last executing test programs: 2.280943641s ago: executing program 2 (id=2167): clock_gettime(0x1, &(0x7f0000001940)) 2.205563618s ago: executing program 4 (id=2168): r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 2.137863111s ago: executing program 2 (id=2172): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = io_uring_setup(0x3e78, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$FUSE_GETXATTR(r3, &(0x7f0000000180)={0x18}, 0xfffffdef) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) quotactl_fd$Q_GETQUOTA(r6, 0x0, 0x0, 0x0) r7 = eventfd(0x0) dup2(r7, r1) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r10) syz_emit_ethernet(0x6a, &(0x7f00000008c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fd5825b4e34ed8a9f63f4abcdc376688ff95b5041b7dfde6", "8766a0b07a525ddce2ed9c45fc98759021397f2b890367a188835d8288d4d691"}}}}}}, 0x0) 1.889257208s ago: executing program 1 (id=2176): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) 1.714692314s ago: executing program 1 (id=2178): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = eventfd2(0x0, 0x0) fcntl$notify(r2, 0x5, 0x0) 1.714392206s ago: executing program 4 (id=2179): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/62, 0x3e}], 0x1, &(0x7f00000032c0)=""/4084, 0xff4}, 0x0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 1.672127818s ago: executing program 3 (id=2180): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.620450625s ago: executing program 1 (id=2181): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.570370283s ago: executing program 3 (id=2182): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000d50a000000000000180900002020782500000000002020207b1af8ff00000000c37576e23438e987e43fde4470917d3fbfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000400000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000007b993724a1dca541c4f14727ee4339bff0a84bf0f96d298fb618da16c07eaf50893a7adf92893030fe2ddb8b9fc6ea1b67467c762392051000b3900030d4ced96b8d"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x3f, 0x0, 0x1}, 0x48) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.499170904s ago: executing program 3 (id=2184): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0608002000"}) 1.470635294s ago: executing program 1 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 1.345767493s ago: executing program 1 (id=2186): pipe2$9p(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x107, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x5451, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) 1.345518074s ago: executing program 0 (id=2187): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x4b) 1.345301956s ago: executing program 3 (id=2188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) recvfrom$inet(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 1.316633518s ago: executing program 0 (id=2189): r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x5450, 0x0) readv(r1, 0x0, 0x0) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$KDADDIO(r4, 0x5450, 0x0) recvmsg(r3, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xab, 0x0}, 0x0) close(r5) rt_sigreturn() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) epoll_create1(0x0) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.270659791s ago: executing program 3 (id=2190): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 1.197131072s ago: executing program 3 (id=2191): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100bd9100000000000006241a00001008241c0000000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x20, 0x80, 0x1c, {0x0, 0x7fff}}, 0x0, 0x0, 0x0, 0x0}) 1.118745398s ago: executing program 0 (id=2192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000ff0f0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x5608, 0x0) 1.089045797s ago: executing program 2 (id=2193): pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000035000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000300)=ANY=[], 0x10}], 0x2}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 1.043953402s ago: executing program 0 (id=2194): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 898.655687ms ago: executing program 0 (id=2195): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 879.104399ms ago: executing program 2 (id=2196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setgroups(0xefff, 0x0) 816.002362ms ago: executing program 4 (id=2197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) fsopen(0x0, 0x0) 734.674768ms ago: executing program 2 (id=2198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f00000055c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 734.371641ms ago: executing program 4 (id=2199): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0608002000"}) 661.010113ms ago: executing program 2 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200), 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 527.966312ms ago: executing program 4 (id=2201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) 390.275927ms ago: executing program 1 (id=2202): socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @remote}, 0x1c) listen(0xffffffffffffffff, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {}]}, 0x10) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r7 = dup(0xffffffffffffffff) write$FUSE_BMAP(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000950000000000000084afc55fb254c71ce839ea8d2fc82012a23072d7c6607b88981edae4200883a1dd5ea8c1b2f5f3d90610e5d996eda86807d14d143b78ff3dc69e76e8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) 350.963151ms ago: executing program 4 (id=2203): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = io_uring_setup(0x3e78, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$FUSE_GETXATTR(r3, &(0x7f0000000180)={0x18}, 0xfffffdef) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) quotactl_fd$Q_GETQUOTA(r6, 0x0, 0x0, 0x0) r7 = eventfd(0x0) dup2(r7, r1) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x2, &(0x7f0000000040)='source', &(0x7f0000000080)='./bus\x00', r10) syz_emit_ethernet(0x6a, &(0x7f00000008c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fd5825b4e34ed8a9f63f4abcdc376688ff95b5041b7dfde6", "8766a0b07a525ddce2ed9c45fc98759021397f2b890367a188835d8288d4d691"}}}}}}, 0x0) 0s ago: executing program 0 (id=2204): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x15) kernel console output (not intermixed with test programs): 694.426182][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.434647][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.443414][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.459805][T11343] usb 5-1: Using ep0 maxpacket: 16 [ 694.476030][T14350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.515628][T11343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.535985][T11343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.582704][T11343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 694.621470][T11343] usb 5-1: SerialNumber: syz [ 694.665859][T14350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.750030][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.814722][T14350] team0: Port device team_slave_0 added [ 694.892965][T11343] usb 5-1: USB disconnect, device number 99 [ 694.919686][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.952357][T14350] team0: Port device team_slave_1 added [ 695.022201][T14435] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.031410][T14435] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.038861][T14435] bridge_slave_0: entered allmulticast mode [ 695.046909][T14435] bridge_slave_0: entered promiscuous mode [ 695.116546][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.149721][T14435] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.157048][T14435] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.174719][T14435] bridge_slave_1: entered allmulticast mode [ 695.191531][T14435] bridge_slave_1: entered promiscuous mode [ 695.220247][T14350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.227680][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.254462][T14350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.267251][T14350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.276110][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.311260][T14350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.322273][ T5100] Bluetooth: hci3: command tx timeout [ 695.351269][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.397902][T14435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.442261][T14435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.454022][ T5100] Bluetooth: hci4: command tx timeout [ 695.699540][T14435] team0: Port device team_slave_0 added [ 695.733127][T14435] team0: Port device team_slave_1 added [ 695.752941][T14350] hsr_slave_0: entered promiscuous mode [ 695.761458][T14350] hsr_slave_1: entered promiscuous mode [ 695.769773][T14350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.793903][T14350] Cannot create hsr debugfs directory [ 695.973518][ T5147] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 696.004827][T14435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.024003][T14435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.054532][T14435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.093215][T14435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.115094][T14435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.173960][T14435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.201232][ T5147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.229597][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.255405][ T5147] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 696.283359][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 696.297454][ T5147] usb 5-1: SerialNumber: syz [ 696.503994][ T5100] Bluetooth: hci2: command tx timeout [ 696.524801][ T5147] usb 5-1: 0:2 : does not exist [ 696.529850][ T5147] usb 5-1: unit 5 not found! [ 696.553558][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.577565][ T5147] usb 5-1: USB disconnect, device number 100 [ 696.584704][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.596855][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.608981][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.624440][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.633370][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.778351][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.858182][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.871543][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.944866][T14435] hsr_slave_0: entered promiscuous mode [ 696.958060][T14435] hsr_slave_1: entered promiscuous mode [ 696.975364][T14435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.982985][T14435] Cannot create hsr debugfs directory [ 697.045427][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.099678][T14474] chnl_net:caif_netlink_parms(): no params data found [ 697.327768][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.493918][ T5190] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 697.534202][ T5100] Bluetooth: hci4: command tx timeout [ 697.695737][ T5190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.713217][ T5190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 697.743773][ T5190] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 697.768487][ T5190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.778702][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.788748][ T5190] usb 5-1: Product: syz [ 697.792993][ T5190] usb 5-1: Manufacturer: syz [ 697.798326][ T5190] usb 5-1: SerialNumber: syz [ 698.029513][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.054418][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.061806][T14474] bridge_slave_0: entered allmulticast mode [ 698.069610][T14474] bridge_slave_0: entered promiscuous mode [ 698.079261][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.086711][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.094923][T14474] bridge_slave_1: entered allmulticast mode [ 698.102653][T14474] bridge_slave_1: entered promiscuous mode [ 698.294314][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.359427][ T51] bridge_slave_1: left allmulticast mode [ 698.374146][ T51] bridge_slave_1: left promiscuous mode [ 698.380001][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.407789][ T51] bridge_slave_0: left allmulticast mode [ 698.423697][ T51] bridge_slave_0: left promiscuous mode [ 698.433241][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.461947][ T51] bridge_slave_1: left allmulticast mode [ 698.468026][ T51] bridge_slave_1: left promiscuous mode [ 698.474934][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.489021][ T51] bridge_slave_0: left allmulticast mode [ 698.503776][ T51] bridge_slave_0: left promiscuous mode [ 698.509995][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.575477][ T5100] Bluetooth: hci2: command tx timeout [ 698.734573][ T5100] Bluetooth: hci0: command tx timeout [ 698.857869][ T5190] cdc_ncm 5-1:1.0: bind() failure [ 698.869049][ T5190] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 698.876319][ T5190] cdc_ncm 5-1:1.1: bind() failure [ 699.115913][ T5190] usb 5-1: USB disconnect, device number 101 [ 699.438184][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.453553][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.466292][ T51] bond0 (unregistering): Released all slaves [ 699.614176][ T5100] Bluetooth: hci4: command tx timeout [ 699.627436][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.639222][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.650875][ T51] bond0 (unregistering): Released all slaves [ 699.670965][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.876549][ T51] IPVS: stopping master sync thread 14275 ... [ 699.903456][T14502] chnl_net:caif_netlink_parms(): no params data found [ 700.038636][T14474] team0: Port device team_slave_0 added [ 700.090450][T14350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.128359][ T29] audit: type=1326 audit(1719642995.438:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.4.