 152.089963][ T4339] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.192367][ T5545] device syzkaller0 entered promiscuous mode [ 152.271677][ T4339] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 152.282651][ T4326] snd-usb-audio: probe of 3-1:222.0 failed with error -71 [ 152.287633][ T4326] usb 3-1: USB disconnect, device number 5 [ 152.309582][ T4339] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.361607][ T4339] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.382470][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.411717][ T4339] usb 5-1: config 0 descriptor?? [ 152.417535][ T5536] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 152.443883][ T4339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 152.498272][ T5549] device syzkaller0 entered promiscuous mode [ 152.520320][ T5549] tipc: Enabling of bearer rejected, failed to enable media [ 152.541166][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.640827][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.650331][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.782512][ T5553] device syzkaller0 entered promiscuous mode [ 152.824352][ T5553] tipc: Enabled bearer , priority 0 [ 152.842596][ T5552] tipc: Resetting bearer [ 152.902527][ T5552] tipc: Disabling bearer [ 153.371797][ T5575] loop2: detected capacity change from 0 to 7 [ 153.382398][ T5575] Dev loop2: unable to read RDB block 7 [ 153.388293][ T5575] loop2: unable to read partition table [ 153.395698][ T5575] loop2: partition table beyond EOD, truncated [ 153.407956][ T5575] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 153.429578][ T4339] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 153.465032][ T5578] device syzkaller0 entered promiscuous mode [ 153.609651][ T4339] usb 2-1: device descriptor read/64, error -71 [ 153.702780][ T5582] device syzkaller0 entered promiscuous mode [ 153.714451][ T5582] tipc: Enabling of bearer rejected, failed to enable media [ 153.889627][ T4339] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 154.000322][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 154.049595][ T4339] usb 2-1: device descriptor read/64, error -71 [ 154.129760][ T4326] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.184639][ T4339] usb usb2-port1: attempt power cycle [ 154.289541][ T4326] usb 3-1: device descriptor read/64, error -71 [ 154.385595][ T5593] device syzkaller0 entered promiscuous mode [ 154.396079][ T5593] tipc: Enabled bearer , priority 0 [ 154.407770][ T5592] tipc: Resetting bearer [ 154.446603][ T5592] tipc: Disabling bearer [ 154.569814][ T4326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.629575][ T4339] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 154.653540][ T5598] binder: 5597:5598 ioctl 4018620d 0 returned -22 [ 154.666603][ T4339] usb 2-1: device descriptor read/8, error -71 [ 154.709666][ T4325] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.729748][ T4326] usb 3-1: device descriptor read/64, error -71 [ 154.793471][ T4367] usb 5-1: USB disconnect, device number 5 [ 154.853073][ T4326] usb usb3-port1: attempt power cycle [ 154.877717][ T5603] device syzkaller0 entered promiscuous mode [ 154.899682][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 154.920351][ T4325] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 154.929704][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.937813][ T4325] usb 4-1: Product: syz [ 154.943775][ T4325] usb 4-1: Manufacturer: syz [ 154.948503][ T4325] usb 4-1: SerialNumber: syz [ 154.969568][ T4339] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 155.025026][ T4339] usb 2-1: device descriptor read/8, error -71 [ 155.161098][ T4339] usb usb2-port1: unable to enumerate USB device [ 155.192445][ T4325] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 155.222132][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.238553][ T4325] usb 4-1: USB disconnect, device number 4 [ 155.259570][ T4326] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.269374][ T5609] kvm: pic: non byte write [ 155.320342][ T4326] usb 3-1: device descriptor read/8, error -71 [ 155.584702][ T5613] device syzkaller0 entered promiscuous mode [ 155.590947][ T4326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.604827][ T5613] tipc: Enabling of bearer rejected, failed to enable media [ 155.637817][ T4326] usb 3-1: device descriptor read/8, error -71 [ 155.773559][ T4326] usb usb3-port1: unable to enumerate USB device [ 156.105061][ T5619] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 156.228346][ T5619] team0 (unregistering): Port device team_slave_0 removed [ 156.256446][ T5619] team0 (unregistering): Port device team_slave_1 removed [ 156.672047][ T5633] binder: 5632:5633 ioctl 4018620d 0 returned -22 [ 156.802404][ T5635] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 157.108881][ T5641] device syzkaller0 entered promiscuous mode [ 157.248461][ T5649] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 157.291364][ T5648] device syzkaller0 entered promiscuous mode [ 157.334572][ T5648] tipc: Enabling of bearer rejected, failed to enable media [ 157.767804][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 157.801365][ T5656] kvm: pic: non byte write [ 158.305567][ T5670] binder: 5669:5670 ioctl 4018620d 0 returned -22 [ 158.432944][ T5673] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 158.714979][ T5683] device syzkaller0 entered promiscuous mode [ 158.749912][ T4326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.919556][ T4326] usb 4-1: device descriptor read/64, error -71 [ 159.189512][ T4326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.274317][ T5697] binder: BINDER_SET_CONTEXT_MGR already set [ 159.305109][ T5697] binder: 5696:5697 ioctl 4018620d 200000001000 returned -16 [ 159.345089][ T4326] usb 4-1: device descriptor read/64, error -71 [ 159.470380][ T4326] usb usb4-port1: attempt power cycle [ 159.485489][ T5703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 159.595093][ T5709] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 159.643256][ T5705] kvm: pic: non byte write [ 159.654223][ T5711] device syzkaller0 entered promiscuous mode [ 159.665905][ T5711] tipc: Enabled bearer , priority 0 [ 159.674552][ T5710] tipc: Resetting bearer [ 159.720973][ T5710] tipc: Disabling bearer [ 159.889525][ T4326] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.934221][ T4326] usb 4-1: device descriptor read/8, error -71 [ 160.011547][ T5715] loop2: detected capacity change from 0 to 7 [ 160.045582][ T5715] Dev loop2: unable to read RDB block 7 [ 160.069780][ T5715] loop2: unable to read partition table [ 160.097144][ T5715] loop2: partition table beyond EOD, truncated [ 160.119918][ T5715] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 160.213289][ T5721] device syzkaller0 entered promiscuous mode [ 160.219827][ T4326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.248024][ T5722] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 160.260319][ T4326] usb 4-1: device descriptor read/8, error -71 [ 160.393650][ T4326] usb usb4-port1: unable to enumerate USB device [ 160.478025][ T5726] device syzkaller0 entered promiscuous mode [ 160.589338][ T5731] binder: BINDER_SET_CONTEXT_MGR already set [ 160.598637][ T5731] binder: 5730:5731 ioctl 4018620d 200000000100 returned -16 [ 160.614677][ T5731] binder: BINDER_SET_CONTEXT_MGR already set [ 160.623291][ T5731] binder: 5730:5731 ioctl 4018620d 200000001000 returned -16 [ 161.163802][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 162.394116][ T5768] [ 162.396521][ T5768] ============================================ [ 162.402788][ T5768] WARNING: possible recursive locking detected [ 162.409073][ T5768] syzkaller #0 Not tainted [ 162.413516][ T5768] -------------------------------------------- [ 162.419681][ T5768] syz.0.414/5768 is trying to acquire lock: [ 162.425593][ T5768] ffffffff8d3f3d98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 162.435745][ T5768] [ 162.435745][ T5768] but task is already holding lock: [ 162.443124][ T5768] ffffffff8d3f3d98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 162.453259][ T5768] [ 162.453259][ T5768] other info that might help us debug this: [ 162.461339][ T5768] Possible unsafe locking scenario: [ 162.461339][ T5768] [ 162.468800][ T5768] CPU0 [ 162.472092][ T5768] ---- [ 162.475422][ T5768] lock(qp_broker_list.mutex); [ 162.480311][ T5768] lock(qp_broker_list.mutex); [ 162.485205][ T5768] [ 162.485205][ T5768] *** DEADLOCK *** [ 162.485205][ T5768] [ 162.493380][ T5768] May be due to missing lock nesting notation [ 162.493380][ T5768] [ 162.501731][ T5768] 1 lock held by syz.0.414/5768: [ 162.506691][ T5768] #0: ffffffff8d3f3d98 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0xeb0 [ 162.517269][ T5768] [ 162.517269][ T5768] stack backtrace: [ 162.523199][ T5768] CPU: 1 PID: 5768 Comm: syz.0.414 Not tainted syzkaller #0 [ 162.530509][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.540600][ T5768] Call Trace: [ 162.543906][ T5768] [ 162.546861][ T5768] dump_stack_lvl+0x188/0x24e [ 162.551568][ T5768] ? show_regs_print_info+0x12/0x12 [ 