last executing test programs: 1m44.400222213s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 1m29.421144265s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 1m11.718356631s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 53.533818883s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 37.118433817s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 27.282930397s ago: executing program 1 (id=2506): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 25.947219046s ago: executing program 1 (id=2513): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x10c, 0x16, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local}, {@in=@loopback, 0x0, 0x6c}, @in=@remote}, [@replay_esn_val={0x1c, 0x17, {0x400002e2}}]}, 0x10c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) unshare(0x20000400) getpeername$packet(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @generic="df"]}, 0x24}], 0x1}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setns(r0, 0x20000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0xee, 0x2}}}, {{@arp={@loopback, @rand_addr=0x64010102, 0xff000000, 0xff000000, 0x3, 0xa, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x7ff, 0x7f, 0x5, 0x1, 0xa, 0x1, 'geneve0\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="e54c50b25227", @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @mac=@local, @loopback, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x28) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 24.965890441s ago: executing program 1 (id=2522): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000001b40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000001bc0)=""/154, 0x9a}], 0x1}}], 0x1, 0x163, 0x0) write$binfmt_misc(r0, &(0x7f0000001a00)=ANY=[], 0xbf) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 17.465934645s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008e80000850000006900000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 7.261249751s ago: executing program 2 (id=2570): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 5.522496838s ago: executing program 0 (id=2572): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=@raw=[@printk], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001}, 0x90) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f000000c540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0500000000000000", @ANYBLOB="00000000000000f6b6860000000500000000982700852000000100000018ffc9680000000000000000000000f742aebd551dda89b99b5c665bd65184361385bbf7c366e6a0de97990ee2a9ac7d2d083eebdb5b5a571a7747d49ab7e287ce5ec10f1e4959ad8122512859a1a18a463f0dad9045fb161183629a0e92ff52ca", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183000"/39], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x0, 0x0, 0xf}, {0x5, 0x2, 0x6}, {0x0, 0x2, 0x20000000, 0x7}, {0x0, 0x3, 0x6}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000001c80)="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", 0x1002}], 0x3, 0x4) socket$inet(0x2, 0x0, 0x7f) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r8, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x8f8, 0x0) 4.438744748s ago: executing program 0 (id=2574): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3ff, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000004c0)=""/129, 0x81}, {0x0}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000280)=""/34, 0x22}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20}, 0x46cef15b77d5ff31) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000880)={0x2, &(0x7f0000000840)=[{0x40, 0x9, 0x40, 0x3f}, {0x0, 0x7, 0x3}]}) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.041012507s ago: executing program 3 (id=2575): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@abs={0x1}, 0x6e) listen(r0, 0x0) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 3.329013305s ago: executing program 2 (id=2576): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb1, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.307903001s ago: executing program 0 (id=2577): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000500)="aa", 0x1}], 0x1}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.210797155s ago: executing program 3 (id=2578): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x1) 3.185309133s ago: executing program 2 (id=2579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4018aee1, &(0x7f0000000080)) 3.073197561s ago: executing program 3 (id=2580): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r9) r10 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x81) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) r14 = accept4(r10, 0x0, 0x0, 0x0) sendfile(r14, r9, 0x0, 0xfacf) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r9}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r15, 0x1a36, '\x00', r3, r9, 0x1, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000040000000000000009393c0d6d110000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES8=r5], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, 0x1, r9, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5}, 0x90) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_FS_INFO(r16, 0x8400941f, &(0x7f0000000040)) 2.75092999s ago: executing program 2 (id=2581): ftruncate(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x90) 2.634939166s ago: executing program 3 (id=2582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="6e94e8234ebb136695daa14cadff003c92aa3c37423d1c40305f9d5d118fc88b5f6680ee9d7222c1bcc1af78727096813799cbb8f7876cf0f1dd9fdd1f01a70d78b5d1cef7ae3ff05deba913edc27ce0ba145771935c73a03d221ed88edf58a153726798fc091ec9c8e9efe63f10702f6edc60913c55ecbc88fe66e7d448109816ecbd9330681df1f0abc66730b960c8c64280e0d709fc0af1be10b2254f589482f6d06aaed43bc5f6b8789eb1b7e164", 0xb0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/109, 0x6d}], 0x2}}], 0x2, 0x10000, 0x0) 2.627874834s ago: executing program 2 (id=2583): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c0c001a80080001"], 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e70000000095000000000000000b5adeb425eed30352f3785b3687f1056ea54648aca752e50c67a1f2edc4972d"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) socket(0x22, 0x2, 0x3) 2.396702292s ago: executing program 0 (id=2584): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00h'], 0x9) iopl(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mknod$loop(&(0x7f0000000240)='\x00', 0x20, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0x1a, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) removexattr(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.334715474s ago: executing program 3 (id=2585): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 2.220198165s ago: executing program 3 (id=2586): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 1.53879235s ago: executing program 2 (id=2587): syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000309021b000100000200090400000101035100090503000000000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) add_key(0x0, 0x0, &(0x7f0000000340)="143fda06ec07c23fde3cb79ed88031e0525844da66056aa14d12625411d03e53ce8b21eb6a1f226e36e0cac952721ddf616e87e9ffe93ac1e52dd133000344f88e2bd1940b122e4b8bfe75b7064af951aebf4702ad6acc0594005cf451e566a70a32db2041f15744318ba584e6b34cb67ef7e7c0f5b45bb40534e3afdd3909e48f4e3e368043a32ed1c11081d1cbc2d4408637fcc3d9c30aa0f86b4d38219b35ad30cb1f4388f03e1d475300dde6374b94340632c98c8cb13273cece1688495104", 0xc1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x200, 0x0, 0xffff, 0x80}, &(0x7f0000000080)=0x18) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000540)={0x1ff, 0x3, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000002c0)={r8, 0x90, &(0x7f0000000440)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x1, @empty, 0xd5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xfffffffb, @local, 0x4}, @in6={0xa, 0x4e23, 0x5, @remote, 0x10001}]}, &(0x7f0000000300)=0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8000, 0x1, 0x4, 0x400, 0x9, {r10, r11/1000+10000}, {0x1, 0x0, 0x0, 0xfb, 0xfe, 0x0, "dec8bd5e"}, 0x13, 0x3, {&(0x7f0000000240)=[{0x6, 0x8, {0x5}, 0x6}, {0x4, 0x0, {0x4}, 0xc}]}, 0x4, 0x0, r6}) 767.008543ms ago: executing program 0 (id=2588): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@abs={0x1}, 0x6e) listen(r0, 0x0) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 227.087599ms ago: executing program 1 (id=2527): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000001300)="e6a77044c694087bcedeae8387c2cc85e9cb78b68beb8154448b7f19e6a1cd9154bc8a90cd786ee5e3f214ed854b9613c81d456c0d63e907bd3dbe3a7f54455c9ab178dcb47589c33899895d9ae8571bdab6142c717e2ddf680b6f431f6d1004bdee8e8e863f25950d5bd29cd48b231d9adc9b30865846143b89ae111d5206a4", 0x80}], 0x2}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003640)="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", 0xf7e}, {&(0x7f0000004b80)="e3", 0x1}], 0x2}}], 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 120.30117ms ago: executing program 1 (id=2589): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x1) 33.280966ms ago: executing program 1 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 0s ago: executing program 0 (id=2591): socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x8}}}}}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000), r1, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x11}}, 0x120) clock_gettime(0x0, &(0x7f00000002c0)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): oint 0x81 has invalid wMaxPacketSize 0 [ 608.265388][ T5645] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.282582][ T5645] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 608.299685][ T5645] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 608.310730][ T5645] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 608.340018][ T5645] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.353849][ T5645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.362130][ T5645] usb 2-1: Product: syz [ 608.366514][ T5645] usb 2-1: Manufacturer: syz [ 608.374400][ T5645] usb 2-1: SerialNumber: syz [ 608.470280][T11397] veth0_vlan: entered promiscuous mode [ 608.524865][T11397] veth1_vlan: entered promiscuous mode [ 608.592410][ T5577] Bluetooth: hci2: Malformed LE Event: 0x0d [ 608.604376][ T5645] cdc_ncm 2-1:1.0: bind() failure [ 608.729833][T11397] veth0_macvtap: entered promiscuous mode [ 608.741913][ T5645] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 608.770320][ T5645] cdc_ncm 2-1:1.1: bind() failure [ 608.780895][T11397] veth1_macvtap: entered promiscuous mode [ 608.793568][ T5645] usb 2-1: USB disconnect, device number 40 [ 608.817116][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.858581][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.889158][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.902156][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.924635][ T5577] Bluetooth: hci4: command 0x0406 tx timeout [ 608.937803][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.950406][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.967824][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.986203][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.007552][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.029319][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.046054][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.061514][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.080364][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.093935][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.105234][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.123065][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.167962][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.238938][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.283153][T11397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.369989][T11397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.540265][T11397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.764357][T11397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.154153][ T9617] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 610.178527][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.187470][ T9617] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 610.208560][T11602] loop0: detected capacity change from 0 to 49152 [ 610.216525][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.219944][ T9617] asix 4-1:0.0: probe with driver asix failed with error -71 [ 610.276762][ T9617] usb 4-1: USB disconnect, device number 33 [ 610.288561][T10619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.312801][T11606] loop0: detected capacity change from 49152 to 0 [ 610.333497][T10619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.703708][T11620] netlink: 'syz.3.2127': attribute type 4 has an invalid length. [ 611.960834][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 611.985678][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.006798][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.030796][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.038682][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.057218][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.070678][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.110969][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.124458][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.132150][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.141360][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.149030][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.161242][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.214350][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.238200][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.253045][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.261311][ T5556] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 612.261480][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.295329][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.315551][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.341732][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.361701][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.383014][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.397049][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.423186][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.448880][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.493369][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.515682][ T5556] usb 4-1: config 0 has no interfaces? [ 612.520275][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.549030][ T5556] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 612.562925][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.568925][ T5556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.601347][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.622601][ T5556] usb 4-1: config 0 descriptor?? [ 612.638106][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.738020][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.770946][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 612.828351][ T46] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 613.063666][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.089034][T11323] Bluetooth: Frame is too long (len 16, expected len 4) [ 613.415465][ T5555] usb 4-1: USB disconnect, device number 34 [ 613.493125][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.594699][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.670151][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.801620][ T63] bridge_slave_1: left allmulticast mode [ 613.807320][ T63] bridge_slave_1: left promiscuous mode [ 613.817730][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.826670][ T63] bridge_slave_0: left allmulticast mode [ 613.833004][ T63] bridge_slave_0: left promiscuous mode [ 613.838692][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.243844][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.257916][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.270108][ T63] bond0 (unregistering): Released all slaves [ 614.575857][ T63] hsr_slave_0: left promiscuous mode [ 614.587258][ T63] hsr_slave_1: left promiscuous mode [ 614.595927][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.603404][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.611428][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.618883][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.656864][ T63] veth1_macvtap: left promiscuous mode [ 614.662772][ T63] veth0_macvtap: left promiscuous mode [ 614.668435][ T63] veth1_vlan: left promiscuous mode [ 614.675205][ T63] veth0_vlan: left promiscuous mode [ 614.992333][ T5555] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 615.181324][ T5555] usb 3-1: Using ep0 maxpacket: 8 [ 615.212682][ T5555] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 615.236857][ T5555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.280860][ T5555] usb 3-1: config 0 descriptor?? [ 615.347773][ T5577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.366258][ T5577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.382731][ T5577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.394438][ T5577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.405118][ T5577] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 615.413501][ T5577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.219422][ T63] team0 (unregistering): Port device team_slave_1 removed [ 616.274904][ T63] team0 (unregistering): Port device team_slave_0 removed [ 617.538694][ T5577] Bluetooth: hci1: command tx timeout [ 617.822513][ T5555] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 618.083723][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 618.135716][T11665] chnl_net:caif_netlink_parms(): no params data found [ 618.141246][ T5555] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 618.155536][ T5555] asix 3-1:0.0: probe with driver asix failed with error -71 [ 618.172271][ T5555] usb 3-1: USB disconnect, device number 30 [ 618.282532][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 618.297125][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.307927][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 618.319693][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 127, changing to 10 [ 618.337464][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33936, setting to 1024 [ 618.349968][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.368154][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 618.379117][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.387325][ T8] usb 4-1: Product: syz [ 618.391685][ T8] usb 4-1: Manufacturer: syz [ 618.396298][ T8] usb 4-1: SerialNumber: syz [ 618.409255][ T8] usb 4-1: config 0 descriptor?? [ 618.419062][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.431643][T11679] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 618.439133][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.470467][T11665] bridge_slave_0: entered allmulticast mode [ 618.478892][T11665] bridge_slave_0: entered promiscuous mode [ 618.494329][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.510201][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.525962][ T8] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 618.550758][T11665] bridge_slave_1: entered allmulticast mode [ 618.575172][T11665] bridge_slave_1: entered promiscuous mode [ 618.759891][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.808515][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.837339][ T8] imon:send_packet: packet tx failed (-71) [ 618.875610][ T8] imon 4-1:0.0: panel buttons/knobs setup failed [ 618.959065][ T5577] Bluetooth: Frame is too long (len 16, expected len 4) [ 619.014522][T11665] team0: Port device team_slave_0 added [ 619.032466][T11665] team0: Port device team_slave_1 added [ 619.063894][ T8] rc_core: IR keymap rc-imon-pad not found [ 619.085529][ T8] Registered IR keymap rc-empty [ 619.097977][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.106143][ T8] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 619.122321][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.125211][ T8] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 619.161706][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.201486][ T8] imon:send_packet: packet tx failed (-71) [ 619.232554][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.256009][ T8] imon 4-1:0.0: remote input dev register failed [ 619.265129][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.266653][ T8] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 619.293626][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.319597][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.440869][T11665] hsr_slave_0: entered promiscuous mode [ 619.450179][T11665] hsr_slave_1: entered promiscuous mode [ 619.457047][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.494770][ T8] imon 4-1:0.0: unable to initialize intf0, err 0 [ 619.512029][ T8] imon:imon_probe: failed to initialize context! [ 619.527051][ T8] imon 4-1:0.0: unable to register, err -19 [ 619.591716][ T8] usb 4-1: USB disconnect, device number 35 [ 619.621189][ T5577] Bluetooth: hci1: command tx timeout [ 619.844609][T11723] 9pnet: p9_errstr2errno: server reported unknown error œæçûŒÎsÅwRk‚Ú·M6°'–û@1![g™ã±8 [ 620.514703][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 620.575043][T11731] netlink: 'syz.2.2159': attribute type 10 has an invalid length. [ 620.605335][T11731] bridge_slave_1: left allmulticast mode [ 620.631124][T11731] bridge_slave_1: left promiscuous mode [ 620.653070][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.686340][T11731] bridge_slave_0: left allmulticast mode [ 620.693977][T11731] bridge_slave_0: left promiscuous mode [ 620.699905][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.963638][T11665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 620.976360][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022a6e800: rx timeout, send abort [ 620.986959][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888022a6e400: rx timeout, send abort [ 620.995601][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888022a6e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 621.012717][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888022a6e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 621.054592][T11665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.112291][T11665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 621.148952][T11665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 621.356586][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.438778][T11665] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.474347][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.481539][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.564986][T11751] tipc: Started in network mode [ 621.570406][T11751] tipc: Node identity 080211, cluster identity 4711 [ 621.621521][T11751] tipc: Enabled bearer , priority 10 [ 621.669714][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.676954][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.703291][ T5577] Bluetooth: hci1: command tx timeout [ 621.765035][T11216] libceph: connect (1)[c::]:6789 error -101 [ 621.776996][T11216] libceph: mon0 (1)[c::]:6789 connect error [ 621.794016][T11216] libceph: connect (1)[c::]:6789 error -101 [ 621.802512][T11216] libceph: mon0 (1)[c::]:6789 connect error [ 621.919709][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 621.987136][T11759] team0: entered promiscuous mode [ 621.992903][T11759] team_slave_0: entered promiscuous mode [ 622.011225][T11759] team_slave_1: entered promiscuous mode [ 622.036179][T11759] team_slave_0: entered allmulticast mode [ 622.051992][ T5556] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 622.077244][T11759] team0: Port device team_slave_0 removed [ 622.084694][T11216] libceph: connect (1)[c::]:6789 error -101 [ 622.109862][T11216] libceph: mon0 (1)[c::]:6789 connect error [ 622.154773][T11758] team0: left promiscuous mode [ 622.159894][T11758] team_slave_1: left promiscuous mode [ 622.300467][ T5556] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.339072][T11216] tipc: Resetting bearer [ 622.341317][ T5556] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.398469][ T5556] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 622.427840][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.454686][ T5556] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 622.513698][ T5556] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 622.546034][T11740] ceph: No mds server is up or the cluster is laggy [ 622.548857][ T5556] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 622.604224][ T5556] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.620522][ T5556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.644540][T11216] tipc: Node number set to 134353152 [ 622.644798][ T5556] usb 3-1: Product: syz [ 622.672663][ T5556] usb 3-1: Manufacturer: syz [ 622.684063][T11216] libceph: connect (1)[c::]:6789 error -101 [ 622.700049][ T5556] usb 3-1: SerialNumber: syz [ 622.709805][T11216] libceph: mon0 (1)[c::]:6789 connect error [ 622.967098][T11779] sctp: [Deprecated]: syz.0.2172 (pid 11779) Use of int in maxseg socket option. [ 622.967098][T11779] Use struct sctp_assoc_value instead [ 623.003235][ T5577] Bluetooth: hci3: Malformed LE Event: 0x0d [ 623.015850][ T5556] cdc_ncm 3-1:1.0: bind() failure [ 623.134292][ T5556] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 623.157021][ T5556] cdc_ncm 3-1:1.1: bind() failure [ 623.225102][ T5556] usb 3-1: USB disconnect, device number 31 [ 623.287818][T11665] veth0_vlan: entered promiscuous mode [ 623.358307][T11665] veth1_vlan: entered promiscuous mode [ 623.535682][T11665] veth0_macvtap: entered promiscuous mode [ 623.568477][T11665] veth1_macvtap: entered promiscuous mode [ 623.600912][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.615538][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.639214][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.698510][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.781194][T11323] Bluetooth: hci1: command tx timeout [ 624.202545][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.215218][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.225810][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.238542][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.260471][T11774] delete_channel: no stack [ 624.262698][T11665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.290282][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.368598][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.405100][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.429269][T11794] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 624.440870][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.463494][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.476036][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.521824][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.558115][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.593146][T11665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.677490][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.687792][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.712071][T11665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.729815][T11665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.741308][T11665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.766380][T11665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.110530][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.140123][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.182836][T11810] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2185'. [ 625.270465][T10619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.299097][T10619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.449768][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2189'. [ 625.704131][T11323] Bluetooth: hci0: command 0x0406 tx timeout [ 625.863106][T11828] tipc: Enabling of bearer rejected, already enabled [ 626.737207][T11844] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 626.743751][T11844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.762264][T11844] vhci_hcd vhci_hcd.0: Device attached [ 626.803620][T11845] usbip_core: unknown command [ 626.821562][T11845] vhci_hcd: unknown pdu 3020988904 [ 626.831083][T11845] usbip_core: unknown command [ 626.842541][T10639] vhci_hcd: stop threads [ 626.846894][T10639] vhci_hcd: release socket [ 626.892450][T10639] vhci_hcd: disconnect device [ 626.923189][T11849] can0: slcan on pts1. [ 626.971340][ T9618] vhci_hcd: vhci_device speed not set [ 627.031371][T11848] can0 (unregistered): slcan off pts1. [ 627.196913][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 627.271206][T11216] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 627.478454][T11216] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 627.493943][T11216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.515679][T11216] usb 1-1: config 0 descriptor?? [ 627.534351][T11216] ttusbir 1-1:0.0: cannot find expected altsetting [ 627.701700][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 