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe590f75b99 code=0x0 [ 700.129819][T14474] team0: Port device team_slave_1 added [ 700.182917][T14350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.205571][T14350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 700.282961][T14350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 700.345646][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.352640][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.379342][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.398150][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.406023][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.434067][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.654072][ T5100] Bluetooth: hci2: command tx timeout [ 700.687024][T14502] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.695200][T14502] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.703626][T14502] bridge_slave_0: entered allmulticast mode [ 700.712658][T14502] bridge_slave_0: entered promiscuous mode [ 700.723325][T14502] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.731285][T14502] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.739900][T14502] bridge_slave_1: entered allmulticast mode [ 700.747793][T14502] bridge_slave_1: entered promiscuous mode [ 700.817070][ T5100] Bluetooth: hci0: command tx timeout [ 700.871848][T14474] hsr_slave_0: entered promiscuous mode [ 700.884247][T14474] hsr_slave_1: entered promiscuous mode [ 700.913830][T14474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.921463][T14474] Cannot create hsr debugfs directory [ 700.981658][T14502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.057956][T14502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.130214][ T51] hsr_slave_0: left promiscuous mode [ 701.142289][ T51] hsr_slave_1: left promiscuous mode [ 701.149383][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.158493][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.167230][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.175323][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.190135][ T51] hsr_slave_0: left promiscuous mode [ 701.197666][ T51] hsr_slave_1: left promiscuous mode [ 701.204522][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.213159][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.222836][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.230975][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.280804][ T51] veth1_macvtap: left promiscuous mode [ 701.286651][ T51] veth0_macvtap: left promiscuous mode [ 701.292280][ T51] veth1_vlan: left promiscuous mode [ 701.300374][ T51] veth0_vlan: left promiscuous mode [ 701.307455][ T51] veth1_macvtap: left promiscuous mode [ 701.319021][ T51] veth0_macvtap: left promiscuous mode [ 701.325070][ T51] veth1_vlan: left promiscuous mode [ 701.330461][ T51] veth0_vlan: left promiscuous mode [ 702.625311][ T51] team0 (unregistering): Port device team_slave_1 removed [ 702.734134][ T5100] Bluetooth: hci2: command tx timeout [ 702.761941][ T51] team0 (unregistering): Port device team_slave_0 removed [ 702.902102][ T5100] Bluetooth: hci0: command tx timeout [ 703.917699][ T51] team0 (unregistering): Port device team_slave_1 removed [ 703.976487][ T51] team0 (unregistering): Port device team_slave_0 removed [ 704.570293][T14502] team0: Port device team_slave_0 added [ 704.687418][T14502] team0: Port device team_slave_1 added [ 704.740634][T14502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.749074][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.782172][T14502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.820109][T14435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 704.848294][T14502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.857550][T14502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.885705][T14502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.923670][T14435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.941327][T14435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.976435][ T5094] Bluetooth: hci0: command tx timeout [ 705.041243][T14435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 705.068960][T14502] hsr_slave_0: entered promiscuous mode [ 705.075959][ T5147] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 705.085897][T14502] hsr_slave_1: entered promiscuous mode [ 705.092757][T14502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.103415][T14502] Cannot create hsr debugfs directory [ 705.250177][T14350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.284824][ T5147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.296943][ T5147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.342582][ T5147] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.364937][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.394168][ T5147] usb 5-1: SerialNumber: syz [ 705.475834][T14350] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.619785][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.627039][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.649411][ T5147] usb 5-1: 0:2 : does not exist [ 705.664202][ T5147] usb 5-1: unit 5 not found! [ 705.703151][ T5147] usb 5-1: USB disconnect, device number 102 [ 705.743416][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.750686][T11343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.957568][T14435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.975870][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.100197][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.138310][T14474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 706.151969][T14435] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.163306][T14474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 706.188052][T14474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 706.210866][T14474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 706.251446][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.307852][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.315173][T11347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.362746][T14350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.422142][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.460136][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.467440][T11347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.581259][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.233638][T14350] veth0_vlan: entered promiscuous mode [ 707.260076][T14435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.362115][ T51] bridge_slave_1: left allmulticast mode [ 707.375450][ T51] bridge_slave_1: left promiscuous mode [ 707.384340][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.404411][ T51] bridge_slave_0: left allmulticast mode [ 707.410674][ T51] bridge_slave_0: left promiscuous mode [ 707.429645][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.285848][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.298594][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.311705][ T51] bond0 (unregistering): Released all slaves [ 708.394744][T14570] veth0_vlan: entered allmulticast mode [ 708.537339][T14350] veth1_vlan: entered promiscuous mode [ 708.892183][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.967739][T14435] veth0_vlan: entered promiscuous mode [ 709.000649][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.052632][ T51] hsr_slave_0: left promiscuous mode [ 709.064762][ T51] hsr_slave_1: left promiscuous mode [ 709.074274][ T5190] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 709.095753][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.113924][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.122300][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.140458][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.209790][ T51] veth1_macvtap: left promiscuous mode [ 709.217853][ T51] veth0_macvtap: left promiscuous mode [ 709.223588][ T51] veth1_vlan: left promiscuous mode [ 709.240827][ T51] veth0_vlan: left promiscuous mode [ 709.284579][ T5190] usb 5-1: Using ep0 maxpacket: 16 [ 709.292140][ T5190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.315887][ T5190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.330755][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 709.348315][ T5190] usb 5-1: SerialNumber: syz [ 709.610748][ T5190] usb 5-1: USB disconnect, device number 103 [ 710.349903][ T51] team0 (unregistering): Port device team_slave_1 removed [ 710.429885][ T51] team0 (unregistering): Port device team_slave_0 removed [ 711.114447][T14350] veth0_macvtap: entered promiscuous mode [ 711.154194][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.161477][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.191435][T14435] veth1_vlan: entered promiscuous mode [ 711.256853][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.264078][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.303161][T14350] veth1_macvtap: entered promiscuous mode [ 711.533687][T14502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 711.597544][T14502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 711.630287][T14502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 711.695713][T14648] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 711.728896][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.774131][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.788931][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.801263][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.815955][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.827261][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.861998][T14350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.883946][T14502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 711.949306][T14435] veth0_macvtap: entered promiscuous mode [ 712.013097][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.032946][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.047452][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.062728][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.077470][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.090764][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.128141][T14350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.149651][T14435] veth1_macvtap: entered promiscuous mode [ 712.193323][T14350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.225324][T14350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.243355][T14350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.253478][T14350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.393244][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.420129][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.431108][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.441960][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.452349][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.476231][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.499041][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.511368][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.525447][T14435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.602307][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.633756][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.648399][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.660718][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.676530][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.691248][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.701794][T14435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.722181][T14435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.734826][T14435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.800563][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.806929][T14435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.824348][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.828038][T14435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.848455][T14435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.859012][T14435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.010547][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.030138][T14474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.045107][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.242349][T14502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.332873][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.341257][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.382120][T14502] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.508420][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.515654][T11359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.573342][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.580602][T11359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.647459][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.661286][ T5140] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 713.670956][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.692186][T14474] veth0_vlan: entered promiscuous mode [ 713.765272][T14474] veth1_vlan: entered promiscuous mode [ 713.866876][ T5140] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 713.876791][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.899658][ T5140] usb 2-1: config 0 descriptor?? [ 713.919032][ T5140] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 713.958903][ T5140] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 714.062808][ T1060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.319721][ T1060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.458566][ T1060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.561456][T14502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.574011][ T5140] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 714.621225][T14474] veth0_macvtap: entered promiscuous mode [ 714.683099][ T1060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.741015][T14474] veth1_macvtap: entered promiscuous mode [ 714.798041][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.806177][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 714.820984][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.833607][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 714.853479][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 714.873364][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 714.881626][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 714.891808][ T5140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.902720][ T5140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.910344][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.913582][ T5140] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.935200][ T5140] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 714.950904][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.970769][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.995252][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.017888][ T5140] hub 3-1:1.0: bad descriptor, ignoring hub [ 715.025497][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.041807][ T5140] hub 3-1:1.0: probe with driver hub failed with error -5 [ 715.049833][ T5140] cdc_wdm 3-1:1.0: skipping garbage [ 715.060922][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.079588][ T5140] cdc_wdm 3-1:1.0: skipping garbage [ 715.085221][ T5140] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 715.094084][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.107156][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.117780][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.127948][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.151800][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.166150][T14474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.194399][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.211375][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.234490][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.248416][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.262462][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.275818][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.286644][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.297761][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.308268][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.318796][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.330755][T14474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.375906][T11343] usb 