last executing test programs: 35.96747666s ago: executing program 1 (id=1658): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x1}) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0, 0x0, 0x8000, 0x0, 0x2}]) io_uring_setup(0x30d0, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r5, &(0x7f0000000080), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x49}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000003c0)={0x0, 0xae, 0x101, 0x34325241, 0x0, [r11, r12], [0x1], [0xfffffffc, 0x0, 0x0, 0x5], [0x1]}) 20.769453439s ago: executing program 1 (id=1659): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r6, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r6, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') renameat2(r1, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0) 19.854672888s ago: executing program 1 (id=1699): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) 19.516824138s ago: executing program 1 (id=1702): semctl$SETALL(0x0, 0x0, 0x12, &(0x7f0000000000)) 16.265231451s ago: executing program 0 (id=1731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x78}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r7, 0x3ff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 14.102886572s ago: executing program 0 (id=1741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x274, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1d0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1b8, 0x6, [@m_ife={0x188, 0x0, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x112, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x274}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x84, 0x0, "10"}], 0x18}}], 0x2, 0x0) 13.069248491s ago: executing program 0 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12.88893898s ago: executing program 0 (id=1749): socket$kcm(0x2, 0x200000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r3}, 0x50) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000008f00)="3c5a2135a59af5cd3624e19bf6b4526c80db055ed5ee88270c1f491552a827452a3daf583203c54fce394e19564f0355de7f56f5ce96ce10ffed87de8385b6f608a3e801e4ca1c3ee07a30012432767dc096e5c9b84781bf07dd14059726025c6ef7a78cf000e1067dcc077f0318e85d7c114d0b6cca11ba7304a7b3a861e12b2086262a160fcdfe7daf1e7e219fed836ea2f7e779e912f3baa85464eec9d01ee5057099bde12ee1be6141b7f4c874c6ff9debc76f79d8b4c0231c428abad01b26fc00c78fa6966b3f66123f54db9009c01760f267795da19bcac59e8357141f3decf2264b01e8f4fe54ccc9af4bbe8aab71a178f1dba178915d57a724667ed9d2ebfeb66d053b6a37580edb38aa6d46120d9c540fa19f7f8e2c5badc1f3da0d6bc96b796a17a671ab358603e6f6975d47ad144dbaf2bafd198267e8fd046e2c224aa64af85b72dfdd8976c1e1b8febcd7718cdac226374b9f988d21ca5f5acec2975c476790e3657fafd31c80b895de90050f18273edf9d6e76f042ce2b6cf9a4113ae412828bb6a42e831f05a2735aa6ae8b2ac0de8cb83604b14060fb468b8d28af87159106012d00b1affcf23edbc28a1d1c60effd6bb185d956e198c88b6ffe3fd9e285eb50513430350e6960ffd388b21173298ff31a23205ee73f671609a3e6b861d0afec26cedb61853f10cf7954edbf87a7550111be3a710f167b10b8363d6f1fc01de88d0fc58d1ac223c757a19970d6293be78467852c5e5ca24d28ee00c10910fd59cd129543bb53112c5c90bd075c5cdb9a8244c5f3e30aa8f6017946f68fced8facf7cf9c743f154a6740897388ea15a2a5e348b5d8b38723b17f9a63175b7f46e6f803384d61dccdaaac8f53136efb7f084c9c525c5a7fec01c405d411ced8eaed7bc8f4792d1804a78fa06087be0938aa32c0c06a4bb987bfe8eaf70f5dd1d6d326706d573d779072173f168cf96500dde410649d5fe4eadd36a160d1c41f67a38b904dc6ecaf6449cbc09aba3f43f5f54f8e8d997ef948185f9b3c92140280ca239a141fdd4c2d6b8018a5fa274c36a947a32c92a565ef6d4e9eeaba1b588136252762e3983dd7aada4fdace8f874dd0caa514f48ebde49c4586829176d947a4e96a6da07ef65636489e1673a67b1992492b1199acf734e184fb608094451daee4e0d753fa1955367a3f237d23047695827241d2ec2ca279172be053ec90b91836d0fc407f87f8449b34eb6d21437829bcb2ef478b02a37a415415f49dd6163250bccab1b5c05456e318d1834d6eaa7313ea58d4c01fea3951f45fe64edbf70141aededbfa27870ec8b6971972d28bc05c089d134cda63b9f7ebb58f8b3fccfbcb15e86016bdcdfb2e3833d4cfcdf64f128fcd208dbc39a55d7a11b2d2eaae48dd717ee7b0b4a3a2f112474a8aef85e115379023d445f50fe68889ff1a875f16a46292ebc69322180f2054e9a9e2139983ba858c7020f4c78ec7de032d448c6123cdf60b8a8eab1d27669db53a660af9e6ef58e196e056f064a414337ea53d767fff43659ab9eeca3060e3db05e45629829c01d8cbbb24e8aa51211f7ef19d5781db43fe0528a22c82be3952e7ab190f808996d21aa45a873497558c7d06e0494300eea4889dd87c8621d9dbc2577e4a7eaffafb6c45206bfb4271ce70cd1ba242a05e87ea0a772ab2d58d39fbe181ea59f77792631de8f6a93bcdf298b9b983d39455fee00a8500494aff147b0a3819981d6232eff2cf91f10259f2adaaab62181708ea489253c955ce01cfcc0b94e1199debbaa138749c9df811a51c51b2ac51728eddab64c81c3f0d0583642b654337090ff2c0b16058c96002290911959f29d181722bd46ab09829720d472339cbffa1577504d2a70ab863f8b1b7bb203e840b0f262dc45bd7090aae4b7fb54e85299c91e8db7a173d691b1b0f33872a8b40f58faa1693560f28752fb096ccc257fca6dfd2abf9b4e7a3154fa02c3f4ff279fe2a05d870daa3155b1b0bf78699397454aa9b9bbd8f6d67f6b27e20eff6633b5603e514b18baaab1ecf94d2e7529e1484734aa49c739e56a32979dab4f9c8bb4647f71a5b52743b84a8ff4600d37636c2ebd1019384d6645f4f8cfa913c88c652df28034459a2aac2859761581dbf5c60ebc8fa22cbb5bda5b440abb31cd68ff879d5e228474d433511947798220eb4fe85dbb80f2ebff7e48c90b3211730591f7926b09eac9e80fd44d1e6ff50b81ef6f20f2e5589c82aa9ec54f7f56c074d6e890829b875981d0fae83914d9c4576243ed37c22c4426f9309c8d2dedbf2e7cc88588c0d92266dcdf4c4f14720ae35d6720fcb0b6ae4d706884cf5133de625f2b25a615716ec5e40ca7a06372936e1c2dfc0f62f614f57398e99a1250d0928b7ca35458a87bfce5bc1b862770988ff3d2ecf90499a25fbcc3e4e96704ee4796882886346b9064c8ff60114e3b47a424228529b74e2971b811115f6265a26871567646eda001af83e3b11d468dbab38b15e3b7d33b054e51c9106647cfa605fbae8d5d3715d8e8b4adfb0223d9d66de078aecf3db2ee0791127aa4e311c05930aed75e64d1f67fae709079aeb3abf5dcb52692980209da0eaffe27c826168cf27d14aa1821edf963c79b8608cd685a539292a409e5513803ea4bad543e9fdb7f4f1da48343f034f65166de43812030bf7cf5919fc665b967fe70dd696d65a7fc7589de435cbf31e4903cf602eef2d977d67b73d0851cf4056f282353675ad31f0f8fd8552066a49f5750e5effaa26a5caa0a5bf6cc7e0cae95b053f8cf25a7e8ee74552f648c2ab2b7cc51b58d83b9b493b3e72283e6c1b9c20124064e63e687c5800c37617f7f2368d089c8f5fce8b21a0f311ee477801aaac5bf1dadc06f13ca672ecf8de5b73b4b173edc71b0ee4d2f59d62571fa421a4c4aa651bf648bd15fea538565f6a7512006dbb11a752c88edbff096b2373b74a740398c77401022cf355ad8322db603672514a9a41cdd9baf0db7d7d47dc754a7d256b7d63667e2f1f1b5287db984891c32c530752aefc4dd0b9d966e436f7cbf5c98f0b786b12751e7fe7b68af758db41ce0d374ef54171d686e36dfdf6ad0aadfbc4dc362c9c2085917fa2a07edeeeda93cfd17bebc160d47510499465fd43be57dd2af291f32e232ca3419325aecfbe5c4c503b3830e08ea240cdeb1fc9236861e8494efe3e4da39c8589048cbce6162659699bd7f1383d5e2024c56f2170c03e3da99888765556f68d99ae05d3c3631ed30b53db442ffc46bc872eda17a1f347e42cab8477775b68e42b6d5c2417b5e99e2996489ae5689a2a1aed7afb8627f69405482e682fe34ad919762ba1e25c587c7472acc2606860995dd817f7f13cd6de34faa178b290d45ccafbd327550a9f5308e4316e090c02f6717854a9604c015d7f0cf5a9d9c3b706e8ceef1e00d380b4c9bac63674ee480018543bd248cdce506ea01e2d12bc7819024d942316b30e88ab51db65c54ac62fc4b620bd73a9bfd7b9df33e0c34b1ca95f5cd3db13b1929fef2dfe99b2773d1909ad299585cd94e312aabaff997e62d80cc10968dcf2d890d776e67ba5f4d0a4e75854d3bf784b6ccf16ddc8fa35b2a0369f0f64a68f1f3dd7d04e5316fb1663458a68ff3ec8929bd565c25a2b655f4cf559c9f594770ea0bc6836cdb2a5dd81129778f84439f64e84580eb4f2e62c003212dfa1888ec485f3c3c34019230539109177d65e4e5e23488b73e968d3556967a94bcca9751a9de943ef747e50032b6c7f1d87ec0f7fbb5951a1575cae445945ebed66b9ddf72304c1d57485d8cd222a6c863992047c5838dabcf339da9bcb22f3b46244aa0868923c79d91dfe39e560eec2ee903c2e8bec11d00a74e0ad5e0b5d0ec270a00cb73a68cb71b18d24839d8644afc0ed409e085a4073a8326ef39400f5f4e743cacc3217ec3cc62061d0d6037e0406d8c7a4c7040306f137747345662743ae43481cd8bad83ead6f560c449c8c53230e5c3a2079c36c7643ae57f67b2938bd8b14f2d70da6b2d8ddb62d281512fd6df66f47ffba9674614f3b66959f446f0e7a936fea5c5946e2411650c5a1445061b6bc7e2e7c4a28a71fb0aed716654b396d11697713cf93e5bf8fdc9841c0fdbfe15947497dbb66dfd7343e98c8a3354dc59da95191fc86cff6d86f46b0d7639ea061fc7b233a0557c0a1e6a8560e7895fa70e0cae59d1d5baa63f9933aebb59f2b783d6333a53c69e25af4e1340617e93f9f27702d7fd90687d72ec650067f0e81fd7bc42002a53578841d428ca4457351a20a48de90b551e0328747dfd33eb2a5a4396c40350ef94e39741e7a2694b715516306a269d851c76739397613aaed5e2b01ec0c9bab89ca18a5591877a014b59e3b681f1385e3b35cb8052010bf06426e379d920d30314ba5c2ee317defe0468736bed6264c7931e422beea62f3d749d75276b825538c94f14cefd515eadf80f4944e6ccf6113bd82f62940159413cc08e6cf496deb0934fc852652475564be9215bf704b6e0cbd5846c601b0f77f441422016046ef7cfc071a7226525ff2633655b04e7343385d09b278202c6cb6e42dc96c4ecf05f0a103dba2ef07853ab9c9618142a8138c7d1db7740ebbe22768fae8891184dc875ae11d0aa3c6b04d05b5023da994987e029abe79d8b64649efb9dae505c1ca9fedbb557b0c3227d8cb0e3665e619430d23239a52d158b6d0e5914d74d6aceeb8ff1562964838944aea15556aa78e5d28ae4da63badb8388d5553a695b882bbb852a6f0b8fb14f7f2d11e904f89cec350931c8bc65c3584c8b7fb5e3ac1dd1773edb53988e63e11371f56b00d5ef6d2b2d2a135e97c3838e93bcb151e11c945a4c21579715288d31f28beefe475fc46b8cf5224aa495fb55bc40681d055f4acbd4813fdd60a60cf6202a3fe7e5aa72920934cccbbb676c416bed154c20a672a62e90bd0d8ed6b65c9c85da4dd3be2a4b5808d9c2d63dcb776840102df3cb987fab0aba6801733f9b7c5024c8a75a844c35fba27cdd2175560aef2202577aeec591ff9330478414c30cad074b072231d64f3d74e9056c1d1435108616a1b128335582804ce58e941f6601d016af4bfb366801ddbc29cb747264865e9756d4cc3c5bcbb9032dfe33b9a2f6fac75267de4abead9eec08c29d7ada70a8ae07488b8019a172b05fce0fcaa1a1af1f0949a3edeeb26feafac912b6f621142bca90a709cdb87fa5e511c4cfe877733342197bcf8f18a1aa982018f158d605c71f1b62d926e82405628394ffbe30ab557f6927deea16ac2e848fe480949652ab6a3ae23ce21e02ca1c1a156550b432fb1916b8ae7e5ef2520fe718f21d2af2cee4b16ebe9a205b3fe64c9317608a9b0831aaab635430761b8310ea33dcbe703acc1651530ca6a2c4e203209c8a6f4b26ea8bad74952c2715330e4f8305e843cb37f8813ce78df7a2d97ebfc8b1cb289b4123e9ef0530f9c038a4b10aae1589622efc1470e47ad288f895cf44ceb4aa38309f5bad6606b2568e9263d1b440a44b236e10dc2674044faf2b402a2bbdd706109c795eb352469fc5ea3b1d24b579fd8ad83432df44dbd36d830dc1584b77bea4af6232eea71b3981699a992522e0cebb6ed500f9fe24305be8a0450342dafd630b516c0aefa58ac9bacf1f7f7313587351e166ba3dae3b9165a35676ff97279ad7661066f57c9a8ea0a9a82102061318ad7104cfd6f5077a9c190b7e0b29392ea91dfbb4bc6affd5e2a15057c9a7a0687c767fe4940dd6c290070a5e1ca555e53ea95b87d9725e2c4f448b899fbc6bcd5d32dc04533ab5ece96aeb08e03516896243da44c04fcee0a5f52808c2f91c66daa295f9c098fb3478402d5ad2dd31bcb349496b87f6b0aa6eecda34f0b701b21f65edacf937fadba3556f7ebc8bac6e5545601a9a5e0abccd3f763ab1d478b839d0cee0349f2c2e5a0aa21ef5cc2849860f9d34bd00049fe2f57247b6e3ce9270ebbefda7ab4938b4233d8f1fea333599b994ad98eb2cf3f9627ab6abf0e246ef8c6a0d7d9f0459d88571c12e931da1163fcf182a28a804a31b99778b2b61b742e033c8e59b62ab526f92209435482d937d001d71808d27928d72e184d24855908244e3d8c2cc8369e26080031f2709905b619691c29266a6119ca1b0c71090c77b8b798aa48f7941b49540bb9bd682850bb03af7a5499d05dc8816faae1ac8f820defa9f00361a74bd56b3a3ca2bc7123df7c570db1c0c1eab1cebca0da9470e0656f00e4bd9b3ca0a76497f17a28d6094fb1ad30f6a082a265b58c288c3a4ef922ced123d38887b95f142624d159ca228d5ffdaf5d8d0e064b8b7a857fb255df6f4170745f99a6e27c427f2ee146eee1d51c5b0fe39db9b86d87d346b0da14576df09b2e79a5834238d378db2017ec04d3fbd531d65ef94f6a9273a2c1ef5d6491e14f4fe952c126574e5ef49cf101a74cedbe41f1ccc46ec94b40062f0b7039476ff41a2db76c7d890b4bb823654a6fc8c3489628b87528861d4945c9278eaf7169f44cd53f70afc889c38d862e7f7d8e181f524322f22ead59746cfb384f38ada862fff1fe5b7105a934034ddc3e6f3d59b659fd519bcc4141f5a4333a83d92228bd3469ead13290a399120f2e8f0698e30636d7728f856941606ebe4ffbf3c994f5489fc5373162f3c8ed91226e7cad6ed3de11dde7da49eb33c7eb4f03e37229598d52950100dbf8b95da14ae6fa6627b0eb7ef6787485bb5def3a034d3dcca4bfcabdadd310b059409e0d963e7a5917a67bda36797aa5d3f0b066a3a4e8e2e745d7f4cbff937159ef46275a405737edb15f89d782285ac2ac8bddc40fcd97276862e57d0ef837cb49e33978a7097420fea6e95d5d8418e3ca59dc925e0110a09d48dbc640dc44a9067b2fda9b7b91040c7edd1f713a37413c7998fa4c82aa0c71c58d0859fb40a6acc8ffd4701f4a74c06bd26b27329f2df6688896d452bd7ad5d32233ffb1d45183e814dc4049f28b44d65ad45beafcaba00a1b1ba637ce218d5f2e6b9dc8e964fb1dc6d6a0a6f7690f49e27012ffb2c2aeba8a20a47c6c476ed74fb919bd357417e6745c62d35fd9271b5e148fc2df88a983f2122b5c59771c6e76bba72fe92dbcc818000c8cff69e5b67b304038d63c71ccd84c9f51393a3b7a0451ffd89edc08c21a30c63248d096935502c24b2efbef6ef88d29bf98a85210e930c9fe6ac9e18dd2ccb5e4e9e2375c00af356c801b01facd5dd014fa0f5f685c6caf865791ceea71c897320ce5d273a7c505ab6eb84bc86a7d4f3d5cd043e5d19e45c8788635c97a9aa19970585e63825177134690bccbd4600db78f3e8eee233ee8a03deae619cdd306ad2606010e8ba75c85cf1da74d1f937bb1a3e6d81a15cb742464c03926389a89244fed83d072209a4b226dd1f656061f4e5f6a68f1483de128a8f6d5ec86c89fe1c612a16c38db856b0f3b185b110835850c1d0d90f62f57206668aab8b27128c43f6fade3e106411061498c6b1803f3d611e4b2758ba271a33c9f1a12ff36c93cc00d184d57ec3c39b3c293e4011e14485ba26de92856139e33d84980a9ef779fd74983c11751a54fb9b8b92b91100a7289a9ace4f9d3bfe5c5c0b90f910bc8392ca08b29aed5e7556a5842358e16b17a2942cdd73fa76887055dfe7312bac4771b1e2fddbd53c6909b1512138d8a6838c0e8cb33e09159beee8083e6448b7981e87de5684b80c301940834b2ac2be4174dc34eecc4dc73912ec598c727bb1f1cb5a065a53986f5ab659139c220751d3330c1a310e8dc2beae1cf26c1dad62559b31fc64b6c6f6070469f5f6e835b2b4d6c9bf5d390289d59cc83133d375142381050f36865420a53dc0672b5c458b8f6e5ccbedc4f7edf2a756c675341c8bafb4f213e94e5aea23475db49a433a3a325843ee46806719971bddba9184073f1741182bdbc0db818e326dd6c3ba2d54bd106e3b80a7cbe819e7d6680c12bad9cf9dc6f6018254a1c9622379d814c206d0173682a8f7baeae7621631a6c665448fa5abfd612d9f1e28772e4ccf6f04c6a6d1f6d2f190e7752215a8ca2e4e0436f421af834cbd3160dd9c9e08b41442490738137d631c4eb072a9352e2b68b336de10d2036e6b1da77e2596a9df34466f86bfcf98637437f5f7e31ab5ab46cc21e8d9b8f2535625fff627b9e9b0b31e88da488320df98a451fae6b2ca91d318a0841437daa717afcae6c7763d032d0a312e61ee86b0923d9666f14053cab505d8d08d479ad30fce9c9f1885752cd6951071a55a81276c2d6d74b2b4bc7c06cc385793825ab1d339beca8acd636ca1086090d912f13b3db64d87f5bd1861ebccb997b40b4d79900cdcee2d809d1a8d52f73beee9ee4ebca96fd49253c5a8cc8055d3d0e8bb5827ba7e86238b5572b7a8aaca49cb8a90e78fd90166fcc7566d677dc41a6a33e367ab3c71bda03a833f4eab5e8ebc7dd3eaf830bc39a82f01c4d0c5dcd140c518507bc307172e58870cd3cbd8733caf7668e1a518d3047dda0ae08de038a1cc7439b0a0fea9353cee83ec50adf6656b315d6bc0eddf2ff84ef86ab6a76126daa497a4d56a3a6afef554915a14614925a7f4dfe9ddd32002b07edefcfc896849da4902984dc005dc76d206d80bdca878a961d18c4abc0bf193d938eaaba2a2bf38ee633572dea8aba4b2b8810f2152e094b45d0f5a93bc0036e2b52be195e84878905e5b8a485ce975a7765c28f47ff812717dfe8444f4f5d2361802ab2d01d23da9a6ccb73147ee08e207b3ae17be2e3cbf40519963de1cd97af7bfece275a74a6b681d0b6f3cbf8184c1248d3355eadbaf4fc5244826ad4d3d191e492484beff278bc292e0b38044c4cba0dc1353e9bcd33b62261d49d41fed51637083719edd16870a1d4720d3eddfd1865fd70a935d5cafd3b6a773648af2b9e1715c7ab22962bd485d8ce7e40c904271eebadf8af7f348167e9f699567a88a706ae664b890c49c5d0e737c0036f6ed65bbcc22cbbd113ef97c6876b02343f3efb2c4cffbcfce60c8b404a6bba5b16212332fc38257dc3f5d1b24a83a7ebd523d9546fbfaf8437f43d6d0d0bf2e4114e48dd01c98dbb627c54ccb9c279e7b7f47e9708f5308e00d1d170aba21cb684689a805ae293f6a161b7f6cedc3f4d51b5e4730716f02767e0adb66c74bbee2da8798fed4b1e400b9f012c9889eab4e3e59d89980ce7be78c3df2a4e5403a9f34540c3212d37ba8975f54e6a55b4cc41a9e71c5cfab107651c186b272bb8cc7971bad3c0d02856cef8871190e7741545c95a1ca0beefa0998209056e1f6a4d99e18702ed94e9c2293798205bbe9a9dd551f422f7ff8da72b74f2dadf8f1a13b7462e4a796db21726ab53113f1570b1784ce9e5d9997056eb23da2b2a465341093a1e5172f00583a8f4da7e3fdf4b40f6709745a09671afbb2aa9885239e8e1017679ede6ba2efd72d5c16f7d3803e0d3d106ef519f6e1dd4f748552a713f9a4548b2391e838b4da6d58da22fb4dfa0452f22c4ac5e618a29f88f927179276ad562a7f991105235f85d89d9867fd2e740dbc1d80474c41435c43396fb2fd4621aa664e58919340f9e61181e799b87652a2df810e054f7c21754e909bd4ae3e5378c8b52ff30b6b51c8eb2565cf4c36848783fe22e3586dee8afbf8aed990fb0378eac9f6b4e69e49cebd68b6042e34bdf7e73cf5edd97527e4255a3686ffae747e323296183bcb15d5dd6d768117def29ee4e6554574f2a87d87fd52e7df36dc9ee4a6a8f0f7f3b44168e416162f57eef105fd60c958631683ecda8fc80985f78056c353e4015a62123049021a8a471880824d0397fc678c353cd093f709772c73f8dd90c1d60820d7cbdcfb03cb56ed93064ff28db70714a2215c80dea0ff5d168621efcd1cc35700bbada262954fc8eaec717a940949a2a35ca96e57953f42599b8c391922036908a80fd5975078c66893d7deab99734d16fd1b3b086520bddc4ae5303744ba923df5ba7e5fc9835ab2bff9269ff681e95ca352ecb08d2e110c1f82d3d3c85926de9dc4804c84de395d518349c530ce2a86c1614ef73ece6812031a4fc868810d87380cff92d2c4c812eff7014129b21dd75b8fdf320edf750e4b21f457cbe1e231eea10bc9283392723faeb197ea018cd5d2bfc60cbb08f6066134d7ae667bf69006f2957871e7db16c286434bbf7311b23fdd42f3bcc6bb7b6429e4dfb86fd142674fc2ea0220fcfb11567727c645ba5e7a7e816037dbea8e791d7ff2e5f2966249045a7593b067668be12b57e71876029941d040f0a5672f89cbdc1d84e076ffba547cef96a37c53c790a530fb0052dd8dfab7e990f5cd518c24c0165f73e0a6f1201789036973af0895aa1750e75a1b361dd111d576da8531590a2cc35607c2fa3bb9eade013ccd29a0c920150bb56a180d777e93a688a0aca915dc0529b53c08a9fb066d91704894121f9f458af75b18d4e0add0263c90c81feb0dad7a7a08fcc15e2c689266f80d6e054dc5b96bde299c7a9cc42cac7d3b3663983533d0493d89c3f44178ffde435721b0248e5f1cea3c789427e6650d48599f7e17d549ef1fb65f5ad1af64a062ba6f59d260ed593fb936a121dfbfe0a1b9466e1b7b8622439095b0b825ccf08bdae7d855fc76833cd8cd63fa8a30bd2adec52cb14a2aa64b9b5b5b870926ea7d8d62d9841116b2cf4d4c8667c316753058527c381bd81eba89fd823f7e88d3a17eb2771d7416010271ffb8896080f9d0f862c7dba8e715c8d87f67609d61c6f6aced137566fa646c68934f2a215ad75a63b9ec237e145e7aeea4c7f6590f1c778a55ae505340b35744b260262a6dbb2ec44a6359d8c7ed159634aa312bd8fb89efbfe28e96d61e5ae972ec5b7a9e857be041cda6ec9809a3aae9ff7afe89fe0085fb936760ba91aa8b8001c3a98b03f89320893231159828e9ce4b59eff955054a9ac83134aca57fffe96e3947beafc156113a3ab492dbfb4b825fd5b351fe8f53503170a75059e10a9d50b9ae2c2e2463884e534c8c7c76d2513e4bd5a0f3436d2a85a0c3fc6a848e8f182142858a13626c1a4955537d0291374ea763be27cba87f19c2f27a529c3cea355d2a0c02f12171976ab4d75f065ce79268f0c60bdafc4f49df51aa815699196f0cc8cdeb92d3c972f4ec65b4b8e9582af2a67422680093b4ec755ca15931d735bcc4ab9b4137a0b52231f931d36fcdb5ca99da7550d9dc9a4bb4f3fd0ae7a709210bb00a54941b82389659d05a14d451ed9847c826440057d95c57b0161a287ca5039f35a8156101bd1c9cc23ba592ee9334f21f16173265132a8d2d6c09979f729580c174f0574742ac3ca966dd2c52019f40cb1dc6a3d6f3a692bb7875e7478b81318c34f2ec866440f08ee2a4fedec9b98d6f854613addcb26876b8ee677924b1e3e94ce2ec415ae9b21c20e4e861c786e3e74583bb3e7b36af92373933582e664460e112179b944915bee332eda25b2a1a98ddd9f9c794e0371438d4", 