last executing test programs: 43.55881715s ago: executing program 3 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x400) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 42.674976382s ago: executing program 3 (id=803): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d7f]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) sendmsg$autorun(r1, &(0x7f0000000700)=@policy376={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {0x13}, [@NFTA_TARGET_INFO={0xc, 0x3, "51f7c8822d52f4a4"}, @NFTA_TARGET_NAME={0x7, 0x1, '#}\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x100}, @NFTA_TARGET_NAME={0x8, 0x1, '):}\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004020}, 0x24008000) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 42.433050672s ago: executing program 3 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1f}}}}]}, 0x48}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) r8 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0xc4040, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x812, r8, 0xf7863000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x220, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x202, 0x33, @action={{{}, {}, @device_b}, @measure_req={0x0, 0x0, {0x2, [{0x26, 0xe5, {0x35, 0x0, 0x7, "86042bee16b13f672d4960151b07acd0859fa49e06f162e659db438d4151c0920fa6f1d324ac6abd8e45c4d5e098fa899975fa4198ff0f9688b721f28ea8a676d47656e32b9876060e24ebe3034c7bcfc1189636abafae700ed13c626ebe5abcbae210f40f1222eab90dcb63467b8d91931e7a77d7ef57199e67a4a9d2995716aa5f3769a1bd1aaa31e1eefcd380e7acb225a9e6c0e201d79a3ebc32b130df108391c739744d4246ef00a11ca92a1a8579a9478e6f70377d8a480113e02f336fa0664617964a9ad53e4715c84c6b78e51ef1374c59af754897e2f26da705e7f1481a"}}, {0x26, 0x10, {0x9, 0x5, 0x5, "a8cae85a02808ba37e95f832c1"}}, {0x26, 0xe8, {0x2, 0x0, 0xb, "4b0696d2f801db16ac7afbaa5cd7491ccba387d00653c0f277175edf06ec99893ac12f145e76357e524a5e42e48801c5bbfa5b58b1796953f9e51f9bc4fff4d556de9daa3a0caa93dd5803909e854d9b8a3d87de38dda8e2c0b1dd3f40d5b3a142210b7335ce2172473d700d74d178b38bad251eaa4f4d60487fdf6d0a53d117f92e167382f7b1d2c9738dd55afb4a1338fe5b9e8ebd1c1b3f8a54e8ed1bd741d5e9229cb9b67a2e0cb6b997945c950512d54f3f9eada35157938e72a4176fb46b78507003c5122b33a94a5418368475f74bf4bd0ca04f6e6e7db01cb691f0edf83ca6b439"}}]}}}}]}, 0x220}}, 0x0) 40.970811355s ago: executing program 3 (id=808): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff0000050003ff600000000500030001000000050003008000000005000300800000000800020003"], 0x50}}, 0x0) bind$inet(r0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 40.538690449s ago: executing program 4 (id=809): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 38.720257443s ago: executing program 3 (id=811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e2910000ef0f29902cbb0000c4e2b1ba8c88d90000000f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x41}], 0x1, 0x4a, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xce942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 35.827928332s ago: executing program 3 (id=815): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000200000c50000000700000045000000a00002"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="b9ff0307600300", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0xb, &(0x7f0000000400)="00a529c270e5e483833d04a04012dca0e789b6ac4aeb59da7123b7b880de000000000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fff, 0x180c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0x11, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000401000"/19, @ANYBLOB="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", @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0882, 0x0) 35.337933244s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0xc4040, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x812, r7, 0xf7863000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x220, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x202, 0x33, @action={{{}, {}, @device_b}, @measure_req={0x0, 0x0, {0x2, [{0x26, 0xe5, {0x35, 0x0, 0x7, "86042bee16b13f672d4960151b07acd0859fa49e06f162e659db438d4151c0920fa6f1d324ac6abd8e45c4d5e098fa899975fa4198ff0f9688b721f28ea8a676d47656e32b9876060e24ebe3034c7bcfc1189636abafae700ed13c626ebe5abcbae210f40f1222eab90dcb63467b8d91931e7a77d7ef57199e67a4a9d2995716aa5f3769a1bd1aaa31e1eefcd380e7acb225a9e6c0e201d79a3ebc32b130df108391c739744d4246ef00a11ca92a1a8579a9478e6f70377d8a480113e02f336fa0664617964a9ad53e4715c84c6b78e51ef1374c59af754897e2f26da705e7f1481a"}}, {0x26, 0x10, {0x9, 0x5, 0x5, "a8cae85a02808ba37e95f832c1"}}, {0x26, 0xe8, {0x2, 0x0, 0xb, "4b0696d2f801db16ac7afbaa5cd7491ccba387d00653c0f277175edf06ec99893ac12f145e76357e524a5e42e48801c5bbfa5b58b1796953f9e51f9bc4fff4d556de9daa3a0caa93dd5803909e854d9b8a3d87de38dda8e2c0b1dd3f40d5b3a142210b7335ce2172473d700d74d178b38bad251eaa4f4d60487fdf6d0a53d117f92e167382f7b1d2c9738dd55afb4a1338fe5b9e8ebd1c1b3f8a54e8ed1bd741d5e9229cb9b67a2e0cb6b997945c950512d54f3f9eada35157938e72a4176fb46b78507003c5122b33a94a5418368475f74bf4bd0ca04f6e6e7db01cb691f0edf83ca6b439"}}]}}}}]}, 0x220}}, 0x0) 33.98496777s ago: executing program 4 (id=819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500"], 0x50}}, 0x0) 32.318143333s ago: executing program 4 (id=822): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCVHANGUP(r2, 0x891b, 0x1000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff0000050003ff600000000500030001000000050003008000000005000300800000000800020003"], 0x50}}, 0x0) bind$inet(r0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 30.534914765s ago: executing program 4 (id=823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r9, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r10, r9, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 29.241747053s ago: executing program 4 (id=826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x400) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 17.161894701s ago: executing program 1 (id=841): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x0, 0x8}}, 0x28) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) syz_usb_connect(0x6, 0x5e, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) 16.633848604s ago: executing program 0 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/79, 0x4f, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$rfkill(r7, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x420, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [], @ipv4=@multicast2}, {@ipv4=@private, [], @ipv4=@broadcast}, {@ipv4=@loopback, [], @ipv4=@broadcast}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1, 0x84}}, @common=@inet=@set2={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r9, 0x84, 0x0, &(0x7f0000000fc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15.423725912s ago: executing program 0 (id=843): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 13.221104312s ago: executing program 1 (id=845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e2910000ef0f29902cbb0000c4e2b1ba8c88d90000000f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x41}], 0x1, 0x4a, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xce942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.061716043s ago: executing program 1 (id=847): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x0, 0x8}}, 0x28) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 10.123779685s ago: executing program 0 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 8.787113359s ago: executing program 2 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/79, 0x4f, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$rfkill(r7, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x420, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [], @ipv4=@multicast2}, {@ipv4=@private, [], @ipv4=@broadcast}, {@ipv4=@loopback, [], @ipv4=@broadcast}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1, 0x84}}, @common=@inet=@set2={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r9, 0x84, 0x0, &(0x7f0000000fc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 7.823734359s ago: executing program 2 (id=852): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8d) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) semget(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000780)=""/237) msgrcv(0x0, &(0x7f0000000a40), 0xde, 0x0, 0x0) pipe(0x0) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x94, 0x0) 7.1958141s ago: executing program 1 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0xc4040, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x812, r7, 0xf7863000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x220, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x202, 0x33, @action={{{}, {}, @device_b}, @measure_req={0x0, 0x0, {0x2, [{0x26, 0xe5, {0x35, 0x0, 0x7, "86042bee16b13f672d4960151b07acd0859fa49e06f162e659db438d4151c0920fa6f1d324ac6abd8e45c4d5e098fa899975fa4198ff0f9688b721f28ea8a676d47656e32b9876060e24ebe3034c7bcfc1189636abafae700ed13c626ebe5abcbae210f40f1222eab90dcb63467b8d91931e7a77d7ef57199e67a4a9d2995716aa5f3769a1bd1aaa31e1eefcd380e7acb225a9e6c0e201d79a3ebc32b130df108391c739744d4246ef00a11ca92a1a8579a9478e6f70377d8a480113e02f336fa0664617964a9ad53e4715c84c6b78e51ef1374c59af754897e2f26da705e7f1481a"}}, {0x26, 0x10, {0x9, 0x5, 0x5, "a8cae85a02808ba37e95f832c1"}}, {0x26, 0xe8, {0x2, 0x0, 0xb, "4b0696d2f801db16ac7afbaa5cd7491ccba387d00653c0f277175edf06ec99893ac12f145e76357e524a5e42e48801c5bbfa5b58b1796953f9e51f9bc4fff4d556de9daa3a0caa93dd5803909e854d9b8a3d87de38dda8e2c0b1dd3f40d5b3a142210b7335ce2172473d700d74d178b38bad251eaa4f4d60487fdf6d0a53d117f92e167382f7b1d2c9738dd55afb4a1338fe5b9e8ebd1c1b3f8a54e8ed1bd741d5e9229cb9b67a2e0cb6b997945c950512d54f3f9eada35157938e72a4176fb46b78507003c5122b33a94a5418368475f74bf4bd0ca04f6e6e7db01cb691f0edf83ca6b439"}}]}}}}]}, 0x220}}, 0x0) 6.574444198s ago: executing program 2 (id=854): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380), 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000340)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000740)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(r4) syz_usb_connect(0x5, 0x5d2, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x68, 0x2e, 0x35, 0x40, 0x58b, 0x28, 0xf1bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c0, 0x3, 0x9, 0xad, 0x0, 0x6, [{{0x9, 0x4, 0x1, 0xd, 0x5, 0x42, 0x10, 0x3c, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0xf9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x3, 0x4}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x2c, 0xd6, "34c2"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0xea, 0x0, 0x40, 0x80}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "913526e0"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0xf8, "186d094d"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, 'r'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x4, 0xa, "b187546d3d568f6b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0xf3, 0x0, "65bb080a458b14b5"}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x81, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xd, 0xd, 0x7, [@generic={0x2e, 0x17, "c78eeea021b348e20a8de41d42796781fe13ba4bd59fd0f4753edff1ad0c85d9bcd18581857c1e5ac906720a"}]}}, {{0x9, 0x5, 0xe, 0x13, 0x0, 0x1, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x3, 0x7bc}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xff, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x1}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0xc, 0x0, 0xa, 0xed, 0x1}}]}}, {{0x9, 0x4, 0x9c, 0x3, 0xf, 0xff, 0x0, 0x0, 0x3, [], [{{0x9, 0x5, 0x0, 0xc, 0x8, 0x1, 0x1, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x78, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xec, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0xd7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0xfff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x0, 0xf}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x4, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x30a640a82890abae, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0xc0, 0x10, 0x20, 0xc4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xa0, 0x3, 0x5}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x0, 0x40}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x4, 0x1, [@generic={0xbf, 0x6, "d60020ae9918cfbf19150429ef2e2e50154b2dec86cbc53d0843d12f21aa6280a0b36e46483c94d5bb018da3bfa8d630e2c0f21d0b01d6665565b3a6591e74b4653c1fe601ad9bbc182c7ff143b1ca5ac2c75eda18f4eadbe2899838e44d9466d8bb4cb17739ee86e4be173dca61bca5aa5261e353cab37bed288f3d1f68c4ff4a57bb945a7edf73fa0fbbd802f0f3acccc5b0156637551120a3e69cdf2baaeeab3a126e06313fb6b7e4b00496fc58b80a09ba9a8ae927300e64eb0328"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x8, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x5, 0x0, 0x12, [@generic={0x74, 0x30, "b38d2e91588fe07f0ffc003bb7428da499b081d22b885bb32985bc95a25b054951eedb796e2fa7890d3708ae9552659e039dc716e3d144f7dbe386970a7d8e1f94e47bb38d8be9491954de1370f3375919fc53e30eaeafd44cb93009bbd159c6b46c858523062349efaf2508ee40a2929a2b"}, @generic={0x56, 0x21, "bc3b3cf06347ac1f181b976e05f0e0b42ac4fa87006d6249359326112ae24591cd5148ca0e03416240db572cca0d4111821054621306f9cf576f8a6bc199bc4eb794cd0ba1437ecd70e4ba434f11f2eb2950b470"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xc, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x96, 0x4d86}, @generic={0x69, 0x0, "61cbc7f4b11419567854dcc4151af4a89502ab6c533bd310a0be8b70f2e26e54d0040a3258c312bdf286d38f506f5056232606c8c8ab568e8e31cb182b2efe307da6a8c39f4d4fbd413e47fb5341fa309156e9b4ce7280da19c2d383c5cfa0cce04e8f965e2085"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x0, 0x6, 0x40, [@generic={0x5d, 0x31, "b47ff452bbb6671aa3b1a8b99e3e38c306da3e79730d350f45483f71594b22aa264026aee85e67c0f0f60a631dec09e9c3043b4f1bd7fff3a4c9b470f23d22aa775f8ff456bd18232bdf0798203a247f405e6c746e1cd2146a2b57"}, @generic={0x16, 0xd, "ded027e505c40beef8db9ee175331af73c6d81ac"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xf, 0x1c, 0x81, [@generic={0x8f, 0x8, "d5fc2d3499a5bc40e310666b44ecfa739ddd236afdc2cb652bf22229d69965eae3abbdfe0f042d6500f11ba136034a6fd0a08b34c00a2d9191a0f75c161a8a9a94fe0c2082ca529ce432f2646ad6edfa4c4f6993e93441544be03485b9c2309d61d9130b3c5910d3ae6c16ade61d80a7ad410bde9cd50b462e13a4df13b83b8ca61589ed4dbfc7661800199838"}]}}]}}, {{0x9, 0x4, 0x66, 0x56, 0x6, 0xd, 0x1c, 0x8c, 0x3, [], [{{0x9, 0x5, 0xd, 0x2, 0x3ff, 0xe, 0x2, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4, 0xc, 0x9, [@generic={0xd0, 