last executing test programs: 7.759423414s ago: executing program 3 (id=95): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 7.605329639s ago: executing program 3 (id=98): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x40, 0xd, 0x7, "9e0c2d6ab96bde"}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x5, "fa54f22f92"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x4}}) 4.571789905s ago: executing program 3 (id=117): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208006535fb"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) 4.09701933s ago: executing program 1 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x2, 0x7ff, 0x9, 0x0, 0x0, 0x100000, 0x200000, '\x00', 0x9}) 4.043851572s ago: executing program 2 (id=124): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.008261613s ago: executing program 2 (id=125): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.977637444s ago: executing program 1 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x40000800, 0x5, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x80000000000, 0x80000000, 0xfffffffffffffffc, 0x7, 0x4, 0x5, 0x100000000001, 0x6], 0xeeee0000, 0x47f00}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.895770316s ago: executing program 2 (id=127): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x5, 0x1, "88"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001880)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x40, 0x5, 0x1, "a3"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000cc0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x5, 0x2, "1824"}}) 3.865704478s ago: executing program 1 (id=128): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 3.47948194s ago: executing program 0 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.52792882s ago: executing program 0 (id=140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x8, 0x19, 0x0, 0xffffffffffffffff}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd}}]}, 0xc4}}, 0x4004) 2.52775542s ago: executing program 3 (id=141): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x81) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"2552f348fd0fec528d59181f367eb559", 0x0, 0x0, {0x7fffffff, 0x401}, {0xf4, 0x800}, 0x1ff, [0x26c7b05b, 0x1, 0x10, 0x7, 0x8, 0x6, 0x6, 0x6, 0x7163, 0x5, 0x8, 0x7b, 0x7, 0xffffffffffffffff, 0xd0, 0x7a]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"6bf8bf5c19ebd5c245e89a50dfa1be51", 0x0, r1, {0x9}, {0x7f, 0x61}, 0x4, [0x1, 0x1ff, 0x9, 0xfffffffffffff001, 0x2e, 0x1bb1, 0x5, 0x2, 0x8000, 0x7f, 0x8, 0x3, 0xdb, 0x9, 0x5967]}) sendto$inet(r0, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) 2.375965965s ago: executing program 0 (id=143): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000032c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xf5\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\xbe(\xfb\x9c\xe3\xae{\xacdX%3m\x0f\xc2\xfe\xad\xb1[\xf1\x9e\x9d\xca+\x92\xfe\xb2\x96\x85\xcc\x04\xb5\x8e\xed\x1f\xf9w\'\xc3\a\x93\x89\x92\x0f\xc6\vg\x9f\xd0!4?\xb1\xa8e\xd3Zx<\t%\xda>\xb7\xe5\xc0gd\xc6YOw\xafG\r\xf4\x06N\x88\xb98X\x03]\xa02U\x87\xe0v\xab\xde\x91 g\xde\x80\xe2Y\xcdv\xe1\xa5\x98\x8e\xc3\x03\xc6\xbf0Z\xce\x13ZfuH\x1d\x9d\xf3\x03\xe1+\xe7X.\xd4\xd0L\xdf7\xac\xe4\x1e\xbe\xa1\x81\xd4\x11r \xd5~\x00\x05<\xddo=:u@\x80\x0fuP\x04:\xc8\x9e\n\x9d\x12;n\xe8\xa7k\xc2\x91\xd7\x93\xf4K\xa2\xc3\x7f\x8ay\xa6\xb7\x860\x8a7\"*\xc7 !D\xaa\x1e\x06\xa1\xfc\xe7D\x17\x89<,\xa9\x1b\x83\xb1\xdbs\x0e\x92\xb81\xb2O\xbd\xf4R\x8f\x8bg\x04\x872*\xf1y\xfe\xad\x1f\xea\x7f\x14\xc9*\xc5\xefl\xb2\x84\x01\xfbE\xf7\xec>\xcb\xbc\x02]\t\x01\xaf\n0\t`\x04n\xed\x83\xf7H\x8f\x13\xe9:mV=E\aq\x83e\xe4\xea^oe\x9d`\xfd]\x9c\xc5\x85\x8bs\xd5\xf5`J\xd7\xab\xe4\xd4\x8e\x938F_\xcdW*\x9e\x1aD\fQ\x83g\x9dk\xcbn\xa2|\xf7|\xab\x90\b\xd9\xb5c\xde\xc0\x80\xb4\xe2\r\x02\x1c\x1c\x88x\x1c\x11\xe8V\x7f\x9a$\x85Q\x7f\xe6\x18w\xf3M\"\xc3') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001d80)='\x00\x000/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2.234533689s ago: executing program 0 (id=145): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.023859736s ago: executing program 0 (id=147): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 1.984773427s ago: executing program 1 (id=149): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') preadv(r0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x8a9, 0x100) 1.851911132s ago: executing program 0 (id=151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000083"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0x6, 0xe, 0x80000000, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.851769772s ago: executing program 1 (id=152): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 1.666366147s ago: executing program 3 (id=154): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x2, 0x9, 0x85, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x44810) 1.656589487s ago: executing program 4 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.526404752s ago: executing program 3 (id=156): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.125173904s ago: executing program 2 (id=157): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x2b}) 916.382721ms ago: executing program 2 (id=158): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0xdc3, 0x4) 755.692286ms ago: executing program 2 (id=159): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x6, "708179e5e8c9"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x84, 0x4, "83d418c9"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 692.451328ms ago: executing program 4 (id=160): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 647.85095ms ago: executing program 4 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4, 0x6}, @window={0x3, 0x6, 0x7}, @window={0x3, 0x4, 0x8}, @window={0x3, 0x400, 0x4}, @window={0x3, 0x2, 0x6}, @sack_perm, @window={0x3, 0x324}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 543.860923ms ago: executing program 4 (id=162): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@empty, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4f}, {0x80, 0x1000000000, 0x800, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x404d3, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 522.209063ms ago: executing program 4 (id=163): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 404.685207ms ago: executing program 4 (id=164): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) 0s ago: executing program 1 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xa2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. syzkaller login: [ 59.629178][ T4176] cgroup: Unknown subsys name 'net' [ 59.747942][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.201075][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.570376][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.610555][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.635570][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.746327][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 62.792685][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.799794][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.809049][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.823255][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.830343][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.838712][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.846597][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.853920][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.861597][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.873033][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.880092][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.888041][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.896028][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903469][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.911131][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.924876][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.931979][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.940034][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.953561][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 