0x2000, &(0x7f000000afc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006980)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRESHEX=r6], 0x20) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000980)="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", 0x451, 0xfffffffffffffffb) getsockname$inet(r5, 0x0, &(0x7f0000000140)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}}, 0x0) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r12, 0x0, 0x1) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r13, 0x8040ae9f, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 12.415375521s ago: executing program 0 (id=1757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) 12.145373108s ago: executing program 0 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = eventfd2(0x0, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0xc, 0x2, r4}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.487261086s ago: executing program 2 (id=1817): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 8.29743851s ago: executing program 2 (id=1819): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x4a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8"], 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x2, 0x2fd}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fc79f8000360fc7a9e71f0f01cf0f9f22f080473d0a0f7e770a66b91902000066b88200000066ba000000000f300fe8ce0f01cb26660fdd6900", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fb00) 5.849100333s ago: executing program 3 (id=1836): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 5.629785487s ago: executing program 3 (id=1838): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 5.404597267s ago: executing program 1 (id=1703): syz_usb_connect(0x3, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x4b, 0xd5, 0xbb, 0x10, 0x13e5, 0x1, 0x61e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x89, 0xb9, 0x10, 0xf8, [{{0x9, 0x4, 0x7d, 0xe, 0x1, 0x24, 0x58, 0xac, 0x5d, [], [{{0x9, 0x5, 0x6, 0x4, 0x20, 0x3, 0x6, 0xb}}]}}, {{0x9, 0x4, 0x7, 0x5, 0x0, 0xcc, 0xa4, 0xff, 0x5}}]}}]}}, 0x0) 5.357797681s ago: executing program 4 (id=1840): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1c00000018002507b9409b14ffff0b7a0204be04050714056406040c5c", 0x1d, 0x0, 0x0, 0x0) 5.232687063s ago: executing program 3 (id=1841): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r0) 5.162738935s ago: executing program 2 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.093604992s ago: executing program 4 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 5.017565407s ago: executing program 3 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}]}}}]}, 0x44}}, 0x0) 4.934515411s ago: executing program 2 (id=1845): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x18) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000400)=""/102391, 0x18ff7}], 0x1, 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) fgetxattr(r6, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000340)=""/109, 0x6d) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f000090a000/0x1000)=nil, 0x800000}) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4.930740168s ago: executing program 4 (id=1846): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4.637483547s ago: executing program 3 (id=1847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = eventfd2(0x0, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5, 0xc, 0x2, r5}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6b2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.609934789s ago: executing program 4 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0xa}, @nop]}}}}}}}, 0x0) 471.624488ms ago: executing program 4 (id=1849): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x20, 0x29, 0x32, {@dev, r1}}}], 0x20}, 0x0) 313.745602ms ago: executing program 2 (id=1850): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000040)) 117.792664ms ago: executing program 1 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 27.151394ms ago: executing program 4 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000000000000028000000900020073797a31000000000800034000000004090001"], 0x34}}, 0x0) 567.303µs ago: executing program 3 (id=1853): pipe(&(0x7f0000000080)={0xffffffffffffffff}) unshare(0xc040480) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1854): r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$FUSE(r0, &(0x7f0000008180)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.778345][T14189] team0: Port device team_slave_0 added [ 610.844906][T14189] team0: Port device team_slave_1 added [ 611.009209][ T5241] Bluetooth: hci1: command tx timeout [ 611.042648][T14189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.049910][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.088338][T14189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.148622][T14189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.173488][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.215843][T14189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.219812][ T5284] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 611.272870][T14303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 611.285346][T14313] input: syz0 as /devices/virtual/input/input30 [ 611.352033][T14300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.420555][ T5284] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 611.435406][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.466577][T14189] hsr_slave_0: entered promiscuous mode [ 611.494589][ T5284] usb 5-1: config 0 descriptor?? [ 611.528362][ T5284] usb 5-1: selecting invalid altsetting 3 [ 611.545154][T14189] hsr_slave_1: entered promiscuous mode [ 611.579446][ T5284] comedi comedi0: could not set alternate setting 3 in high speed [ 611.587342][ T5284] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 611.603743][T14189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.619624][T14189] Cannot create hsr debugfs directory [ 611.668427][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 611.678973][ T5284] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 611.725381][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.749435][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.778197][T14297] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1541'. [ 611.940485][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.972781][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.047568][ T5284] usb 5-1: USB disconnect, device number 45 [ 612.760110][ T2933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.888493][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.901929][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.927229][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.950034][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.961571][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 612.968921][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.089272][ T5243] Bluetooth: hci1: command tx timeout [ 613.176029][ T2933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.199163][ T5284] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 613.369107][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 613.384507][ T5284] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 613.417841][ T2933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.479077][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.507119][ T5284] usb 4-1: Product: syz [ 613.521212][ T5284] usb 4-1: Manufacturer: syz [ 613.526082][ T5284] usb 4-1: SerialNumber: syz [ 613.532912][ T5284] usb 4-1: config 0 descriptor?? [ 613.540931][ T5284] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 613.635908][ T2933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.750742][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 613.801416][T14189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.907220][T14189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.931437][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 613.941460][T14189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.962897][ T8] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 613.979421][ T8] usb 5-1: config 0 has no interface number 0 [ 614.004635][ T8] usb 5-1: New USB device found, idVendor=0df6, idProduct=0059, bcdDevice=e1.fc [ 614.019082][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.027125][ T8] usb 5-1: Product: syz [ 614.039577][ T8] usb 5-1: Manufacturer: syz [ 614.044221][ T8] usb 5-1: SerialNumber: syz [ 614.056849][ T8] usb 5-1: config 0 descriptor?? [ 614.093124][T14189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.271833][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 614.304325][T14356] chnl_net:caif_netlink_parms(): no params data found [ 614.316694][ T8] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 614.343248][ T2933] bridge_slave_1: left allmulticast mode [ 614.349154][ T8] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 614.349187][ T8] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 614.359298][ T2933] bridge_slave_1: left promiscuous mode [ 614.384955][ T8] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 614.385148][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.418604][ T2933] bridge_slave_0: left allmulticast mode [ 614.434901][ T2933] bridge_slave_0: left promiscuous mode [ 614.439509][ T8] usb 5-1: USB disconnect, device number 46 [ 614.469892][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.013833][ T5243] Bluetooth: hci4: command tx timeout [ 615.229288][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.243065][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.256530][ T2933] bond0 (unregistering): Released all slaves [ 615.569745][ T5284] gp8psk: usb in 128 operation failed. [ 615.577314][ T5284] gp8psk: usb in 137 operation failed. [ 615.588943][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 615.605538][ T5284] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 615.631613][ T5284] usb 4-1: media controller created [ 615.673917][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.689527][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.696111][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.701782][T14356] bridge_slave_0: entered allmulticast mode [ 615.726730][ T5284] gp8psk_fe: Frontend revision 1 attached [ 615.728083][T14356] bridge_slave_0: entered promiscuous mode [ 615.748583][ T5284] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 615.755543][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.767576][ T5284] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 615.778738][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.788201][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 615.806320][T14356] bridge_slave_1: entered allmulticast mode [ 615.820959][T14356] bridge_slave_1: entered promiscuous mode [ 615.907355][ T5284] gp8psk: usb in 138 operation failed. [ 615.936417][ T5284] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 615.950573][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 615.968932][ T5284] gp8psk: found Genpix USB device pID = 201 (hex) [ 615.978299][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 615.984116][ T5284] usb 4-1: USB disconnect, device number 52 [ 616.022778][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.039795][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 616.057349][T14389] fuse: Bad value for 'fd' [ 616.068611][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.083360][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.108055][ T2933] hsr_slave_0: left promiscuous mode [ 616.115037][ T8] usb 5-1: config 0 descriptor?? [ 616.123352][ T2933] hsr_slave_1: left promiscuous mode [ 616.130692][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.140253][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.151060][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.195866][ T2933] veth1_macvtap: left promiscuous mode [ 616.201884][ T2933] veth0_macvtap: left promiscuous mode [ 616.211989][ T2933] veth1_vlan: left promiscuous mode [ 616.217443][ T2933] veth0_vlan: left promiscuous mode [ 616.226021][T14397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1558'. [ 616.235774][T14389] fuse: Unknown parameter 'gr00000000000808452096' [ 616.276345][ T5284] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 616.331208][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.354094][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.929976][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.952496][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.001953][ T8] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 617.083117][ T8] hid-generic 0003:0158:0100.001B: unexpected long global item [ 617.089124][ T5243] Bluetooth: hci4: command tx timeout [ 617.151089][ T8] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 617.606270][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 617.671793][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 617.795340][ T5285] usb 5-1: USB disconnect, device number 47 [ 618.123237][T14410] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(14920911498418) <= P.seqno(0) <= S.SWH(14920911498492)) and (P.ackno exists or LAWL(159935431529037) <= P.ackno(159935431529041) <= S.AWH(159935431529041), sending SYNC... [ 618.412824][T14396] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1558'. [ 618.422586][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 618.460110][T14356] team0: Port device team_slave_0 added [ 618.493416][T14356] team0: Port device team_slave_1 added [ 618.562909][T14189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.661153][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.668524][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.694474][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.702433][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.755854][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.763811][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.789733][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.862948][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.922379][T14189] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.953709][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.960935][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.033216][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.040404][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.052218][T14432] vivid-004: disconnect [ 619.104185][T14356] hsr_slave_0: entered promiscuous mode [ 619.121566][T14356] hsr_slave_1: entered promiscuous mode [ 619.138277][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.155308][T14356] Cannot create hsr debugfs directory [ 619.169754][ T5243] Bluetooth: hci4: command tx timeout [ 619.390026][T14440] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 619.443366][T14440] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 619.566832][T14189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.680626][ T5243] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 619.803315][T14189] veth0_vlan: entered promiscuous mode [ 619.862954][T14189] veth1_vlan: entered