627.750351][T11216] usb 1-1: USB disconnect, device number 20 [ 627.775108][T10619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.841245][ T5556] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 627.854750][T11862] netlink: 'syz.1.2209': attribute type 10 has an invalid length. [ 627.878659][T11862] bridge_slave_1: left allmulticast mode [ 627.885742][T11862] bridge_slave_1: left promiscuous mode [ 627.892035][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.900892][T11862] bridge_slave_0: left allmulticast mode [ 627.907666][T11862] bridge_slave_0: left promiscuous mode [ 627.913813][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.014827][T10619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.045595][ T5556] usb 3-1: Using ep0 maxpacket: 16 [ 628.057983][ T5556] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 628.072276][ T5556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.080889][ T5556] usb 3-1: Product: syz [ 628.090754][ T5556] usb 3-1: Manufacturer: syz [ 628.096747][ T5556] usb 3-1: SerialNumber: syz [ 628.108006][ T5556] usb 3-1: config 0 descriptor?? [ 628.133167][T10619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.215132][T10619] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.357597][T10619] bridge_slave_1: left allmulticast mode [ 628.372148][T10619] bridge_slave_1: left promiscuous mode [ 628.378149][T10619] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.380059][ T8] usb 3-1: USB disconnect, device number 32 [ 628.408187][T10619] bridge_slave_0: left allmulticast mode [ 628.415790][T10619] bridge_slave_0: left promiscuous mode [ 628.425822][T10619] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.847982][T10619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.859636][T10619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.872810][T10619] bond0 (unregistering): Released all slaves [ 629.145387][T10619] hsr_slave_0: left promiscuous mode [ 629.151790][T10619] hsr_slave_1: left promiscuous mode [ 629.157745][T10619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.165615][T10619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.174320][T10619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.181859][T10619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.202750][T10619] veth1_macvtap: left promiscuous mode [ 629.208294][T10619] veth0_macvtap: left promiscuous mode [ 629.214298][T10619] veth1_vlan: left promiscuous mode [ 629.220120][T10619] veth0_vlan: left promiscuous mode [ 630.539471][T11893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.582991][T11323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.617553][T11323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.627156][T11323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.661663][T11323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.670082][T11323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 630.678994][T11895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.689126][T11323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.956222][ T9620] libceph: connect (1)[c::]:6789 error -101 [ 630.997969][ T9620] libceph: mon0 (1)[c::]:6789 connect error [ 631.014775][ T9620] libceph: connect (1)[c::]:6789 error -101 [ 631.020898][ T9620] libceph: mon0 (1)[c::]:6789 connect error [ 631.188605][T10619] team0 (unregistering): Port device team_slave_1 removed [ 631.301249][T10619] team0 (unregistering): Port device team_slave_0 removed [ 631.303442][ T9620] libceph: connect (1)[c::]:6789 error -101 [ 631.336887][ T9620] libceph: mon0 (1)[c::]:6789 connect error [ 631.496434][T11907] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 631.503014][T11907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 631.519892][T11907] vhci_hcd vhci_hcd.0: Device attached [ 631.558526][T11908] usbip_core: unknown command [ 631.585984][T11908] vhci_hcd: unknown pdu 3020988904 [ 631.606922][T11898] ceph: No mds server is up or the cluster is laggy [ 631.615078][T11908] usbip_core: unknown command [ 631.631990][ T2931] vhci_hcd: stop threads [ 631.645091][ T2931] vhci_hcd: release socket [ 631.650765][ T2931] vhci_hcd: disconnect device [ 632.041163][ T9618] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 632.253947][ T9618] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 632.272552][ T9618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.291760][ T9618] usb 1-1: config 0 descriptor?? [ 632.298740][ T9618] ttusbir 1-1:0.0: cannot find expected altsetting [ 632.540740][ T8] usb 1-1: USB disconnect, device number 21 [ 632.709881][T11916] can0: slcan on pts0. [ 632.741916][ T5577] Bluetooth: hci1: command tx timeout [ 632.893698][T11915] can0 (unregistered): slcan off pts0. [ 633.062700][T11891] chnl_net:caif_netlink_parms(): no params data found [ 633.063071][T11930] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2230'. [ 633.356809][ T5645] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 634.182094][ T5645] usb 3-1: config 6 has an invalid interface number: 169 but max is 1 [ 634.201905][T11891] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.235364][ T5645] usb 3-1: config 6 has no interface number 1 [ 634.271298][T11891] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.281418][ T5645] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 634.291181][T11891] bridge_slave_0: entered allmulticast mode [ 634.296371][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.298364][T11891] bridge_slave_0: entered promiscuous mode [ 634.305696][ T5645] usb 3-1: Product: syz [ 634.318952][ T5645] usb 3-1: Manufacturer: syz [ 634.339596][ T5645] usb 3-1: SerialNumber: syz [ 634.358170][T11891] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.377374][T11891] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.399021][T11891] bridge_slave_1: entered allmulticast mode [ 634.428912][T11891] bridge_slave_1: entered promiscuous mode [ 634.518903][T11950] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.2236'. [ 634.543275][T11950] netlink: 'syz.0.2236': attribute type 2 has an invalid length. [ 634.614594][T11891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.657070][T11891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.772044][T11891] team0: Port device team_slave_0 added [ 634.788457][T11891] team0: Port device team_slave_1 added [ 634.821230][ T5577] Bluetooth: hci1: command tx timeout [ 634.888207][T11891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.894911][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.913448][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.945946][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.028534][T11891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.073309][T11891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.090911][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.116860][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.189665][T11891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.224890][T11959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 635.240927][T11968] binder: 11967:11968 ioctl c0306201 200001c0 returned -14 [ 635.916446][T11891] hsr_slave_0: entered promiscuous mode [ 636.369211][T11891] hsr_slave_1: entered promiscuous mode [ 636.392303][ T9618] usb 3-1: USB disconnect, device number 33 [ 636.436068][T11972] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 636.502251][T11972] batman_adv: batadv0: Adding interface: team0 [ 636.508470][T11972] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.576941][T11972] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 636.608457][T11973] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 636.629776][T11984] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2245'. [ 636.641916][T11973] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2242'. [ 636.665644][T11973] team0: entered promiscuous mode [ 636.670851][T11973] team_slave_0: entered promiscuous mode [ 636.684344][T11973] team_slave_1: entered promiscuous mode [ 636.702523][ T5577] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 636.722328][T11973] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.777584][T11973] batman_adv: batadv0: Interface activated: team0 [ 636.802016][T11973] batman_adv: batadv0: Interface deactivated: team0 [ 636.826136][T11973] batman_adv: batadv0: Removing interface: team0 [ 636.902016][ T5577] Bluetooth: hci1: command tx timeout [ 636.956679][ T5577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 636.967262][ T5577] CPU: 1 UID: 0 PID: 5577 Comm: kworker/u9:4 Not tainted 6.10.0-syzkaller-12246-g786c8248dbd3 #0 [ 636.978016][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 636.988620][ T5577] Workqueue: hci0 hci_rx_work [ 636.993310][ T5577] Call Trace: [ 636.996585][ T5577] [ 636.999536][ T5577] dump_stack_lvl+0x241/0x360 [ 637.004368][ T5577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.009762][ T5577] ? __pfx__printk+0x10/0x10 [ 637.014629][ T5577] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 637.019944][ T5577] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 637.025769][ T5577] sysfs_create_dir_ns+0x2ce/0x3a0 [ 637.031000][ T5577] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 637.036687][ T5577] kobject_add_internal+0x435/0x8d0 [ 637.041908][ T5577] kobject_add+0x152/0x220 [ 637.046352][ T5577] ? do_raw_spin_unlock+0x13c/0x8b0 [ 637.051567][ T5577] ? device_add+0x3e7/0xbf0 [ 637.056183][ T5577] ? __pfx_kobject_add+0x10/0x10 [ 637.061238][ T5577] ? _raw_spin_unlock+0x28/0x50 [ 637.066126][ T5577] ? get_device_parent+0x165/0x410 [ 637.071257][ T5577] device_add+0x4e5/0xbf0 [ 637.075781][ T5577] hci_conn_add_sysfs+0xe8/0x200 [ 637.080723][ T5577] le_conn_complete_evt+0xc9f/0x12e0 [ 637.086017][ T5577] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 637.091734][ T5577] ? __mutex_unlock_slowpath+0x21d/0x750 [ 637.097386][ T5577] ? __copy_skb_header+0x437/0x5b0 [ 637.102500][ T5577] ? skb_pull_data+0x112/0x230 [ 637.107360][ T5577] hci_le_enh_conn_complete_evt+0x185/0x420 [ 637.113260][ T5577] hci_event_packet+0xa55/0x1540 [ 637.118190][ T5577] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 637.123488][ T5577] ? __pfx_hci_event_packet+0x10/0x10 [ 637.128851][ T5577] ? do_raw_spin_unlock+0x13c/0x8b0 [ 637.134041][ T5577] ? hci_send_to_monitor+0xd8/0x7f0 [ 637.139243][ T5577] ? kcov_remote_start+0x9e/0x7e0 [ 637.144258][ T5577] hci_rx_work+0x3e8/0xca0 [ 637.148673][ T5577] ? process_scheduled_works+0x945/0x1830 [ 637.154384][ T5577] process_scheduled_works+0xa2c/0x1830 [ 637.159946][ T5577] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.165928][ T5577] ? assign_work+0x364/0x3d0 [ 637.170508][ T5577] worker_thread+0x86d/0xd40 [ 637.175127][ T5577] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 637.181042][ T5577] ? __kthread_parkme+0x169/0x1d0 [ 637.186121][ T5577] ? __pfx_worker_thread+0x10/0x10 [ 637.191233][ T5577] kthread+0x2f0/0x390 [ 637.195293][ T5577] ? __pfx_worker_thread+0x10/0x10 [ 637.200394][ T5577] ? __pfx_kthread+0x10/0x10 [ 637.204977][ T5577] ret_from_fork+0x4b/0x80 [ 637.209385][ T5577] ? __pfx_kthread+0x10/0x10 [ 637.213960][ T5577] ret_from_fork_asm+0x1a/0x30 [ 637.218717][ T5577] [ 637.221783][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.228906][ T5577] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 637.243013][ T5577] Bluetooth: hci0: failed to register connection device [ 637.325532][T11990] netlink: 'syz.2.2247': attribute type 4 has an invalid length. [ 637.630481][T12003] binder: 12002:12003 ioctl c0306201 200001c0 returned -14 [ 637.705027][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.717102][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.755794][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.797007][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.829076][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.848472][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.859379][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.879010][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.898096][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.905990][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.936682][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.945155][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 637.974163][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.003812][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.030868][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.038668][ T9618] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 638.058444][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.079632][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.100874][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.141548][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.159173][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.176484][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.217369][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.240357][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.250691][ T9618] usb 3-1: config 0 has no interfaces? [ 638.260259][ T9618] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 638.274888][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.293731][ T9618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.303769][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.321174][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.331425][ T9618] usb 3-1: config 0 descriptor?? [ 638.348121][T11891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.349489][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.365397][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.368654][T12012] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.2254'. [ 638.374926][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.390443][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.399598][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.407233][ T5556] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 638.418068][T11891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.443044][ T5556] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 638.470266][T11891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.560421][T11891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.962724][ T8] libceph: connect (1)[c::]:6789 error -101 [ 638.990701][T11323] Bluetooth: hci1: command tx timeout [ 639.002691][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 639.014352][T11891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.034916][T12018] ceph: No mds server is up or the cluster is laggy [ 