3-1: USB disconnect, device number 103 [ 715.418234][T14474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.430255][T14474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.439308][T14474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.451213][T14474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.540687][ T1060] bridge_slave_1: left allmulticast mode [ 715.548379][ T1060] bridge_slave_1: left promiscuous mode [ 715.555767][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.568378][ T1060] bridge_slave_0: left allmulticast mode [ 715.574696][ T1060] bridge_slave_0: left promiscuous mode [ 715.580435][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.744117][ T5190] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 715.945810][ T5190] usb 3-1: Using ep0 maxpacket: 8 [ 715.969802][ T5190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.991040][ T5190] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 716.007919][ T5190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.019630][ T5190] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 716.028905][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.052342][ T5190] hub 3-1:1.0: bad descriptor, ignoring hub [ 716.061013][ T5190] hub 3-1:1.0: probe with driver hub failed with error -5 [ 716.085423][ T5190] cdc_wdm 3-1:1.0: skipping garbage [ 716.090695][ T5190] cdc_wdm 3-1:1.0: skipping garbage [ 716.105093][ T5190] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 716.128826][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.144868][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.166191][ T1060] bond0 (unregistering): Released all slaves [ 716.323795][T14685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.332448][T14685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.352189][ T5139] usb 2-1: USB disconnect, device number 92 [ 716.369064][T14502] veth0_vlan: entered promiscuous mode [ 716.388705][ T1060] IPVS: stopping master sync thread 14648 ... [ 716.389355][ T5139] ftdi_sio 2-1:0.0: device disconnected [ 716.523084][T14685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.558966][T14685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.736880][T11347] usb 3-1: USB disconnect, device number 104 [ 716.773525][T14502] veth1_vlan: entered promiscuous mode [ 716.939915][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.971927][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.980885][ T5094] Bluetooth: hci1: command tx timeout [ 717.110931][ T1060] hsr_slave_0: left promiscuous mode [ 717.124748][ T1060] hsr_slave_1: left promiscuous mode [ 717.131193][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.144135][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.152356][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.160700][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.232166][ T1060] veth1_macvtap: left promiscuous mode [ 717.244398][ T1060] veth0_macvtap: left promiscuous mode [ 717.252442][ T1060] veth1_vlan: left promiscuous mode [ 717.848226][ T5094] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 718.410322][ T5139] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 718.494685][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 718.560820][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 718.621016][ T5139] usb 3-1: Using ep0 maxpacket: 32 [ 718.647185][ T5139] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 718.665693][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.674178][ T5139] usb 3-1: Product: syz [ 718.678384][ T5139] usb 3-1: Manufacturer: syz [ 718.683101][ T5139] usb 3-1: SerialNumber: syz [ 718.723828][ T5139] usb 3-1: config 0 descriptor?? [ 718.739229][ T5139] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 718.759257][ T5139] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 718.950347][ T5139] radio-raremono 3-1:0.0: this is not Thanko's Raremono. [ 718.958717][ T5139] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 718.995909][ T5139] usb 3-1: USB disconnect, device number 105 [ 719.071387][ T5094] Bluetooth: hci1: command tx timeout [ 719.323950][T14690] chnl_net:caif_netlink_parms(): no params data found [ 719.466555][T14502] veth0_macvtap: entered promiscuous mode [ 719.488927][T14502] veth1_macvtap: entered promiscuous mode [ 719.542193][T10707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.613788][T10707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.632273][T14737] veth0_vlan: entered allmulticast mode [ 719.969791][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.985594][ T5190] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 720.003950][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.030553][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.052672][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.067805][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.078803][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.092075][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.113077][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.128982][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.141562][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.163034][T14502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.184820][T14690] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.192018][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.210021][T14690] bridge_slave_0: entered allmulticast mode [ 720.222109][T14690] bridge_slave_0: entered promiscuous mode [ 720.230902][ T5190] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 720.245970][T14690] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.253167][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.262095][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.281538][T14690] bridge_slave_1: entered allmulticast mode [ 720.295027][ T5190] usb 2-1: config 0 descriptor?? [ 720.300268][T11359] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 720.319093][ T5190] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 720.326784][T14690] bridge_slave_1: entered promiscuous mode [ 720.362890][ T5190] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 720.427457][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.439407][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.451809][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.464370][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.474988][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.484895][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.499006][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.508926][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.519497][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.529554][T11359] usb 4-1: Using ep0 maxpacket: 32 [ 720.535050][T14502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.545922][T14502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.559133][T11359] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 720.572426][T14502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.580397][T11359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.592918][T14502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.602894][T14502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.613266][T11359] usb 4-1: config 0 descriptor?? [ 720.625323][T11359] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 720.632436][T14502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.641501][T14502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.669634][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.763421][T14690] team0: Port device team_slave_0 added [ 720.788096][T14690] team0: Port device team_slave_1 added [ 720.859497][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.884377][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.915288][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.035096][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.048013][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.105460][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.134115][ T5094] Bluetooth: hci1: command tx timeout [ 721.335309][T14690] hsr_slave_0: entered promiscuous mode [ 721.356488][T14690] hsr_slave_1: entered promiscuous mode [ 721.394160][ T5094] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 721.452967][T14750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.464233][T14750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.571601][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.591853][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.701577][T11359] gspca_sunplus: reg_w_riv err -71 [ 721.717464][T11359] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 721.760008][T11359] usb 4-1: USB disconnect, device number 71 [ 721.842953][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.876818][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.912838][T14783] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 722.484244][T11359] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 722.691593][T11359] usb 1-1: Using ep0 maxpacket: 32 [ 722.708103][T11359] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 722.723311][ T5140] usb 2-1: USB disconnect, device number 93 [ 722.736813][T11359] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.748206][ T5140] ftdi_sio 2-1:0.0: device disconnected [ 722.788632][T11359] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 722.809098][T11359] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 722.872089][T11359] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 722.895590][ T5192] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 722.932106][T11359] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.938050][T14690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 722.964090][T11359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.002392][T14690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.002689][T11359] usb 1-1: Product: syz [ 723.037003][T11359] usb 1-1: Manufacturer: syz [ 723.053073][T11359] usb 1-1: SerialNumber: syz [ 723.072350][T14690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.113941][T14690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 723.113954][ T5192] usb 4-1: Using ep0 maxpacket: 32 [ 723.119885][ T5192] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 723.174524][ T5192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.182643][ T5192] usb 4-1: Product: syz [ 723.188334][ T5192] usb 4-1: Manufacturer: syz [ 723.193063][ T5192] usb 4-1: SerialNumber: syz [ 723.208998][ T5192] usb 4-1: config 0 descriptor?? [ 723.223149][ T5094] Bluetooth: hci1: command tx timeout [ 723.239345][ T5192] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 723.248225][ T5192] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 723.288841][T11359] usb 1-1: 0:2 : does not exist [ 723.314382][T11359] usb 1-1: USB disconnect, device number 72 [ 723.455096][ T5192] radio-raremono 4-1:0.0: this is not Thanko's Raremono. [ 723.498756][ T5192] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 723.524281][ T5192] usb 4-1: USB disconnect, device number 72 [ 723.552328][T14690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.575646][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.629739][T14690] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.674200][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.681455][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.717231][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.724465][T11347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.833229][T14690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.924457][T11347] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 724.005929][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.116437][T11347] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 724.146144][T11347] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 724.225340][T11347] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 724.225942][T14690] veth0_vlan: entered promiscuous mode [ 724.271804][T11347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.297420][T14815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 724.322027][T14827] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 724.322712][T14690] veth1_vlan: entered promiscuous mode [ 724.506806][T14690] veth0_macvtap: entered promiscuous mode [ 724.542724][T11347] usb 3-1: USB disconnect, device number 106 [ 724.550012][T14690] veth1_macvtap: entered promiscuous mode [ 724.561193][ T5139] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 724.680902][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.708929][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.719295][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.737291][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.758861][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.778465][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.804162][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 724.811810][ T5139] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 724.826024][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.838179][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.847353][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.885281][ T5139] usb 4-1: config 0 descriptor?? [ 724.901505][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.916416][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.947044][ T5139] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 724.980099][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.019937][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.043577][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.107488][T14835] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 725.126478][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.179074][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.190163][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.205857][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.217068][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.228858][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.239755][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.253253][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.289782][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.311146][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.323001][T14690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.335058][T14690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.349339][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.368930][T14690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.391352][T14690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.404410][T14690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.413364][T14690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.574988][T11360] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 