63.014848][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.025754][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.044234][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.062854][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.074879][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.085668][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.107420][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.114877][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.122752][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.162409][ T4189] team0: Port device team_slave_0 added [ 63.168403][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.177050][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.185177][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.216797][ T4189] team0: Port device team_slave_1 added [ 63.225156][ T4195] team0: Port device team_slave_0 added [ 63.250145][ T4190] team0: Port device team_slave_0 added [ 63.257534][ T4195] team0: Port device team_slave_1 added [ 63.272310][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.281508][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.288810][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.297478][ T4201] device bridge_slave_0 entered promiscuous mode [ 63.311682][ T4190] team0: Port device team_slave_1 added [ 63.318388][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.325389][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.351348][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.365806][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.375429][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.382933][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.390592][ T4201] device bridge_slave_1 entered promiscuous mode [ 63.404813][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.411782][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.438399][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.457407][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.464508][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.490500][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.519582][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.526755][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.552718][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.590996][ T4199] team0: Port device team_slave_0 added [ 63.597527][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.604615][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.630767][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.661184][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.668208][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.676705][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.687719][ T4199] team0: Port device team_slave_1 added [ 63.694180][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.701135][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.727124][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.753492][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.793485][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.800270][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.806951][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.815173][ T4189] Cannot create hsr debugfs directory [ 63.840457][ T4201] team0: Port device team_slave_0 added [ 63.854185][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.861150][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.887121][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.903086][ T4201] team0: Port device team_slave_1 added [ 63.925931][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.933333][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.959561][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.001917][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.008943][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.016062][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.024039][ T4190] Cannot create hsr debugfs directory [ 64.049120][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.056181][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.082974][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.095175][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.102235][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.128235][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.177353][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.184398][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.190902][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.198844][ T4199] Cannot create hsr debugfs directory [ 64.291773][ T4201] device hsr_slave_0 entered promiscuous mode [ 64.298607][ T4201] device hsr_slave_1 entered promiscuous mode [ 64.305495][ T4178] Bluetooth: hci3: command 0x0409 tx timeout [ 64.311638][ T4178] Bluetooth: hci2: command 0x0409 tx timeout [ 64.312273][ T2299] Bluetooth: hci4: command 0x0409 tx timeout [ 64.324031][ T2299] Bluetooth: hci0: command 0x0409 tx timeout [ 64.325886][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.330054][ T2299] Bluetooth: hci1: command 0x0409 tx timeout [ 64.340093][ T4201] Cannot create hsr debugfs directory [ 64.516108][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.538162][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.550326][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.570609][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.613528][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.635350][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.644372][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.655483][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.716787][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.728761][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.746004][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.756020][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.839350][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.849803][ T4199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.876626][ T4199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.889458][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.900504][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.908195][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.917854][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.927776][ T4199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.946119][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.955232][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.965495][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.972714][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.985225][ T4199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.001376][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.014908][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.023280][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.064411][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.073364][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.081751][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.088830][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.097690][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.106415][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.115487][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.124193][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.133035][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.143096][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.151392][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.159793][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.168033][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.178471][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.203670][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.215871][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.226737][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.235910][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.245975][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.255740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.266047][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.273184][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.282603][