promiscuous mode [ 619.973307][T14189] veth0_macvtap: entered promiscuous mode [ 619.976319][T14451] nftables ruleset with unbound set [ 620.018588][T14189] veth1_macvtap: entered promiscuous mode [ 620.043505][T14425] vivid-004: reconnect [ 620.087877][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.101730][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.117254][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.128271][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.152428][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.168524][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.185581][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.196627][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.212807][T14189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.227475][T14356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.268635][T14356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.312713][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.336875][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.348804][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.359743][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.378583][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.399179][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.416848][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.427843][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.454211][T14189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.471329][T14356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.492299][T14471] netlink: 'syz.3.1567': attribute type 4 has an invalid length. [ 620.512726][T14356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.531710][T14471] netlink: 'syz.3.1567': attribute type 4 has an invalid length. [ 620.577055][T14189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.615752][T14189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.629375][T14189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.647369][T14189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.833228][T14487] netlink: 'syz.4.1568': attribute type 2 has an invalid length. [ 620.888702][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.894968][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.943155][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.979306][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 621.011129][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.058484][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.077352][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.107160][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.114437][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.177054][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.184179][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.193375][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.234259][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 621.250014][ T5243] Bluetooth: hci4: command tx timeout [ 621.322780][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 621.377614][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.386067][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.417858][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 621.435488][ T9] usb 4-1: SerialNumber: syz [ 621.480701][T14471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 621.483935][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.589811][ T5284] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 621.611297][T14356] veth0_vlan: entered promiscuous mode [ 621.627172][T14356] veth1_vlan: entered promiscuous mode [ 621.706493][T14356] veth0_macvtap: entered promiscuous mode [ 621.716759][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 621.741874][T14356] veth1_macvtap: entered promiscuous mode [ 621.751652][ T9] usb 4-1: USB disconnect, device number 53 [ 621.752024][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 621.800314][ T5284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.826234][ T5284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 621.838940][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.851189][ T5284] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.865045][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.878369][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.901127][ T5284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.917120][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.919101][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.928068][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.956451][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.973160][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.994627][ T5284] usb 2-1: Product: syz [ 622.012165][ T5284] usb 2-1: Manufacturer: syz [ 622.029328][ T5284] usb 2-1: SerialNumber: syz [ 622.035520][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.059480][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.079173][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.116211][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.132804][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.159042][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.185787][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.197603][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.215120][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.228886][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.244711][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.257748][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.274550][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.297828][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.344926][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.383344][T14356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.415832][T14356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.426299][T14356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.446595][T14356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.497374][ T5284] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 622.517132][ T5284] cdc_ncm 2-1:1.0: bind() failure [ 622.527695][ T5284] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 622.563872][ T5284] cdc_ncm 2-1:1.1: bind() failure [ 622.589863][ T5284] usb 2-1: USB disconnect, device number 37 [ 622.667947][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.685860][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.742412][ T950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.752958][ T5243] Bluetooth: Wrong link type (-71) [ 622.760209][ T5243] Bluetooth: hci0: link tx timeout [ 622.766791][ T5243] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.798482][ T950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.039626][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 623.209194][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 623.228776][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.258134][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 623.277242][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10333, setting to 64 [ 623.290565][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.316840][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=39.0f [ 623.339652][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 623.359224][ T9] usb 5-1: Product: syz [ 623.378194][ T9] usb 5-1: Manufacturer: syz [ 623.388380][ T9] usb 5-1: SerialNumber: syz [ 623.400303][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 623.416363][ T9] usb 5-1: config 0 descriptor?? [ 623.426497][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.443311][T14524] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 623.463930][ T8] usb 3-1: Product: syz [ 623.479167][ T8] usb 3-1: Manufacturer: syz [ 623.484071][ T8] usb 3-1: SerialNumber: syz [ 623.501326][ T8] usb 3-1: config 0 descriptor?? [ 623.652020][T14560] tipc: Started in network mode [ 623.657018][T14560] tipc: Node identity ac1414aa, cluster identity 4711 [ 623.680601][ T9] sierra 5-1:0.0: Sierra USB modem converter detected [ 623.693317][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 623.704518][T14560] tipc: Enabled bearer , priority 10 [ 623.717987][ T9] usb 5-1: USB disconnect, device number 48 [ 623.729466][ T5241] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 623.744903][ T5241] Bluetooth: hci3: Injecting HCI hardware error event [ 623.754648][ T5241] Bluetooth: hci3: hardware error 0x00 [ 623.772849][ T7463] usb 3-1: USB disconnect, device number 43 [ 623.785623][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 623.794032][T14562] tipc: Disabling bearer [ 623.798701][ T9] sierra 5-1:0.0: device disconnected [ 623.994945][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 624.085528][T10812] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 624.120625][ T25] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 624.204409][T14566] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 624.302499][ T25] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 624.343026][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 624.379100][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.429457][ T5284] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 624.626057][T14578] netlink: 'syz.4.1579': attribute type 3 has an invalid length. [ 624.640676][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 624.659918][ T5284] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 624.667494][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 624.691470][ T5284] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.704650][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.711691][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.730871][T14578] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1579'. [ 624.752173][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.769125][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.807155][ T25] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 624.816753][ T25] usb 2-1: No valid video chain found. [ 624.826728][ T5284] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 624.839229][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 624.849511][T10812] Bluetooth: hci0: command 0x0406 tx timeout [ 624.851612][ T5284] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.868955][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.881829][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.905797][ T5284] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 624.924602][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 624.939065][ T5284] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.952088][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.963863][ T5284] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 625.011333][ T5284] usb 4-1: string descriptor 0 read error: -22 [ 625.027086][ T5284] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.039257][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.068720][ T5284] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 625.695284][T14587] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 625.889670][ T5241] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 625.989795][ T46] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 626.152498][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 626.168856][ T46] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 626.189375][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.197749][ T46] usb 5-1: Product: syz [ 626.208140][ T46] usb 5-1: Manufacturer: syz [ 626.214519][ T46] usb 5-1: SerialNumber: syz [ 626.222837][ T46] usb 5-1: config 0 descriptor?? [ 626.234492][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.279900][ T46] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 626.372854][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.423648][ T7462] usb 2-1: USB disconnect, device number 38 [ 626.681409][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.715512][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.787522][ T7463] usb 5-1: USB disconnect, device number 49 [ 627.113174][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 627.159350][ T46] usb 4-1: USB disconnect, device number 54 [ 627.189768][T14601] fuse: Unknown parameter '0x0000000000000008' [ 627.625158][T14617] hub 9-0:1.0: USB hub found [ 627.630559][T14617] hub 9-0:1.0: 8 ports detected [ 628.159390][ T7463] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 628.303949][T14629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1592'. [ 628.325815][T14629] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 628.369261][ T7463] usb 5-1: Using ep0 maxpacket: 32 [ 628.378587][ T7463] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 221, using maximum allowed: 30 [ 628.397799][ T7463] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 628.434887][ T7463] usb 5-1: New USB device found, idVendor=0572, idProduct=c69a, bcdDevice=50.5e [ 628.458195][ T7463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.475713][ T7463] usb 5-1: Product: syz [ 628.490783][ T7463] usb 5-1: Manufacturer: syz [ 628.503527][ T7463] usb 5-1: SerialNumber: syz [ 628.515763][ T7463] usb 5-1: config 0 descriptor?? [ 628.533855][ T7463] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 628.569312][ T7463] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 628.594804][ T7463] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 628.709217][ T7463] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 628.715627][ T7463] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 628.800447][ T7463] usb 5-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite' in warm state [ 628.823371][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.874630][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.885970][ T7463] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 628.943024][ T7463] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite) [ 629.007491][ T7463] usb 5-1: media controller created [ 629.130271][ T7463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.222009][T14644] fuse: Bad value for 'fd' [ 629.245476][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 629.792709][ T7463] usb 5-1: USB disconnect, device number 50 [ 629.872490][T14653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 630.212202][T14663] random: crng reseeded on system resumption [ 630.269291][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 630.459682][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 630.469826][ T25] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 630.495895][ T950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.523407][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.578872][ T25] usb 4-1: Product: syz [ 630.608434][ T25] usb 4-1: Manufacturer: syz [ 630.629054][ T25] usb 4-1: SerialNumber: syz [ 630.919542][ T950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.985355][ T25] usb 4-1: config 0 descriptor?? [ 631.025400][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.056564][ T950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.058890][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 631.125301][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.191098][ T950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.369729][ T950] bridge_slave_1: left allmulticast mode [ 631.390517][ T950] bridge_slave_1: left promiscuous mode [ 631.407378][ T950] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.427515][ T950] bridge_slave_0: left allmulticast mode [ 631.433808][ T950] bridge_slave_0: left promiscuous mode [ 631.440025][ T950] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.924388][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.942189][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.952587][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.961378][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.970770][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.978285][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 631.984479][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.993264][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.110073][ T5287] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 632.261978][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.274021][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 632.321220][ T5287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 632.330770][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 632.338803][ T5287] usb 5-1: SerialNumber: syz [ 632.363336][ T5287] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 632.383119][ T5287] usb-storage 