639.139394][T11891] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.183311][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.190451][ T5645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.210134][T12029] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2261'. [ 639.260361][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.267587][ T5645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.377148][T11891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.442826][ T9618] usb 3-1: USB disconnect, device number 34 [ 639.565135][T12037] binder: 12036:12037 ioctl c0306201 200001c0 returned -14 [ 639.767797][T11891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.377145][T11891] veth0_vlan: entered promiscuous mode [ 640.413034][T11891] veth1_vlan: entered promiscuous mode [ 640.448337][T11891] veth0_macvtap: entered promiscuous mode [ 640.476328][T11891] veth1_macvtap: entered promiscuous mode [ 640.538285][T12077] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.2270'. [ 640.589767][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.626231][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.641248][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.661493][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.681990][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.711225][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.741478][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.763025][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.775500][T11891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.815013][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.830952][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.841538][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.852420][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.862303][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.872929][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.882866][T11891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.896209][T11891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.914901][T11891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.945433][T11891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.975450][T11891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.996900][T11891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.022476][T11891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.464085][T12103] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 641.561903][ T9618] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 641.626565][T12103] batman_adv: batadv0: Adding interface: team0 [ 641.632890][T12103] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.658157][T12103] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 641.669147][T12102] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 641.677164][T12102] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2287'. [ 641.686446][T12102] team0: entered promiscuous mode [ 641.692400][T12102] team_slave_1: entered promiscuous mode [ 641.700707][T12102] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.708408][T12102] batman_adv: batadv0: Interface activated: team0 [ 641.715103][T12102] batman_adv: batadv0: Interface deactivated: team0 [ 641.721872][T12102] batman_adv: batadv0: Removing interface: team0 [ 642.085307][ T9618] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.096423][ T9618] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 642.106545][ T9618] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 642.121145][ T9618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.151337][T12097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 642.164640][T12102] bridge0: port 3(team0) entered blocking state [ 642.179119][T12102] bridge0: port 3(team0) entered disabled state [ 642.187599][T12102] team0: entered allmulticast mode [ 642.200058][T12102] team_slave_1: entered allmulticast mode [ 642.235802][T12102] bridge0: port 3(team0) entered blocking state [ 642.242208][T12102] bridge0: port 3(team0) entered forwarding state [ 642.299292][T10619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.332346][T10619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.449557][T10639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.488367][T10639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.504563][ T9617] usb 3-1: USB disconnect, device number 35 [ 642.821609][ T5577] Bluetooth: hci0: command 0x0406 tx timeout [ 642.837131][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 644.190706][T12151] vivid-007: kernel_thread() failed [ 645.112018][ T9617] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 645.311471][ T9617] usb 2-1: Using ep0 maxpacket: 16 [ 645.348369][ T9617] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 645.387860][ T9617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.421109][ T9617] usb 2-1: Product: syz [ 645.437239][ T9617] usb 2-1: Manufacturer: syz [ 645.451206][ T9617] usb 2-1: SerialNumber: syz [ 645.473530][ T2931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.494506][ T9617] usb 2-1: config 0 descriptor?? [ 645.581569][ T9617] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 645.723357][ T2931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.819820][ T35] usb 2-1: Failed to submit usb control message: -71 [ 645.820099][ T5556] usb 2-1: USB disconnect, device number 41 [ 645.856897][ T35] usb 2-1: unable to send the bmi data to the device: -71 [ 645.885982][ T35] usb 2-1: unable to get target info from device [ 645.903425][ T2931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.909578][ T35] usb 2-1: could not get target info (-71) [ 645.927447][ T35] usb 2-1: could not probe fw (-71) [ 646.103289][ T2931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.364844][ T2931] bridge_slave_1: left allmulticast mode [ 646.371432][ T2931] bridge_slave_1: left promiscuous mode [ 646.379499][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.415141][ T2931] bridge_slave_0: left allmulticast mode [ 646.423456][ T2931] bridge_slave_0: left promiscuous mode [ 646.429864][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.899565][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.916693][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.927973][ T2931] bond0 (unregistering): Released all slaves [ 647.252603][ T2931] hsr_slave_0: left promiscuous mode [ 647.258463][ T2931] hsr_slave_1: left promiscuous mode [ 647.264965][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.276223][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.284847][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.292478][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.314027][ T2931] veth1_macvtap: left promiscuous mode [ 647.319542][ T2931] veth0_macvtap: left promiscuous mode [ 647.325223][ T2931] veth1_vlan: left promiscuous mode [ 647.330501][ T2931] veth0_vlan: left promiscuous mode [ 647.974301][ T9617] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 648.263622][ T9617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.491321][ T9617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.531162][ T9617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.606806][ T9617] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 648.656616][ T9617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 648.686560][ T9617] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 648.716578][ T9617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.729953][ T9617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.748526][ T9617] usb 2-1: Product: syz [ 648.756508][ T9617] usb 2-1: Manufacturer: syz [ 648.763219][ T9617] usb 2-1: SerialNumber: syz [ 648.766057][ T5577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.778703][ T5577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.858792][ T5577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.869108][ T5577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.893232][ T5577] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 648.900667][ T5577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 649.131172][T11323] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 649.131208][T11323] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 649.132539][ T9617] cdc_ncm 2-1:1.0: bind() failure [ 649.165517][ T9617] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 649.175736][ T9617] cdc_ncm 2-1:1.1: bind() failure [ 649.208934][ T9617] usb 2-1: USB disconnect, device number 42 [ 649.279800][T11329] udevd[11329]: setting mode of /dev/bus/usb/002/042 to 020664 failed: No such file or directory [ 649.318095][T11329] udevd[11329]: setting owner of /dev/bus/usb/002/042 to uid=0, gid=0 failed: No such file or directory [ 649.573221][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 649.674827][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 649.765825][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 649.765844][ T29] audit: type=1800 audit(1721831162.733:149): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2320" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 650.095377][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 650.308701][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 650.327385][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 650.336771][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.368833][ T46] usb 1-1: config 0 descriptor?? [ 650.389426][ T46] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 650.818821][T12221] futex_wake_op: syz.0.2320 tries to shift op by 32; fix this program [ 650.941365][ T5556] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 650.981256][T11323] Bluetooth: hci1: command tx timeout [ 651.055182][T12205] chnl_net:caif_netlink_parms(): no params data found [ 651.141457][ T5556] usb 4-1: Using ep0 maxpacket: 16 [ 651.162995][ T5556] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 651.194341][ T5556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.211729][ T5556] usb 4-1: Product: syz [ 651.216154][ T5556] usb 4-1: Manufacturer: syz [ 651.220758][ T5556] usb 4-1: SerialNumber: syz [ 651.251933][ T5556] usb 4-1: config 0 descriptor?? [ 651.289521][ T5556] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 651.594608][ T2931] usb 4-1: Failed to submit usb control message: -71 [ 651.603810][ T5556] usb 4-1: USB disconnect, device number 36 [ 651.642660][ T2931] usb 4-1: unable to send the bmi data to the device: -71 [ 651.681345][ T2931] usb 4-1: unable to get target info from device [ 651.699627][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.724387][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.725417][ T2931] usb 4-1: could not get target info (-71) [ 651.742538][ T2931] usb 4-1: could not probe fw (-71) [ 651.765224][T12205] bridge_slave_0: entered allmulticast mode [ 651.792763][T12205] bridge_slave_0: entered promiscuous mode [ 651.883780][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.912935][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.920896][ T46] gspca_sunplus: reg_r err -71 [ 651.930690][T12205] bridge_slave_1: entered allmulticast mode [ 651.942672][ T46] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 651.964153][ T46] usb 1-1: USB disconnect, device number 22 [ 651.976502][T12205] bridge_slave_1: entered promiscuous mode [ 652.107338][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.162729][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.283499][T12205] team0: Port device team_slave_0 added [ 652.300621][T12205] team0: Port device team_slave_1 added [ 652.382907][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.393263][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.424276][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.448877][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.472814][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.530582][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.593797][T12205] hsr_slave_0: entered promiscuous mode [ 652.621819][T12205] hsr_slave_1: entered promiscuous mode [ 653.061317][T11323] Bluetooth: hci1: command tx timeout [ 653.333890][T12270] syz.3.2334: attempt to access beyond end of device [ 653.333890][T12270] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 653.350249][T12270] syz.3.2334: attempt to access beyond end of device [ 653.350249][T12270] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 653.363492][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 653.374667][T12270] syz.3.2334: attempt to access beyond end of device [ 653.374667][T12270] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 653.388175][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 653.398254][T12270] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 653.406195][T12270] UDF-fs: Scanning with blocksize 512 failed [ 653.417257][T12270] syz.3.2334: attempt to access beyond end of device [ 653.417257][T12270] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 653.433346][T12270] syz.3.2334: attempt to access beyond end of device [ 653.433346][T12270] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 653.446587][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 653.457129][T12270] syz.3.2334: attempt to access beyond end of device [ 653.457129][T12270] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 653.471877][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 653.481675][T12270] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 653.489784][T12270] UDF-fs: Scanning with blocksize 1024 failed [ 653.498821][T12270] syz.3.2334: attempt to access beyond end of device [ 653.498821][T12270] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 653.512802][T12270] syz.3.2334: attempt to access beyond end of device [ 653.512802][T12270] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 653.526051][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 653.535932][T12270] syz.3.2334: attempt to access beyond end of device [ 653.535932][T12270] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 653.549072][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 653.558680][T12270] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 653.566374][T12270] UDF-fs: Scanning with blocksize 2048 failed [ 653.573308][T12270] syz.3.2334: attempt to access beyond end of device [ 653.573308][T12270] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 653.586892][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 653.596591][T12270] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 653.606153][T12270] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 653.624382][T12270] UDF-fs: Scanning with blocksize 4096 failed [ 653.630562][T12270] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 