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.293931][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.303991][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.326682][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.336186][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.346129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.356717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.370107][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.377234][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.407127][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.420028][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.432846][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.459062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.469910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.483346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.493545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.503691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.511583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.521351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.537349][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.546640][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.555294][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.565810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.576090][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.594929][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.604071][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.632609][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.641146][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.653940][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.661026][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.670409][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.678223][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.686555][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.695827][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.704729][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.711850][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.728396][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.740609][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.753871][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.763599][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.787064][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.817919][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.854246][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.892682][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.908819][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.917569][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.926663][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.935411][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.944957][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.955234][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.968195][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.984315][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.012737][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.019668][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.030319][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.041363][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.051231][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.060106][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.067228][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.076184][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.085338][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.094279][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.101334][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.113530][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.130341][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.167704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.180281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.195650][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.213223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.224158][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.250118][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.268862][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.277557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.288316][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.297688][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.307605][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.316744][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.325856][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.334103][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.348176][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.360864][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.382616][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 66.388679][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 66.391999][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 66.401286][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 66.402042][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.423555][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 66.431676][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.445460][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.454266][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.465024][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.472147][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.480050][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.488992][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.497701][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.504801][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.512771][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.521224][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.528798][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.569603][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.584159][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.593663][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.604177][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.614710][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.624388][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.635962][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.645190][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.653997][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.685910][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.694946][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.706775][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.716396][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.724962][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.739878][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.752641][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.791725][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.810724][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.827105][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.835713][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.844900][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.853229][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.861336][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.869124][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.877622][ T4195] device veth0_vlan entered promiscuous mode [ 66.885706][ T4189] device veth0_vlan entered promiscuous mode [ 66.901084][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.910632][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.919182][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.930160][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.946491][ T4195] device veth1_vlan entered promiscuous mode [ 66.956030][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.968548][ T4189] device veth1_vlan entered promiscuous mode [ 