0x21, "13f797c98b9af515c252dedb345d88f67e08e856653924b7e97cf00f21f0e918a06ed0e4c3c839d976bd992d8fd23ab5838ed656f0043f0660ec021ad9bf60cc85df13bde37c70d0f559b20535f7ae582733e6ba7fdd550cd8fee5dbca6db7d9160b87e17b7553cf5ccf3cf604215d5dc18a9cbfbae90c5a481d148b8b1447f4fbb58d07123cb900b8974eba656a275cc8a20182060f2d2bf4fbfc8525b92c7b0e0f6be42aba2d0d57fc77219e9857e098e11ba96d5244745a6fe9f9f63fcc030e34b385a1bbd155b2544ea842b4"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x40}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xd, 0x6, 0x4f, [@generic={0x10, 0x28, "4943cf384df3853ea29861bf7c82"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x5d}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x86, 0x6, 0x5, 0x8, 0x6}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x9, [{0x6a, &(0x7f0000000240)=@string={0x6a, 0x3, "8e60358a4552c599fd5f57927f29986ff3be82cbeda0bd3f2da36cf2dcf3013e5d5c686494fb1b301e98bdb624bf7fee943cdc0dbecb5ad83f3a1c6ed710a7e3a13650293d2d411b7056bcf5006609627d7ff3db1b9d4d0bb3772fab9fd50b392041d4d790af2543"}}, {0x3f, &(0x7f0000000300)=@string={0x3f, 0x3, "f9e35ab8044fe0e802d9b7a302b797d72d9fb556355b746c41d4a736b721d9c6d83c8bde913a4f5dbd207c11d9acb506bb6a1b9aaa82d31e7ff8fc84b4"}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "c57a75a6a05ed1f69d0cfc82145e885518fdc2f00011eb64560888e75f78b2afe8e69fc2dcca1323ad13981c14bda170bcc654195bd297ef9701b9c469992e80f3fde9d247ddc9a70598a0fbdbb6d3c62e83f9ad6b1ff2ef5afb7bfc843c51d9d066b6bcfe2d46d4cba82b8a4b8e7caebd29203991da5984e7f95bb1c3ef5314a0d6b43d0146afa58883630c17250db8762d603fea417250fc941190cec226b8ea9784ce61e3f88fcb67bca8d1e990460fa9bdc67e106d7d30b0403b229245fa59eadda586ac78d5e6f171357335db97681fd3d6da1632bdd68456aae685a2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x89, &(0x7f0000000680)=@string={0x89, 0x3, "1716948357b653423982c7a9f47eaf275932b4c92ca5fbe195a5710bfd11a1c581f72c85b86cf86deaa8290f3d4aaddfd0c88583cdb8ee3bb50e79dece5c2ec8b2a4d61463333ab60b6a46544c0f3108afb3072eabbd9c08363f73d8654681159563ae1469f427d4a3dbdfd4bedc85f8c2bafc5b134a67075255c65ffcb04e9428a2dbd4e6dba8"}}, {0x79, &(0x7f0000000f80)=@string={0x79, 0x3, "d71eb3da9fc4729451308bba189fdc29dd600462710a6b0f0feb43ff3d7177ea888f58c412afddd82769fbf818fd8a0990aff8f9a9e9503c9c9f17cabae18e8ee7a5a06fbfd1cdd12c89e8a3e4349297f7d925f3b39f19f80165dc09ea97c1e42d8ef3e4f3e5c7fd88fd07ca3d5b88753bb8b50adda3a9"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x42}}, {0xe1, &(0x7f0000001080)=@string={0xe1, 0x3, "8ce5e62208f66d9f0ea16f88a8af171c3d3b5951e337f476faf27ec8610f942d8a7e6d4c238baa8f0f97515bf89f30ff41d8c062833f2c46bd45a43d8a4b704d7f93771e69fc495dbbf1689a377be4bdada1a1bb96a8d3c5a8ade773e20a345673e4d8342470ab5e1ac31d5f02e5cd39c45563ec334b9ea6f4346dfe73b72be1797fc953396021f35b1e3a71d01e2adb6e22dd0b6af99c4da78b3b84e2e39605df5e939ffae862ab6fd1df6a6135816395a2de39c535f8471af318468ea889b54643b68a6f05f61944eba709aab1424bff91621b7e16c8559228f013e22692"}}]}) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_type(r6, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, 0x0, 0xf7) 6.371209991s ago: executing program 0 (id=855): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bind$qrtr(r5, &(0x7f0000000780)={0x2a, 0x1, 0xfffffffe}, 0xc) 5.000478622s ago: executing program 0 (id=856): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x0, 0x8}}, 0x28) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) syz_usb_connect(0x6, 0x5e, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) 4.682667173s ago: executing program 1 (id=857): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x8d) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) semget(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000780)=""/237) 3.42278174s ago: executing program 1 (id=858): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000286ecf720861a92e06c900102030109"], &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, r4, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 3.123210955s ago: executing program 2 (id=859): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="272eee862efeda61316ceff1a08b1730", 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x15}, 0x15, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000e00)={@cgroup, r4, 0x2f, 0x80ffff, 0x4, @void, @void, @value}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) socket(0x200000000000011, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0xc0) 1.159638779s ago: executing program 2 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/79, 0x4f, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$rfkill(r7, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x420, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [], @ipv4=@multicast2}, {@ipv4=@private, [], @ipv4=@broadcast}, {@ipv4=@loopback, [], @ipv4=@broadcast}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1, 0x84}}, @common=@inet=@set2={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r9, 0x84, 0x0, &(0x7f0000000fc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 26.819322ms ago: executing program 2 (id=861): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, [], [], [], [0x0, 0x7, 0x0, 0x3]}) r7 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe80000000000000"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 0 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e2910000ef0f29902cbb0000c4e2b1ba8c88d90000000f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x41}], 0x1, 0x4a, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000680)="66420f3841c5b9f60200000f3266baf80cb870047a85ef66bafc0c66ed66b80c008ee80fe9b300000100b9220000400f322e0f211c26460fc7b0003000000f78e2b8010000000f01c1", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0xce942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 27467][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.534769][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.542186][ T9495] bridge_slave_0: entered allmulticast mode [ 848.551026][ T9495] bridge_slave_0: entered promiscuous mode [ 848.560551][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.567757][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.575274][ T9495] bridge_slave_1: entered allmulticast mode [ 848.583900][ T9495] bridge_slave_1: entered promiscuous mode [ 848.606236][ T9482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.622253][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.629493][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.636825][ T9496] bridge_slave_0: entered allmulticast mode [ 848.644262][ T9496] bridge_slave_0: entered promiscuous mode [ 848.652508][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.659705][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.667001][ T9496] bridge_slave_1: entered allmulticast mode [ 848.675287][ T9496] bridge_slave_1: entered promiscuous mode [ 848.714571][ T5306] mxuport 1-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 848.723593][ T5306] mxuport 1-1:254.167: probe with driver mxuport failed with error -5 [ 848.740508][ T5306] usb 1-1: USB disconnect, device number 19 [ 848.749321][ T5243] Bluetooth: hci7: command tx timeout [ 848.835042][ T5243] Bluetooth: hci4: command tx timeout [ 848.932287][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.948194][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.959774][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.972861][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.067603][ T9495] team0: Port device team_slave_0 added [ 849.086538][ T9496] team0: Port device team_slave_0 added [ 849.107845][ T9495] team0: Port device team_slave_1 added [ 849.145989][ T9496] team0: Port device team_slave_1 added [ 850.011205][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.037996][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.119337][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.156550][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.178012][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.300190][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.341933][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.366853][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.434741][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.457008][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.466270][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.506497][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.613715][ T9496] hsr_slave_0: entered promiscuous mode [ 850.632818][ T9496] hsr_slave_1: entered promiscuous mode [ 850.647579][ T9496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.662626][ T9496] Cannot create hsr debugfs directory [ 850.668195][ T9482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.689583][ T9482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.708331][ T9495] hsr_slave_0: entered promiscuous mode [ 850.717303][ T9495] hsr_slave_1: entered promiscuous mode [ 850.731787][ T9495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.746483][ T9495] Cannot create hsr debugfs directory [ 850.757153][ T9482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.797220][ T9482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.828902][ T5243] Bluetooth: hci7: command tx timeout [ 850.913858][ T5243] Bluetooth: hci4: command tx timeout [ 851.084502][ T9496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.103583][ T5278] usb 5-1: USB disconnect, device number 15 [ 851.268603][ T9496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.441341][ T9496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.604287][ T9496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.715933][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.038326][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.279717][ T9482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 852.290300][ T9482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.757945][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.765218][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.836763][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.843936][ T5400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.103428][ T9496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.217543][ T9495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.985077][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.068963][ T9496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 854.357746][ T9495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.211644][ T9496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 855.257480][ T9496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 855.340666][ T9495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.421885][ T1183] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 856.079800][ T9495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.108200][ T9482] veth0_vlan: entered promiscuous mode [ 856.177343][ T9482] veth1_vlan: entered promiscuous mode [ 856.301586][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.320516][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.336165][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.343366][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.371374][ T9482] veth0_macvtap: entered promiscuous mode [ 856.401316][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.408487][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.465592][ T9496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 856.506315][ T9496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.579367][ T9482] veth1_macvtap: entered promiscuous mode [ 856.654727][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.179751][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.189803][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.201037][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.211611][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.222481][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.234549][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.247609][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.264622][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.275621][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.306232][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.374191][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.440350][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.454895][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.525726][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.034220][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.074770][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.102918][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.156197][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.176122][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.187360][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.208381][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.310808][ T9482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.337308][ T9482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.366537][ T9482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.384141][ T9482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.474903][ T9495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 858.534603][ T9495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 858.636767][ T9495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 858.859209][ T9495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 859.029062][ T5307] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 859.045240][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.060204][ T9602] syz.4.621: attempt to access beyond end of device [ 859.060204][ T9602] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 859.124902][ T9602] XFS (nbd4): SB validate failed with error -5. [ 859.239059][ T5307] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 859.404015][ T5307] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 859.445988][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.857470][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.030234][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.865246][ T6816] bridge_slave_1: left allmulticast mode [ 860.907153][ T6816] bridge_slave_1: left promiscuous mode [ 861.019535][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.261805][ T6816] bridge_slave_0: left allmulticast mode [ 861.267527][ T6816] bridge_slave_0: left promiscuous mode [ 861.290615][ T5278] usb 2-1: USB disconnect, device number 10 [ 861.297848][ T5278] ftdi_sio 2-1:9.1: device disconnected [ 861.299884][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.328993][ T9] usb 