653.929544][T12276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2336'. [ 654.025595][ T8] libceph: connect (1)[c::]:6789 error -101 [ 654.063733][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 654.374604][ T8] libceph: connect (1)[c::]:6789 error -101 [ 654.394893][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 654.677547][T12205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.791643][T12205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.931727][T12278] ceph: No mds server is up or the cluster is laggy [ 654.966756][ T9617] libceph: connect (1)[c::]:6789 error -101 [ 654.968545][ T9617] libceph: mon0 (1)[c::]:6789 connect error [ 655.040901][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 655.052460][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 655.062414][T12312] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 655.070155][T12312] UDF-fs: Scanning with blocksize 512 failed [ 655.081322][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 655.092295][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 655.102020][T12312] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 655.109762][T12312] UDF-fs: Scanning with blocksize 1024 failed [ 655.121057][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 655.132000][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 655.142001][T12312] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 655.149912][T12312] UDF-fs: Scanning with blocksize 2048 failed [ 655.158926][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 655.169208][T12312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 655.178935][T12312] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 655.186666][T12312] UDF-fs: Scanning with blocksize 4096 failed [ 655.192860][T12312] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 655.287586][T11323] Bluetooth: hci1: command tx timeout [ 655.421771][T12205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 655.581236][T12205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 655.820832][T12320] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2351'. [ 655.985349][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.024143][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.102754][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.109949][ T5645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.120006][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.127204][ T5645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.145242][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 656.261240][ T9617] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 656.460550][T12343] 9pnet_virtio: no channels available for device syz [ 656.467491][ T9617] usb 4-1: Using ep0 maxpacket: 32 [ 656.474625][ T9617] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.487463][ T9617] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.497586][ T9617] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.507857][ T9617] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 656.517884][ T9617] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 656.531884][ T9617] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.541448][ T9617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.549707][ T9617] usb 4-1: Product: syz [ 656.554522][ T9617] usb 4-1: Manufacturer: syz [ 656.559869][ T9617] usb 4-1: SerialNumber: syz [ 657.302477][T11323] Bluetooth: hci1: command tx timeout [ 658.786471][ T9617] cdc_ncm 4-1:1.0: bind() failure [ 658.833020][ T9617] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 658.860882][ T9617] cdc_ncm 4-1:1.1: bind() failure [ 658.914018][ T9617] usb 4-1: USB disconnect, device number 37 [ 659.054651][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 659.203089][T12367] netlink: 'syz.2.2369': attribute type 9 has an invalid length. [ 659.316277][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.240917][ T29] audit: type=1326 audit(1721831173.203:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.285979][ T29] audit: type=1326 audit(1721831173.203:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.330800][ T29] audit: type=1326 audit(1721831173.223:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.411290][ T29] audit: type=1326 audit(1721831173.223:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.478165][ T29] audit: type=1326 audit(1721831173.223:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.533896][ T5684] kworker/0:7 (5684) used greatest stack depth: 14040 bytes left [ 660.537342][ T29] audit: type=1326 audit(1721831173.223:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.595137][ T29] audit: type=1326 audit(1721831173.223:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.635423][ T29] audit: type=1326 audit(1721831173.223:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.661227][T12389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.669229][T12389] IPv6: NLM_F_CREATE should be set when creating new route [ 660.670624][T12399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2378'. [ 660.676543][T12389] IPv6: NLM_F_CREATE should be set when creating new route [ 660.710875][ T29] audit: type=1326 audit(1721831173.223:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.724456][T11323] Bluetooth: hci0: unexpected event for opcode 0x2026 [ 660.742753][ T29] audit: type=1326 audit(1721831173.223:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12382 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c82d75f19 code=0x7ffc0000 [ 660.799033][T12205] veth0_vlan: entered promiscuous mode [ 660.813297][T12205] veth1_vlan: entered promiscuous mode [ 660.847255][T12205] veth0_macvtap: entered promiscuous mode [ 660.858699][T12205] veth1_macvtap: entered promiscuous mode [ 660.979074][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.011416][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.022041][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.033014][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.043901][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.054935][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.286822][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.404179][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.533642][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.653677][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 661.766677][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.798655][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.821198][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.843231][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.853401][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.864077][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.876003][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.888820][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.018818][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.034445][T12205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.043354][T12205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.054114][T12205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.062887][T12205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.191879][ T5555] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 662.245330][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.268531][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.304173][ T5556] libceph: connect (1)[c::]:6789 error -101 [ 662.310259][ T5556] libceph: mon0 (1)[c::]:6789 connect error [ 662.355734][T10639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.364100][T10639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.391086][ T5555] usb 3-1: Using ep0 maxpacket: 32 [ 662.402244][ T5555] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.451774][ T5555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.483213][ T5555] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 662.529774][ T5555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 662.569240][ T5555] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 662.586544][ T5555] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.596074][ T5555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.605028][ T5555] usb 3-1: Product: syz [ 662.605349][ T9618] libceph: connect (1)[c::]:6789 error -101 [ 662.609624][ T5555] usb 3-1: Manufacturer: syz [ 662.620390][ T5555] usb 3-1: SerialNumber: syz [ 662.660673][ T9618] libceph: mon0 (1)[c::]:6789 connect error [ 662.787893][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 662.899345][ T5555] cdc_ncm 3-1:1.0: bind() failure [ 662.923977][ T5555] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 662.940553][ T5555] cdc_ncm 3-1:1.1: bind() failure [ 662.963338][ T5555] usb 3-1: USB disconnect, device number 36 [ 663.110581][T12431] ceph: No mds server is up or the cluster is laggy [ 663.352078][ T9618] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 664.288572][ T9618] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50 [ 664.320670][ T9618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.326271][T10639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.369493][ T9618] usb 1-1: Product: syz [ 664.374290][ T9618] usb 1-1: Manufacturer: syz [ 664.379325][ T9618] usb 1-1: SerialNumber: syz [ 664.395189][ T9618] usb 1-1: config 0 descriptor?? [ 664.421358][ T9618] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 664.586498][T10639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.639196][ T9618] usb 1-1: USB disconnect, device number 23 [ 664.743506][T11323] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 664.753792][T11323] Bluetooth: hci0: Injecting HCI hardware error event [ 664.763771][ T5577] Bluetooth: hci0: hardware error 0x00 [ 664.891845][T10639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.962933][T10639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.053596][T10639] bridge_slave_1: left allmulticast mode [ 665.059852][T10639] bridge_slave_1: left promiscuous mode [ 665.065834][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.074513][T10639] bridge_slave_0: left allmulticast mode [ 665.080158][T10639] bridge_slave_0: left promiscuous mode [ 665.086285][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.493135][T10639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.504170][T10639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.515690][T10639] bond0 (unregistering): Released all slaves [ 665.770422][T10639] hsr_slave_0: left promiscuous mode [ 665.777288][T10639] hsr_slave_1: left promiscuous mode [ 665.783695][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.791207][T10639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.798952][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.806499][T10639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.831991][T10639] veth1_macvtap: left promiscuous mode [ 665.837534][T10639] veth0_macvtap: left promiscuous mode [ 665.843379][T10639] veth1_vlan: left promiscuous mode [ 665.848679][T10639] veth0_vlan: left promiscuous mode [ 666.589645][T10639] team0 (unregistering): Port device team_slave_1 removed [ 667.001865][ T5577] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 667.576145][T10639] team0 (unregistering): Port device team_slave_0 removed [ 667.825051][T11323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.838004][T11323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.854344][T11323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.864670][T11323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.875122][T11323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 667.884194][T11323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 668.038281][T12491] netlink: 'syz.3.2407': attribute type 12 has an invalid length. [ 668.057451][T12491] netlink: 'syz.3.2407': attribute type 11 has an invalid length. [ 668.096417][T12491] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.2407'. [ 668.422301][ T5639] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 668.453204][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 668.453221][ T29] audit: type=1326 audit(1721831181.413:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.481506][ T29] audit: type=1326 audit(1721831181.413:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.513244][ T29] audit: type=1326 audit(1721831181.413:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.538605][ T29] audit: type=1326 audit(1721831181.413:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.560467][ T29] audit: type=1326 audit(1721831181.413:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.595551][ T29] audit: type=1326 audit(1721831181.413:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.619853][ T29] audit: type=1326 audit(1721831181.413:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc123974950 code=0x7ffc0000 [ 668.643086][ T29] audit: type=1326 audit(1721831181.413:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc1239776a7 code=0x7ffc0000 [ 668.664803][ T29] audit: type=1326 audit(1721831181.413:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 668.686444][ T5639] usb 4-1: Using ep0 maxpacket: 16 [ 668.692216][ T29] audit: type=1326 audit(1721831181.413:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12495 comm="syz.0.