67.009190][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.017674][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.027030][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.036518][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.044794][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.055620][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.064311][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.071676][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.105945][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.118558][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.127341][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.136324][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.146270][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.156718][ T4189] device veth0_macvtap entered promiscuous mode [ 67.179938][ T4190] device veth0_vlan entered promiscuous mode [ 67.188262][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.196587][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.205021][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.215257][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.224141][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.233515][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.241581][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.250241][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.259042][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.267215][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.275126][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.284149][ T4189] device veth1_macvtap entered promiscuous mode [ 67.307573][ T4195] device veth0_macvtap entered promiscuous mode [ 67.319021][ T4199] device veth0_vlan entered promiscuous mode [ 67.333233][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.341351][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.352683][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.361197][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.372877][ T4195] device veth1_macvtap entered promiscuous mode [ 67.387455][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.397592][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.408026][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.417059][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.433512][ T4190] device veth1_vlan entered promiscuous mode [ 67.441157][ T4199] device veth1_vlan entered promiscuous mode [ 67.465272][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.476741][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.487818][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.496285][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.512060][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.520139][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.528553][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.539841][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.548665][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.557554][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.566406][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.575413][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.585296][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.594707][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.607057][ T4201] device veth0_vlan entered promiscuous mode [ 67.616890][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.628340][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.640110][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.652719][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661534][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672524][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.681252][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.693667][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.702531][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.710168][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.718854][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.735812][ T4201] device veth1_vlan entered promiscuous mode [ 67.747774][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.757384][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.769357][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.778757][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.787472][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.796241][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.818324][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.827673][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.843964][ T4199] device veth0_macvtap entered promiscuous mode [ 67.867702][ T4190] device veth0_macvtap entered promiscuous mode [ 67.878248][ T4190] device veth1_macvtap entered promiscuous mode [ 67.893466][ T4199] device veth1_macvtap entered promiscuous mode [ 67.952948][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.970592][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.982200][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.998299][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.007192][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.016028][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.027160][ T4201] device veth0_macvtap entered promiscuous mode [ 68.043213][ T4201] device veth1_macvtap entered promiscuous mode [ 68.050975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.062078][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072809][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.083293][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094303][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.130302][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.140497][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.149704][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.160600][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.175911][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.186654][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.196687][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.207367][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.217445][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.228527][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.239817][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.260119][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.272059][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.282483][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.293382][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.304956][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.325413][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.340583][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.350858][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.361360][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.371544][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.382606][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.392933][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.403486][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.415280][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.422872][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.431672][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.440914][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.449535][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.458998][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.469836][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.472622][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 68.486849][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.487815][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.495969][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.515731][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 68.516968][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522174][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 68.532127][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.537752][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 68.554653][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.554818][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 