162.556788][ T5768] ? load_image+0x410/0x410 [ 162.561333][ T5768] __lock_acquire+0x124e/0x7bd0 [ 162.566219][ T5768] ? __lock_acquire+0x7bd0/0x7bd0 [ 162.571285][ T5768] ? mark_lock+0x94/0x320 [ 162.575648][ T5768] ? verify_lock_unused+0x140/0x140 [ 162.580877][ T5768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.586939][ T5768] ? __lock_acquire+0x7bd0/0x7bd0 [ 162.592148][ T5768] ? lock_chain_count+0x20/0x20 [ 162.597035][ T5768] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 162.602963][ T5768] ? lockdep_hardirqs_on+0x94/0x140 [ 162.608204][ T5768] lock_acquire+0x1bb/0x4a0 [ 162.612742][ T5768] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 162.618149][ T5768] ? __might_sleep+0xd0/0xd0 [ 162.622770][ T5768] ? read_lock_is_recursive+0x10/0x10 [ 162.628180][ T5768] ? kasan_set_track+0x60/0x70 [ 162.632977][ T5768] ? kasan_save_free_info+0x27/0x40 [ 162.638199][ T5768] ? ____kasan_slab_free+0x126/0x1f0 [ 162.643510][ T5768] ? slab_free_freelist_hook+0x133/0x1b0 [ 162.649172][ T5768] ? vmci_ctx_put+0x5a6/0xc10 [ 162.653877][ T5768] ? vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 162.659712][ T5768] ? vmci_datagram_dispatch+0x449/0xc20 [ 162.665281][ T5768] __mutex_lock+0x12d/0xae0 [ 162.669812][ T5768] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 162.675211][ T5768] ? do_syscall_64+0x58/0xa0 [ 162.679827][ T5768] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.685925][ T5768] ? vmci_qp_broker_detach+0xe6/0xeb0 [ 162.691331][ T5768] ? mutex_lock_nested+0x10/0x10 [ 162.696298][ T5768] ? mark_lock+0x94/0x320 [ 162.700659][ T5768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.706668][ T5768] vmci_qp_broker_detach+0xe6/0xeb0 [ 162.711896][ T5768] ? kasan_quarantine_put+0xd4/0x210 [ 162.717204][ T5768] ? lockdep_hardirqs_on+0x94/0x140 [ 162.722431][ T5768] ? qp_notify_peer+0x1f0/0x1f0 [ 162.727311][ T5768] ? slab_free_freelist_hook+0x133/0x1b0 [ 162.732970][ T5768] ? vmci_ctx_put+0x5a6/0xc10 [ 162.737757][ T5768] ? __kmem_cache_free+0xb6/0x200 [ 162.742806][ T5768] vmci_ctx_put+0x605/0xc10 [ 162.747366][ T5768] ? vmci_ctx_put+0x13b/0xc10 [ 162.752071][ T5768] ? vmci_ctx_destroy+0xf0/0xf0 [ 162.756939][ T5768] ? __lock_acquire+0x7bd0/0x7bd0 [ 162.761989][ T5768] ? do_raw_spin_lock+0x128/0x2f0 [ 162.767037][ T5768] ? __rwlock_init+0x140/0x140 [ 162.771820][ T5768] ? do_raw_spin_unlock+0x11d/0x230 [ 162.777042][ T5768] vmci_ctx_enqueue_datagram+0x3bf/0x430 [ 162.782707][ T5768] vmci_datagram_dispatch+0x449/0xc20 [ 162.788104][ T5768] ? vmci_is_context_owner+0xd0/0xd0 [ 162.793413][ T5768] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.799421][ T5768] vmci_qp_broker_detach+0x875/0xeb0 [ 162.804735][ T5768] ? lockdep_hardirqs_on+0x94/0x140 [ 162.809958][ T5768] ? qp_notify_peer+0x1f0/0x1f0 [ 162.814848][ T5768] ? vmci_ctx_put+0x5a6/0xc10 [ 162.819546][ T5768] ? __kmem_cache_free+0xb6/0x200 [ 162.824592][ T5768] vmci_ctx_put+0x605/0xc10 [ 162.829121][ T5768] ? vmci_ctx_put+0x13b/0xc10 [ 162.833824][ T5768] ? vmci_ctx_destroy+0xf0/0xf0 [ 162.838699][ T5768] ? do_raw_spin_lock+0x128/0x2f0 [ 162.843749][ T5768] ? do_raw_spin_unlock+0x11d/0x230 [ 162.848970][ T5768] vmci_host_close+0x8d/0x140 [ 162.853677][ T5768] ? vmci_host_open+0xe0/0xe0 [ 162.858383][ T5768] __fput+0x20a/0x8b0 [ 162.862391][ T5768] task_work_run+0x1d0/0x260 [ 162.867005][ T5768] ? task_work_cancel+0x220/0x220 [ 162.872050][ T5768] ? __close_range+0x20c/0x770 [ 162.876836][ T5768] ? exit_to_user_mode_loop+0x3b/0x110 [ 162.882323][ T5768] exit_to_user_mode_loop+0xe6/0x110 [ 162.887639][ T5768] exit_to_user_mode_prepare+0xee/0x180 [ 162.893244][ T5768] syscall_exit_to_user_mode+0x16/0x40 [ 162.898735][ T5768] do_syscall_64+0x58/0xa0 [ 162.903179][ T5768] ? clear_bhb_loop+0x60/0xb0 [ 162.907877][ T5768] ? clear_bhb_loop+0x60/0xb0 [ 162.912574][ T5768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.918518][ T5768] RIP: 0033:0x7f438f59ce59 [ 162.922958][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.942618][ T5768] RSP: 002b:00007f43903a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 162.951063][ T5768] RAX: 0000000000000000 RBX: 00007f438f816090 RCX: 00007f438f59ce59 [ 162.959052][ T5768] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 162.967048][ T5768] RBP: 00007f438f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.975036][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.983022][ T5768] R13: 00007f438f816128 R14: 00007f438f816090 R15: 00007fffa9142d58 [ 162.991018][ T5768] [ 163.510409][ T5743] tipc: Enabling of bearer rejected, failed to enable media