1-1: USB disconnect, device number 21 [ 863.939342][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.451750][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.542372][ T6816] bond0 (unregistering): Released all slaves [ 864.611734][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.702525][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.540963][ T9496] veth0_vlan: entered promiscuous mode [ 865.587520][ T9496] veth1_vlan: entered promiscuous mode [ 865.695970][ T9496] veth0_macvtap: entered promiscuous mode [ 865.705661][ T9496] veth1_macvtap: entered promiscuous mode [ 865.722745][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.733453][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.743436][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.754014][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.765985][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.776711][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.786697][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.799938][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.810117][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.820732][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.831131][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.841777][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.866036][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.956300][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.982712][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.997279][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.009430][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.019736][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.030641][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.041534][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.052613][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.063086][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.073931][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.083889][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.095560][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.109953][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.133207][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.144671][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.172999][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.204563][ T9496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.232534][ T9496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.241683][ T9496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.257121][ T9496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.621173][ T6816] hsr_slave_0: left promiscuous mode [ 867.449952][ T9649] program syz.4.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.459780][ T9649] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 867.559182][ T6816] hsr_slave_1: left promiscuous mode [ 867.608879][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.626635][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.593958][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.602694][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.644597][ T6816] veth1_macvtap: left promiscuous mode [ 868.657960][ T6816] veth0_macvtap: left promiscuous mode [ 868.667229][ T6816] veth1_vlan: left promiscuous mode [ 868.673885][ T6816] veth0_vlan: left promiscuous mode [ 870.214503][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 870.271634][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 870.922728][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.217014][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.224219][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.296931][ T9668] program syz.4.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.306939][ T9668] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 872.570973][ T5398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.579074][ T5398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.621734][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.628881][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.158538][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.182717][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.597901][ T6816] IPVS: stop unused estimator thread 0... [ 873.843896][ T6816] bridge_slave_1: left allmulticast mode [ 873.855956][ T6816] bridge_slave_1: left promiscuous mode [ 873.872940][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.891031][ T938] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 874.890931][ T938] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 874.908877][ T938] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 874.918026][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.931007][ T6816] bridge_slave_0: left allmulticast mode [ 874.936822][ T6816] bridge_slave_0: left promiscuous mode [ 875.387345][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.746072][ T9705] program syz.3.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.756008][ T9705] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 876.483457][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.490144][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.538375][ T6816] bridge_slave_1: left allmulticast mode [ 876.573168][ T6816] bridge_slave_1: left promiscuous mode [ 876.588163][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.598981][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.610649][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.708865][ T6816] bridge_slave_0: left allmulticast mode [ 876.718656][ T6816] bridge_slave_0: left promiscuous mode [ 876.760419][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.804834][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.817751][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.827265][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.837175][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.848361][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 877.856669][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.672540][ T938] usb 5-1: USB disconnect, device number 16 [ 879.398876][ T7171] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 879.566546][ T7171] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 879.596386][ T7171] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 879.625904][ T7171] usb 2-1: config 9 has no interface number 0 [ 879.646127][ T7171] usb 2-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 879.676705][ T7171] usb 2-1: config 9 interface 1 has no altsetting 0 [ 879.703335][ T7171] usb 2-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 879.744526][ T7171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.762825][ T7171] usb 2-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 879.855584][ T7171] usb 2-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 879.888874][ T7171] usb 2-1: SerialNumber: Ⰹ [ 880.060471][ T5243] Bluetooth: hci3: command tx timeout [ 881.616204][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.676588][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.720711][ T6816] bond0 (unregistering): Released all slaves [ 881.943786][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.964643][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.988316][ T6816] bond0 (unregistering): Released all slaves [ 882.110643][ T5243] Bluetooth: hci3: command tx timeout [ 882.124153][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.446232][ T9495] veth0_vlan: entered promiscuous mode [ 883.608177][ T9495] veth1_vlan: entered promiscuous mode [ 883.792684][ T9764] program syz.4.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 883.803126][ T9764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 884.747909][ T5243] Bluetooth: hci3: command tx timeout [ 884.933510][ T9495] veth0_macvtap: entered promiscuous mode [ 884.991389][ T7171] ftdi_sio 2-1:9.1: FTDI USB Serial Device converter detected [ 885.001449][ T7171] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 885.035967][ T9495] veth1_macvtap: entered promiscuous mode [ 885.514855][ T9719] chnl_net:caif_netlink_parms(): no params data found [ 885.648329][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.678385][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.689175][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.700168][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.740803][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.758966][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.888818][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.914222][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.934570][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.959372][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.015719][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.050233][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.095625][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.392307][ T6816] hsr_slave_0: left promiscuous mode [ 886.415523][ T6816] hsr_slave_1: left promiscuous mode [ 886.437108][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.524738][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.840129][ T5243] Bluetooth: hci3: command tx timeout [ 887.043169][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.051476][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.073419][ T6816] hsr_slave_0: left promiscuous mode [ 887.125328][ T6816] hsr_slave_1: left promiscuous mode [ 887.141925][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.345632][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.369545][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.397176][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.213150][ T9724] ALSA: mixer_oss: invalid OSS volume '' [ 888.226654][ T6816] veth1_macvtap: left promiscuous mode [ 888.232512][ T6816] veth0_macvtap: left promiscuous mode [ 888.249679][ T1183] usb 2-1: USB disconnect, device number 11 [ 888.250426][ T6816] veth1_vlan: left promiscuous mode [ 888.257029][ T1183] ftdi_sio 2-1:9.1: device disconnected [ 888.280259][ T6816] veth0_vlan: left promiscuous mode [ 889.099028][ T6816] veth1_macvtap: left promiscuous mode [ 889.104621][ T6816] veth0_macvtap: left promiscuous mode [ 889.107135][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.121336][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.128896][ T6816] veth1_vlan: left promiscuous mode [ 889.130746][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.134261][ T6816] veth0_vlan: left promiscuous mode [ 889.143143][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.158035][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 889.165654][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.858828][ T1183] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 891.054972][ T1183] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 891.072833][ T1183] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 891.092623][ T1183] usb 5-1: config 9 has no interface number 0 [ 891.105649][ T1183] usb 5-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 891.119124][ T1183] usb 5-1: config 9 interface 1 has no altsetting 0 [ 891.141393][ T1183] usb 5-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 891.150767][ T1183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.160974][ T1183] usb 5-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 891.196987][ T1183] usb 5-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 891.208962][ T1183] usb 5-1: SerialNumber: Ⰹ [ 891.235947][ T5230] Bluetooth: hci5: command tx timeout [ 891.334218][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 891.383686][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 892.427586][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 892.481426][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 893.169374][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.197060][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.210276][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.221023][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.232817][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.244167][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.254150][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.272403][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.320144][ T5230] Bluetooth: hci5: command tx timeout [ 893.326195][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.350349][ T1183] ftdi_sio 5-1:9.1: FTDI USB Serial Device converter detected [ 893.358526][ T1183] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 893.360434][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.373250][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.393041][ T9719] bridge_slave_0: entered allmulticast mode [ 893.394711][ T1183] usb 5-1: USB disconnect, device number 17 [ 893.418945][ T9719] bridge_slave_0: entered promiscuous mode [ 893.423057][ T1183] ftdi_sio 5-1:9.1: device disconnected [ 893.432549][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.459578][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.480039][ T9719] bridge_slave_1: entered allmulticast mode [ 893.487407][ T9719] bridge_slave_1: entered promiscuous mode [ 893.722881][ T9495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.731824][ T9495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.740676][ T9495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.750303][ T9495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.979405][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.989051][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.999282][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 895.021888][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 895.029762][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 895.030478][ T9719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.037183][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 895.120956][ T9719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.392557][ T5243] Bluetooth: hci5: command tx timeout [ 895.625053][ T9719] team0: Port device team_slave_0 added [ 895.648003][ T9719] team0: Port device team_slave_1 added [ 896.044592][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.051996][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.083520][ T9719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.165492][ T6816] IPVS: stop unused estimator thread 0... [ 