68.568781][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.582062][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.593179][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.606114][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.613816][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.615618][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.630905][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.642615][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.653102][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.663059][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.674571][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.684778][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.695264][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.707405][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.719441][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.727616][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.736322][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.745138][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.753448][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.761979][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.773561][ T4199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785223][ T4199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.794605][ T4199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.803540][ T4199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.815359][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824324][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.833498][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.842776][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.865309][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.877737][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.886815][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.895843][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.951960][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.966709][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.030503][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.039865][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.050670][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.058977][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.133444][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.141303][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.206941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.244477][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.277867][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.302716][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.319478][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.319781][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.361841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.371833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.381834][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.391832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.401840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.411832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.421829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.431830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.441828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.451828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.271801][ C0] sched: RT throttling activated [ 71.500952][ T4276] ODEBUG: Out of memory. ODEBUG disabled [ 71.523562][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 71.529671][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 71.535984][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 71.545751][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 71.546840][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.552177][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 71.558718][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.573521][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.629095][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.642667][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.650645][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.723374][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.731238][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.760067][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.796754][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.804770][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.825365][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.871869][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 72.253354][ T4274] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.874544][ T4194] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 76.001938][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.458852][ T4300] syz.1.9 (4300): drop_caches: 2 [ 81.009187][ T4324] syz.3.15 (4324): drop_caches: 2 [ 81.499509][ T4329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.590169][ T21] cfg80211: failed to load regulatory.db [ 82.409890][ T4347] fuse: Unknown parameter 'user_id00000000000000000000' [ 82.589716][ T4347] process 'syz.1.19' launched './file0' with NULL argv: empty string added [ 82.759903][ T4349] tipc: Started in network mode [ 82.920247][ T4358] Zero length message leads to an empty skb [ 82.926627][ T4349] tipc: Node identity 9e5e79eca7a1, cluster identity 4711 [ 82.938187][ T4349] tipc: Enabled bearer , priority 0 [ 82.949300][ T4359] device syzkaller0 entered promiscuous mode [ 84.301026][ T2299] tipc: Node number set to 973044204 [ 84.307043][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.452579][ T4349] tipc: Resetting bearer [ 84.602093][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 85.012121][ T4232] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 85.045049][ T4232] usb 2-1: can't read configurations, error -71 [ 85.371867][ T4367] fuse: Unknown parameter '0x0000000000000006' [ 86.892013][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.142046][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 87.262863][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 87.276544][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.307304][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.340107][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.374080][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.410648][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.429406][ T4348] tipc: Resetting bearer [ 87.526574][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.596525][ T4348] tipc: Disabling bearer [ 88.638905][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 88.647838][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 88.994021][ T4232] usb 2-1: USB disconnect, device number 4 [ 90.518557][ T4400] netlink: 'syz.4.31': attribute type 12 has an invalid length. [ 90.526364][ T4400] netlink: 'syz.4.31': attribute type 29 has an invalid length. [ 90.534187][ T4400] netlink: 148 bytes leftover after parsing attributes in process `syz.4.31'. [ 90.543220][ T4400] netlink: 59 bytes leftover after parsing attributes in process `syz.4.31'. [ 90.598185][ T4400] netlink: 'syz.4.31': attribute type 12 has an invalid length. [ 90.605997][ T4400] netlink: 'syz.4.31': attribute type 29 has an invalid length. [ 90.613805][ T4400] netlink: 148 bytes leftover after parsing attributes in process `syz.4.31'. [ 90.622879][ T4400] netlink: 59 bytes leftover after parsing attributes in process `syz.4.31'. [ 94.739387][ T4419] netlink: 'syz.3.37': attribute type 12 has an invalid length. [ 94.747204][ T4419] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 94.755004][ T4419] netlink: 148 bytes leftover after parsing attributes in process `syz.3.37'. [ 94.764012][ T4419] netlink: 59 bytes leftover after parsing attributes in process `syz.3.37'. [ 94.820208][ T4419] netlink: 'syz.3.37': attribute type 12 has an invalid length. [ 94.828068][ T4419] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 94.835863][ T4419] netlink: 148 bytes leftover after parsing attributes in process `syz.3.37'. [ 94.844942][ T4419] netlink: 59 bytes leftover after parsing attributes in process `syz.3.37'. [ 97.187937][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 