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc1239776a7 code=0x7ffc0000 [ 668.715825][ T5639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 668.728999][ T5639] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 668.755307][ T5639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.771280][ T5639] usb 4-1: config 0 descriptor?? [ 669.006601][T12480] team0: left promiscuous mode [ 669.011774][T12480] team_slave_0: left promiscuous mode [ 669.017493][T12480] team_slave_1: left promiscuous mode [ 669.201619][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.231344][ T5645] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 669.267536][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.326675][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.351362][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.392657][ T5639] hid (null): invalid report_size 24940 [ 669.403334][ T5639] hid (null): nested delimiters [ 669.409469][ T5639] hid (null): nested delimiters [ 669.415728][ T5639] hid (null): nested delimiters [ 669.421191][ T5639] hid (null): report_id 2838798905 is invalid [ 669.427624][ T5639] hid (null): unknown global tag 0xc [ 669.433712][ T5639] hid (null): unknown global tag 0xa5 [ 669.439506][ T5639] hid (null): unknown global tag 0xd [ 669.463257][ T5639] hid (null): unknown global tag 0xc [ 669.481301][ T5645] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50 [ 669.492205][ T5639] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 669.503877][T12480] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.511222][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.519349][T12480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.521258][ T5639] hid-generic 0003:0158:0100.0014: unexpected long global item [ 669.538797][ T5645] usb 3-1: Product: syz [ 669.547759][ T5645] usb 3-1: Manufacturer: syz [ 669.561090][T12480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.563334][ T5639] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 669.570034][T12480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.579860][ T5645] usb 3-1: SerialNumber: syz [ 669.599279][ T5645] usb 3-1: config 0 descriptor?? [ 669.612122][ T5645] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 669.900340][ T9618] usb 3-1: USB disconnect, device number 37 [ 669.942502][T11323] Bluetooth: hci1: command tx timeout [ 670.221809][ T46] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 670.295321][T11216] usb 4-1: USB disconnect, device number 38 [ 670.471395][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 670.580301][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.648580][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.659184][ T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 670.695209][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 670.707663][ T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 670.725244][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.744698][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.758772][ T46] usb 2-1: Product: syz [ 670.782746][ T46] usb 2-1: Manufacturer: syz [ 670.833414][ T46] usb 2-1: SerialNumber: syz [ 670.890053][T12485] chnl_net:caif_netlink_parms(): no params data found [ 671.208678][T11323] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 671.496051][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.630329][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.823384][T12485] bridge_slave_0: entered allmulticast mode [ 671.850766][T12485] bridge_slave_0: entered promiscuous mode [ 671.869265][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.889193][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.909058][T12485] bridge_slave_1: entered allmulticast mode [ 671.936155][T12485] bridge_slave_1: entered promiscuous mode [ 672.021892][T11323] Bluetooth: hci1: command tx timeout [ 672.068515][T12485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.098491][T12485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.190739][T12485] team0: Port device team_slave_0 added [ 672.202370][T12485] team0: Port device team_slave_1 added [ 672.247871][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.255358][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.284533][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.298700][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.306901][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.333175][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.396254][T12485] hsr_slave_0: entered promiscuous mode [ 672.407261][T12485] hsr_slave_1: entered promiscuous mode [ 672.501616][ T9618] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 672.701179][ T9618] usb 3-1: Using ep0 maxpacket: 16 [ 672.717858][ T9618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.739467][ T9618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.760779][ T9618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 672.782157][ T9618] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 672.805511][ T9618] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.841339][ T9618] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 672.850456][ T9618] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 672.872062][ T9618] usb 3-1: Manufacturer: syz [ 672.891303][ T46] cdc_ncm 2-1:1.0: bind() failure [ 672.894142][ T9618] usb 3-1: config 0 descriptor?? [ 672.927815][ T46] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 672.937655][ T46] cdc_ncm 2-1:1.1: bind() failure [ 672.967812][ T46] usb 2-1: USB disconnect, device number 43 [ 673.003408][T12573] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 673.183609][T12485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.209159][T12485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.228464][T12485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.248888][T12485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.291142][ T9618] rc_core: IR keymap rc-hauppauge not found [ 673.297590][ T9618] Registered IR keymap rc-empty [ 673.308897][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.345216][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.387013][ T9618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 673.413238][ T9618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 673.414095][T12485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.440536][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.462263][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.476088][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.490420][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.497649][ T5555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.514210][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.523285][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.530449][ T5555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.601165][ T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 673.609744][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.653671][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.715791][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.781214][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.801320][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 673.816485][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 673.816521][ T29] audit: type=1326 audit(1721831186.773:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 673.817868][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.851221][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.869126][ T29] audit: type=1326 audit(1721831186.773:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 673.899451][ T29] audit: type=1326 audit(1721831186.783:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 673.926731][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.933825][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.936760][ T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 673.962269][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 673.972328][ T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 673.991104][ T29] audit: type=1326 audit(1721831186.783:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 674.041491][ T9618] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 674.058900][ T29] audit: type=1326 audit(1721831186.783:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 674.060740][ T46] usb 2-1: string descriptor 0 read error: -22 [ 674.080499][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.082553][ T9618] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 674.103403][T11323] Bluetooth: hci1: command tx timeout [ 674.108972][ T29] audit: type=1326 audit(1721831186.833:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 674.129083][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.130556][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.146030][ T9618] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 674.159956][ T9618] usb 3-1: USB disconnect, device number 38 [ 674.177075][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.195320][ T29] audit: type=1326 audit(1721831186.833:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 674.262587][T12485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.280923][ T46] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 674.300097][ T46] cdc_ncm 2-1:1.0: bind() failure [ 674.333219][ T29] audit: type=1326 audit(1721831186.833:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc123975f19 code=0x7ffc0000 [ 674.357496][ T46] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 674.386954][ T46] cdc_ncm 2-1:1.1: bind() failure [ 674.407077][ T29] audit: type=1326 audit(1721831186.833:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc123974950 code=0x7ffc0000 [ 674.476097][ T29] audit: type=1326 audit(1721831186.833:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc1239776a7 code=0x7ffc0000 [ 674.629559][ T46] usb 2-1: USB disconnect, device number 44 [ 674.959473][T12485] veth0_vlan: entered promiscuous mode [ 675.034496][T12485] veth1_vlan: entered promiscuous mode [ 675.113870][T12485] veth0_macvtap: entered promiscuous mode [ 675.182195][T12485] veth1_macvtap: entered promiscuous mode [ 675.257321][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.290956][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.318575][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.341252][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.373178][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.422961][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.444981][T12485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.464239][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.482001][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.507539][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.537389][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.547487][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.585835][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.605765][T12485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.657612][T12485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.667847][T12485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.682338][T12485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.695032][T12485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.191264][T11323] Bluetooth: hci1: command tx timeout [ 676.805009][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.805035][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.939316][T10642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.951489][T10642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.541619][T11216] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 678.456982][T11216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 678.473765][T11216] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 678.483431][T11216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.496477][T11216] usb 4-1: Product: syz [ 678.501502][T11216] usb 4-1: Manufacturer: syz [ 678.506557][T11216] usb 4-1: SerialNumber: syz [ 678.516808][T11216] usb 4-1: config 0 descriptor?? [ 678.534035][T11216] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 678.760310][ T9618] usb 4-1: USB disconnect, device number 39 [ 678.821414][T11216] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 679.057887][T11216] usb 3-1: config 6 has an invalid interface number: 169 but max is 1 [ 679.091881][T11216] usb 3-1: config 6 has no interface number 1 [ 679.126806][T11216] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 679.137077][T11216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.148992][T11216] usb 3-1: Product: syz [ 679.154522][T11216] usb 3-1: Manufacturer: syz [ 679.159882][T11216] usb 3-1: SerialNumber: syz [ 679.550450][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.582462][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.661326][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 679.843572][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 679.875722][ T9] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 679.896493][ T9] usb 4-1: config 0 has no interface number 0 [ 679.923592][ T9] usb 4-1: config 0 interface 168 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 679.954256][ T9] usb 4-1: config 0 interface 168 has no altsetting 0 [ 679.962142][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f9.c4 [ 680.008186][T12712] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 680.016298][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.023943][ T9] usb 4-1: config 0 descriptor?? [ 680.112949][ T2931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.276503][ T9] usb 4-1: string descriptor 0 read error: -71 [ 680.314803][ T9] cytherm 4-1:0.168: Cypress thermometer device now attached [ 680.336652][ T9] usb 4-1: USB disconnect, device number 40 [ 680.351315][ T9] cytherm 4-1:0.168: Cypress thermometer now disconnected [ 680.419243][ T2931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.539829][ T2931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.642057][ T2931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.759056][ T2931] bridge_slave_1: left allmulticast mode [ 680.764990][ T2931] bridge_slave_1: left promiscuous mode [ 680.771318][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.792177][ T2931] bridge_slave_0: left allmulticast mode [ 680.819420][ T2931] bridge_slave_0: left promiscuous mode [ 680.837396][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.332548][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.348472][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.362605][ T2931] bond0 (unregistering): Released all slaves [ 681.480111][T12510] usb 3-1: USB disconnect, device number 39 [ 681.668674][ T2931] hsr_slave_0: left promiscuous mode [ 681.675442][ T2931] hsr_slave_1: left promiscuous mode [ 681.681777][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.689199][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.697507][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.705837][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.729647][ T2931] veth1_macvtap: left promiscuous mode [ 681.735371][ T2931] veth0_macvtap: left promiscuous mode [ 681.740942][ T2931] veth1_vlan: left promiscuous mode [ 681.746449][ T2931] veth0_vlan: left promiscuous mode [ 682.312465][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 682.564410][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 682.677602][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 682.743182][ T5577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.766460][ T5577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.811284][ T5577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.819395][ T5577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.829122][ T5577] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 682.848093][ T5577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.893642][T12510] libceph: connect (1)[c::]:6789 error -101 [ 682.899665][T12510] libceph: mon0 (1)[c::]:6789 connect error [ 683.108917][T12742] SET target dimension over the limit! [ 683.161640][T12510] libceph: connect (1)[c::]:6789 error -101 [ 683.224765][T12510] libceph: mon0 (1)[c::]:6789 connect error [ 683.623619][T12731] ceph: No mds server is up or the cluster is laggy [ 684.465128][T12749] UBIFS error (pid: 12749): cannot open "/dev/iommu", error -22 [ 684.929811][T11323] Bluetooth: hci1: command tx timeout [ 685.027457][T12733] chnl_net:caif_netlink_parms(): no params data found [ 685.821265][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 685.983447][T12733] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.997656][T12733] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.017057][T12733] bridge_slave_0: entered allmulticast mode [ 686.023648][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 686.028367][T12733] bridge_slave_0: entered promiscuous mode [ 686.056424][ T9] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 686.064843][T12733] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.077678][T12733] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.081229][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.089335][T12733] bridge_slave_1: entered allmulticast mode [ 686.100227][T12733] bridge_slave_1: entered promiscuous mode [ 686.104689][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.113696][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.131058][ T9] usb 1-1: Product: syz [ 686.135383][ T9] usb 1-1: Manufacturer: syz [ 686.139999][ T9] usb 1-1: SerialNumber: syz [ 686.153437][ T9] usb 1-1: config 0 descriptor?? [ 686.170819][ T9] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 686.223866][T12733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.263839][T12733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.272197][T11323] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 686.328171][T11323] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 686.405188][T12733] team0: Port device team_slave_0 added [ 686.415641][ T9] usb 1-1: USB disconnect, device number 24 [ 686.444965][T12733] team0: Port device team_slave_1 added [ 686.524195][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 686.542481][T12733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.561147][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.618496][T12733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.658985][T12733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.694449][ T9] libceph: connect (1)[c::]:6789 error -101 [ 686.697227][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.700499][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 686.726299][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.749944][T12733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.902896][ T9] libceph: connect (1)[c::]:6789 error -101 [ 686.929675][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 686.981268][T11323] Bluetooth: hci1: command tx timeout [ 687.726510][T12792] ceph: No mds server is up or the cluster is laggy [ 687.804497][T12733] hsr_slave_0: entered promiscuous mode [ 687.838323][T12733] hsr_slave_1: entered promiscuous mode [ 689.061153][T11323] Bluetooth: hci1: command tx timeout [ 690.023188][T12733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.058397][T12733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 690.106168][T12733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 690.136295][T12733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 690.310893][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 690.530066][T12733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.807850][T12733] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.827607][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.834798][ T5555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.065743][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.072938][ T5555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.151079][T11323] Bluetooth: hci1: command tx timeout [ 691.183389][T12836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 691.217496][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 691.259568][T12836] x_tables: duplicate underflow at hook 1 [ 691.570786][T12850] netlink: 'syz.3.2517': attribute type 14 has an invalid length. [ 691.689921][T12733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.006766][ T9] libceph: connect (1)[c::]:6789 error -101 [ 692.016517][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 692.281510][ T9] libceph: connect (1)[c::]:6789 error -101 [ 692.296078][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 692.675098][T12733] veth0_vlan: entered promiscuous mode [ 692.731426][T12733] veth1_vlan: entered promiscuous mode [ 692.821708][ T9617] libceph: connect (1)[c::]:6789 error -101 [ 692.870760][ T9617] libceph: mon0 (1)[c::]:6789 connect error [ 692.920404][T12733] veth0_macvtap: entered promiscuous mode [ 692.958220][T12733] veth1_macvtap: entered promiscuous mode [ 692.974395][T12863] ceph: No mds server is up or the cluster is laggy [ 693.041574][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.091096][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.117865][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.159924][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.197851][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.229678][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.313646][T12733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.330447][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.381707][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.421071][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.473266][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.524819][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.564108][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.613556][T12733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.673479][T12733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.701943][T12733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.721359][T12733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.730285][T12733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.888540][T12894] netlink: 'syz.3.2530': attribute type 14 has an invalid length. [ 693.969541][ T5577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.999845][ T5577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.023605][ T5577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.038178][ T5577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.050778][ T5577] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.067776][ T5577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.273879][T12904] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2534'. [ 694.304167][T12904] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2534'. [ 694.408917][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.427082][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.603177][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.624995][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.802929][T12915] netlink: 412 bytes leftover after parsing attributes in process `syz.3.2539'. [ 696.309422][T11323] Bluetooth: hci2: command tx timeout [ 696.676636][T12897] chnl_net:caif_netlink_parms(): no params data found [ 697.966850][T11323] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 698.341261][T11323] Bluetooth: hci2: command tx timeout [ 699.119093][T10639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.137300][T10639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.149669][T10639] bond0 (unregistering): Released all slaves [ 699.181821][T10639] bond1 (unregistering): Released all slaves [ 699.749524][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.759136][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.779063][T12897] bridge_slave_0: entered allmulticast mode [ 699.802523][T12897] bridge_slave_0: entered promiscuous mode [ 699.822644][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.829901][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.861401][T12897] bridge_slave_1: entered allmulticast mode [ 699.868702][T12897] bridge_slave_1: entered promiscuous mode [ 699.962243][T12897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.976991][T12897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.050507][T10639] hsr_slave_0: left promiscuous mode [ 700.067412][T10639] hsr_slave_1: left promiscuous mode [ 700.075805][T10639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.089811][T10639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.431198][T11323] Bluetooth: hci2: command tx timeout [ 700.694198][T10639] team0 (unregistering): Port device team_slave_1 removed [ 700.750850][T10639] team0 (unregistering): Port device team_slave_0 removed [ 701.284215][T12897] team0: Port device team_slave_0 added [ 701.302610][T12897] team0: Port device team_slave_1 added [ 701.336633][T12897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.343814][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.369925][T12897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.382934][T12897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.389922][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.417382][T12897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.472676][T12897] hsr_slave_0: entered promiscuous mode [ 701.487267][T12897] hsr_slave_1: entered promiscuous mode [ 701.496952][T12897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.505172][T12897] Cannot create hsr debugfs directory [ 701.763509][T10639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.514019][ T5577] Bluetooth: hci2: command tx timeout [ 702.783822][T10639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.916947][ T5574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.990317][T10639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.031409][ T5574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.041873][ T5574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.054578][ T5574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.063371][ T5574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 703.070551][ T5574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.166608][T10639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.551219][ T5577] Bluetooth: hci3: command 0x0406 tx timeout [ 704.204042][T12897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 704.297435][T12897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 704.327624][T12897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 704.347838][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 704.377640][T12897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 704.401668][T10639] bridge_slave_1: left allmulticast mode [ 704.409552][T10639] bridge_slave_1: left promiscuous mode [ 704.426209][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.443148][T10639] bridge_slave_0: left allmulticast mode [ 704.448996][T10639] bridge_slave_0: left promiscuous mode [ 704.462952][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.152659][T11323] Bluetooth: hci1: command tx timeout [ 705.601477][T12994] bio_check_eod: 14 callbacks suppressed [ 705.601522][T12994] syz.2.2556: attempt to access beyond end of device [ 705.601522][T12994] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 705.621199][T12994] syz.2.2556: attempt to access beyond end of device [ 705.621199][T12994] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 705.634643][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 705.645638][T12994] syz.2.2556: attempt to access beyond end of device [ 705.645638][T12994] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 705.658787][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 705.668729][T12994] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 705.676473][T12994] UDF-fs: Scanning with blocksize 512 failed [ 705.686607][T12994] syz.2.2556: attempt to access beyond end of device [ 705.686607][T12994] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 705.700645][T12994] syz.2.2556: attempt to access beyond end of device [ 705.700645][T12994] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 705.713883][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 705.732780][T12994] syz.2.2556: attempt to access beyond end of device [ 705.732780][T12994] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 705.746021][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 705.755754][T12994] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 705.763545][T12994] UDF-fs: Scanning with blocksize 1024 failed [ 705.772253][T12994] syz.2.2556: attempt to access beyond end of device [ 705.772253][T12994] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 705.786022][T12994] syz.2.2556: attempt to access beyond end of device [ 705.786022][T12994] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 705.799354][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 705.809762][T12994] syz.2.2556: attempt to access beyond end of device [ 705.809762][T12994] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 705.823079][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 705.832763][T12994] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 705.840456][T12994] UDF-fs: Scanning with blocksize 2048 failed [ 705.850787][T12994] syz.2.2556: attempt to access beyond end of device [ 705.850787][T12994] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 705.864698][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 705.874638][T12994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 705.884297][T12994] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 705.891992][T12994] UDF-fs: Scanning with blocksize 4096 failed [ 705.898079][T12994] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 706.428461][T13007] overlayfs: upper fs does not support tmpfile. [ 706.644771][T10639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.024746][T10639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.243839][T11323] Bluetooth: hci1: command tx timeout [ 707.266418][T10639] bond0 (unregistering): Released all slaves [ 707.293937][T12971] chnl_net:caif_netlink_parms(): no params data found [ 707.800653][T12971] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.816322][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.827199][T12971] bridge_slave_0: entered allmulticast mode [ 707.839865][T12971] bridge_slave_0: entered promiscuous mode [ 