896.166591][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.186756][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.198635][ T6816] IPVS: stop unused estimator thread 0... [ 896.222231][ T9719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.256913][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.280923][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.392069][ T6816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.418933][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 896.447806][ T9719] hsr_slave_0: entered promiscuous mode [ 896.460154][ T9719] hsr_slave_1: entered promiscuous mode [ 896.467839][ T9719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.476548][ T9719] Cannot create hsr debugfs directory [ 896.485218][ T2532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.495993][ T2532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.548430][ T6816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.609335][ T46] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 896.665259][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 896.692840][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.761853][ T6816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.798372][ T9784] chnl_net:caif_netlink_parms(): no params data found [ 896.861790][ T6816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.902118][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 896.959545][ T1183] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 896.972676][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.002479][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.131491][ T1183] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 897.152428][ T1183] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 897.161824][ T5243] Bluetooth: hci0: command tx timeout [ 897.177626][ T1183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.211440][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.248911][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.267049][ T9784] bridge_slave_0: entered allmulticast mode [ 897.285609][ T9784] bridge_slave_0: entered promiscuous mode [ 897.358323][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.371284][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.474194][ T5243] Bluetooth: hci5: command tx timeout [ 897.514430][ T9784] bridge_slave_1: entered allmulticast mode [ 897.686723][ T9784] bridge_slave_1: entered promiscuous mode [ 897.881234][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.020261][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.173011][ T9804] bridge_slave_0: entered allmulticast mode [ 898.190497][ T9804] bridge_slave_0: entered promiscuous mode [ 898.199712][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.206864][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.210851][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.224801][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.233158][ T9804] bridge_slave_1: entered allmulticast mode [ 898.246489][ T9804] bridge_slave_1: entered promiscuous mode [ 898.495915][ T6816] bridge_slave_1: left allmulticast mode [ 898.529664][ T6816] bridge_slave_1: left promiscuous mode [ 898.537018][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.546521][ T6816] bridge_slave_0: left allmulticast mode [ 898.552767][ T6816] bridge_slave_0: left promiscuous mode [ 898.558575][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.363661][ T5243] Bluetooth: hci0: command tx timeout [ 899.434929][ T1183] usb 5-1: USB disconnect, device number 18 [ 900.035686][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.050104][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.064570][ T6816] bond0 (unregistering): Released all slaves [ 900.129057][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.237561][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.254568][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.316941][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.450584][ T7171] usb 3-1: USB disconnect, device number 12 [ 900.968571][ T9804] team0: Port device team_slave_0 added [ 900.982560][ T9804] team0: Port device team_slave_1 added [ 901.223880][ T9784] team0: Port device team_slave_0 added [ 901.450719][ T5243] Bluetooth: hci0: command tx timeout [ 901.530721][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.558323][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.635614][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.701572][ T9784] team0: Port device team_slave_1 added [ 901.733291][ T6816] hsr_slave_0: left promiscuous mode [ 901.754668][ T6816] hsr_slave_1: left promiscuous mode [ 901.854450][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.879238][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.900628][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.913076][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.219874][ T6816] veth1_macvtap: left promiscuous mode [ 902.225512][ T6816] veth0_macvtap: left promiscuous mode [ 902.233452][ T6816] veth1_vlan: left promiscuous mode [ 902.244896][ T6816] veth0_vlan: left promiscuous mode [ 903.468958][ T5243] Bluetooth: hci0: command tx timeout [ 904.158360][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 904.365922][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 906.255903][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.264786][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.290736][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.303521][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.593513][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.608799][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.662838][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.705373][ T9804] hsr_slave_0: entered promiscuous mode [ 906.743871][ T9804] hsr_slave_1: entered promiscuous mode [ 907.810480][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.817877][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.843852][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.877147][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.324439][ T9784] hsr_slave_0: entered promiscuous mode [ 908.331798][ T5243] Bluetooth: hci2: command 0x0406 tx timeout [ 908.416039][ T9784] hsr_slave_1: entered promiscuous mode [ 908.460534][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.471151][ T9784] Cannot create hsr debugfs directory [ 908.882359][ T9719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 908.936439][ T9719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 908.981218][ T9719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 909.012320][ T9719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.459683][ T9804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.740854][ T7171] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 909.794256][ T9804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.947793][ T7171] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 909.961679][ T9804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.970429][ T7171] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 910.009091][ T7171] usb 3-1: config 9 has no interface number 0 [ 910.015278][ T7171] usb 3-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 910.032306][ T7171] usb 3-1: config 9 interface 1 has no altsetting 0 [ 910.610834][ T7171] usb 3-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 910.627762][ T7171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.649589][ T7171] usb 3-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 910.683065][ T7171] usb 3-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 910.697094][ T9804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.717559][ T7171] usb 3-1: SerialNumber: Ⰹ [ 910.743954][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.883462][ T9719] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.896858][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.904061][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.062621][ T9900] program syz.4.675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 911.072543][ T9900] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 911.965622][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.972843][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.520697][ T9784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.679443][ T9804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.858006][ T9804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.912462][ T7171] ftdi_sio 3-1:9.1: FTDI USB Serial Device converter detected [ 912.920812][ T7171] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 912.936393][ T7171] usb 3-1: USB disconnect, device number 13 [ 912.950312][ T7171] ftdi_sio 3-1:9.1: device disconnected [ 912.987837][ T9784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.054199][ T9804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 913.178650][ T9784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.217478][ T9804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 913.333539][ T9784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.386081][ T9719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.481884][ T7171] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 913.564874][ T9719] veth0_vlan: entered promiscuous mode [ 913.638017][ T9719] veth1_vlan: entered promiscuous mode [ 913.659999][ T7171] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 913.700494][ T7171] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 913.709937][ T7171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.734394][ T9784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 913.771517][ T9784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 913.793071][ T9784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 913.824706][ T9784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.906590][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.967684][ T9719] veth0_macvtap: entered promiscuous mode [ 913.992872][ T9719] veth1_macvtap: entered promiscuous mode [ 914.040126][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.056237][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.083238][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.122901][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.135635][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.339184][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.351042][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.369339][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.385746][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.398573][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.421092][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.492361][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.011345][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.018555][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.153507][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.178697][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.201629][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.212617][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.223562][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.234460][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.244488][ T9719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.255875][ T9719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.274548][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.365885][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.373052][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.441269][ T9719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.469061][ T9719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.477938][ T9719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.487412][ T9719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.596598][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.745836][ T9784] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.826817][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.834005][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.912247][ T5396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.947123][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.954285][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.960013][ T5396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.134831][ T6816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.176915][ T7171] usb 3-1: USB disconnect, device number 14 [ 916.273839][ T6816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.451673][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.986056][ T9804] veth0_vlan: entered promiscuous mode [ 917.072932][ T9804] veth1_vlan: entered promiscuous mode [ 917.196714][ T9804] veth0_macvtap: entered promiscuous mode [ 917.259135][ T9804] veth1_macvtap: entered promiscuous mode [ 917.287998][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.298498][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.328475][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.345351][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.366435][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.428271][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.448313][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.468515][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.603979][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.515446][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.838174][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.867563][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.901312][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.912243][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.922584][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.933380][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.943875][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.955151][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.965452][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.976135][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.986251][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.996947][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.020287][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.043876][ T9804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.052893][ T9804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.061733][ T9804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.071010][ T9804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.416707][ T9784] veth0_vlan: entered promiscuous mode [ 919.510816][ T5419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.510845][ T5419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.560160][ T9784] veth1_vlan: entered promiscuous mode [ 919.687656][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.699251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.817800][ T9784] veth0_macvtap: entered promiscuous mode [ 919.890658][ T9784] veth1_macvtap: entered promiscuous mode [ 919.908779][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 920.144689][ T46] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 920.498763][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.556243][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.582362][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 920.598796][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.617085][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.707383][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.743152][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.772041][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.794629][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.808688][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.818554][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.858443][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.868564][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.918814][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.950830][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.960457][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.992523][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.025359][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.043584][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.086634][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.103391][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.121144][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.391742][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.639339][ T9969] netlink: 'syz.0.685': attribute type 3 has an invalid length. [ 921.795257][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.823580][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.989366][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.038847][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.088872][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.122173][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.129029][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.133239][ T9784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.159153][ T9784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.167975][ T9784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.178869][ T9784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.496111][ T5419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.612678][ T5419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.491971][ T5377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.583294][ T5377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.871087][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 923.881298][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 923.890180][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 923.900174][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 923.909224][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 923.921814][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.052436][ T5278] usb 3-1: USB disconnect, device number 15 [ 925.586105][ T9983] chnl_net:caif_netlink_parms(): no params data found [ 926.579573][ T5307] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 926.616684][ T5243] Bluetooth: hci1: command tx timeout [ 927.670707][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.687192][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.696733][ T9983] bridge_slave_0: entered allmulticast mode [ 927.712043][ T9983] bridge_slave_0: entered promiscuous mode [ 927.729373][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.757634][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.779120][ T9983] bridge_slave_1: entered allmulticast mode [ 927.808219][ T9983] bridge_slave_1: entered promiscuous mode [ 927.849434][ T5278] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 927.892439][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.924820][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.981607][ T9983] team0: Port device team_slave_0 added [ 927.990803][ T9983] team0: Port device team_slave_1 added [ 928.029568][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.036715][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.065747][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.065962][ T5278] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 928.090518][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.098953][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.129453][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.133441][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 928.157595][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.220418][ T9983] hsr_slave_0: entered promiscuous mode [ 928.228518][ T9983] hsr_slave_1: entered promiscuous mode [ 928.244090][ T9983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.252476][ T9983] Cannot create hsr debugfs directory [ 928.420483][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.434085][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.536179][ T9983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.678870][ T5243] Bluetooth: hci1: command tx timeout [ 929.514783][ T9983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.626403][ T9983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.704963][ T9983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.957142][ T9983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.970402][ T9983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 929.982204][ T9983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 929.993648][ T9983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 930.150091][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.180363][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.196812][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.204071][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.233323][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.240567][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.653982][ T7171] usb 3-1: USB disconnect, device number 16 [ 930.749124][ T5243] Bluetooth: hci1: command tx timeout [ 930.792440][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.963565][T10031] syz.2.695: attempt to access beyond end of device [ 930.963565][T10031] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 930.976744][T10031] XFS (nbd2): SB validate failed with error -5. [ 931.430535][ T9983] veth0_vlan: entered promiscuous mode [ 931.476486][ T9983] veth1_vlan: entered promiscuous mode [ 931.565295][ T9983] veth0_macvtap: entered promiscuous mode [ 931.598418][ T9983] veth1_macvtap: entered promiscuous mode [ 931.651751][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.678922][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.698907][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.719249][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.742608][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.758791][ T5307] usb 1-1: device descriptor read/64, error -110 [ 931.766867][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.788465][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.801403][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.812287][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.823476][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.834024][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.853640][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.892125][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.933200][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.957604][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.998959][ T5307] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 932.009515][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.022300][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.043033][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.063394][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.085746][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.105709][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.119670][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.138728][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.138911][ T5307] usb 1-1: device descriptor read/64, error -32 [ 932.166509][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.181393][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.214118][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.238717][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.258760][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.271379][ T5307] usb usb1-port1: attempt power cycle [ 932.283345][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.305532][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.381588][ T9983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.398860][ T9983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.407657][ T9983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.472688][ T9983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.619250][ T5307] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 932.662705][ T5307] usb 1-1: device descriptor read/8, error -32 [ 932.833475][ T5243] Bluetooth: hci1: command tx timeout [ 932.891090][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.899076][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.908886][ T5307] raw-gadget.1 gadget.0: failed to queue resume event [ 932.949764][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 932.965068][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 932.975703][ T5307] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 932.984151][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 932.995811][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 933.003760][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 933.011245][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 933.018538][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 933.026010][ T5307] usb 1-1: device descriptor read/8, error -32 [ 933.060708][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.103792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.141643][ T5307] raw-gadget.1 gadget.0: failed to queue suspend event [ 933.158949][ T5307] usb usb1-port1: unable to enumerate USB device [ 933.677364][T10047] chnl_net:caif_netlink_parms(): no params data found [ 934.328758][ T5307] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 934.369346][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.376447][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.439074][T10047] bridge_slave_0: entered allmulticast mode [ 934.446434][T10047] bridge_slave_0: entered promiscuous mode [ 934.491828][ T5307] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 934.512913][ T5307] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 934.526898][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.228365][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.338905][ T5243] Bluetooth: hci6: command tx timeout [ 935.708413][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.717009][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.730331][T10047] bridge_slave_1: entered allmulticast mode [ 936.433909][T10047] bridge_slave_1: entered promiscuous mode [ 937.359315][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.366559][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.383169][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.397504][ T5230] Bluetooth: hci6: command tx timeout [ 937.851584][ T9047] usb 5-1: USB disconnect, device number 19 [ 938.004315][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.014478][ T9974] raw-gadget.1 gadget.0: failed to queue disconnect event [ 938.051386][ T6816] bridge_slave_1: left allmulticast mode [ 938.057075][ T6816] bridge_slave_1: left promiscuous mode [ 938.076163][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.131971][ T6816] bridge_slave_0: left allmulticast mode [ 938.144840][ T6816] bridge_slave_0: left promiscuous mode [ 938.164939][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.010847][T10124] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd2": -EINTR [ 940.096465][ T5230] Bluetooth: hci6: command tx timeout [ 941.230932][ T5307] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 941.337453][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.351239][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.363426][ T6816] bond0 (unregistering): Released all slaves [ 941.398987][ T5307] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 941.422338][ T5307] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 941.442375][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.501648][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.197589][ T5230] Bluetooth: hci6: command tx timeout [ 942.246093][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.297145][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.328997][T10047] team0: Port device team_slave_0 added [ 942.393468][T10047] team0: Port device team_slave_1 added [ 942.491105][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.513318][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.660994][T10150] xt_policy: too many policy elements [ 943.221999][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.262917][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.323717][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.353978][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.126008][ T6816] hsr_slave_0: left promiscuous mode [ 944.143890][ T6816] hsr_slave_1: left promiscuous mode [ 944.160420][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.181879][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.201593][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.222607][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.265540][ T5306] usb 5-1: USB disconnect, device number 20 [ 944.889846][ T6816] veth1_macvtap: left promiscuous mode [ 944.902308][ T6816] veth0_macvtap: left promiscuous mode [ 944.915280][ T6816] veth1_vlan: left promiscuous mode [ 944.926395][ T6816] veth0_vlan: left promiscuous mode [ 945.233240][T10170] syz.4.724: attempt to access beyond end of device [ 945.233240][T10170] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 945.256990][T10170] syz.4.724: attempt to access beyond end of device [ 945.256990][T10170] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 945.273621][T10170] Mount JFS Failure: -5 [ 945.307514][T10170] jfs_mount failed w/return code = -5 [ 946.684156][ T9047] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 946.907103][ T9047] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 946.985684][ T9047] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 947.037586][ T9047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.065802][T10184] syz.2.728: attempt to access beyond end of device [ 947.065802][T10184] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 947.080071][T10184] XFS (nbd2): SB validate failed with error -5. [ 947.723885][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.755169][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.813631][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 948.113283][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 949.633840][T10047] hsr_slave_0: entered promiscuous mode [ 949.662241][T10047] hsr_slave_1: entered promiscuous mode [ 949.682434][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.698471][T10047] Cannot create hsr debugfs directory [ 949.888904][T10198] xt_policy: too many policy elements [ 949.905282][ T5306] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 950.590275][ T5307] usb 5-1: USB disconnect, device number 21 [ 951.894247][ T5306] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 951.915409][ T5306] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 951.924565][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.078016][T10047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.387596][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.608176][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.913857][T10047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.044805][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.055331][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.067108][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.078398][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.089487][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 954.098932][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.230358][T10047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.480028][ T5307] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 955.083098][ T7171] usb 2-1: USB disconnect, device number 12 [ 955.101973][ T5307] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 955.241983][ T5307] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 955.251456][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.357116][T10047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.190383][ T5243] Bluetooth: hci3: command tx timeout [ 956.300412][T10232] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd1": -EINTR [ 956.332661][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.351531][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.634744][ T6816] bridge_slave_1: left allmulticast mode [ 957.641817][ T6816] bridge_slave_1: left promiscuous mode [ 957.649647][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.669414][ T6816] bridge_slave_0: left allmulticast mode [ 957.677275][ T6816] bridge_slave_0: left promiscuous mode [ 957.687595][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.274783][ T5243] Bluetooth: hci3: command tx timeout [ 959.037510][T10131] usb 3-1: USB disconnect, device number 17 [ 960.352122][ T5243] Bluetooth: hci3: command tx timeout [ 960.575364][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.629192][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.682887][ T6816] bond0 (unregistering): Released all slaves [ 960.809360][T10220] chnl_net:caif_netlink_parms(): no params data found [ 961.012252][T10047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 962.104474][T10047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.181160][T10047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 962.291415][T10047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.429706][ T5243] Bluetooth: hci3: command tx timeout [ 963.828059][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.837822][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.845533][T10220] bridge_slave_0: entered allmulticast mode [ 963.854086][T10220] bridge_slave_0: entered promiscuous mode [ 963.866494][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.874645][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.882833][T10220] bridge_slave_1: entered allmulticast mode [ 963.890334][T10220] bridge_slave_1: entered promiscuous mode [ 963.956093][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.977759][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.048911][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 964.123339][ T6816] hsr_slave_0: left promiscuous mode [ 964.133648][ T6816] hsr_slave_1: left promiscuous mode [ 964.150915][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.166992][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.189464][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.204839][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.239941][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 964.252442][ T9] usb 3-1: config 254 has an invalid interface number: 167 but max is 0 [ 964.268848][ T9] usb 3-1: config 254 has no interface number 0 [ 964.275495][ T6816] veth1_macvtap: left promiscuous mode [ 964.290923][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 964.294796][ T6816] veth0_macvtap: left promiscuous mode [ 964.304674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.316983][ T6816] veth1_vlan: left promiscuous mode [ 964.325632][ T6816] veth0_vlan: left promiscuous mode [ 964.327925][ T9] usb 3-1: Product: syz [ 964.335834][ T9] usb 3-1: Manufacturer: syz [ 964.344301][ T9] usb 3-1: SerialNumber: syz [ 964.550778][ T5278] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 964.710788][ T5278] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 964.756690][ T5278] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 964.770421][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.783552][ T9] mxuport 3-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-32) [ 964.783695][T10302] syz.2.750: attempt to access beyond end of device [ 964.783695][T10302] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 964.802931][ T9] mxuport 3-1:254.167: probe with driver mxuport failed with error -5 [ 964.809522][T10302] exFAT-fs (nbd2): unable to read boot sector [ 964.820993][T10302] exFAT-fs (nbd2): failed to read boot sector [ 964.827119][T10302] exFAT-fs (nbd2): failed to recognize exfat type [ 964.835482][ T5243] Bluetooth: hci7: command 0x0406 tx timeout [ 964.899859][ T9] usb 3-1: USB disconnect, device number 18 [ 965.064894][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.080553][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.275696][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 965.385245][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 967.349339][ T9047] usb 5-1: USB disconnect, device number 22 [ 968.125221][ T5278] IPVS: starting estimator thread 0... [ 968.238851][T10326] IPVS: using max 15 ests per chain, 36000 per kthread [ 968.323252][T10220] team0: Port device team_slave_0 added [ 968.339848][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 968.400491][T10220] team0: Port device team_slave_1 added [ 968.644058][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.694727][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.751790][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.757638][ T9] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 968.790432][ T9] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 968.802572][ T9] usb 5-1: config 9 has no interface number 0 [ 968.810231][ T9] usb 5-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 968.815945][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.823703][ T9] usb 5-1: config 9 interface 1 has no altsetting 0 [ 968.854755][ T9] usb 5-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 968.863960][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.878773][ T9] usb 5-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 968.904027][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.959631][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.966827][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.004147][ T9] usb 5-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 969.031747][ T9] usb 5-1: SerialNumber: Ⰹ [ 969.047063][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.132481][ T2532] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.139673][ T2532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.246225][ T2532] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.253401][ T2532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.363221][T10220] hsr_slave_0: entered promiscuous mode [ 969.381188][T10220] hsr_slave_1: entered promiscuous mode [ 969.392063][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.412932][T10220] Cannot create hsr debugfs directory [ 969.719045][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 969.902721][T10220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.147949][T10220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.222429][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.309536][T10220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.483460][ T9] ftdi_sio 5-1:9.1: FTDI USB Serial Device converter detected [ 971.509935][ T9] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 971.521297][ T9] usb 5-1: USB disconnect, device number 23 [ 971.531349][ T9] ftdi_sio 5-1:9.1: device disconnected [ 971.583421][T10220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.644881][T10047] veth0_vlan: entered promiscuous mode [ 971.664454][T10047] veth1_vlan: entered promiscuous mode [ 971.736732][T10047] veth0_macvtap: entered promiscuous mode [ 971.787876][T10047] veth1_macvtap: entered promiscuous mode [ 971.809561][ T7171] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 971.911939][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.940186][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.968410][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.980309][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.990983][ T7171] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 971.999473][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.010494][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.019599][ T7171] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 972.029948][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.043403][ T7171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.044144][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.061640][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.094058][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.107021][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.118548][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.134665][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.152834][T10220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 972.170541][T10220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 972.191321][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.202406][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.212751][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.223674][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.233730][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.244388][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.254602][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.265311][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.276061][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.297702][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.307768][T10047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.318547][T10047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.330470][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.339066][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.350166][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.366607][T10220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 972.384338][T10047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.397328][T10047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.421674][T10047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.442780][T10047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.468062][T10220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 973.585643][ T9215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.612925][ T9215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.714492][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.747507][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.879644][ T5278] usb 3-1: USB disconnect, device number 19 [ 975.125451][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.150396][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.166693][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.173873][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.282650][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.289869][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.213100][T10220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.480407][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 977.492620][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 977.510993][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 977.522140][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 977.530807][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 977.538176][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 977.538772][ T7171] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 977.783256][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.970150][ T7171] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 977.994976][ T7171] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 978.004350][ T7171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.702597][T10220] veth0_vlan: entered promiscuous mode [ 978.822465][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.842021][T10220] veth1_vlan: entered