100.273416][ T4454] fuse: Unknown parameter 'user_i00000000000000000000' [ 100.440360][ T4462] fuse: Unknown parameter 'user_i00000000000000000000' [ 101.711510][ T4474] overlayfs: failed to clone upperpath [ 101.851837][ T4268] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.884696][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.881240][ T4483] tipc: Started in network mode [ 103.891296][ T4483] tipc: Node identity 6e9ee48a448b, cluster identity 4711 [ 103.917394][ T4483] tipc: Enabled bearer , priority 0 [ 103.981596][ T4483] device syzkaller0 entered promiscuous mode [ 103.988384][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 104.115438][ T4228] usb 2-1: device descriptor read/all, error -71 [ 104.154799][ T4483] tipc: Resetting bearer [ 104.175062][ T4482] tipc: Resetting bearer [ 104.226757][ T4487] ======================================================= [ 104.226757][ T4487] WARNING: The mand mount option has been deprecated and [ 104.226757][ T4487] and is ignored by this kernel. Remove the mand [ 104.226757][ T4487] option from the mount to silence this warning. [ 104.226757][ T4487] ======================================================= [ 105.114871][ T4482] tipc: Disabling bearer [ 105.135561][ T4232] tipc: Node number set to 706077834 [ 108.121951][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.992062][ T21] usb 1-1: device descriptor read/64, error -71 [ 110.359987][ T4525] overlayfs: failed to clone upperpath [ 110.401613][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.562992][ T4516] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.622674][ T21] usb 1-1: device descriptor read/64, error -71 [ 110.753421][ T21] usb usb1-port1: attempt power cycle [ 110.982574][ T4516] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.004827][ T4516] usb 3-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 111.059654][ T4516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.079405][ T4516] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.232186][ T4516] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.254206][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.272530][ T4516] usb 3-1: Product: syz [ 111.292979][ T4516] usb 3-1: Manufacturer: syz [ 111.353059][ T4516] cdc_wdm 3-1:1.0: skipping garbage [ 111.369030][ T4516] cdc_wdm 3-1:1.0: skipping garbage [ 111.386723][ T4516] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 111.558403][ T4516] usb 3-1: USB disconnect, device number 4 [ 113.616188][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.460601][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 114.591871][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 115.573704][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 115.612016][ T26] audit: type=1800 audit(1781267513.051:2): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="/" dev="fuse" ino=4 res=0 errno=0 [ 115.651863][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.662123][ T4501] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.703122][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.733590][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.760766][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.779645][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.789827][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.872774][ T7] usb 1-1: can't set config #16, error -71 [ 115.884251][ T7] usb 1-1: USB disconnect, device number 5 [ 116.112150][ T4501] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.225023][ T4501] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.267078][ T4501] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.281045][ T4501] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 116.311024][ T4501] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 116.333065][ T4501] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.351112][ T4501] usb 3-1: config 1 interface 1 has no altsetting 0 [ 116.378233][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.384222][ T4611] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 116.589635][ T4624] device syzkaller1 entered promiscuous mode [ 116.657950][ T4501] usb 3-1: string descriptor 0 read error: -22 [ 116.664646][ T4501] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 116.674252][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.689918][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.771985][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.793566][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.813893][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.832406][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.841583][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.866620][ T7] usb 1-1: config 0 descriptor?? [ 116.941912][ T4516] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.081964][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.093013][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.102864][ T1108] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.112496][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.131973][ T1108] usb 5-1: config 0 descriptor?? [ 117.345591][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.354099][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.361522][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.367284][ T4516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.369265][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.400451][ T4516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.408540][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.417955][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.421915][ T4516] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.431426][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.451901][ T4516] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.452682][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.468441][ T4516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.473476][ T4516] usb 4-1: config 0 descriptor?? [ 117.483186][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.490675][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.504468][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.515646][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.525661][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.538004][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.548137][ T7] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 117.561301][ T7] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 117.595186][ T21] usb 3-1: USB disconnect, device number 5 [ 117.608552][ T7] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.822338][ T1108] usb 5-1: string descriptor 0 read error: -22 [ 117.853422][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.965293][ T4516] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 117.973686][ T7] usb 1-1: USB disconnect, device number 6 [ 117.994311][ T4516] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.261923][ T1108] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 118.270789][ T1108] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 118.278975][ T1108] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 118.288999][ T1108] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 118.296586][ T1108] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 118.309305][ T1108] usb 5-1: USB disconnect, device number 2 [ 118.349219][ T26] audit: type=1326 audit(1781267515.791:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad4ddfce59 code=0x0 [ 118.471876][ T4501] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.871974][ T4501] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.952122][ T4501] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 118.982075][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.081938][ T4516] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.121978][ T4501] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 119.131201][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.139354][ T4501] usb 3-1: Product: syz [ 119.143665][ T4501] usb 3-1: Manufacturer: syz [ 119.148275][ T4501] usb 3-1: SerialNumber: syz [ 119.342005][ T4516] usb 5-1: Using ep0 maxpacket: 16 [ 