5-1:1.0: USB Mass Storage device detected [ 632.421184][ T5287] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 632.457421][ T5287] scsi host1: usb-storage 5-1:1.0 [ 632.537912][ T950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.554666][ T950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.575381][ T950] bond0 (unregistering): Released all slaves [ 632.575842][ T5287] usb 5-1: USB disconnect, device number 51 [ 632.617043][ T7462] usb 4-1: USB disconnect, device number 55 [ 632.943356][T14689] chnl_net:caif_netlink_parms(): no params data found [ 633.011569][ T950] hsr_slave_0: left promiscuous mode [ 633.028390][ T950] hsr_slave_1: left promiscuous mode [ 633.034641][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.052379][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.066103][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.076012][ T950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.122093][ T950] veth1_macvtap: left promiscuous mode [ 633.127670][ T950] veth0_macvtap: left promiscuous mode [ 633.158251][ T950] veth1_vlan: left promiscuous mode [ 633.173745][ T950] veth0_vlan: left promiscuous mode [ 633.423613][T14726] input: syz0 as /devices/virtual/input/input32 [ 633.639243][ T7462] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 633.807701][ T7462] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.833622][ T7462] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.854346][ T7462] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 633.864165][ T7462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 633.872413][ T7462] usb 5-1: SerialNumber: syz [ 633.991428][ T950] team0 (unregistering): Port device team_slave_1 removed [ 634.053967][ T5243] Bluetooth: hci4: command tx timeout [ 634.075873][ T950] team0 (unregistering): Port device team_slave_0 removed [ 634.993796][ T7462] usb 5-1: skipping empty audio interface (v1) [ 635.044987][ T7462] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 635.059234][ T7462] usb 5-1: USB disconnect, device number 52 [ 635.232529][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.272606][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.434498][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.486119][T14689] bridge_slave_0: entered allmulticast mode [ 635.517361][T14689] bridge_slave_0: entered promiscuous mode [ 635.567971][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.596685][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.606121][ T29] audit: type=1326 audit(1728810275.215:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.633257][T14689] bridge_slave_1: entered allmulticast mode [ 635.640993][ T29] audit: type=1326 audit(1728810275.235:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.663503][T14689] bridge_slave_1: entered promiscuous mode [ 635.691002][ T29] audit: type=1326 audit(1728810275.235:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.722886][ T29] audit: type=1326 audit(1728810275.245:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.798727][ T29] audit: type=1326 audit(1728810275.245:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.823982][T14689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.850134][T14689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.859668][ T29] audit: type=1326 audit(1728810275.245:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.895526][ T29] audit: type=1326 audit(1728810275.245:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.930581][ T29] audit: type=1326 audit(1728810275.245:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 635.977067][T14689] team0: Port device team_slave_0 added [ 636.014518][ T29] audit: type=1326 audit(1728810275.245:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 636.043117][ T29] audit: type=1326 audit(1728810275.245:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14736 comm="syz.1.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 636.088529][T14689] team0: Port device team_slave_1 added [ 636.129921][ T5243] Bluetooth: hci4: command tx timeout [ 636.170616][T14689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.188911][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.247623][T14689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.274954][T14689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.289714][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.354515][T14689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.470687][T14689] hsr_slave_0: entered promiscuous mode [ 636.483890][T14689] hsr_slave_1: entered promiscuous mode [ 636.510739][T14689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.551847][T14689] Cannot create hsr debugfs directory [ 636.619205][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 636.779432][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 636.801628][ T46] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 636.824697][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.834135][ T46] usb 5-1: Product: syz [ 636.845008][ T46] usb 5-1: Manufacturer: syz [ 636.882727][ T46] usb 5-1: SerialNumber: syz [ 636.927710][ T46] usb 5-1: config 0 descriptor?? [ 637.064400][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 637.183245][ T46] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 638.002714][T14689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 638.050266][T14689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 638.074568][T14689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 638.097009][T14689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.109192][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 638.211013][ T5243] Bluetooth: hci4: command tx timeout [ 638.348925][T14689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.376831][T14689] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.410743][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.417885][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.474402][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.481646][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.508569][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 638.662644][T14689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.773338][T14689] veth0_vlan: entered promiscuous mode [ 638.804472][T14689] veth1_vlan: entered promiscuous mode [ 638.861230][T14689] veth0_macvtap: entered promiscuous mode [ 638.879251][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 638.893805][T14689] veth1_macvtap: entered promiscuous mode [ 638.951581][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.987285][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.000941][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.021603][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.032336][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.044208][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.054645][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.066964][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.077480][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.077906][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.089100][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.106363][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.110132][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.121071][T14689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.156096][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.159994][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.184310][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.194494][ T25] usb 4-1: SerialNumber: syz [ 639.213995][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.238719][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.258934][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.275550][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.285647][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.297589][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.307582][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.318226][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.337282][T14689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.403469][T14689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.420694][T14689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.430389][T14689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.439387][T14689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.470069][ T25] usb 4-1: skipping empty audio interface (v1) [ 639.511186][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 639.576156][ T25] usb 4-1: USB disconnect, device number 56 [ 639.643542][T11279] udevd[11279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.667579][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.723689][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.875460][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.914453][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.928672][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.034714][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.098499][ T46] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 640.126030][ T46] usb 5-1: USB disconnect, device number 53 [ 640.238009][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.299737][ T5243] Bluetooth: hci4: command tx timeout [ 640.525213][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.538667][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.552006][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.567514][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.586336][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.596910][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 640.606819][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.971015][T14857] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 641.211146][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 641.358938][ T52] bridge_slave_1: left allmulticast mode [ 641.383536][ T52] bridge_slave_1: left promiscuous mode [ 641.407102][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.432438][ T52] bridge_slave_0: left allmulticast mode [ 641.447688][ T52] bridge_slave_0: left promiscuous mode [ 641.455979][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.482468][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 641.533672][T14865] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 641.804428][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 641.905331][ T52] gre0 (unregistering): left allmulticast mode [ 641.988619][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 642.008755][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.046027][ T9] usb 2-1: config 0 descriptor?? [ 642.067842][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.096889][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 642.128167][T12275] udevd[12275]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.388836][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.402764][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.425382][ T52] bond0 (unregistering): Released all slaves [ 642.451782][ T25] usb 2-1: USB disconnect, device number 39 [ 642.621516][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 642.689566][ T5243] Bluetooth: hci2: command tx timeout [ 642.711125][T14850] chnl_net:caif_netlink_parms(): no params data found [ 643.466796][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.497395][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.517937][T14850] bridge_slave_0: entered allmulticast mode [ 643.545464][T14850] bridge_slave_0: entered promiscuous mode [ 643.551914][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 643.560781][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 643.569655][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 643.578309][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 643.585887][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 643.594375][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.806372][ T52] hsr_slave_0: left promiscuous mode [ 643.815925][ T52] hsr_slave_1: left promiscuous mode [ 643.834296][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.849348][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.888063][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.907161][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.966123][ T52] veth1_macvtap: left promiscuous mode [ 643.989224][ T52] veth0_macvtap: left promiscuous mode [ 644.009261][ T52] veth1_vlan: left promiscuous mode [ 644.024800][ T52] veth0_vlan: left promiscuous mode [ 644.430947][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.444528][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.454145][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.497345][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.522292][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 644.531519][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.776515][ T5241] Bluetooth: hci2: command tx timeout [ 645.353955][ T52] team0 (unregistering): Port device team_slave_1 removed [ 645.429569][ T52] team0 (unregistering): Port device team_slave_0 removed [ 645.649938][ T5241] Bluetooth: hci4: command tx timeout [ 646.174703][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.193474][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.210945][T14850] bridge_slave_1: entered allmulticast mode [ 646.225499][T14850] bridge_slave_1: entered promiscuous mode [ 646.355521][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.404261][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.519430][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 646.519450][ T29] audit: type=1326 audit(1728810286.125:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 646.550313][ T29] audit: type=1326 audit(1728810286.125:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 646.553140][T14850] team0: Port device team_slave_0 added [ 646.572304][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.578434][ T29] audit: type=1326 audit(1728810286.125:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 646.629474][ T5241] Bluetooth: hci0: command tx timeout [ 646.682329][ T29] audit: type=1326 audit(1728810286.125:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 646.721330][T14850] team0: Port device team_slave_1 added [ 646.832820][ T29] audit: type=1326 audit(1728810286.125:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 646.913321][ T5241] Bluetooth: hci2: command tx timeout [ 646.981399][T14976] chnl_net:caif_netlink_parms(): no params data found [ 646.999429][ T29] audit: type=1326 audit(1728810286.585:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 647.036580][ T29] audit: type=1326 audit(1728810286.585:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 647.064771][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.105025][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.174099][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.330812][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.368362][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.410073][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.733377][T14947] chnl_net:caif_netlink_parms(): no params data found [ 647.754309][ T5241] Bluetooth: hci4: command tx timeout [ 647.773208][T14850] hsr_slave_0: entered promiscuous mode [ 647.780688][T14850] hsr_slave_1: entered promiscuous mode [ 647.787649][T14850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.796015][T14850] Cannot create hsr debugfs directory [ 647.819278][ T3423] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 647.875919][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.922417][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.930002][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.937213][T14976] bridge_slave_0: entered allmulticast mode [ 647.945414][T14976] bridge_slave_0: entered promiscuous mode [ 647.984987][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.994693][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.004079][ T3423] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.017875][T14976] bridge_slave_1: entered allmulticast mode [ 648.027161][ T3423] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 648.042127][T14976] bridge_slave_1: entered promiscuous mode [ 648.048306][ T3423] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 648.080844][ T3423] usb 2-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 648.094889][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.095706][ T3423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.137716][ T3423] usb 2-1: Product: syz [ 648.145925][ T3423] usb 2-1: Manufacturer: syz [ 