707.875293][T12971] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.888214][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.899039][T12971] bridge_slave_1: entered allmulticast mode [ 707.917310][T12971] bridge_slave_1: entered promiscuous mode [ 707.955159][T10639] hsr_slave_0: left promiscuous mode [ 707.965206][T10639] hsr_slave_1: left promiscuous mode [ 707.974952][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.983746][T10639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.991944][T10639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.999466][T10639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.028016][T10639] veth1_macvtap: left promiscuous mode [ 708.033941][T10639] veth0_macvtap: left promiscuous mode [ 708.039682][T10639] veth1_vlan: left promiscuous mode [ 708.045238][T10639] veth0_vlan: left promiscuous mode [ 708.672303][ T9617] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 708.861102][ T9617] usb 3-1: Using ep0 maxpacket: 16 [ 708.874852][ T9617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.893308][ T9617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.903715][ T9617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 708.923646][ T9617] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 708.950396][ T9617] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.958576][ T9617] usb 3-1: Manufacturer: syz [ 708.965640][ T9617] usb 3-1: config 0 descriptor?? [ 709.093742][T10639] team0 (unregistering): Port device team_slave_1 removed [ 709.152654][T10639] team0 (unregistering): Port device team_slave_0 removed [ 709.231389][T12516] usb 3-1: USB disconnect, device number 40 [ 709.301313][T11323] Bluetooth: hci1: command tx timeout [ 710.954247][T13039] program syz.0.2571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.381524][T11323] Bluetooth: hci1: command tx timeout [ 711.734591][T12971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.775409][T12971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.871994][T12516] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 711.872223][T12971] team0: Port device team_slave_0 added [ 711.925159][T12971] team0: Port device team_slave_1 added [ 711.937285][T12897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.982136][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2572'. [ 711.997814][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2572'. [ 712.071600][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 712.081447][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.104282][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.116443][T12971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.123550][T12516] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 712.132982][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.159320][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.170663][T12516] usb 3-1: config 0 descriptor?? [ 712.171147][T12971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.210233][T12971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.221891][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.253877][T12971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.306321][T12897] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.396471][T12971] hsr_slave_0: entered promiscuous mode [ 712.405398][T12971] hsr_slave_1: entered promiscuous mode [ 712.416178][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.423452][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.468896][T11216] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.476086][T11216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.886371][T12897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.985251][T12897] veth0_vlan: entered promiscuous mode [ 713.741894][T12516] usbhid 3-1:0.0: can't add hid device: -71 [ 713.748125][T12516] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 713.758497][T12516] usb 3-1: USB disconnect, device number 41 [ 713.819570][T12897] veth1_vlan: entered promiscuous mode [ 713.937246][T12897] veth0_macvtap: entered promiscuous mode [ 713.950485][T12897] veth1_macvtap: entered promiscuous mode [ 714.021413][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.040084][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.063937][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.092483][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.125685][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.142131][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.153758][T12897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.176864][T13078] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2580'. [ 714.192425][T13078] netem: invalid attributes len -24 [ 714.225530][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.267727][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.308417][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.331036][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.355599][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.368429][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.394135][T12897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.415173][T12897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.443417][T12897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.471171][T12897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.479960][T12897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.775468][T13093] ALSA: seq fatal error: cannot create timer (-22) [ 714.828790][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.852251][ C1] eth0: bad gso: type: 1, size: 1408 [ 714.862292][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.885657][T12971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 714.970453][T12971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 715.000359][T12971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 715.558942][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.241893][T12971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.493713][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.631810][ T9617] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 716.681771][ T9619] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 716.893341][T12971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.933355][ T9617] usb 4-1: Using ep0 maxpacket: 16 [ 716.958633][ T9617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.975035][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.986336][ T9619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.000375][ T9617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.026563][ T9619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.037133][ T9617] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 717.054745][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.062013][ T5554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.070442][ T9617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.082721][ T9619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.095134][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.102412][ T5554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.111689][ T9617] usb 4-1: config 0 descriptor?? [ 717.118095][ T9619] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 717.140905][ T9619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.156475][ T9619] usb 3-1: config 0 descriptor?? [ 717.165869][ T9619] gspca_main: abcd:cdee too many config [ 757.812993][ C1] eth0: bad gso: type: 1, size: 1408 [ 822.251027][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 822.258004][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13113/2:b..l [ 822.266598][ C0] rcu: (detected by 0, t=10502 jiffies, g=82069, q=369 ncpus=2) [ 822.274319][ C0] task:syz.1.2590 state:R running task stack:24672 pid:13113 tgid:13113 ppid:12897 flags:0x00004000 [ 822.287393][ C0] Call Trace: [ 822.290692][ C0] [ 822.293616][ C0] __schedule+0x17ae/0x4a10 [ 822.298123][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.304449][ C0] ? __pfx___schedule+0x10/0x10 [ 822.309288][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 822.314490][ C0] ? mark_lock+0x9a/0x350 [ 822.318810][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 822.323995][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 822.329709][ C0] irqentry_exit+0x5e/0x90 [ 822.334110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.340084][ C0] RIP: 0010:percpu_ref_tryget+0x9b/0x180 [ 822.345712][ C0] Code: d7 8b e8 98 ad 6f ff 49 bf 00 00 00 00 00 fc ff df 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 18 34 f7 ff 48 8b 03 03 75 69 65 48 ff 00 b3 01 e8 56 ab 87 09 85 c0 74 3a e8 ad 41 [ 822.365314][ C0] RSP: 0018:ffffc90008e4f458 EFLAGS: 00000246 [ 822.371372][ C0] RAX: 0000607f468253f0 RBX: ffff88807f8d6010 RCX: ffff888028231e00 [ 822.379326][ C0] RDX: dffffc0000000000 RSI: ffffffff8c1fca00 RDI: ffffffff8c1fc9c0 [ 822.387296][ C0] RBP: 1ffff110051e0162 R08: ffffffff92fcc807 R09: 1ffffffff25f9900 [ 822.395267][ C0] R10: dffffc0000000000 R11: fffffbfff25f9901 R12: ffff888028f00b10 [ 822.403229][ C0] R13: dffffc0000000000 R14: ffffffff82005f14 R15: dffffc0000000000 [ 822.411189][ C0] ? percpu_ref_tryget+0x14/0x180 [ 822.416209][ C0] ? percpu_ref_tryget+0x43/0x180 [ 822.421218][ C0] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 822.426915][ C0] get_mem_cgroup_from_objcg+0xc8/0x150 [ 822.432445][ C0] uncharge_folio+0x1f3/0x8d0 [ 822.437109][ C0] __mem_cgroup_uncharge_folios+0xdf/0x1c0 [ 822.442902][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 822.449308][ C0] ? __page_cache_release+0xbe4/0x1c80 [ 822.454773][ C0] folios_put_refs+0x766/0x860 [ 822.459540][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 822.464810][ C0] ? free_swap_cache+0x63/0x880 [ 822.469649][ C0] ? free_swap_cache+0xb3/0x880 [ 822.474490][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 822.480108][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 822.486295][ C0] ? tlb_table_flush+0x143/0x410 [ 822.491224][ C0] tlb_flush_mmu+0x3a3/0x680 [ 822.495797][ C0] ? __pfx_down_write+0x10/0x10 [ 822.500629][ C0] tlb_finish_mmu+0xd4/0x200 [ 822.505205][ C0] exit_mmap+0x44f/0xc80 [ 822.509437][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 822.514185][ C0] ? __asan_memset+0x23/0x50 [ 822.518794][ C0] ? uprobe_clear_state+0x277/0x290 [ 822.523972][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 822.529234][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 822.534418][ C0] __mmput+0x115/0x380 [ 822.538491][ C0] exit_mm+0x220/0x310 [ 822.542542][ C0] ? __pfx_exit_mm+0x10/0x10 [ 822.547115][ C0] ? taskstats_exit+0x326/0xa60 [ 822.551977][ C0] do_exit+0x9b2/0x27f0 [ 822.556129][ C0] ? preempt_schedule_common+0x84/0xd0 [ 822.561576][ C0] ? __pfx_do_exit+0x10/0x10 [ 822.566148][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 822.571519][ C0] do_group_exit+0x207/0x2c0 [ 822.576095][ C0] __x64_sys_exit_group+0x3f/0x40 [ 822.581102][ C0] x64_sys_call+0x26c3/0x26d0 [ 822.585762][ C0] do_syscall_64+0xf3/0x230 [ 822.590249][ C0] ? clear_bhb_loop+0x35/0x90 [ 822.594917][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.600820][ C0] RIP: 0033:0x7f9a81975f19 [ 822.605228][ C0] RSP: 002b:00007fff163b19d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 822.613624][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a81975f19 [ 822.621670][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.629618][ C0] RBP: 0000000000000001 R08: 00000003163b1aff R09: 0000000000000000 [ 822.637572][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fff163b1ac0 [ 822.645523][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff163b1ac0 [ 822.653489][ C0] [ 822.656490][ C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g82069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 822.667668][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 822.677619][ C0] rcu: RCU grace-period kthread stack dump: [ 822.683491][ C0] task:rcu_preempt state:R running task stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 822.695202][ C0] Call Trace: [ 822.698473][ C0] [ 822.701393][ C0] __schedule+0x17ae/0x4a10 [ 822.705896][ C0] ? __lock_acquire+0x137a/0x2040 [ 822.710906][ C0] ? __pfx___schedule+0x10/0x10 [ 822.715749][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 822.721720][ C0] ? preempt_schedule+0xe1/0xf0 [ 822.726562][ C0] preempt_schedule_common+0x84/0xd0 [ 822.731836][ C0] preempt_schedule+0xe1/0xf0 [ 822.736496][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 822.741857][ C0] preempt_schedule_thunk+0x1a/0x30 [ 822.747040][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 822.752841][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 822.759195][ C0] ? lock_timer_base+0x220/0x240 [ 822.764139][ C0] __try_to_del_timer_sync+0x2ad/0x340 [ 822.769601][ C0] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 822.775574][ C0] ? __timer_delete_sync+0x15c/0x310 [ 822.780848][ C0] __timer_delete_sync+0x245/0x310 [ 822.785951][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 822.791571][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.797888][ C0] ? schedule+0x90/0x320 [ 822.802117][ C0] ? schedule+0x90/0x320 [ 822.806345][ C0] ? schedule+0x155/0x320 [ 822.810662][ C0] schedule_timeout+0x1c8/0x310 [ 822.815520][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 822.820880][ C0] ? __pfx_process_timeout+0x10/0x10 [ 822.826154][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 822.831779][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 822.836612][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 822.841797][ C0] ? rcu_gp_init+0x1256/0x1630 [ 822.846547][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 822.851466][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 822.857522][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 822.862790][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 822.868672][ C0] ? finish_swait+0xd4/0x1e0 [ 822.873248][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 822.877827][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.883007][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 822.888890][ C0] ? __kthread_parkme+0x169/0x1d0 [ 822.893900][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.899115][ C0] kthread+0x2f0/0x390 [ 822.903169][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.908351][ C0] ? __pfx_kthread+0x10/0x10 [ 822.912923][ C0] ret_from_fork+0x4b/0x80 [ 822.917323][ C0] ? __pfx_kthread+0x10/0x10 [ 822.921894][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.926658][ C0] [ 822.929661][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 822.935963][ C0] Sending NMI from CPU 0 to CPUs 1: [ 822.941171][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30