119.342175][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.358388][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.369500][ T1108] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 119.378970][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.399115][ T1108] usb 1-1: config 0 descriptor?? [ 119.482062][ T4516] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 119.490571][ T4516] usb 5-1: config 1 has no interface number 0 [ 119.505755][ T4516] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.512123][ T4501] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.521999][ T4516] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.525584][ T4670] netlink: 96 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.538988][ T4516] usb 5-1: config 1 interface 105 has no altsetting 0 [ 119.576099][ T4501] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 119.622302][ T4501] usb 3-1: unable to issue vendor read request (ret = -71) [ 119.643205][ T4501] usb 3-1: unable to issue vendor read request (ret = -71) [ 119.666406][ T4232] usb 4-1: USB disconnect, device number 2 [ 119.687439][ T4501] usb 3-1: unable to issue vendor read request (ret = -71) [ 119.722149][ T4516] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 119.741487][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.742850][ T4501] usb 3-1: unable to issue vendor read request (ret = -71) [ 119.758539][ T4516] usb 5-1: Product: syz [ 119.772363][ T4516] usb 5-1: Manufacturer: syz [ 119.777359][ T4516] usb 5-1: SerialNumber: syz [ 119.804919][ T4501] usb 3-1: USB disconnect, device number 6 [ 119.842504][ T4658] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 119.854655][ T4658] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 119.882528][ T1108] hid (null): report_id 1863148486 is invalid [ 119.887845][ T4683] kvm: pic: level sensitive irq not supported [ 119.889006][ T4683] kvm: pic: non byte write [ 119.892340][ T1108] hid-led 0003:27B8:01ED.0004: report_id 1863148486 is invalid [ 119.910954][ T1108] hid-led 0003:27B8:01ED.0004: item 0 4 1 8 parsing failed [ 119.932258][ T1108] hid-led: probe of 0003:27B8:01ED.0004 failed with error -22 [ 120.044157][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.071874][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.098743][ T7] usb 1-1: USB disconnect, device number 7 [ 120.142717][ T4516] aqc111: probe of 5-1:1.105 failed with error -71 [ 120.178100][ T4516] usb 5-1: USB disconnect, device number 3 [ 120.319543][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 120.442025][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.454235][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.464194][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.473434][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.483323][ T4232] usb 4-1: config 0 descriptor?? [ 120.526467][ T4232] hub 4-1:0.0: USB hub found [ 120.656716][ T4235] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.741895][ T4268] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.741923][ T4232] hub 4-1:0.0: 1 port detected [ 121.003173][ T4268] usb 2-1: Using ep0 maxpacket: 8 [ 121.122134][ T4268] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.131527][ T4268] usb 2-1: config 179 has no interface number 0 [ 121.141580][ T4268] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.158300][ T4268] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.169963][ T4268] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.184410][ T4268] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 121.196628][ T4268] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.201630][ T4232] usb 4-1: USB disconnect, device number 3 [ 121.211179][ T4268] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.227628][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.272697][ T4235] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 121.282466][ T4709] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 121.299745][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.328879][ T4235] usb 3-1: Product: syz [ 121.334999][ T4235] usb 3-1: Manufacturer: syz [ 121.340222][ T4235] usb 3-1: SerialNumber: syz [ 121.421250][ T4738] pit: kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 121.432139][ T4738] pit: kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 121.442142][ T4738] pit: kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 121.450863][ T4738] pit: kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 121.459725][ T4738] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 121.475440][ T4738] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 121.491687][ T4738] pit: kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 121.508449][ T4738] pit: kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 121.531647][ T4738] pit: kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 121.537277][ T4268] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 121.551938][ T4738] pit: kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 121.734043][ T4268] usb 2-1: USB disconnect, device number 7 [ 121.751863][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 121.760478][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.775439][ T4268] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 122.032076][ T4235] (unnamed net_device) (uninitialized): Assigned a random MAC address: f2:95:87:4e:e8:0d [ 122.112075][ T4235] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 122.752935][ T4232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.762004][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.007237][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 123.032089][ T4268] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.112200][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.128430][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.142180][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.152378][ C0] usb 3-1: Rx status -71 [ 123.156806][ C0] usb 3-1: eth1: intr status -71 [ 123.180551][ C0] usb 3-1: Rx status -71 [ 123.184888][ C0] usb 3-1: eth1: intr status -71 [ 123.191500][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.200453][ C0] usb 3-1: Rx status -71 [ 123.200524][ C0] usb 3-1: eth1: intr status -71 [ 123.210991][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.224336][ C0] usb 3-1: Rx status -71 [ 123.228651][ C0] usb 3-1: eth1: intr status -71 [ 123.234971][ T4232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.244316][ C0] usb 3-1: Rx status -71 [ 123.248624][ C0] usb 3-1: eth1: intr status -71 [ 123.269668][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.278479][ C0] usb 3-1: Rx status -71 [ 123.282794][ C0] usb 3-1: eth1: intr status -71 [ 123.297644][ T4232] usb 1-1: config 0 descriptor?? [ 123.302751][ C0] usb 3-1: Rx status -71 [ 123.307058][ C0] usb 3-1: eth1: intr status -71 [ 123.315666][ T4501] usb 3-1: USB disconnect, device number 7 [ 123.321847][ C0] usb 3-1: Rx status -71 [ 123.326140][ C0] usb 3-1: eth1: intr status -71 [ 123.412441][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.429459][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.441869][ T1108] usb 2-1: Product: syz [ 123.446125][ T1108] usb 2-1: Manufacturer: syz [ 123.460943][ T1108] usb 2-1: SerialNumber: syz [ 123.527690][ T4268] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.647738][ T4268] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 123.782057][ T1108] usb 2-1: 0:2 : does not exist [ 123.793827][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.808118][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.833663][ T1108] usb 2-1: USB disconnect, device number 8 [ 123.854151][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.884848][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.902489][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.922208][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.929649][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.931923][ T4268] usb 4-1: string descriptor 0 read error: -22 [ 123.937705][ T4501] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.952202][ T4268] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 123.957820][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.969308][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.975202][ T4830] page:ffffea00015f05c0 refcount:4 mapcount:1 mapping:ffff88807e6bcdf0 index:0x0 pfn:0x57c17 [ 123.983363][ T4232] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 123.987135][ T4830] memcg:ffff88802c18c000 [ 123.998753][ T4830] aops:shmem_aops ino:422 [ 123.999861][ T4232] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 124.003139][ T4830] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 124.003174][ T4830] raw: 00fff00000080015 ffffea00015f0c48 ffffea00015f1948 ffff88807e6bcdf0 [ 124.003191][ T4830] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88802c18c000 [ 124.003201][ T4830] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 124.003210][ T4830] page_owner tracks the page as allocated [ 124.003217][ T4830] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4831, ts 123970153988, free_ts 123880721818 [ 124.003243][ T4830] get_page_from_freelist+0x1bbd/0x1ca0 [ 124.003266][ T4830] __alloc_pages+0x1ee/0x480 [ 124.003283][ T4830] alloc_pages_vma+0x393/0x7c0 [ 124.003301][ T4830] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 124.023669][ T4232] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 124.029382][ T4830] shmem_getpage_gfp+0x14f4/0x2d40 [ 124.029410][ T4830] shmem_read_mapping_page_gfp+0x96/0x100 [ 124.029430][ T4830] udmabuf_create+0x895/0x1570 [ 124.029450][ T4830] udmabuf_ioctl+0x1f3/0x300 [ 124.118923][ T4830] __se_sys_ioctl+0xfa/0x170 [ 124.123545][ T4830] do_syscall_64+0x4c/0xa0 [ 124.127985][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.133910][ T4830] page last free stack trace: [ 124.138596][ T4830] free_unref_page_prepare+0x637/0x6c0 [ 124.144087][ T4830] free_unref_page_list+0x119/0x820 [ 124.149312][ T4830] release_pages+0x186c/0x1be0 [ 124.154098][ T4830] tlb_finish_mmu+0x1b4/0x370 [ 124.158801][ T4830] exit_mmap+0x3d0/0x640 [ 124.163077][ T4830] __mmput+0x115/0x3b0 [ 124.167165][ T4830] exit_mm+0x5f7/0x770 [ 124.171361][ T4830] do_exit+0x5a9/0x20c0 [ 124.175543][ T4830] do_group_exit+0x12e/0x300 [ 124.178198][ T4514] udevd[4514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.180155][ T4830] get_signal+0x6d6/0x12d0 [ 124.200331][ T4830] arch_do_signal_or_restart+0xe7/0x12c0 [ 124.205988][ T4830] exit_to_user_mode_loop+0x9e/0x130 [ 124.211290][ T4830] exit_to_user_mode_prepare+0xee/0x180 [ 124.216894][ T4830] syscall_exit_to_user_mode+0x16/0x40 [ 124.222383][ T4830] do_syscall_64+0x58/0xa0 [ 124.226835][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.232838][ T4830] ------------[ cut here ]------------ [ 124.238305][ T4830] kernel BUG at mm/filemap.c:166! [ 124.243355][ T4830] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 124.249437][ T4830] CPU: 1 PID: 4830 Comm: syz.4.164 Not tainted syzkaller #0 [ 124.256737][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.266921][ T4830] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 124.273358][ T4830] Code: e8 09 16 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 ba fb 0d 00 0f 0b e8 f3 15 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 a4 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 d8 15 db ff eb 5d e8 d1 15 db ff 4c 89 f7 [ 124.292988][ T4830] RSP: 0018:ffffc900032bf688 EFLAGS: 00010046 [ 124.299081][ T4830] RAX: d7572e771cbb3700 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.307172][ T4830] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000657ec4 [ 124.315163][ T4830] RBP: 1ffffd40002be0b9 R08: ffff8880b912795b R09: fffff52000657e80 [ 124.323149][ T4830] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea00015f05c0 [ 124.331129][ T4830] R13: dffffc0000000000 R14: ffffea00015f05c0 R15: ffffea00015f05c8 [ 124.339108][ T4830] FS: 0000555561b8a500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 124.348108][ T4830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.354689][ T4830] CR2: 0000200000000000 CR3: 0000000051524000 CR4: 00000000003506e0 [ 124.362663][ T4830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.370638][ T4830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.378762][ T4830] Call Trace: [ 124.382043][ T4830] [ 124.385004][ T4830] __delete_from_page_cache+0xbe/0x6d0 [ 124.390475][ T4830] ? _raw_spin_lock_irq+0x86/0xf0 [ 124.395510][ T4830] ? lockdep_hardirqs_off+0x70/0x100 [ 124.400796][ T4830] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 124.407827][ T4830] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.412945][ T4830] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.418492][ T4830] ? unmap_mapping_page+0x26b/0x320 [ 124.423691][ T4830] ? page_mapping+0x30e/0x440 [ 124.428367][ T4830] delete_from_page_cache+0x121/0x190 [ 124.433738][ T4830] truncate_inode_page+0x8d/0xb0 [ 124.438672][ T4830] shmem_undo_range+0x53c/0x1930 [ 124.443613][ T4830] ? __lock_acquire+0x13bc/0x7d10 [ 124.448637][ T4830] ? shmem_truncate_range+0xa0/0xa0 [ 124.453858][ T4830] ? do_raw_spin_lock+0x128/0x2f0 [ 124.458882][ T4830] ? __rwlock_init+0x140/0x140 [ 124.463644][ T4830] shmem_evict_inode+0x220/0xa40 [ 124.468580][ T4830] ? inode_wait_for_writeback+0x1df/0x220 [ 124.474299][ T4830] ? shmem_free_in_core_inode+0xb0/0xb0 [ 124.479928][ T4830] ? do_raw_spin_lock+0x128/0x2f0 [ 124.484948][ T4830] ? bit_waitqueue+0x30/0x30 [ 124.489540][ T4830] ? do_raw_spin_unlock+0x11d/0x230 [ 124.494736][ T4830] ? shmem_free_in_core_inode+0xb0/0xb0 [ 124.500279][ T4830] evict+0x4c9/0x8d0 [ 124.504177][ T4830] ? proc_nr_inodes+0x320/0x320 [ 124.509031][ T4830] ? do_raw_spin_unlock+0x11d/0x230 [ 124.514233][ T4830] ? _raw_spin_unlock+0x24/0x40 [ 124.519084][ T4830] __dentry_kill+0x431/0x650 [ 124.523672][ T4830] dentry_kill+0xb8/0x290 [ 124.528000][ T4830] dput+0xd8/0x1a0 [ 124.531716][ T4830] __fput+0x5ee/0x930 [ 124.535697][ T4830] task_work_run+0x125/0x1a0 [ 124.540285][ T4830] exit_to_user_mode_loop+0x10f/0x130 [ 124.545657][ T4830] exit_to_user_mode_prepare+0xee/0x180 [ 124.551199][ T4830] syscall_exit_to_user_mode+0x16/0x40 [ 124.556656][ T4830] do_syscall_64+0x58/0xa0 [ 124.561069][ T4830] ? clear_bhb_loop+0x30/0x80 [ 124.565741][ T4830] ? clear_bhb_loop+0x30/0x80 [ 124.570415][ T4830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.576304][ T4830] RIP: 0033:0x7fee112eee59 [ 124.580718][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.600319][ T4830] RSP: 002b:00007ffdb748a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.608732][ T4830] RAX: 0000000000000000 RBX: 00007ffdb748a270 RCX: 00007fee112eee59 [ 124.616702][ T4830] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 124.624673][ T4830] RBP: 000000000001e41c R08: 0000000000000001 R09: 0000000000000000 [ 124.632647][ T4830] R10: 0000001b31c20000 R11: 0000000000000246 R12: 00007ffdb748a2b0 [ 124.640614][ T4830] R13: 00007fee11567fac R14: 000000000001e459 R15: 00007fee11567fa0 [ 124.648592][ T4830] [ 124.651618][ T4830] Modules linked in: [ 124.655516][ T4830] ---[ end trace d2ad3dcf4896ca31 ]--- [ 124.660967][ T4830] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 124.667385][ T4830] Code: e8 09 16 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 ba fb 0d 00 0f 0b e8 f3 15 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 a4 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 d8 15 db ff eb 5d e8 d1 15 db ff 4c 89 f7 [ 124.686985][ T4830] RSP: 0018:ffffc900032bf688 EFLAGS: 00010046 [ 124.693052][ T4830] RAX: d7572e771cbb3700 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.701024][ T4830] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000657ec4 [ 124.708992][ T4830] RBP: 1ffffd40002be0b9 R08: ffff8880b912795b R09: fffff52000657e80 [ 124.716959][ T4830] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea00015f05c0 [ 124.724925][ T4830] R13: dffffc0000000000 R14: ffffea00015f05c0 R15: ffffea00015f05c8 [ 124.732891][ T4830] FS: 0000555561b8a500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 124.741835][ T4830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.748412][ T4830] CR2: 0000200000000000 CR3: 0000000051524000 CR4: 00000000003506e0 [ 124.756380][ T4830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.764347][ T4830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.772313][ T4830] Kernel panic - not syncing: Fatal exception [ 124.778457][ T4830] Kernel Offset: disabled [ 124.782776][ T4830] Rebooting in 86400 seconds..