725.689568][T10707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.730275][T10707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.778085][T11360] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 725.791610][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.804920][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.810839][T11360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.817387][T14839] veth0_vlan: entered allmulticast mode [ 725.832769][T11360] usb 2-1: config 0 descriptor?? [ 725.849402][T11360] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 725.860684][T11360] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 725.911138][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.926488][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.049375][ T5139] gspca_sunplus: reg_w_riv err -71 [ 726.068328][ T5139] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 726.111640][ T5139] usb 4-1: USB disconnect, device number 73 [ 726.384194][T11343] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 726.597619][T11343] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.615204][T11343] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 726.635006][T11343] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.652852][T11343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.662704][ T5140] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 726.679046][T14844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 726.854006][ T5140] usb 1-1: Using ep0 maxpacket: 32 [ 726.865838][ T5140] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 726.890090][ T5140] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.920366][ T5140] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 726.935540][ T5139] usb 5-1: USB disconnect, device number 104 [ 726.947651][ T5140] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 726.995917][ T5140] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.010840][ T5140] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.032106][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.044013][ T5140] usb 1-1: Product: syz [ 727.048250][ T5140] usb 1-1: Manufacturer: syz [ 727.052911][ T5140] usb 1-1: SerialNumber: syz [ 727.272996][T11360] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 727.327908][ T5140] usb 1-1: 0:2 : does not exist [ 727.377502][ T5140] usb 1-1: USB disconnect, device number 73 [ 727.493882][T11360] usb 4-1: Using ep0 maxpacket: 16 [ 727.529854][T11360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.556845][T11360] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.574983][T11360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 727.584151][T11360] usb 4-1: SerialNumber: syz [ 727.645728][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.843676][ T5140] usb 4-1: USB disconnect, device number 74 [ 728.306511][T11360] usb 2-1: USB disconnect, device number 94 [ 728.349437][T11360] ftdi_sio 2-1:0.0: device disconnected [ 728.823944][T11360] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 729.050969][T11360] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 729.073856][T11360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.083909][ T5143] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 729.112526][T11360] usb 2-1: Product: syz [ 729.122639][T11360] usb 2-1: Manufacturer: syz [ 729.129643][T11360] usb 2-1: SerialNumber: syz [ 729.158747][T11360] usb 2-1: config 0 descriptor?? [ 729.176318][T11360] ch341 2-1:0.0: ch341-uart converter detected [ 729.214055][T11359] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 729.273977][ T5143] usb 4-1: Using ep0 maxpacket: 8 [ 729.313970][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.333904][ T5143] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 729.356086][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.383893][ T5143] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 729.396453][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.411967][ T5143] hub 4-1:1.0: bad descriptor, ignoring hub [ 729.418849][ T5143] hub 4-1:1.0: probe with driver hub failed with error -5 [ 729.423845][T11359] usb 1-1: Using ep0 maxpacket: 8 [ 729.427181][ T5143] cdc_wdm 4-1:1.0: skipping garbage [ 729.437866][T11360] usb 2-1: failed to receive control message: -71 [ 729.443176][ T5143] cdc_wdm 4-1:1.0: skipping garbage [ 729.452207][ T5143] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 729.452381][T11359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.483936][T11360] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 729.502837][T11359] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 729.504634][T11360] usb 2-1: USB disconnect, device number 95 [ 729.519990][T11359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.535642][T11360] ch341 2-1:0.0: device disconnected [ 729.549206][T11359] usb 1-1: config 0 descriptor?? [ 729.563870][T11359] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 729.864072][T11368] usb 4-1: USB disconnect, device number 75 [ 729.953870][ T5143] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 730.165126][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.187896][ T5143] usb 3-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=dd.57 [ 730.203817][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.220042][ T5143] usb 3-1: Product: syz [ 730.230408][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.279526][ T5143] usb 3-1: Manufacturer: syz [ 730.288512][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.303809][ T5143] usb 3-1: SerialNumber: syz [ 730.311391][ T5143] usb 3-1: config 0 descriptor?? [ 730.314662][ T5192] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 730.317746][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.340547][ T5143] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 730.523853][ T5192] usb 4-1: Using ep0 maxpacket: 8 [ 730.537909][ T5192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.544023][T11368] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 730.567007][ T5143] gspca_zc3xx: reg_w_i err -71 [ 730.576506][ T5192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.586018][ T5143] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 730.596245][ T5192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.617778][ T5192] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 730.630019][ T5143] usb 3-1: USB disconnect, device number 107 [ 730.658377][ T5192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.725546][ T5192] hub 4-1:1.0: bad descriptor, ignoring hub [ 730.738604][ T5192] hub 4-1:1.0: probe with driver hub failed with error -5 [ 730.753845][ T5192] cdc_wdm 4-1:1.0: skipping garbage [ 730.764058][ T5192] cdc_wdm 4-1:1.0: skipping garbage [ 730.773901][ T5192] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 730.785941][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.794700][T11368] usb 5-1: Using ep0 maxpacket: 32 [ 730.819152][T11368] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 730.837265][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.854505][T11368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.885945][T11368] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 730.933895][T11368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 730.963849][T11368] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 730.990517][T11368] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.012281][T11368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.029954][T11368] usb 5-1: Product: syz [ 731.036918][T11368] usb 5-1: Manufacturer: syz [ 731.042222][T11368] usb 5-1: SerialNumber: syz [ 731.084050][T11359] gspca_vc032x: reg_r err -110 [ 731.088955][T11359] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 731.314043][T11368] usb 5-1: 0:2 : does not exist [ 731.356161][T14889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.371603][T11368] usb 5-1: USB disconnect, device number 105 [ 731.420572][T14889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.469593][T11343] usb 1-1: USB disconnect, device number 74 [ 731.637019][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.870492][T14889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.893414][T14889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.964766][T11343] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 732.105542][T11359] usb 4-1: USB disconnect, device number 76 [ 732.113886][T11368] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 732.156135][T11343] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 732.191957][T11343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.219919][T11343] usb 1-1: config 0 descriptor?? [ 732.242814][T11343] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 732.270494][T11343] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 732.326433][T11368] usb 3-1: Using ep0 maxpacket: 32 [ 732.351694][T11368] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 732.371479][T11368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.403262][T11368] usb 3-1: config 0 descriptor?? [ 732.420193][T11368] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 732.509326][T14917] veth0_vlan: entered allmulticast mode [ 733.245005][T14907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.263258][T14907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.491048][T11368] gspca_sunplus: reg_w_riv err -71 [ 733.505325][T11368] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 733.522462][T11368] usb 3-1: USB disconnect, device number 108 [ 734.123911][T11359] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 734.143923][ T5143] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 734.353814][ T5143] usb 5-1: Using ep0 maxpacket: 32 [ 734.355703][T11359] usb 4-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=dd.57 [ 734.365820][ T5143] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 734.378693][T11359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.386168][ T5143] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.401528][T11359] usb 4-1: Product: syz [ 734.411614][T11359] usb 4-1: Manufacturer: syz [ 734.417940][ T5143] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 734.418017][ T5143] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 734.418049][ T5143] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 734.421364][ T5143] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.441991][T11359] usb 4-1: SerialNumber: syz [ 734.471790][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.492308][T11359] usb 4-1: config 0 descriptor?? [ 734.495505][ T5143] usb 5-1: Product: syz [ 734.502315][ T5143] usb 5-1: Manufacturer: syz [ 734.507358][T11359] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 734.510507][ T5143] usb 5-1: SerialNumber: syz [ 734.582505][ T5141] usb 1-1: USB disconnect, device number 75 [ 734.590427][ T5141] ftdi_sio 1-1:0.0: device disconnected [ 734.723491][T11359] gspca_zc3xx: reg_w_i err -71 [ 734.742064][T11359] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 734.772091][T11359] usb 4-1: USB disconnect, device number 77 [ 734.784336][ T5143] usb 5-1: 0:2 : does not exist [ 734.875616][ T5143] usb 5-1: USB disconnect, device number 106 [ 735.145046][T11421] udevd[11421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.562983][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.861611][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.946261][ T29] audit: type=1326 audit(1719643031.248:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.2.2029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358b175b99 code=0x0 [ 736.082323][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.208301][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.325387][ T5094] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 736.407589][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.419742][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.430376][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.450046][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.458094][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 736.466342][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.474705][T11360] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 736.690505][ T51] bridge_slave_1: left allmulticast mode [ 736.705773][T11360] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 736.715220][ T51] bridge_slave_1: left promiscuous mode [ 736.715551][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.736265][T11360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.769447][ T51] bridge_slave_0: left allmulticast mode [ 736.771622][T11360] usb 1-1: config 0 descriptor?? [ 736.782382][ T51] bridge_slave_0: left promiscuous mode [ 736.792381][T11360] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 736.801623][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.801684][T11360] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 737.204134][ T5141] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 737.402593][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 737.427941][ T5141] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 737.445831][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.464729][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.473458][ T5141] usb 4-1: config 0 descriptor?? [ 737.497577][ T5141] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 737.508743][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.529160][ T51] bond0 (unregistering): Released all slaves [ 737.733259][ T51] IPVS: stopping master sync thread 14827 ... [ 738.273597][ T51] hsr_slave_0: left promiscuous mode [ 738.322182][ T51] hsr_slave_1: left promiscuous mode [ 738.324468][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.344559][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.365915][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.387822][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.438478][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.463965][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.566924][ T51] veth1_macvtap: left promiscuous mode [ 738.572632][ T51] veth0_macvtap: left promiscuous mode [ 738.578735][ T5094] Bluetooth: hci3: command tx timeout [ 738.595184][ T5141] gspca_sunplus: reg_w_riv err -71 [ 738.600532][ T5141] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 738.638964][ T51] veth1_vlan: left promiscuous mode [ 738.648604][ T5141] usb 4-1: USB disconnect, device number 78 [ 738.676273][ T51] veth0_vlan: left promiscuous mode [ 739.209709][T11359] usb 1-1: USB disconnect, device number 76 [ 739.242121][T11359] ftdi_sio 1-1:0.0: device disconnected [ 