648.148401][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.157923][ T3423] usb 2-1: SerialNumber: syz [ 648.172529][ T3423] usb 2-1: config 0 descriptor?? [ 648.201241][ T3423] usb 2-1: Found UVC 0.00 device syz (0086:0b5b) [ 648.207660][ T3423] usb 2-1: No valid video chain found. [ 648.267243][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.296785][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.345643][T14947] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.362654][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.377285][T14947] bridge_slave_0: entered allmulticast mode [ 648.429123][T14947] bridge_slave_0: entered promiscuous mode [ 648.577339][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.630556][T14947] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.637703][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.648604][T14947] bridge_slave_1: entered allmulticast mode [ 648.663077][T14947] bridge_slave_1: entered promiscuous mode [ 648.689234][ T5241] Bluetooth: hci0: command tx timeout [ 648.701681][T14976] team0: Port device team_slave_0 added [ 648.780573][T14947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.792040][T14976] team0: Port device team_slave_1 added [ 648.835440][T14947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.862823][T15082] sctp: [Deprecated]: syz.3.1653 (pid 15082) Use of int in max_burst socket option deprecated. [ 648.862823][T15082] Use struct sctp_assoc_value instead [ 648.881737][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.889374][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.912007][T15083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.918649][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.935365][T15083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.952107][ T5241] Bluetooth: hci2: command tx timeout [ 648.997149][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.007009][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.035624][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.084885][T14947] team0: Port device team_slave_0 added [ 649.094933][T14947] team0: Port device team_slave_1 added [ 649.139211][ T3423] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 649.209432][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.226903][T14947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.234690][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.260574][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.273067][T14947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.295178][ T3423] usb 4-1: Using ep0 maxpacket: 32 [ 649.303513][ T3423] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.315215][T14947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.323563][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.352292][T14947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.364546][ T3423] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 649.374004][ T3423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.382360][ T3423] usb 4-1: Product: syz [ 649.386562][ T3423] usb 4-1: Manufacturer: syz [ 649.391578][ T3423] usb 4-1: SerialNumber: syz [ 649.402943][ T3423] usb 4-1: config 0 descriptor?? [ 649.432335][ T3423] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 649.507311][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.562457][T14976] hsr_slave_0: entered promiscuous mode [ 649.570086][T14976] hsr_slave_1: entered promiscuous mode [ 649.576974][T14976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.586894][T14976] Cannot create hsr debugfs directory [ 649.636739][ T3423] gspca_sunplus: reg_r err -32 [ 649.697684][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.738371][T14947] hsr_slave_0: entered promiscuous mode [ 649.744968][T14947] hsr_slave_1: entered promiscuous mode [ 649.752648][T14947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.766048][T14947] Cannot create hsr debugfs directory [ 649.810844][ T5241] Bluetooth: hci4: command tx timeout [ 649.826243][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.847699][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.858902][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.043615][T14850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.053527][T14850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.084635][T14850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.112102][T14850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.135001][ T52] bridge_slave_1: left allmulticast mode [ 650.141719][ T52] bridge_slave_1: left promiscuous mode [ 650.147528][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.156940][ T52] bridge_slave_0: left allmulticast mode [ 650.162843][ T52] bridge_slave_0: left promiscuous mode [ 650.168592][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.184789][ T52] bridge_slave_1: left allmulticast mode [ 650.190624][ T52] bridge_slave_1: left promiscuous mode [ 650.196280][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.210950][ T52] bridge_slave_0: left allmulticast mode [ 650.216633][ T52] bridge_slave_0: left promiscuous mode [ 650.229179][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.557622][ T52] gre0 (unregistering): left allmulticast mode [ 650.597157][ T9] usb 2-1: USB disconnect, device number 40 [ 650.759881][ T3423] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 650.769215][ T5241] Bluetooth: hci0: command tx timeout [ 651.023336][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.037801][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.049876][ T52] bond0 (unregistering): Released all slaves [ 651.215307][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.226793][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.242800][ T52] bond0 (unregistering): Released all slaves [ 651.815602][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.890115][ T5241] Bluetooth: hci4: command tx timeout [ 651.915667][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.035209][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.042396][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.057553][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.064734][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.077255][ T52] hsr_slave_0: left promiscuous mode [ 652.083270][ T52] hsr_slave_1: left promiscuous mode [ 652.090636][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.098257][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.106765][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.114356][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.125607][ T52] hsr_slave_0: left promiscuous mode [ 652.132030][ T52] hsr_slave_1: left promiscuous mode [ 652.138700][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.147185][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.155340][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.163089][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.198728][ T52] veth1_macvtap: left promiscuous mode [ 652.204342][ T52] veth0_macvtap: left promiscuous mode [ 652.224033][ T52] veth1_vlan: left promiscuous mode [ 652.235668][ T52] veth0_vlan: left promiscuous mode [ 652.245763][ T52] veth1_macvtap: left promiscuous mode [ 652.258442][ T52] veth0_macvtap: left promiscuous mode [ 652.267351][ T52] veth1_vlan: left promiscuous mode [ 652.278932][ T52] veth0_vlan: left promiscuous mode [ 652.853028][ T5241] Bluetooth: hci0: command tx timeout [ 652.970209][ T52] team0 (unregistering): Port device team_slave_1 removed [ 653.026054][ T52] team0 (unregistering): Port device team_slave_0 removed [ 653.996666][ T52] team0 (unregistering): Port device team_slave_1 removed [ 654.044445][ T52] team0 (unregistering): Port device team_slave_0 removed [ 654.642730][T14850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.721255][ T7462] usb 4-1: USB disconnect, device number 57 [ 654.826039][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.988005][T14850] veth0_vlan: entered promiscuous mode [ 655.040012][T14976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 655.058743][T14976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 655.128594][T14850] veth1_vlan: entered promiscuous mode [ 655.175279][T14976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 655.291143][T14976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 655.388523][T14850] veth0_macvtap: entered promiscuous mode [ 655.433046][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.448222][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.461652][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.474797][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.489598][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 655.500549][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.510376][T14850] veth1_macvtap: entered promiscuous mode [ 655.561044][T14947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 655.572471][T14947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 655.632990][T14947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 655.651375][T14947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.834074][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.849548][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.859571][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.876077][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.886770][T15134] vhci_hcd: default hub control req: 8018 v0000 i0000 l0 [ 655.906437][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.927159][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.943944][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.072941][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.084182][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.097528][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.108831][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.118873][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.129591][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.140845][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.191495][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.227011][T14850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.235886][T14850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.248498][T14850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.263097][T14850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.278049][T15128] chnl_net:caif_netlink_parms(): no params data found [ 656.325579][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.456992][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.617324][T15128] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.644025][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.659431][T15128] bridge_slave_0: entered allmulticast mode [ 656.675477][T15128] bridge_slave_0: entered promiscuous mode [ 656.726601][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.781680][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.796820][T15128] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.829459][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.836757][T15128] bridge_slave_1: entered allmulticast mode [ 656.858262][T15128] bridge_slave_1: entered promiscuous mode [ 656.907102][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.930568][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.953009][T14947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.022683][T15128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.024477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.053637][T15128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.079317][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.178565][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.200637][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.226901][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.243632][T15128] team0: Port device team_slave_0 added [ 657.250548][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.277123][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.280326][T14947] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.286890][T15162] loop7: detected capacity change from 0 to 16384 [ 657.312127][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 657.330571][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.381912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.389108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.402923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.410082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.422813][T15164] loop7: detected capacity change from 16384 to 16383 [ 657.454803][T15128] team0: Port device team_slave_1 added [ 657.495553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.502766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.570375][ T5243] Bluetooth: hci1: command tx timeout [ 657.647738][T15128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.669090][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.720852][T15128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.808552][T15128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.828285][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.876974][T15128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.919512][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.926678][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.956879][ T35] bridge_slave_1: left allmulticast mode [ 657.970015][ T35] bridge_slave_1: left promiscuous mode [ 657.975881][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.996610][ T35] bridge_slave_0: left allmulticast mode [ 658.013137][ T35] bridge_slave_0: left promiscuous mode [ 658.028157][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.653504][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.665864][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.678504][ T35] bond0 (unregistering): Released all slaves [ 658.737305][T15128] hsr_slave_0: entered promiscuous mode [ 658.755787][T15128] hsr_slave_1: entered promiscuous mode [ 658.762939][T15128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.770769][T15128] Cannot create hsr debugfs directory [ 658.777153][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 658.806253][ T35] tipc: Left network mode [ 659.347698][ T35] hsr_slave_0: left promiscuous mode [ 659.360580][ T35] hsr_slave_1: left promiscuous mode [ 659.383168][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.405722][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.413101][ T5243] Bluetooth: hci3: command tx timeout [ 659.420682][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.428116][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.462238][ T35] veth1_macvtap: left promiscuous mode [ 659.467812][ T35] veth0_macvtap: left promiscuous mode [ 659.473986][ T35] veth1_vlan: left promiscuous mode [ 659.479819][ T35] veth0_vlan: left promiscuous mode [ 659.649342][ T5243] Bluetooth: hci1: command tx timeout [ 660.134341][ T35] team0 (unregistering): Port device team_slave_1 removed [ 660.194210][ T35] team0 (unregistering): Port device team_slave_0 removed [ 660.535780][ T5243] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 660.548232][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: kworker/u9:7 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 660.559137][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.569222][ T5243] Workqueue: hci2 hci_rx_work [ 660.573950][ T5243] Call Trace: [ 660.577247][ T5243] [ 660.580195][ T5243] dump_stack_lvl+0x241/0x360 [ 660.584897][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.590114][ T5243] ? __pfx__printk+0x10/0x10 [ 660.594718][ T5243] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 660.600012][ T5243] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 660.605569][ T5243] sysfs_create_dir_ns+0x2ce/0x3a0 [ 660.610692][ T5243] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 660.616336][ T5243] kobject_add_internal+0x435/0x8d0 [ 660.621555][ T5243] kobject_add+0x152/0x220 [ 660.625972][ T5243] ? do_raw_spin_unlock+0x13c/0x8b0 [ 660.631172][ T5243] ? device_add+0x3e7/0xbf0 [ 660.635684][ T5243] ? __pfx_kobject_add+0x10/0x10 [ 660.640619][ T5243] ? _raw_spin_unlock+0x28/0x50 [ 660.645476][ T5243] ? get_device_parent+0x165/0x410 [ 660.650590][ T5243] device_add+0x4e5/0xbf0 [ 660.654926][ T5243] hci_conn_add_sysfs+0xe8/0x200 [ 660.659865][ T5243] le_conn_complete_evt+0xc9f/0x12e0 [ 660.665157][ T5243] ? trace_contention_end+0x3c/0x120 [ 660.670444][ T5243] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 660.676180][ T5243] ? __mutex_unlock_slowpath+0x21d/0x750 [ 660.681816][ T5243] ? __copy_skb_header+0x437/0x5b0 [ 660.686924][ T5243] ? skb_pull_data+0x112/0x230 [ 660.691699][ T5243] hci_le_enh_conn_complete_evt+0x185/0x420 [ 660.697611][ T5243] hci_event_packet+0xa55/0x1540 [ 660.702566][ T5243] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 660.707855][ T5243] ? __pfx_hci_event_packet+0x10/0x10 [ 660.713233][ T5243] ? mesh_send_done+0x10/0xa0 [ 660.717908][ T5243] ? kcov_remote_start+0x97/0x7d0 [ 660.722937][ T5243] hci_rx_work+0x3fe/0xd80 [ 660.727368][ T5243] ? process_scheduled_works+0x976/0x1850 [ 660.733090][ T5243] process_scheduled_works+0xa63/0x1850 [ 660.738656][ T5243] ? __pfx_process_scheduled_works+0x10/0x10 [ 660.744642][ T5243] ? assign_work+0x364/0x3d0 [ 660.749238][ T5243] worker_thread+0x870/0xd30 [ 660.753840][ T5243] ? __kthread_parkme+0x169/0x1d0 [ 660.758865][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 660.763974][ T5243] kthread+0x2f0/0x390 [ 660.768037][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 660.773150][ T5243] ? __pfx_kthread+0x10/0x10 [ 660.777750][ T5243] ret_from_fork+0x4b/0x80 [ 660.782173][ T5243] ? __pfx_kthread+0x10/0x10 [ 660.786762][ T5243] ret_from_fork_asm+0x1a/0x30 [ 660.791542][ T5243] [ 660.794717][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.806332][ T5243] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 660.820470][ T5243] Bluetooth: hci2: failed to register connection device [ 661.077063][T15203] fuse: Bad value for 'fd' [ 661.198051][ T5241] Bluetooth: hci2: ACL packet for unknown connection handle 457 [ 661.357081][T15165] chnl_net:caif_netlink_parms(): no params data found [ 661.389998][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.425983][T15205] program syz.0.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.489755][ T5241] Bluetooth: hci3: command tx timeout [ 661.553410][T14947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.729326][ T5241] Bluetooth: hci1: command tx timeout [ 661.777856][T15165] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.800686][T15165] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.836228][T15165] bridge_slave_0: entered allmulticast mode [ 661.863935][T15165] bridge_slave_0: entered promiscuous mode [ 661.922601][T15165] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.954051][T15165] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.971266][T15165] bridge_slave_1: entered allmulticast mode [ 661.978483][T15165] bridge_slave_1: entered promiscuous mode [ 662.048761][T15165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.156822][T14976] veth0_vlan: entered promiscuous mode [ 662.262539][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.288724][T15165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.344308][T15165] team0: Port device team_slave_0 added [ 662.378768][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.403579][T15165] team0: Port device team_slave_1 added [ 662.438159][T14947] veth0_vlan: entered promiscuous mode [ 662.458742][T15128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 662.470089][T15165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.477114][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.508313][T15165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.537572][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.550430][T14976] veth1_vlan: entered promiscuous mode [ 662.558515][T15128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 662.572626][T15128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 662.588265][T15165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.596777][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.625338][T15165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.647913][T14947] veth1_vlan: entered promiscuous mode [ 662.671926][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.691884][T15128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.753394][T15165] hsr_slave_0: entered promiscuous mode [ 662.760147][T15165] hsr_slave_1: entered promiscuous mode [ 662.766220][T15165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.774635][T15165] Cannot create hsr debugfs directory [ 662.849976][ T5241] Bluetooth: hci2: command tx timeout [ 662.944832][T14976] veth0_macvtap: entered promiscuous mode [ 663.032826][T14976] veth1_macvtap: entered promiscuous mode [ 663.078285][ T35] bridge_slave_1: left allmulticast mode [ 663.088512][ T35] bridge_slave_1: left promiscuous mode [ 663.095702][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.108483][ T35] bridge_slave_0: left allmulticast mode [ 663.115011][ T35] bridge_slave_0: left promiscuous mode [ 663.125934][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.582814][ T5241] Bluetooth: hci3: command tx timeout [ 663.594342][ T35] gre0 (unregistering): left allmulticast mode [ 663.809216][ T5241] Bluetooth: hci1: command tx timeout [ 663.967563][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.979652][ T35] bond_slave_0: left promiscuous mode [ 663.987335][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.996396][ T35] bond_slave_1: left promiscuous mode [ 664.005688][ T35] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 664.014612][ T35] macvlan2: left promiscuous mode [ 664.023330][ T35] mac80211_hwsim hwsim160 wlan0: left allmulticast mode [ 664.032389][ T35] mac80211_hwsim hwsim160 wlan0: left promiscuous mode [ 664.042181][ T35] bond0 (unregistering): Released all slaves [ 664.123624][T14947] veth0_macvtap: entered promiscuous mode [ 664.151456][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.175581][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.186553][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.201358][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.211546][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.222207][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.234914][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.254167][T14947] veth1_macvtap: entered promiscuous mode [ 664.306400][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.318508][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.335955][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.346732][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.358665][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.369627][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.383129][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.398511][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.427116][T14976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.437857][T14976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.448173][T14976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.465271][T14976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.522983][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.535854][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.552358][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.572725][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.592528][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.608378][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.618775][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.630617][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.642413][T14947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.756275][T15128] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.793146][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.819073][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.838583][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.849608][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.860544][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.871479][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.881752][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.892828][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.905572][T14947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.975243][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.982409][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.998247][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.005431][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.114638][T14947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.126040][T14947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.138043][T14947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.148519][T14947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.179576][ T35] hsr_slave_0: left promiscuous mode [ 665.185733][ T35] hsr_slave_1: left promiscuous mode [ 665.191982][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.199810][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.208489][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.216048][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.246472][ T35] veth1_macvtap: left promiscuous mode [ 665.253297][ T35] veth0_macvtap: left promiscuous mode [ 665.259235][ T35] veth1_vlan: left promiscuous mode [ 665.264550][ T35] veth0_vlan: left promiscuous mode [ 665.660086][ T5241] Bluetooth: hci3: command tx timeout [ 665.921704][ T35] team0 (unregistering): Port device team_slave_1 removed [ 665.976577][ T35] team0 (unregistering): Port device team_slave_0 removed [ 666.553519][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.568287][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.705640][T15262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1676'. [ 666.764673][T15128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.793077][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.802003][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.834956][T15165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 666.857146][T15165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 666.909617][T15165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 666.924781][T15165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 667.069458][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.102258][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.151784][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.171588][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.220999][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.295348][ T35] IPVS: stop unused estimator thread 0... [ 667.471966][T15128] veth0_vlan: entered promiscuous mode [ 667.525098][T15165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.543397][T15128] veth1_vlan: entered promiscuous mode [ 667.556223][T15283] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1678'. [ 667.621953][ T5241] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 667.637536][T15165] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.692348][T15128] veth0_macvtap: entered promiscuous mode [ 667.699861][T15283] [U] v [ 667.762981][T15128] veth1_macvtap: entered promiscuous mode [ 667.786487][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.793711][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.845220][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.852412][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.045240][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.080968][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.105596][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.119297][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.134706][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.151705][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.162145][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.173983][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.198176][T15298] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 668.214790][T15128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.328692][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.383317][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.426225][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.441400][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.478732][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.574846][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.664873][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.744972][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.831660][T15128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.895631][T15128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.937222][T15128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.975769][T15128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.019112][T15128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.409388][ T5241] Bluetooth: unknown link type 4 [ 669.414427][ T5241] Bluetooth: hci0: connection err: -111 [ 669.420941][ T5241] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 669.525430][T15165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.556625][T15322] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1687'. [ 669.572549][T15317] block device autoloading is deprecated and will be removed. [ 669.637487][T15317] syz.2.1685: attempt to access beyond end of device [ 669.637487][T15317] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 669.714571][T15322] team0: Port device macvlan1 added [ 669.719102][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 669.763309][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.778350][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.835875][ T950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.847208][T15165] veth0_vlan: entered promiscuous mode [ 669.854128][ T950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.876615][T15165] veth1_vlan: entered promiscuous mode [ 669.901681][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 669.922533][T15332] vlan2: entered allmulticast mode [ 669.939903][T15332] veth1: entered allmulticast mode [ 669.940797][ T25] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 669.958322][T15332] veth1: left allmulticast mode [ 669.964515][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.990410][ T25] usb 3-1: Product: syz [ 669.994662][ T25] usb 3-1: Manufacturer: syz [ 670.011836][ T25] usb 3-1: SerialNumber: syz [ 670.031707][ T25] usb 3-1: config 0 descriptor?? [ 670.056509][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 670.065675][T15165] veth0_macvtap: entered promiscuous mode [ 670.093236][T15165] veth1_macvtap: entered promiscuous mode [ 670.154393][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.172617][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.201686][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.221882][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.239198][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.320694][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.330848][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.341689][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.351823][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.362521][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.406079][T15165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.448020][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.466646][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.486771][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.507033][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.535486][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.559071][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.573309][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.584835][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.612470][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.630154][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.641807][T15165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.662984][T15165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.673277][T15165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.682421][T15165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.696142][T15165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.807999][ T25] gspca_ov534_9: reg_w failed -71 [ 670.937138][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.953164][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.012589][ T950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.023818][ T950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.109848][ T25] gspca_ov534_9: Unknown sensor 0000 [ 671.109924][ T25] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 671.126013][ T25] usb 3-1: USB disconnect, device number 44 [ 671.195434][T15354] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 671.205655][ T5241] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 671.349429][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.480273][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.703268][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 