739.326708][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.347482][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.363182][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.376254][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.387235][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 739.396225][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.431632][ T29] audit: type=1326 audit(1719643034.728:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.3.2044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a41b75b99 code=0x0 [ 739.464284][ T5192] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 739.527970][ T5094] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 739.708940][ T5192] usb 3-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=dd.57 [ 739.728910][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.742848][ T5192] usb 3-1: Product: syz [ 739.749530][ T5192] usb 3-1: Manufacturer: syz [ 739.759711][ T5192] usb 3-1: SerialNumber: syz [ 739.771869][ T5192] usb 3-1: config 0 descriptor?? [ 739.787801][ T5192] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 740.060453][ T5192] gspca_zc3xx: reg_w_i err -71 [ 740.081823][ T5192] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 740.099076][ T5192] usb 3-1: USB disconnect, device number 109 [ 740.210439][ T51] team0 (unregistering): Port device team_slave_1 removed [ 740.281315][ T51] team0 (unregistering): Port device team_slave_0 removed [ 740.552180][ T5140] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 740.657803][ T5094] Bluetooth: hci3: command tx timeout [ 740.757407][ T5140] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=3b.c0 [ 740.783908][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.827291][ T5140] usb 4-1: config 0 descriptor?? [ 740.848997][ T5140] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 740.867582][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 740.907056][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 740.915608][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 740.923387][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 740.933960][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 740.957605][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 740.966636][ T5140] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 740.987200][ T5140] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 741.305544][T14981] chnl_net:caif_netlink_parms(): no params data found [ 741.327604][ T5141] usb 4-1: USB disconnect, device number 79 [ 741.368286][ T5141] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 741.400264][ T5141] keyspan 4-1:0.0: device disconnected [ 741.456324][ T5094] Bluetooth: hci1: command tx timeout [ 741.808527][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.833261][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.850829][T14981] bridge_slave_0: entered allmulticast mode [ 741.867014][T14981] bridge_slave_0: entered promiscuous mode [ 741.888576][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.895930][ T5192] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 741.919001][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.926607][T14981] bridge_slave_1: entered allmulticast mode [ 741.954953][T14981] bridge_slave_1: entered promiscuous mode [ 741.975554][ T5141] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 742.075186][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.118374][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.131746][ T5192] usb 3-1: Using ep0 maxpacket: 32 [ 742.154812][ T5192] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 742.179674][ T5141] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 742.180076][ T5192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.213422][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.214810][ T5192] usb 3-1: config 0 descriptor?? [ 742.241245][ T5192] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 742.249778][ T5141] usb 1-1: config 0 descriptor?? [ 742.279028][ T5141] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 742.306492][ T5141] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 742.536147][T14981] team0: Port device team_slave_0 added [ 742.573178][T14981] team0: Port device team_slave_1 added [ 742.728791][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.737925][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.767252][ T5094] Bluetooth: hci3: command tx timeout [ 742.777454][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.824355][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.847591][T15026] chnl_net:caif_netlink_parms(): no params data found [ 742.871463][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.894850][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.921663][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.932937][T11359] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 742.995547][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.066557][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.087369][T14981] hsr_slave_0: entered promiscuous mode [ 743.096458][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.106337][T14981] hsr_slave_1: entered promiscuous mode [ 743.113397][T14981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.121809][T14981] Cannot create hsr debugfs directory [ 743.143796][T11359] usb 4-1: Using ep0 maxpacket: 16 [ 743.157375][T11359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.160084][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.188968][T11359] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.208717][T11359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 743.223403][T11359] usb 4-1: SerialNumber: syz [ 743.335015][ T5192] gspca_sunplus: reg_w_riv err -71 [ 743.340375][ T5192] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 743.364970][ T5192] usb 3-1: USB disconnect, device number 110 [ 743.438701][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.474690][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.497855][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.515740][ T5143] usb 4-1: USB disconnect, device number 80 [ 743.534051][ T5094] Bluetooth: hci1: command tx timeout [ 743.551626][T15026] bridge_slave_0: entered allmulticast mode [ 743.595363][T15026] bridge_slave_0: entered promiscuous mode [ 743.633458][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.649989][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.666542][T15026] bridge_slave_1: entered allmulticast mode [ 743.689778][T15026] bridge_slave_1: entered promiscuous mode [ 743.859283][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.889589][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.112668][ T29] audit: type=1326 audit(1719643039.418:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15093 comm="syz.2.2054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358b175b99 code=0x0 [ 744.161479][T15026] team0: Port device team_slave_0 added [ 744.280312][T15026] team0: Port device team_slave_1 added [ 744.289283][ T51] bridge_slave_1: left allmulticast mode [ 744.302326][ T51] bridge_slave_1: left promiscuous mode [ 744.308963][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.325260][ T51] bridge_slave_0: left allmulticast mode [ 744.331175][ T51] bridge_slave_0: left promiscuous mode [ 744.337551][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.671863][ T5143] usb 1-1: USB disconnect, device number 77 [ 744.679558][ T5143] ftdi_sio 1-1:0.0: device disconnected [ 744.830532][ T5094] Bluetooth: hci3: command tx timeout [ 745.008884][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.048044][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.065923][ T51] bond0 (unregistering): Released all slaves [ 745.295937][T11360] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 745.402499][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.412922][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.444737][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.514039][T11360] usb 3-1: Using ep0 maxpacket: 16 [ 745.527041][T11360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 745.556781][T11360] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 745.569639][T11360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.588669][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.610695][T11360] usb 3-1: config 0 descriptor?? [ 745.614781][ T5094] Bluetooth: hci1: command tx timeout [ 745.633934][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.683954][ T5141] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 745.691862][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.912170][ T5141] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.935069][ T5141] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.969651][ T5141] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.002031][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.002073][ T51] hsr_slave_0: left promiscuous mode [ 746.021704][T15114] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 746.046365][ T51] hsr_slave_1: left promiscuous mode [ 746.082928][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.107169][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.128343][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.145625][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.176691][T15118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.214584][T15118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.239194][ T51] veth1_macvtap: left promiscuous mode [ 746.244992][ T51] veth0_macvtap: left promiscuous mode [ 746.251528][ T51] veth1_vlan: left promiscuous mode [ 746.277301][T11360] hid (null): unknown global tag 0xc [ 746.282777][T11360] hid (null): unknown global tag 0xe [ 746.318898][T11360] hid (null): unknown global tag 0xc [ 746.329197][T11360] hid (null): report_id 0 is invalid [ 746.346654][ T5143] usb 1-1: USB disconnect, device number 78 [ 746.349315][T11360] hid (null): unknown global tag 0x35 [ 746.403648][T11360] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 746.433821][T11360] hid-generic 0003:0158:0100.0008: unexpected long global item [ 746.464753][T11360] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 746.538612][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.559068][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.577577][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.589042][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.597958][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 746.612980][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.548818][ T51] team0 (unregistering): Port device team_slave_1 removed [ 747.620447][ T51] team0 (unregistering): Port device team_slave_0 removed [ 747.694104][ T5100] Bluetooth: hci1: command tx timeout [ 747.861401][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.868209][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.472022][ T5141] usb 3-1: USB disconnect, device number 111 [ 748.489380][T15026] hsr_slave_0: entered promiscuous mode [ 748.505052][T15026] hsr_slave_1: entered promiscuous mode [ 748.659803][ T5100] Bluetooth: hci2: command tx timeout [ 748.926562][T14981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 748.954015][ T5141] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 748.963656][T14981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 749.021425][T14981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 749.033407][T14981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.146700][ T5141] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 749.174013][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.196840][ T5141] usb 3-1: config 0 descriptor?? [ 749.207604][ T5141] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 749.225076][ T5141] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 749.392085][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.586054][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.618405][T15121] chnl_net:caif_netlink_parms(): no params data found [ 749.691266][ T29] audit: type=1326 audit(1719643044.998:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15146 comm="syz.0.2065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b3a975b99 code=0x0 [ 749.725939][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.901457][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.066775][T15121] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.074366][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.082340][T15121] bridge_slave_0: entered allmulticast mode [ 750.092253][T15121] bridge_slave_0: entered promiscuous mode [ 750.127643][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.135430][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.142813][T15121] bridge_slave_1: entered allmulticast mode [ 750.151110][T15121] bridge_slave_1: entered promiscuous mode [ 750.214693][T15026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 750.234309][T15026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 750.294250][T15026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 750.316945][T15121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.356928][T15026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 750.385857][T15121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.468217][T15121] team0: Port device team_slave_0 added [ 750.478416][ T51] bridge_slave_1: left allmulticast mode [ 750.486506][ T51] bridge_slave_1: left promiscuous mode [ 750.492566][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.509538][ T51] bridge_slave_0: left allmulticast mode [ 750.515720][ T51] bridge_slave_0: left promiscuous mode [ 750.521684][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.736174][ T5100] Bluetooth: hci2: command tx timeout [ 751.114701][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.131820][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.149423][ T51] bond0 (unregistering): Released all slaves [ 751.174946][T15121] team0: Port device team_slave_1 added [ 751.232763][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.298456][T15121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.309261][T15121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.338782][T15121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.353001][T15121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.360685][T15121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.388412][T15121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.561253][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.597605][T11343] usb 3-1: USB disconnect, device number 112 [ 751.619792][T11343] ftdi_sio 3-1:0.0: device disconnected [ 751.742013][ T51] hsr_slave_0: left promiscuous mode [ 751.753267][ T51] hsr_slave_1: left promiscuous mode [ 751.765646][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.773129][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.783126][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.791193][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.820793][ T51] veth1_macvtap: left promiscuous mode [ 751.826793][ T51] veth0_macvtap: left promiscuous mode [ 751.832520][ T51] veth1_vlan: left promiscuous mode [ 751.838063][ T51] veth0_vlan: left promiscuous mode [ 752.487630][ T51] team0 (unregistering): Port device team_slave_1 removed [ 752.543146][ T51] team0 (unregistering): Port device team_slave_0 removed [ 752.814366][ T5100] Bluetooth: hci2: command tx timeout [ 753.124216][T15121] hsr_slave_0: entered promiscuous mode [ 753.132396][T15121] hsr_slave_1: entered promiscuous mode [ 753.142950][T15121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.154081][T15121] Cannot create hsr debugfs directory [ 753.163542][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.170777][T11360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.325122][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.332361][T11360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.654492][ T5140] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 753.874906][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 753.906646][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 753.935176][ T5140] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 753.951264][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.963837][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.978109][ T5140] usb 3-1: config 0 descriptor?? [ 754.180184][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.282748][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.399491][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.406820][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.449682][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.464514][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.500087][ T5140] hid (null): unknown global tag 0xc [ 754.519712][ T5140] hid (null): unknown global tag 0xe [ 754.540926][ T5140] hid (null): unknown global tag 0xc [ 754.553844][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.575741][ T5140] hid (null): report_id 0 is invalid [ 754.581132][ T5140] hid (null): unknown global tag 0x35 [ 754.590592][ T5140] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 754.599194][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.608589][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.608622][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.616059][ T5140] hid-generic 0003:0158:0100.0009: unexpected long global item [ 754.635695][ T5140] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 754.647504][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.657171][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.665788][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.700618][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.707876][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.794432][T11360] usb 3-1: USB disconnect, device number 113 [ 754.894443][ T5094] Bluetooth: hci2: command tx timeout [ 754.919485][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.096493][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.271580][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.419591][T15121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 755.546768][T15121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 755.599013][T15121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 755.710937][T14981] veth0_vlan: entered promiscuous mode [ 755.735839][T15121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 755.844457][T14981] veth1_vlan: entered promiscuous mode [ 756.207439][ T51] bridge_slave_1: left allmulticast mode [ 756.213853][ T51] bridge_slave_1: left promiscuous mode [ 756.219670][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.230168][ T51] bridge_slave_0: left allmulticast mode [ 756.236383][ T51] bridge_slave_0: left promiscuous mode [ 756.242294][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.453874][T11359] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 756.684175][T11359] usb 3-1: Using ep0 maxpacket: 16 [ 756.700496][T11359] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.737933][T11359] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.747232][ T5094] Bluetooth: hci0: command tx timeout [ 756.763464][T11359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 756.773363][T11359] usb 3-1: SerialNumber: syz [ 757.060584][T11359] usb 3-1: USB disconnect, device number 114 [ 757.137325][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.150157][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.173140][ T51] bond0 (unregistering): Released all slaves [ 757.314400][ T51] IPVS: stopping master sync thread 14835 ... [ 757.334281][T14981] veth0_macvtap: entered promiscuous mode [ 757.474232][T14981] veth1_macvtap: entered promiscuous mode [ 757.522453][T15191] chnl_net:caif_netlink_parms(): no params data found [ 757.560457][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.866067][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.878795][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.889769][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.903070][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.913543][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.924544][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.935662][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.948147][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.962767][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.029202][ T51] hsr_slave_0: left promiscuous mode [ 758.036302][ T51] hsr_slave_1: left promiscuous mode [ 758.053961][ T5192] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 758.067072][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.084089][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.114028][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.121551][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.159049][ T51] veth1_macvtap: left promiscuous mode [ 758.164773][ T51] veth0_macvtap: left promiscuous mode [ 758.170514][ T51] veth1_vlan: left promiscuous mode [ 758.243893][ T5192] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 758.260306][ T5192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.271809][ T5192] usb 3-1: Product: syz [ 758.298557][ T5192] usb 3-1: Manufacturer: syz [ 758.303224][ T5192] usb 3-1: SerialNumber: syz [ 758.324593][ T5192] usb 3-1: config 0 descriptor?? [ 758.344497][ T5192] ch341 3-1:0.0: ch341-uart converter detected [ 758.541385][ T5192] usb 3-1: failed to receive control message: -71 [ 758.548601][ T5192] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 758.567240][ T5192] usb 3-1: USB disconnect, device number 115 [ 758.576890][ T5192] ch341 3-1:0.0: device disconnected [ 758.816831][ T5094] Bluetooth: hci0: command tx timeout [ 759.118791][ T51] team0 (unregistering): Port device team_slave_1 removed [ 759.198829][ T51] team0 (unregistering): Port device team_slave_0 removed [ 759.962598][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.973642][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.989218][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.999918][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.010731][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.021566][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.055856][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.146127][T15191] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.156704][T15191] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.165094][T15191] bridge_slave_0: entered allmulticast mode [ 760.172877][T15191] bridge_slave_0: entered promiscuous mode [ 760.198501][T15191] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.226156][T15191] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.242005][T15191] bridge_slave_1: entered allmulticast mode [ 760.259088][T15191] bridge_slave_1: entered promiscuous mode [ 760.308206][T14981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.326350][T14981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.341458][T14981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.350988][T14981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.383097][T15026] veth0_vlan: entered promiscuous mode [ 760.466541][T15191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.510571][T15191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.540850][T15026] veth1_vlan: entered promiscuous mode [ 760.774372][T15191] team0: Port device team_slave_0 added [ 760.856761][T15191] team0: Port device team_slave_1 added [ 760.893884][ T5094] Bluetooth: hci0: command tx timeout [ 760.921171][T15121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.047534][T15191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.064535][T15191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.101236][T15191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.133921][T15191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.140939][T15191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.191147][T15191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.266712][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.306448][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.443377][ T5094] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 761.446147][T15121] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.513002][T15026] veth0_macvtap: entered promiscuous mode [ 761.548411][T15026] veth1_macvtap: entered promiscuous mode [ 761.648674][T15191] hsr_slave_0: entered promiscuous mode [ 761.659219][T15191] hsr_slave_1: entered promiscuous mode [ 761.670981][T15191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.679829][T15191] Cannot create hsr debugfs directory [ 761.695474][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.702711][T11347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.718409][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.739622][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.825487][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.832748][ T5192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.885798][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.902997][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.925365][T11343] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 761.928109][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.947658][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.957599][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.968310][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.978590][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.995837][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.010939][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.023652][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.038497][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.048642][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.059150][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.070018][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.081122][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.091182][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.105855][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.125094][T11343] usb 3-1: Using ep0 maxpacket: 16 [ 762.129843][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.132597][T11343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 762.213644][T11343] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 762.223031][T11343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.273555][T11343] usb 3-1: config 0 descriptor?? [ 762.274623][T15026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.302395][T15026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.323934][T15026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.332880][T15026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.786415][T15301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.822283][T15301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.857021][T11343] hid (null): unknown global tag 0xc [ 762.862522][T11343] hid (null): unknown global tag 0xe [ 762.895386][T11343] hid (null): unknown global tag 0xc [ 762.900965][T11343] hid (null): report_id 0 is invalid [ 762.933992][T11343] hid (null): unknown global tag 0x35 [ 762.965612][T11343] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 762.973136][T11343] hid-generic 0003:0158:0100.000A: unexpected long global item [ 762.982719][ T5094] Bluetooth: hci0: command tx timeout [ 762.996356][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.005690][T11343] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 763.049615][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.087165][T11359] usb 3-1: USB disconnect, device number 116 [ 763.107096][T15121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.493179][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.502752][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.778429][T15121] veth0_vlan: entered promiscuous mode [ 763.862732][T15121] veth1_vlan: entered promiscuous mode [ 764.019310][T15191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.076057][T11360] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 764.086311][T15191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.164552][T15191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.247945][T15342] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 764.255019][T15191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.310318][T11360] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 764.340224][T11360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.348601][ T5139] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 764.365011][T11360] usb 3-1: Product: syz [ 764.380489][T15121] veth0_macvtap: entered promiscuous mode [ 764.391908][T11360] usb 3-1: Manufacturer: syz [ 764.409764][T11360] usb 3-1: SerialNumber: syz [ 764.429254][T11360] usb 3-1: config 0 descriptor?? [ 764.441411][T15121] veth1_macvtap: entered promiscuous mode [ 764.461666][T11360] ch341 3-1:0.0: ch341-uart converter detected [ 764.570793][ T5139] usb 2-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=dd.57 [ 764.598594][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.640728][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.659693][ T5139] usb 2-1: Product: syz [ 764.684622][ T5139] usb 2-1: Manufacturer: syz [ 764.690159][T11360] usb 3-1: failed to receive control message: -71 [ 764.702514][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.712813][ T5139] usb 2-1: SerialNumber: syz [ 764.718235][T11360] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 764.735353][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.747007][ T5139] usb 2-1: config 0 descriptor?? [ 764.761091][T11360] usb 3-1: USB disconnect, device number 117 [ 764.771083][ T5139] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 764.785680][T11360] ch341 3-1:0.0: device disconnected [ 764.791210][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.878467][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.913311][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.985117][ T5139] gspca_zc3xx: reg_w_i err -71 [ 765.007259][ T5139] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 765.018467][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.051406][ T5139] usb 2-1: USB disconnect, device number 96 [ 765.058280][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.089181][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.140658][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.227660][T15121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.242329][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.268770][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.333768][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.353916][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.373373][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.407986][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.443281][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.462764][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.480056][T15121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.494611][T15121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.515619][T15121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.546136][T15356] veth0_vlan: entered allmulticast mode [ 765.705483][T15121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.740500][T15121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.778394][T15121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.802064][T15121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.212874][ T5094] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 766.330582][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.385357][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.507647][T15191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.681627][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.711700][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.741305][T15191] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.834779][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.842013][T11360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.905518][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.912746][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.934101][ T5139] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 767.043990][T11359] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 767.088412][T15191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.148880][T15191] veth0_vlan: entered promiscuous mode [ 767.164132][ T5139] usb 5-1: Using ep0 maxpacket: 16 [ 767.169126][T15191] veth1_vlan: entered promiscuous mode [ 767.180220][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 767.197728][ T5139] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 767.208429][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.230877][ T5139] usb 5-1: config 0 descriptor?? [ 767.236226][ T5147] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 767.250430][T15191] veth0_macvtap: entered promiscuous mode [ 767.255790][T11359] usb 2-1: config 0 has no interfaces? [ 767.270278][T11359] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 767.286068][T11359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.289512][T15191] veth1_macvtap: entered promiscuous mode [ 767.311080][T11359] usb 2-1: config 0 descriptor?? [ 767.353017][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.367669][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.379904][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.390818][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.401443][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.412439][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.422549][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.435389][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.445499][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.456554][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.470021][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.473948][ T5147] usb 4-1: Using ep0 maxpacket: 32 [ 767.481885][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.491501][ T5147] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 767.508414][T15191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.511011][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.527948][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.550141][ T5147] usb 4-1: config 0 descriptor?? [ 767.559784][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.574535][ T5147] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 767.582914][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.604229][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.616292][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.627413][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.637744][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.648736][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.660513][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.676210][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.687350][T15191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.701635][T15191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.715732][T15191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.806020][T15383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.824974][T15383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.845593][ T5139] hid (null): unknown global tag 0xc [ 767.851348][ T5139] hid (null): unknown global tag 0xe [ 767.878477][ T5139] hid (null): unknown global tag 0xc [ 767.884631][ T5139] hid (null): report_id 0 is invalid [ 767.890152][ T5139] hid (null): unknown global tag 0x35 [ 767.901752][ T5139] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 767.910592][T15191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.919961][ T5139] hid-generic 0003:0158:0100.000B: unexpected long global item [ 767.927763][T15191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.939937][ T5139] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 767.949927][T15191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.960225][T15191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.078515][ T5143] usb 5-1: USB disconnect, device number 107 [ 768.177128][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.196843][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.243539][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.260994][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.392959][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.421728][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.471303][ T29] audit: type=1326 audit(1719643063.778:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15391 comm="syz.0.2073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f603f575b99 code=0x0 [ 768.650509][ T5147] gspca_sunplus: reg_w_riv err -71 [ 768.661445][ T5147] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 768.680890][ T5147] usb 4-1: USB disconnect, device number 81 [ 769.686901][ T5147] usb 2-1: USB disconnect, device number 97 [ 769.900904][ T29] audit: type=1326 audit(1719643065.208:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.4.2105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ab2175b99 code=0x0 [ 769.931909][ T5139] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 769.944707][T15430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 769.951276][T15430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 769.975206][T15430] vhci_hcd vhci_hcd.0: Device attached [ 769.985358][T15430] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2107'. [ 769.996610][T15430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2107'. [ 770.037913][T15434] vhci_hcd: connection closed [ 770.039435][ T61] vhci_hcd: stop threads [ 770.050057][ T61] vhci_hcd: release socket [ 770.054962][ T61] vhci_hcd: disconnect device [ 770.147047][ T5139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.154044][T11343] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 770.163924][ T5139] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.181591][ T5139] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.192388][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.201489][ T5139] usb 1-1: Product: syz [ 770.206351][ T5139] usb 1-1: Manufacturer: syz [ 770.211064][ T5139] usb 1-1: SerialNumber: syz [ 770.231441][ T5139] usb 1-1: selecting invalid altsetting 1 [ 770.385015][T11343] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 770.392531][T11343] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 770.411820][T11343] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 770.443330][T11343] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.466760][T11343] usb 3-1: string descriptor 0 read error: -22 [ 770.473131][T11343] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 770.484482][T11343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.518009][T11343] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 770.759005][T11343] usb 3-1: USB disconnect, device number 118 [ 770.848333][ T5139] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 770.866148][ T5139] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 770.895027][ T5139] usb 1-1: selecting invalid altsetting 1 [ 770.907118][ T5139] cdc_ncm 1-1:1.0: bind() failure [ 770.943055][ T5139] usb 1-1: USB disconnect, device number 79 [ 771.023916][ T5192] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 771.234406][ T5192] usb 5-1: Using ep0 maxpacket: 16 [ 771.241362][ T5192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xCC has invalid maxpacket 45102, setting to 1024 [ 771.271380][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880780d9400: rx timeout, send abort [ 771.281282][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880780d9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 771.306674][ T5192] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xCC has invalid maxpacket 1024 [ 771.322935][ T5192] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 771.344050][ T5192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 771.373019][ T5192] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 771.413857][ T5192] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 771.433358][ T5192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.450541][ T5192] usb 5-1: Product: syz [ 771.464453][ T5192] usb 5-1: Manufacturer: syz [ 771.474645][ T5192] usb 5-1: SerialNumber: syz [ 771.490712][ T5192] usb 5-1: config 0 descriptor?? [ 771.499971][T15443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 771.519839][ T5192] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 771.606295][T15451] input: syz1 as /devices/virtual/input/input22 [ 771.714239][T11343] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 771.743547][ T5140] usb 5-1: USB disconnect, device number 108 [ 771.788791][ T29] audit: type=1326 audit(1719643067.088:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.3.2114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe06375b99 code=0x0 [ 771.834044][T15455] input: syz1 as /devices/virtual/input/input23 [ 771.916734][T11343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.955054][T11343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.993345][T11343] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 772.034239][T15461] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 772.043997][T11343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.078442][T11343] usb 3-1: config 0 descriptor?? [ 772.162529][T15461] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 772.445373][T11343] usbhid 3-1:0.0: can't add hid device: -71 [ 772.464707][T11343] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 772.492804][T11343] usb 3-1: USB disconnect, device number 119 [ 772.509473][T11421] udevd[11421]: setting owner of /dev/bus/usb/003/119 to uid=0, gid=0 failed: No such file or directory [ 772.642301][T15478] kernel read not supported for file /rmdFΌμ (pid: 15478 comm: syz.1.2122) [ 772.659859][ T29] audit: type=1800 audit(1719643067.968:236): pid=15478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2122" name=726D64461716BCEC dev="mqueue" ino=92105 res=0 errno=0 [ 772.743914][ T29] audit: type=1326 audit(1719643068.048:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15473 comm="syz.3.2120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe06375b99 code=0x0 [ 773.375860][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 774.014391][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 774.026135][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 774.036423][ T5100] Bluetooth: hci3: hardware error 0x00 [ 775.608794][T15592] input: syz1 as /devices/virtual/input/input24 [ 775.791696][ T29] audit: type=1326 audit(1719643071.098:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.2.2172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358b175b99 code=0x0 [ 776.174328][ T5100] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 776.586386][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 776.612648][T15649] bridge_slave_1: left allmulticast mode [ 776.620118][T15649] bridge_slave_1: left promiscuous mode [ 776.627662][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.642466][T15649] bridge1: port 1(bridge_slave_1) entered blocking state [ 776.650481][T15649] bridge1: port 1(bridge_slave_1) entered disabled state [ 776.668029][T15649] bridge_slave_1: entered allmulticast mode [ 776.677219][T15649] bridge_slave_1: entered promiscuous mode [ 776.683952][ T5143] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 776.885984][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.906916][ T5143] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.937424][ T5143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.956340][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.989275][ T5143] usb 4-1: Product: syz [ 776.997671][ T5143] usb 4-1: Manufacturer: syz [ 777.008076][ T5143] usb 4-1: SerialNumber: syz [ 777.028023][ T5143] usb 4-1: selecting invalid altsetting 1 [ 777.406618][T15675] input: syz1 as /devices/virtual/input/input25 [ 777.553055][ T29] audit: type=1326 audit(1719643072.858:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15674 comm="syz.4.2203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ab2175b99 code=0x0 [ 777.701058][ T5143] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 777.732750][ T5143] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 777.794261][ T5143] usb 4-1: selecting invalid altsetting 1 [ 777.795614][T15680] kernel profiling enabled (shift: 3) [ 777.826027][ T5143] cdc_ncm 4-1:1.0: bind() failure [ 777.943721][ C0] ================================================================== [ 777.951847][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170 [ 777.959097][ C0] Read of size 8 at addr ffffc9000356eea0 by task syz.1.2202/15673 [ 777.967022][ C0] [ 777.969387][ C0] CPU: 0 PID: 15673 Comm: syz.1.2202 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 777.979577][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 777.989680][ C0] Call Trace: [ 777.992990][ C0] [ 777.995869][ C0] dump_stack_lvl+0x241/0x360 [ 778.000597][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.005819][ C0] ? __pfx__printk+0x10/0x10 [ 778.010424][ C0] ? _printk+0xd5/0x120 [ 778.014621][ C0] print_report+0x169/0x550 [ 778.019138][ C0] ? __virt_addr_valid+0xbd/0x520 [ 778.024184][ C0] ? profile_pc+0xd2/0x170 [ 778.028608][ C0] kasan_report+0x143/0x180 [ 778.033118][ C0] ? profile_pc+0xd2/0x170 [ 778.037548][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 778.043443][ C0] profile_pc+0xd2/0x170 [ 778.047697][ C0] profile_tick+0xd7/0x150 [ 778.052127][ C0] tick_nohz_handler+0x386/0x500 [ 778.057106][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 778.062579][ C0] __hrtimer_run_queues+0x551/0xd50 [ 778.067785][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 778.073777][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 778.079503][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 778.085575][ C0] hrtimer_interrupt+0x396/0x990 [ 778.090530][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 778.096521][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 778.102166][ C0] [ 778.105099][ C0] [ 778.108032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.114042][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 778.120567][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 1a 6b f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 83 d7 d4 f5 65 8b 05 14 0f 73 74 85 c0 74 43 48 c7 04 24 0e 36 [ 778.140178][ C0] RSP: 0018:ffffc9000356eea0 EFLAGS: 00000206 [ 778.146256][ C0] RAX: 22b45d30fc62e500 RBX: 1ffff920006addd8 RCX: ffffffff8172d9ea [ 778.154316][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 778.162293][ C0] RBP: ffffc9000356ef30 R08: ffffffff92fa85df R09: 1ffffffff25f50bb [ 778.170266][ C0] R10: dffffc0000000000 R11: fffffbfff25f50bc R12: dffffc0000000000 [ 778.178242][ C0] R13: 1ffff920006addd4 R14: ffffc9000356eec0 R15: 0000000000000246 [ 778.186305][ C0] ? mark_lock+0x9a/0x350 [ 778.190753][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 778.197179][ C0] folio_batch_move_lru+0x5ba/0x690 [ 778.202386][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 778.207241][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 778.212965][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 778.218511][ C0] ? folio_batch_add_and_move+0x98/0x2b0 [ 778.224156][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 778.229021][ C0] ? folio_add_lru+0x357/0xd70 [ 778.233873][ C0] folio_add_lru+0x475/0xd70 [ 778.238466][ C0] do_wp_page+0x1c37/0x52f0 [ 778.242988][ C0] ? do_wp_page+0x15c4/0x52f0 [ 778.247694][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 778.252553][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 778.257582][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 778.262727][ C0] handle_pte_fault+0x117e/0x7090 [ 778.267755][ C0] ? cgroup_rstat_updated+0x13b/0xc60 [ 778.273138][ C0] ? __pfx_validate_chain+0x10/0x10 [ 778.278373][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 778.284106][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 778.289484][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 778.294529][ C0] ? __pfx_lock_release+0x10/0x10 [ 778.299559][ C0] handle_mm_fault+0x10df/0x1ba0 [ 778.304528][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 778.309828][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 778.316163][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 778.321471][ C0] exc_page_fault+0x2b9/0x8c0 [ 778.326212][ C0] asm_exc_page_fault+0x26/0x30 [ 778.331096][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 778.336921][ C0] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 778.356558][ C0] RSP: 0018:ffffc9000356f958 EFLAGS: 00050206 [ 778.362632][ C0] RAX: ffff888012978001 RBX: 00000000205b1e80 RCX: 0000000000000e80 [ 778.370607][ C0] RDX: 0000000000000000 RSI: ffff888012978180 RDI: 00000000205b1000 [ 778.378688][ C0] RBP: ffffc9000356fad8 R08: ffff888012978fff R09: 1ffff1100252f1ff [ 778.386663][ C0] R10: dffffc0000000000 R11: ffffed100252f200 R12: dffffc0000000000 [ 778.394638][ C0] R13: 1ffff920006adf40 R14: 0000000000001000 R15: ffff888012978000 [ 778.402626][ C0] _copy_to_iter+0x4c0/0x1960 [ 778.407323][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 778.412444][ C0] ? irqentry_exit+0x63/0x90 [ 778.417125][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 778.422340][ C0] ? page_copy_sane+0x46/0x260 [ 778.427107][ C0] copy_page_to_iter+0xb1/0x160 [ 778.431969][ C0] process_vm_rw+0x871/0xcf0 [ 778.436575][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 778.441722][ C0] ? futex_wait+0x285/0x360 [ 778.446253][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 778.452235][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 778.458565][ C0] __x64_sys_process_vm_readv+0xe0/0x100 [ 778.464205][ C0] do_syscall_64+0xf3/0x230 [ 778.468723][ C0] ? clear_bhb_loop+0x35/0x90 [ 778.473400][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.479304][ C0] RIP: 0033:0x7f7195175b99 [ 778.483731][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.503356][ C0] RSP: 002b:00007f7195eee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 778.511783][ C0] RAX: ffffffffffffffda RBX: 00007f7195304078 RCX: 00007f7195175b99 [ 778.519753][ C0] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000003e [ 778.527727][ C0] RBP: 00007f71951f677e R08: 0000000000000286 R09: 0000000000000000 [ 778.535701][ C0] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 778.544046][ C0] R13: 000000000000006e R14: 00007f7195304078 R15: 00007f719542fa68 [ 778.552031][ C0] [ 778.555051][ C0] [ 778.557373][ C0] The buggy address belongs to stack of task syz.1.2202/15673 [ 778.564822][ C0] and is located at offset 0 in frame: [ 778.570354][ C0] _raw_spin_unlock_irqrestore+0x0/0x140 [ 778.576002][ C0] [ 778.578324][ C0] This frame has 1 object: [ 778.582733][ C0] [32, 40) 'flags.i.i.i.i' [ 778.582745][ C0] [ 778.589546][ C0] The buggy address belongs to the virtual mapping at [ 778.589546][ C0] [ffffc90003568000, ffffc90003571000) created by: [ 778.589546][ C0] copy_process+0x5d1/0x3dc0 [ 778.607184][ C0] [ 778.609517][ C0] The buggy address belongs to the physical page: [ 778.615956][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806ed93e58 pfn:0x6ed93 [ 778.626037][ C0] memcg:ffff88807eda4b82 [ 778.630282][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 778.637409][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 778.645994][ C0] raw: ffff88806ed93e58 0000000000000000 00000001ffffffff ffff88807eda4b82 [ 778.654570][ C0] page dumped because: kasan: bad access detected [ 778.660986][ C0] page_owner tracks the page as allocated [ 778.666697][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 15670, tgid 15670 (syz.1.2202), ts 777318759784, free_ts 777016248113 [ 778.685201][ C0] post_alloc_hook+0x1f3/0x230 [ 778.689973][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 778.695527][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 778.700827][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 778.706291][ C0] __vmalloc_node_range_noprof+0x971/0x1460 [ 778.712187][ C0] dup_task_struct+0x444/0x8c0 [ 778.716954][ C0] copy_process+0x5d1/0x3dc0 [ 778.721560][ C0] kernel_clone+0x226/0x8f0 [ 778.726068][ C0] __se_sys_clone3+0x2cb/0x350 [ 778.730845][ C0] do_syscall_64+0xf3/0x230 [ 778.735370][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.741283][ C0] page last free pid 11421 tgid 11421 stack trace: [ 778.747782][ C0] free_unref_page+0xd22/0xea0 [ 778.752555][ C0] __put_partials+0xeb/0x130 [ 778.757148][ C0] put_cpu_partial+0x17c/0x250 [ 778.761918][ C0] __slab_free+0x2ea/0x3d0 [ 778.766337][ C0] qlist_free_all+0x9e/0x140 [ 778.771017][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 778.776476][ C0] __kasan_slab_alloc+0x23/0x80 [ 778.781328][ C0] __kmalloc_noprof+0x1a3/0x400 [ 778.786188][ C0] tomoyo_encode+0x26f/0x540 [ 778.790776][ C0] tomoyo_path_perm+0x3ca/0x740 [ 778.795629][ C0] tomoyo_path_symlink+0xde/0x120 [ 778.800666][ C0] security_path_symlink+0xe3/0x140 [ 778.805870][ C0] do_symlinkat+0x136/0x3a0 [ 778.810374][ C0] __x64_sys_symlink+0x7e/0x90 [ 778.815241][ C0] do_syscall_64+0xf3/0x230 [ 778.819768][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.825687][ C0] [ 778.828021][ C0] Memory state around the buggy address: [ 778.833663][ C0] ffffc9000356ed80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.841755][ C0] ffffc9000356ee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.849814][ C0] >ffffc9000356ee80: 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 [ 778.857869][ C0] ^ [ 778.862990][ C0] ffffc9000356ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 778.871045][ C0] ffffc9000356ef80: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 778.879100][ C0] ================================================================== [ 778.887160][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 778.894353][ C0] CPU: 0 PID: 15673 Comm: syz.1.2202 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 778.904502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 778.914561][ C0] Call Trace: [ 778.917840][ C0] [ 778.920685][ C0] dump_stack_lvl+0x241/0x360 [ 778.925379][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.930616][ C0] ? __pfx__printk+0x10/0x10 [ 778.935233][ C0] ? rcu_is_watching+0x15/0xb0 [ 778.940013][ C0] ? vscnprintf+0x5d/0x90 [ 778.944353][ C0] panic+0x349/0x860 [ 778.948263][ C0] ? __pfx_lock_release+0x10/0x10 [ 778.953290][ C0] ? check_panic_on_warn+0x21/0xb0 [ 778.958411][ C0] ? __pfx_panic+0x10/0x10 [ 778.962835][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 778.968056][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 778.973952][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 778.980282][ C0] check_panic_on_warn+0x86/0xb0 [ 778.985226][ C0] ? profile_pc+0xd2/0x170 [ 778.989646][ C0] end_report+0x77/0x160 [ 778.993902][ C0] kasan_report+0x154/0x180 [ 778.998424][ C0] ? profile_pc+0xd2/0x170 [ 779.002850][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 779.008746][ C0] profile_pc+0xd2/0x170 [ 779.012995][ C0] profile_tick+0xd7/0x150 [ 779.017424][ C0] tick_nohz_handler+0x386/0x500 [ 779.022373][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 779.027841][ C0] __hrtimer_run_queues+0x551/0xd50 [ 779.033051][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 779.039053][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 779.044790][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 779.050877][ C0] hrtimer_interrupt+0x396/0x990 [ 779.055835][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 779.061828][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 779.067467][ C0] [ 779.070424][ C0] [ 779.073354][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.079344][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 779.085848][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 1a 6b f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 83 d7 d4 f5 65 8b 05 14 0f 73 74 85 c0 74 43 48 c7 04 24 0e 36 [ 779.105454][ C0] RSP: 0018:ffffc9000356eea0 EFLAGS: 00000206 [ 779.111526][ C0] RAX: 22b45d30fc62e500 RBX: 1ffff920006addd8 RCX: ffffffff8172d9ea [ 779.119497][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 779.127472][ C0] RBP: ffffc9000356ef30 R08: ffffffff92fa85df R09: 1ffffffff25f50bb [ 779.135451][ C0] R10: dffffc0000000000 R11: fffffbfff25f50bc R12: dffffc0000000000 [ 779.143462][ C0] R13: 1ffff920006addd4 R14: ffffc9000356eec0 R15: 0000000000000246 [ 779.151444][ C0] ? mark_lock+0x9a/0x350 [ 779.155787][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 779.162125][ C0] folio_batch_move_lru+0x5ba/0x690 [ 779.167331][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 779.172183][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 779.177906][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 779.183470][ C0] ? folio_batch_add_and_move+0x98/0x2b0 [ 779.189102][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 779.193960][ C0] ? folio_add_lru+0x357/0xd70 [ 779.198726][ C0] folio_add_lru+0x475/0xd70 [ 779.203321][ C0] do_wp_page+0x1c37/0x52f0 [ 779.207837][ C0] ? do_wp_page+0x15c4/0x52f0 [ 779.212549][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 779.217410][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 779.222437][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 779.227476][ C0] handle_pte_fault+0x117e/0x7090 [ 779.232504][ C0] ? cgroup_rstat_updated+0x13b/0xc60 [ 779.237889][ C0] ? __pfx_validate_chain+0x10/0x10 [ 779.243107][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 779.250855][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 779.256242][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 779.261290][ C0] ? __pfx_lock_release+0x10/0x10 [ 779.266320][ C0] handle_mm_fault+0x10df/0x1ba0 [ 779.271280][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 779.276602][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 779.283019][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 779.288325][ C0] exc_page_fault+0x2b9/0x8c0 [ 779.293020][ C0] asm_exc_page_fault+0x26/0x30 [ 779.297911][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 779.303723][ C0] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 779.323347][ C0] RSP: 0018:ffffc9000356f958 EFLAGS: 00050206 [ 779.329441][ C0] RAX: ffff888012978001 RBX: 00000000205b1e80 RCX: 0000000000000e80 [ 779.337432][ C0] RDX: 0000000000000000 RSI: ffff888012978180 RDI: 00000000205b1000 [ 779.345418][ C0] RBP: ffffc9000356fad8 R08: ffff888012978fff R09: 1ffff1100252f1ff [ 779.353417][ C0] R10: dffffc0000000000 R11: ffffed100252f200 R12: dffffc0000000000 [ 779.361398][ C0] R13: 1ffff920006adf40 R14: 0000000000001000 R15: ffff888012978000 [ 779.369386][ C0] _copy_to_iter+0x4c0/0x1960 [ 779.374096][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 779.379226][ C0] ? irqentry_exit+0x63/0x90 [ 779.383826][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 779.389039][ C0] ? page_copy_sane+0x46/0x260 [ 779.393842][ C0] copy_page_to_iter+0xb1/0x160 [ 779.398698][ C0] process_vm_rw+0x871/0xcf0 [ 779.403302][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 779.408449][ C0] ? futex_wait+0x285/0x360 [ 779.412979][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 779.418964][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 779.425298][ C0] __x64_sys_process_vm_readv+0xe0/0x100 [ 779.430941][ C0] do_syscall_64+0xf3/0x230 [ 779.435453][ C0] ? clear_bhb_loop+0x35/0x90 [ 779.440133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.446037][ C0] RIP: 0033:0x7f7195175b99 [ 779.450458][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.470165][ C0] RSP: 002b:00007f7195eee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 779.478607][ C0] RAX: ffffffffffffffda RBX: 00007f7195304078 RCX: 00007f7195175b99 [ 779.486581][ C0] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000003e [ 779.494552][ C0] RBP: 00007f71951f677e R08: 0000000000000286 R09: 0000000000000000 [ 779.502521][ C0] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 779.510490][ C0] R13: 000000000000006e R14: 00007f7195304078 R15: 00007f719542fa68 [ 779.518491][ C0] [ 779.521816][ C0] Kernel Offset: disabled [ 779.526148][ C0] Rebooting in 86400 seconds..