671.726265][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 671.766906][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 671.794083][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 671.822563][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.832169][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 671.840955][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 671.849177][ T46] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 671.872280][T15370] gre0: entered allmulticast mode [ 671.961954][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.985949][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1708'. [ 672.022319][T15368] Cannot find add_set index 0 as target [ 672.029244][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 672.039827][ T46] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 672.050717][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.089710][ T46] usb 3-1: config 0 descriptor?? [ 672.131756][ T46] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 672.305644][ T46] cxusb: set interface failed [ 672.311086][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 672.330215][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 672.346325][ T46] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 672.371326][ T46] usb 3-1: media controller created [ 672.417718][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.426653][T15373] chnl_net:caif_netlink_parms(): no params data found [ 672.497950][ T70] bridge_slave_1: left allmulticast mode [ 672.519862][ T70] bridge_slave_1: left promiscuous mode [ 672.525675][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.593836][ T70] bridge_slave_0: left allmulticast mode [ 672.603310][ T46] DVB: Unable to find symbol lgdt330x_attach() [ 672.613282][ T70] bridge_slave_0: left promiscuous mode [ 672.619443][ T46] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 672.639388][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 672.645151][ T46] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 672.655415][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.668770][ T46] usb 3-1: USB disconnect, device number 45 [ 672.793618][ T46] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 672.849982][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 673.072002][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 673.089393][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.129224][ T9] usb 5-1: Product: syz [ 673.133460][ T9] usb 5-1: Manufacturer: syz [ 673.145856][ T9] usb 5-1: SerialNumber: syz [ 673.170975][ T9] usb 5-1: config 0 descriptor?? [ 673.204814][T15408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 673.217012][ T9] smsc75xx v1.0.0 [ 673.232236][ T9] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 673.233351][T15408] netlink: 'syz.3.1715': attribute type 1 has an invalid length. [ 673.270400][ T5243] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 673.279150][ T5243] Bluetooth: hci2: Injecting HCI hardware error event [ 673.289052][ T5241] Bluetooth: hci2: hardware error 0x00 [ 673.296032][ T9] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 673.455008][ T5285] usb 5-1: USB disconnect, device number 54 [ 673.622602][T15417] hub 9-0:1.0: USB hub found [ 673.637650][T15417] hub 9-0:1.0: 8 ports detected [ 673.813913][ T5243] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 673.823533][ T5243] Bluetooth: hci0: Injecting HCI hardware error event [ 673.834657][T10812] Bluetooth: hci0: hardware error 0x00 [ 673.980614][ T5243] Bluetooth: hci1: command tx timeout [ 674.053224][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.078335][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.113802][ T70] bond0 (unregistering): Released all slaves [ 674.175432][T15426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.329305][ T5284] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 674.480993][ T5284] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 674.497310][ T5284] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 674.525254][ T5284] usb 5-1: config 0 has no interface number 0 [ 674.530945][T15373] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.538477][T15373] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.538748][ T5284] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.588636][ T5284] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 674.595029][T15373] bridge_slave_0: entered allmulticast mode [ 674.630523][T15373] bridge_slave_0: entered promiscuous mode [ 674.632180][ T5284] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 674.660346][T15373] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.663604][ T5284] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 674.677806][T15373] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.698762][T15373] bridge_slave_1: entered allmulticast mode [ 674.716465][T15373] bridge_slave_1: entered promiscuous mode [ 674.739127][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.797789][ T5284] usb 5-1: config 0 descriptor?? [ 674.826342][T15430] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 674.945945][T15373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.964574][T15373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.197859][T15373] team0: Port device team_slave_0 added [ 675.262882][ T5284] usb 5-1: USB disconnect, device number 55 [ 675.307213][ T70] hsr_slave_0: left promiscuous mode [ 675.313526][ T70] hsr_slave_1: left promiscuous mode [ 675.320028][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.327480][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.337599][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.347200][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.371515][ T70] veth1_macvtap: left promiscuous mode [ 675.377050][ T70] veth0_macvtap: left promiscuous mode [ 675.383236][ T70] veth1_vlan: left promiscuous mode [ 675.388600][ T70] veth0_vlan: left promiscuous mode [ 675.409767][ T5241] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 675.890764][T10812] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 675.998947][T15481] hub 9-0:1.0: USB hub found [ 676.003961][T15481] hub 9-0:1.0: 8 ports detected [ 676.049427][T10812] Bluetooth: hci1: command tx timeout [ 676.277212][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 676.762464][ T70] team0 (unregistering): Port device team_slave_1 removed [ 676.854913][ T70] team0 (unregistering): Port device team_slave_0 removed [ 677.511309][T15373] team0: Port device team_slave_1 added [ 677.720856][T15373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.727863][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.841975][T15373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.890045][T15373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.899369][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.954737][T15373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.155266][T10812] Bluetooth: hci1: command tx timeout [ 678.179316][T15373] hsr_slave_0: entered promiscuous mode [ 678.234499][T15373] hsr_slave_1: entered promiscuous mode [ 678.362854][T15520] hub 9-0:1.0: USB hub found [ 678.399134][T15520] hub 9-0:1.0: 8 ports detected [ 679.195304][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 679.208046][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 679.219376][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.252470][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.265373][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 679.274858][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 679.543868][T15564] hub 9-0:1.0: USB hub found [ 679.565504][T15564] hub 9-0:1.0: 8 ports detected [ 679.704218][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 680.007854][T15373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 680.066877][T15373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.097998][T15373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.125734][T15373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.154349][T15558] chnl_net:caif_netlink_parms(): no params data found [ 680.209350][T10812] Bluetooth: hci1: command tx timeout [ 680.388082][T15605] hub 9-0:1.0: USB hub found [ 680.398244][T15605] hub 9-0:1.0: 8 ports detected [ 680.479669][T15558] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.486833][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.504304][T15558] bridge_slave_0: entered allmulticast mode [ 680.513934][T15558] bridge_slave_0: entered promiscuous mode [ 680.577972][T15558] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.597294][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.604780][T15558] bridge_slave_1: entered allmulticast mode [ 680.615848][T15558] bridge_slave_1: entered promiscuous mode [ 680.660788][T15618] IPv6: NLM_F_REPLACE set, but no existing node found! [ 680.723376][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.781406][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.847615][T15373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.953234][T15558] team0: Port device team_slave_0 added [ 680.976358][T15558] team0: Port device team_slave_1 added [ 680.993236][T15635] netlink: 'syz.2.1793': attribute type 4 has an invalid length. [ 681.008032][T15635] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1793'. [ 681.123462][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.139157][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.165360][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.178933][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.185991][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.212077][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.256216][T15645] hub 9-0:1.0: USB hub found [ 681.261304][T15645] hub 9-0:1.0: 8 ports detected [ 681.282541][T15373] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.303094][T15642] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1797'. [ 681.329344][T10812] Bluetooth: hci2: command tx timeout [ 681.338491][T15642] bond0: (slave bond_slave_1): Releasing backup interface [ 681.361946][T15642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1797'. [ 681.382026][T15642] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 681.503436][T15558] hsr_slave_0: entered promiscuous mode [ 681.550565][T15558] hsr_slave_1: entered promiscuous mode [ 681.564766][T15558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.573540][T15558] Cannot create hsr debugfs directory [ 681.598093][T11252] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.605261][T11252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.631170][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.638325][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.967997][T15373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.009088][T15373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.321649][T15558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.403748][T15373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.567706][T15558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.720224][T15373] veth0_vlan: entered promiscuous mode [ 682.865522][T15558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.919130][ T7463] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 682.965883][T15373] veth1_vlan: entered promiscuous mode [ 683.110764][ T7463] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 683.121281][ T7463] usb 3-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 683.140830][ T7463] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 683.150091][ T7463] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 683.158369][ T7463] usb 3-1: Manufacturer: syz [ 683.163123][ T7463] usb 3-1: SerialNumber: syz [ 683.297942][T15558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.409570][T10812] Bluetooth: hci2: command tx timeout [ 683.608007][T15373] veth0_macvtap: entered promiscuous mode [ 683.684180][T15373] veth1_macvtap: entered promiscuous mode [ 683.834116][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.871347][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.908509][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.957353][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.980574][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.005566][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.022165][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.040669][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.067822][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.093617][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.116630][T15373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.181809][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.218829][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.234064][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.247691][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.258073][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.281117][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.302239][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.324112][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.349208][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.380063][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.408779][T15373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.468460][T15747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1832'. [ 684.490599][T15747] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 684.552397][T15373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.579129][T15373] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.610131][T15373] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.632011][T15373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.677648][T15558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 684.708213][T15558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 684.732731][T15558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 684.783734][T15558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 685.022980][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.066757][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.208230][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.242890][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.406189][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.491231][T10812] Bluetooth: hci2: command tx timeout [ 685.545351][T15558] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.549561][ T7463] usb 3-1: USB disconnect, device number 46 [ 685.606720][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.613902][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.619168][ T3423] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 685.678917][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.686122][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.830436][ T3423] usb 2-1: Using ep0 maxpacket: 16 [ 685.842726][ T3423] usb 2-1: config 137 has an invalid interface number: 125 but max is 1 [ 685.863648][ T3423] usb 2-1: config 137 has an invalid interface number: 7 but max is 1 [ 685.892266][ T3423] usb 2-1: config 137 has no interface number 0 [ 685.924814][ T3423] usb 2-1: config 137 has no interface number 1 [ 685.942665][T15558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.953861][ T3423] usb 2-1: config 137 interface 125 has no altsetting 0 [ 685.961970][ T3423] usb 2-1: config 137 interface 7 has no altsetting 0 [ 685.981041][ T3423] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=61.e6 [ 686.004334][ T3423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.017265][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.028265][ T3423] usb 2-1: Product: syz [ 686.055560][ T3423] usb 2-1: Manufacturer: syz [ 686.069081][ T3423] usb 2-1: SerialNumber: syz [ 686.108173][T15558] veth0_vlan: entered promiscuous mode [ 686.120781][T15558] veth1_vlan: entered promiscuous mode [ 686.145072][T15558] veth0_macvtap: entered promiscuous mode [ 686.154820][T15558] veth1_macvtap: entered promiscuous mode [ 686.166240][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.176810][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.187668][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.199199][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.209263][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.219774][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.229615][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.240068][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.250443][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.260891][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.270769][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.281210][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.293244][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.312112][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.318506][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.369771][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.476604][ T3423] usb 2-1: selecting invalid altsetting 0 [ 687.189222][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.217898][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.624116][T10812] Bluetooth: hci2: command tx timeout [ 687.649097][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.679072][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.693735][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.705619][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.226880][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.236833][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.259041][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.268920][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.288758][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.259315][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.547322][T15558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.667281][T15558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.729344][T15558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.801593][T15558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.957267][ C0] sched: DL replenish lagged too much [ 729.649987][ T3423] usb 2-1: selecting invalid altsetting 0 [ 805.068949][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 805.075957][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15819/1:b..l [ 805.084629][ C1] rcu: (detected by 1, t=10502 jiffies, g=140185, q=1688475 ncpus=2) [ 805.092800][ C1] task:sed state:R running task stack:24608 pid:15819 tgid:15819 ppid:15818 flags:0x00000000 [ 805.106025][ C1] Call Trace: [ 805.109326][ C1] [ 805.112276][ C1] __schedule+0x1895/0x4b30 [ 805.116828][ C1] ? __pfx___schedule+0x10/0x10 [ 805.121708][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.127727][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 805.133042][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 805.138181][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 805.143928][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 805.150115][ C1] irqentry_exit+0x5e/0x90 [ 805.154545][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.160545][ C1] RIP: 0010:filter_irq_stacks+0x6e/0xa0 [ 805.166118][ C1] Code: 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 87 e5 7d 00 4b 8b 04 fe 48 39 e8 72 0c 48 c7 c1 70 16 e0 8b 48 39 c8 72 11 <4c> 39 e8 72 bb 48 c7 c1 1b 99 cf 8b 48 39 c8 73 af 41 ff c7 eb 08 [ 805.185759][ C1] RSP: 0018:ffffc900034ef328 EFLAGS: 00000287 [ 805.191857][ C1] RAX: ffffffff81f28c35 RBX: ffffc900034ef438 RCX: dffffc0000000000 [ 805.199848][ C1] RDX: 0000000000002800 RSI: 000000000000000e RDI: ffffc900034ef400 [ 805.207845][ C1] RBP: ffffffff8be00230 R08: ffffffff901cf2ef R09: 1ffffffff2039e5d [ 805.215834][ C1] R10: dffffc0000000000 R11: fffffbfff2039e5e R12: 000000000000000e [ 805.223829][ C1] R13: ffffffff8bcf9900 R14: ffffc900034ef400 R15: 0000000000000007 [ 805.231822][ C1] ? __lock_text_end+0x6/0x6 [ 805.236441][ C1] ? xen_error_entry+0x60/0x60 [ 805.241239][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 805.246910][ C1] stack_depot_save_flags+0x29/0x830 [ 805.252231][ C1] save_stack+0x109/0x1f0 [ 805.256579][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 805.261628][ C1] ? __pfx_save_stack+0x10/0x10 [ 805.266497][ C1] ? free_unref_page+0xcfb/0xf20 [ 805.271454][ C1] ? __put_partials+0xeb/0x130 [ 805.276239][ C1] ? put_cpu_partial+0x17c/0x250 [ 805.281190][ C1] ? __slab_free+0x2ea/0x3d0 [ 805.285802][ C1] ? qlist_free_all+0x9a/0x140 [ 805.290584][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 805.296239][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 805.301286][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 805.306942][ C1] ? vm_area_alloc+0x10e/0x1d0 [ 805.311729][ C1] ? mmap_region+0x1132/0x2990 [ 805.316516][ C1] ? do_mmap+0x8f0/0x1000 [ 805.320867][ C1] ? vm_mmap_pgoff+0x1dd/0x3d0 [ 805.325650][ C1] ? do_syscall_64+0xf3/0x230 [ 805.330345][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.336447][ C1] ? page_ext_get+0x20/0x2a0 [ 805.341059][ C1] __reset_page_owner+0x76/0x430 [ 805.346017][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 805.351948][ C1] free_unref_page+0xcfb/0xf20 [ 805.356749][ C1] __put_partials+0xeb/0x130 [ 805.361368][ C1] put_cpu_partial+0x17c/0x250 [ 805.366156][ C1] ? put_cpu_partial+0x70/0x250 [ 805.371030][ C1] __slab_free+0x2ea/0x3d0 [ 805.375468][ C1] ? __phys_addr+0xba/0x170 [ 805.379993][ C1] qlist_free_all+0x9a/0x140 [ 805.384610][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 805.390090][ C1] __kasan_slab_alloc+0x23/0x80 [ 805.394973][ C1] ? vm_area_alloc+0x10e/0x1d0 [ 805.399782][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 805.405278][ C1] vm_area_alloc+0x10e/0x1d0 [ 805.409900][ C1] mmap_region+0x1132/0x2990 [ 805.414554][ C1] ? __pfx_mmap_region+0x10/0x10 [ 805.419571][ C1] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 805.425512][ C1] ? bpf_lsm_mmap_addr+0x9/0x10 [ 805.430384][ C1] ? security_mmap_addr+0x6f/0x250 [ 805.435533][ C1] ? __get_unmapped_area+0x2ed/0x350 [ 805.440855][ C1] do_mmap+0x8f0/0x1000 [ 805.445049][ C1] ? __pfx_do_mmap+0x10/0x10 [ 805.449765][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 805.455438][ C1] ? apparmor_mmap_file+0xc3/0xe0 [ 805.460498][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 805.465129][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 805.470276][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 805.476641][ C1] ? exc_page_fault+0x590/0x8c0 [ 805.481540][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 805.486520][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 805.491341][ C1] do_syscall_64+0xf3/0x230 [ 805.495889][ C1] ? clear_bhb_loop+0x35/0x90 [ 805.500618][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.506553][ C1] RIP: 0033:0x7f7ae2de0b74 [ 805.511009][ C1] RSP: 002b:00007ffe4d625008 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 805.519463][ C1] RAX: ffffffffffffffda RBX: 00000000000000a0 RCX: 00007f7ae2de0b74 [ 805.527471][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 805.535478][ C1] RBP: 0000000000002000 R08: 00000000ffffffff R09: 0000000000000000 [ 805.543480][ C1] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 805.551485][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f7ae2df52a0 [ 805.559515][ C1] [ 805.562570][ C1] rcu: rcu_preempt kthread starved for 5210 jiffies! g140185 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 805.573971][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 805.583969][ C1] rcu: RCU grace-period kthread stack dump: [ 805.589884][ C1] task:rcu_preempt state:R running task stack:25520 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 805.601679][ C1] Call Trace: [ 805.604980][ C1] [ 805.607935][ C1] __schedule+0x1895/0x4b30 [ 805.612490][ C1] ? __pfx___schedule+0x10/0x10 [ 805.617376][ C1] ? __pfx_lock_release+0x10/0x10 [ 805.622441][ C1] ? __asan_memset+0x23/0x50 [ 805.627070][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 805.632913][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 805.639275][ C1] ? schedule+0x90/0x320 [ 805.643610][ C1] schedule+0x14b/0x320 [ 805.647984][ C1] schedule_timeout+0x1be/0x310 [ 805.652866][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 805.658266][ C1] ? __pfx_process_timeout+0x10/0x10 [ 805.663584][ C1] ? prepare_to_swait_event+0x330/0x350 [ 805.669261][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 805.674135][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 805.679379][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 805.685571][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 805.690893][ C1] ? finish_swait+0xd4/0x1e0 [ 805.695523][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 805.700142][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.705368][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 805.711485][ C1] ? __kthread_parkme+0x169/0x1d0 [ 805.716546][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.721776][ C1] kthread+0x2f0/0x390 [ 805.725868][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.731091][ C1] ? __pfx_kthread+0x10/0x10 [ 805.735753][ C1] ret_from_fork+0x4b/0x80 [ 805.740206][ C1] ? __pfx_kthread+0x10/0x10 [ 805.744843][ C1] ret_from_fork_asm+0x1a/0x30 [ 805.749661][ C1] [ 805.752697][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 805.759039][ C1] Sending NMI from CPU 1 to CPUs 0: [ 805.764279][ C0] NMI backtrace for cpu 0 [ 805.764294][ C0] CPU: 0 UID: 0 PID: 7462 Comm: kworker/0:7 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 805.764313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 805.764325][ C0] Workqueue: events nsim_dev_trap_report_work [ 805.764349][ C0] RIP: 0010:unwind_next_frame+0x6d1/0x22d0 [ 805.764370][ C0] Code: 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c [ 805.764390][ C0] RSP: 0018:ffffc90000006bb0 EFLAGS: 00000a07 [ 805.764404][ C0] RAX: 1ffffffff205c1db RBX: ffffffff902e0edc RCX: dffffc0000000000 [ 805.764417][ C0] RDX: 00000000000b0001 RSI: ffffffff90a3b2ea RDI: 0000000000000001 [ 805.764429][ C0] RBP: ffffffff902e0ee0 R08: 0000000000000005 R09: ffffc90000006d70 [ 805.764442][ C0] R10: ffffc90000006cd0 R11: ffffffff8180a0e0 R12: ffffffff902e0edc [ 805.764455][ C0] R13: ffffffff902e0edc R14: ffffffff902e0edc R15: ffffffff8157903a [ 805.764467][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 805.764482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.764494][ C0] CR2: 00007f7ae2dc3020 CR3: 000000003112a000 CR4: 00000000003526f0 [ 805.764509][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 805.764520][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 805.764531][ C0] Call Trace: [ 805.764538][ C0] [ 805.764545][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 805.764565][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 805.764587][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 805.764604][ C0] ? nmi_handle+0x2a/0x5a0 [ 805.764627][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 805.764646][ C0] ? nmi_handle+0x14f/0x5a0 [ 805.764662][ C0] ? nmi_handle+0x2a/0x5a0 [ 805.764678][ C0] ? unwind_next_frame+0x6d1/0x22d0 [ 805.764693][ C0] ? default_do_nmi+0x63/0x160 [ 805.764713][ C0] ? exc_nmi+0x123/0x1f0 [ 805.764730][ C0] ? end_repeat_nmi+0xf/0x53 [ 805.764745][ C0] ? do_softirq+0x11a/0x1e0 [ 805.764765][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 805.764786][ C0] ? unwind_next_frame+0x6d1/0x22d0 [ 805.764801][ C0] ? unwind_next_frame+0x6d1/0x22d0 [ 805.764818][ C0] ? unwind_next_frame+0x6d1/0x22d0 [ 805.764833][ C0] [ 805.764839][ C0] [ 805.764849][ C0] ? do_softirq+0x11b/0x1e0 [ 805.764869][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 805.764887][ C0] arch_stack_walk+0x11c/0x150 [ 805.764906][ C0] ? do_softirq+0x11b/0x1e0 [ 805.764925][ C0] stack_trace_save+0x118/0x1d0 [ 805.764944][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 805.764964][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.764985][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 805.765006][ C0] kasan_save_track+0x3f/0x80 [ 805.765022][ C0] ? kasan_save_track+0x3f/0x80 [ 805.765037][ C0] ? kasan_save_free_info+0x40/0x50 [ 805.765055][ C0] ? __kasan_slab_free+0x59/0x70 [ 805.765071][ C0] ? kfree+0x1a0/0x440 [ 805.765087][ C0] ? skb_release_data+0x6a0/0x8a0 [ 805.765104][ C0] ? consume_skb+0x9f/0xf0 [ 805.765118][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 805.765138][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 805.765156][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 805.765176][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 805.765194][ C0] ? nf_hook_slow+0xc3/0x220 [ 805.765212][ C0] ? NF_HOOK+0x29e/0x450 [ 805.765228][ C0] ? NF_HOOK+0x3a4/0x450 [ 805.765243][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 805.765261][ C0] ? process_backlog+0x662/0x15b0 [ 805.765278][ C0] ? __napi_poll+0xcb/0x490 [ 805.765294][ C0] ? net_rx_action+0x89b/0x1240 [ 805.765312][ C0] ? handle_softirqs+0x2c5/0x980 [ 805.765329][ C0] ? do_softirq+0x11b/0x1e0 [ 805.765364][ C0] kasan_save_free_info+0x40/0x50 [ 805.765400][ C0] __kasan_slab_free+0x59/0x70 [ 805.765416][ C0] ? skb_release_data+0x6a0/0x8a0 [ 805.765432][ C0] kfree+0x1a0/0x440 [ 805.765450][ C0] ? skb_release_data+0x6a0/0x8a0 [ 805.765468][ C0] skb_release_data+0x6a0/0x8a0 [ 805.765489][ C0] consume_skb+0x9f/0xf0 [ 805.765504][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 805.765527][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 805.765548][ C0] ? nf_ip_checksum+0x13a/0x500 [ 805.765570][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 805.765592][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 805.765615][ C0] ? __pfx_validate_chain+0x10/0x10 [ 805.765636][ C0] nft_do_chain+0x4ad/0x1da0 [ 805.765663][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 805.765682][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 805.765712][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 805.765731][ C0] nft_do_chain_inet+0x418/0x6b0 [ 805.765752][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 805.765770][ C0] ? ipt_do_table+0x312/0x1860 [ 805.765798][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 805.765817][ C0] nf_hook_slow+0xc3/0x220 [ 805.765836][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 805.765852][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 805.765869][ C0] NF_HOOK+0x29e/0x450 [ 805.765887][ C0] ? NF_HOOK+0x9a/0x450 [ 805.765903][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 805.765920][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 805.765940][ C0] ? ip_rcv_finish+0x406/0x560 [ 805.765958][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 805.765974][ C0] NF_HOOK+0x3a4/0x450 [ 805.765990][ C0] ? __lock_acquire+0x1384/0x2050 [ 805.766010][ C0] ? NF_HOOK+0x9a/0x450 [ 805.766026][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 805.766042][ C0] ? ip_rcv_core+0x801/0xd10 [ 805.766059][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 805.766079][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 805.766096][ C0] __netif_receive_skb+0x2bf/0x650 [ 805.766115][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 805.766135][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 805.766152][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.766172][ C0] ? __pfx_lock_release+0x10/0x10 [ 805.766192][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 805.766218][ C0] process_backlog+0x662/0x15b0 [ 805.766238][ C0] ? process_backlog+0x33b/0x15b0 [ 805.766260][ C0] ? __pfx_process_backlog+0x10/0x10 [ 805.766277][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 805.766298][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 805.766320][ C0] __napi_poll+0xcb/0x490 [ 805.766339][ C0] net_rx_action+0x89b/0x1240 [ 805.766366][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 805.766390][ C0] ? __run_timer_base+0x178/0x8e0 [ 805.766418][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 805.766442][ C0] handle_softirqs+0x2c5/0x980 [ 805.766463][ C0] ? do_softirq+0x11b/0x1e0 [ 805.766483][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 805.766505][ C0] do_softirq+0x11b/0x1e0 [ 805.766523][ C0] [ 805.766528][ C0] [ 805.766535][ C0] ? __pfx_do_softirq+0x10/0x10 [ 805.766554][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 805.766575][ C0] ? rcu_is_watching+0x15/0xb0 [ 805.766594][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 805.766613][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 805.766630][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 805.766650][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 805.766669][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 805.766689][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 805.766712][ C0] ? process_scheduled_works+0x976/0x1850 [ 805.766732][ C0] process_scheduled_works+0xa63/0x1850 [ 805.766763][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 805.766786][ C0] ? assign_work+0x364/0x3d0 [ 805.766807][ C0] worker_thread+0x870/0xd30 [ 805.766832][ C0] ? __kthread_parkme+0x169/0x1d0 [ 805.766854][ C0] ? __pfx_worker_thread+0x10/0x10 [ 805.766873][ C0] kthread+0x2f0/0x390 [ 805.766888][ C0] ? __pfx_worker_thread+0x10/0x10 [ 805.766906][ C0] ? __pfx_kthread+0x10/0x10 [ 805.766921][ C0] ret_from_fork+0x4b/0x80 [ 805.766941][ C0] ? __pfx_kthread+0x10/0x10 [ 805.766956][ C0] ret_from_fork_asm+0x1a/0x30 [ 805.766982][ C0]