promiscuous mode [ 978.870544][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.516732][T10377] chnl_net:caif_netlink_parms(): no params data found [ 979.750456][ T5243] Bluetooth: hci8: command tx timeout [ 980.645562][T10220] veth0_macvtap: entered promiscuous mode [ 980.764057][ T5278] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 980.860228][T10220] veth1_macvtap: entered promiscuous mode [ 980.913052][T10377] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.921405][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.939604][T10377] bridge_slave_0: entered allmulticast mode [ 980.956813][T10377] bridge_slave_0: entered promiscuous mode [ 981.003403][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.019430][ T5278] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 981.038310][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 981.051140][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.059327][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.075208][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.101391][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.133895][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.158514][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.173404][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.184552][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.195798][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.209202][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.220584][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.232341][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.272680][ T5278] usb 1-1: USB disconnect, device number 26 [ 981.280290][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.294334][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.401185][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.405996][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.449088][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.456335][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.463994][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.486492][T10377] bridge_slave_1: entered allmulticast mode [ 981.494035][T10377] bridge_slave_1: entered promiscuous mode [ 981.769714][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.780634][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.790717][ T5243] Bluetooth: hci8: command tx timeout [ 981.796264][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.807197][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.819365][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.832988][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.849366][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.867884][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.879053][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.969143][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.039776][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.050660][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.068131][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.079644][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.140291][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.930793][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.963211][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.994793][T10220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.009936][T10220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.019342][T10220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.028348][T10220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.038779][ T5307] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 983.102730][T10377] team0: Port device team_slave_0 added [ 983.115817][T10377] team0: Port device team_slave_1 added [ 983.159438][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.166448][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.197242][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.200328][ T5307] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 983.211789][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.223571][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.253627][ T5307] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 983.288043][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.307247][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.088905][ T5243] Bluetooth: hci8: command tx timeout [ 984.105679][ T9399] usb 3-1: USB disconnect, device number 20 [ 984.172123][T10419] kvm: pic: non byte write [ 984.184207][T10377] hsr_slave_0: entered promiscuous mode [ 984.249156][T10377] hsr_slave_1: entered promiscuous mode [ 984.265919][T10377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.279096][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.301344][T10377] Cannot create hsr debugfs directory [ 984.330832][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.300695][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.321584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.430308][ T5398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.455779][ T5243] Bluetooth: hci8: command tx timeout [ 986.479423][ T5398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.745365][ T7171] usb 1-1: USB disconnect, device number 27 [ 989.199742][T10377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.935230][T10377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.038957][ T9399] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 991.612151][T10377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.472545][ T9399] usb 4-1: device not accepting address 21, error -71 [ 992.892470][T10377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.943387][ T9399] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 993.178814][ T9399] usb 4-1: Using ep0 maxpacket: 8 [ 993.460687][ T9399] usb 4-1: config 254 has an invalid interface number: 167 but max is 0 [ 993.496057][ T9399] usb 4-1: config 254 has no interface number 0 [ 994.161970][ T9399] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 994.171463][ T9399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.184802][ T9399] usb 4-1: Product: syz [ 994.254930][ T9399] usb 4-1: Manufacturer: syz [ 994.278307][ T9399] usb 4-1: SerialNumber: syz [ 994.314569][T10377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.349986][T10377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 994.387146][T10377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 994.414913][T10377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 994.509768][ T7171] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 994.533625][ T9399] mxuport 4-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 994.546225][ T9399] mxuport 4-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 994.557192][ T9399] mxuport 4-1:254.167: probe with driver mxuport failed with error -71 [ 994.590612][ T9399] usb 4-1: USB disconnect, device number 22 [ 994.660284][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.680680][ T7171] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 994.691937][ T7171] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 994.711562][ T7171] usb 5-1: config 9 has no interface number 0 [ 994.758860][ T5306] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 994.789213][ T7171] usb 5-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 994.807551][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.832082][ T7171] usb 5-1: config 9 interface 1 has no altsetting 0 [ 994.850866][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.858033][ T5398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.867000][ T7171] usb 5-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 994.879670][ T7171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.897031][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.904450][ T5398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.913197][ T7171] usb 5-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 994.962289][ T5306] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 994.982315][ T5306] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 995.000796][ T7171] usb 5-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 995.487468][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.506864][ T7171] usb 5-1: SerialNumber: Ⰹ [ 995.584420][T10377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.768564][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.800228][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.453307][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.651172][T10377] veth0_vlan: entered promiscuous mode [ 997.722152][T10377] veth1_vlan: entered promiscuous mode [ 997.795934][T10377] veth0_macvtap: entered promiscuous mode [ 997.807041][T10377] veth1_macvtap: entered promiscuous mode [ 997.845672][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.866292][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.882488][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.966510][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.007917][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.051702][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.152385][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.227080][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.240647][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.335660][ T9] usb 3-1: USB disconnect, device number 21 [ 998.346766][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.361641][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.368068][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.418288][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.487263][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.498394][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.522390][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.535874][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.555105][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.169928][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.847805][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.886698][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.896891][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.907436][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.917371][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.928031][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.939266][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.951055][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.960983][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.971644][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.981560][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.992074][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.046857][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.057563][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.067662][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.078236][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.090704][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.189612][T10377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.198498][T10377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.277005][T10377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.327684][T10377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.563480][T10517] syz.0.791: attempt to access beyond end of device [ 1000.563480][T10517] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1000.576881][T10517] XFS (nbd0): SB validate failed with error -5. [ 1000.615142][ T7171] ftdi_sio 5-1:9.1: FTDI USB Serial Device converter detected [ 1000.641844][ T7171] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 1000.784878][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.852268][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.991495][ T9215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.014590][ T9215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.993932][ T9047] usb 5-1: USB disconnect, device number 24 [ 1002.001313][ T9047] ftdi_sio 5-1:9.1: device disconnected [ 1004.338858][ T7171] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1004.509990][ T7171] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1004.580660][ T7171] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1005.095986][ T7171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.108311][T10131] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1005.283884][T10131] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1005.319283][T10574] syz.3.805: attempt to access beyond end of device [ 1005.319283][T10574] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1005.332642][T10574] XFS (nbd3): SB validate failed with error -5. [ 1005.360189][T10131] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1005.389158][T10131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.192723][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.245616][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.549508][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1008.152138][ T7171] usb 3-1: USB disconnect, device number 22 [ 1008.258388][ T46] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 1008.275868][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1008.285129][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.081695][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.124748][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.280177][ T5306] usb 2-1: USB disconnect, device number 13 [ 1011.384992][ T46] usb 5-1: USB disconnect, device number 25 [ 1011.688753][ T5307] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1012.638821][T10636] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd4": -EINTR [ 1012.644289][ T5307] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1012.789693][ T5307] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1012.808334][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.227716][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.320817][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.322725][ T5307] usb 2-1: USB disconnect, device number 14 [ 1016.512819][ T9503] Bluetooth: hci5: command 0x0406 tx timeout [ 1016.739071][ T7171] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1016.748580][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1017.511739][ T7171] usb 1-1: device descriptor read/64, error -32 [ 1018.158886][ T7171] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1018.400749][ T7171] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1018.499210][ T7171] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1018.545693][ T7171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.818780][ T5307] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1018.863939][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.898893][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.992165][ T5307] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1019.022223][ T5307] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1019.041987][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.217695][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.233883][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.393599][ T9503] Bluetooth: hci0: command 0x0406 tx timeout [ 1021.466921][ T5307] usb 1-1: USB disconnect, device number 29 [ 1022.195854][T10694] xt_policy: too many policy elements [ 1022.915204][ T5307] usb 3-1: USB disconnect, device number 23 [ 1023.373249][ T9503] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1023.383059][ T9503] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1023.393022][ T9503] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1023.401026][ T9503] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1023.408538][ T9503] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1023.416236][ T9503] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1023.478728][ T5307] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1023.582117][ T5278] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1023.678727][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 1023.693721][ T5307] usb 3-1: config 254 has an invalid interface number: 167 but max is 0 [ 1023.705470][ T5307] usb 3-1: config 254 has no interface number 0 [ 1023.714400][ T5307] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1023.723506][ T5277] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1023.731294][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.744803][ T5307] usb 3-1: Product: syz [ 1023.749131][ T5307] usb 3-1: Manufacturer: syz [ 1023.753772][ T5307] usb 3-1: SerialNumber: syz [ 1023.766970][ T5278] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1023.817885][ T5278] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1023.827156][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.882473][ T5277] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1024.142533][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1024.182126][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.189348][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.240427][ T5307] mxuport 3-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-32) [ 1024.242472][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.249290][ T5307] mxuport 3-1:254.167: probe with driver mxuport failed with error -5 [ 1024.274602][T10698] chnl_net:caif_netlink_parms(): no params data found [ 1024.401668][T10696] syz.2.834: attempt to access beyond end of device [ 1024.401668][T10696] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1024.442120][ T5377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.453494][T10696] exFAT-fs (nbd2): unable to read boot sector [ 1024.483431][T10696] exFAT-fs (nbd2): failed to read boot sector [ 1024.499809][T10696] exFAT-fs (nbd2): failed to recognize exfat type [ 1024.630147][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.639830][ T5278] usb 3-1: USB disconnect, device number 24 [ 1024.657456][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.203478][ T5377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.470614][ T5243] Bluetooth: hci9: command tx timeout [ 1025.693446][ T5377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.798076][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.815136][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.034369][T10698] bridge_slave_0: entered allmulticast mode [ 1026.159108][T10698] bridge_slave_0: entered promiscuous mode [ 1026.673056][ T5277] usb 2-1: USB disconnect, device number 15 [ 1026.698125][ T5377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.758284][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.969778][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.314903][T10698] bridge_slave_1: entered allmulticast mode [ 1027.398433][T10698] bridge_slave_1: entered promiscuous mode [ 1027.550404][ T5243] Bluetooth: hci9: command tx timeout [ 1027.712952][ T9399] usb 1-1: USB disconnect, device number 30 [ 1028.563433][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.656111][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.955853][ T5278] IPVS: starting estimator thread 0... [ 1029.016075][T10698] team0: Port device team_slave_0 added [ 1029.031871][T10698] team0: Port device team_slave_1 added [ 1029.108978][T10726] IPVS: using max 19 ests per chain, 45600 per kthread [ 1029.168262][ T9503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.180595][ T9503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.200161][ T9503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.217782][ T9503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.228416][ T9503] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1029.236429][ T9503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.297770][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.305065][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.338929][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.352676][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.360064][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.386998][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.449059][ T9399] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1029.474052][ T5377] bridge_slave_1: left allmulticast mode [ 1029.482746][ T5377] bridge_slave_1: left promiscuous mode [ 1029.500089][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.511539][ T5377] bridge_slave_0: left allmulticast mode [ 1029.517237][ T5377] bridge_slave_0: left promiscuous mode [ 1029.525661][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.610761][ T9399] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1029.660043][ T5243] Bluetooth: hci9: command tx timeout [ 1029.698429][ T9399] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1029.709521][ T9399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.994312][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.002901][ T5277] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1030.114903][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.338496][ T5277] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1030.380716][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1030.398835][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.009914][T10760] xt_policy: too many policy elements [ 1031.227502][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.251337][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.362123][ T5243] Bluetooth: hci3: command tx timeout [ 1031.723790][ T5243] Bluetooth: hci9: command tx timeout [ 1032.425384][ T9399] usb 3-1: USB disconnect, device number 25 [ 1032.558948][ T7171] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1032.602755][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.623790][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.635928][ T5377] bond0 (unregistering): Released all slaves [ 1032.664016][T10698] hsr_slave_0: entered promiscuous mode [ 1032.837900][ T7171] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1033.105706][T10768] syz.2.844: attempt to access beyond end of device [ 1033.105706][T10768] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1033.122190][T10768] XFS (nbd2): SB validate failed with error -5. [ 1033.244875][T10698] hsr_slave_1: entered promiscuous mode [ 1033.421664][ T5243] Bluetooth: hci3: command tx timeout [ 1033.506282][T10698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.521415][T10698] Cannot create hsr debugfs directory [ 1033.582763][ T9399] usb 2-1: USB disconnect, device number 16 [ 1033.685547][ T7171] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1033.694782][ T7171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.589886][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.692764][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.053815][ T5377] hsr_slave_0: left promiscuous mode [ 1035.065251][ T5377] hsr_slave_1: left promiscuous mode [ 1035.872822][ T5243] Bluetooth: hci3: command tx timeout [ 1035.908496][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.930673][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.941558][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.957888][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.998859][ T9047] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1036.006613][ T5377] veth1_macvtap: left promiscuous mode [ 1036.012763][ T5377] veth0_macvtap: left promiscuous mode [ 1036.018559][ T5377] veth1_vlan: left promiscuous mode [ 1036.024448][ T5377] veth0_vlan: left promiscuous mode [ 1036.179534][ T9047] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1036.227339][ T9047] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1036.244831][ T9047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.561896][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.589844][ T9399] usb 1-1: USB disconnect, device number 31 [ 1036.662210][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.998773][ T5243] Bluetooth: hci3: command tx timeout [ 1038.224172][T10805] xt_policy: too many policy elements [ 1039.101331][ T46] usb 2-1: USB disconnect, device number 17 [ 1040.486636][ T29] audit: type=1400 audit(1728375200.038:429): avc: denied { read } for pid=10813 comm="syz.2.854" dev="sockfs" ino=54790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1040.506015][T10816] syz.1.853: attempt to access beyond end of device [ 1040.506015][T10816] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1040.521262][T10816] XFS (nbd1): SB validate failed with error -5. [ 1040.577838][ T5377] team0 (unregistering): Port device team_slave_1 removed [ 1040.686327][ T5377] team0 (unregistering): Port device team_slave_0 removed [ 1040.889396][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1041.517209][ T46] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.532469][ T46] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 1041.558734][ T46] usb 3-1: config 9 has no interface number 0 [ 1041.578027][ T46] usb 3-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1041.611872][ T46] usb 3-1: config 9 interface 1 has no altsetting 0 [ 1041.632856][ T46] usb 3-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 1041.656634][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.666561][ T46] usb 3-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 1041.701305][ T46] usb 3-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘㪑嵏₽ᅼ곙ڵ檻騛芪ồ蓼 [ 1041.722784][ T46] usb 3-1: SerialNumber: Ⰹ [ 1042.169449][ T5278] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1042.558970][ T5278] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1043.390712][ T5278] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1043.408826][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.522109][T10813] ALSA: mixer_oss: invalid OSS volume '' [ 1043.579867][ T46] ftdi_sio 3-1:9.1: FTDI USB Serial Device converter detected [ 1043.640483][ T46] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 1043.738863][ T46] usb 3-1: USB disconnect, device number 26 [ 1043.745894][ T46] ftdi_sio 3-1:9.1: device disconnected [ 1043.768111][ T5278] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1043.984668][T10731] chnl_net:caif_netlink_parms(): no params data found [ 1044.117566][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.166314][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.177149][ T5278] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1044.238954][ T5278] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1044.312575][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.535590][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.543130][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.742133][T10731] bridge_slave_0: entered allmulticast mode [ 1045.526834][T10731] bridge_slave_0: entered promiscuous mode [ 1045.535482][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.542738][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.550020][T10731] bridge_slave_1: entered allmulticast mode [ 1045.562873][T10731] bridge_slave_1: entered promiscuous mode [ 1045.611010][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.636668][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.787338][T10731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.973384][T10871] xt_policy: too many policy elements [ 1046.570307][T10731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.663509][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.693921][ T46] usb 1-1: USB disconnect, device number 32 [ 1046.906284][T10731] team0: Port device team_slave_0 added [ 1046.926905][T10731] team0: Port device team_slave_1 added [ 1046.989562][ T30] INFO: task syz.3.650:9756 blocked for more than 143 seconds. [ 1046.997280][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1047.029338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1047.040887][ T30] task:syz.3.650 state:D stack:25824 pid:9756 tgid:9756 ppid:9496 flags:0x00004006 [ 1047.111982][ T30] Call Trace: [ 1047.115316][ T30] [ 1047.119323][ T30] __schedule+0xef5/0x5750 [ 1047.128500][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1047.245463][ T30] ? __pfx___schedule+0x10/0x10 [ 1047.438659][T10882] kvm: pic: non byte write [ 1047.448789][ T30] ? schedule+0x298/0x350 [ 1047.565111][ T30] ? __pfx_lock_release+0x10/0x10 [ 1047.689957][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1047.701096][ T30] ? lock_acquire+0x2f/0xb0 [ 1047.717019][ T30] ? schedule+0x1fd/0x350 [ 1047.744190][ T9399] usb 2-1: USB disconnect, device number 18 [ 1047.821906][ T30] schedule+0xe7/0x350 [ 1047.826035][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.853031][ T30] __mutex_lock+0x5b8/0x9c0 [ 1047.857622][ T30] ? hugetlb_wp+0x1b4a/0x3320 [ 1047.878807][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.883943][ T30] ? hugetlb_wp+0x1b4a/0x3320 [ 1047.901289][ T30] hugetlb_wp+0x1b4a/0x3320 [ 1047.906017][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1047.929211][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1047.934651][ T30] ? lock_acquire+0x2f/0xb0 [ 1047.949659][ T30] ? hugetlb_fault+0x1141/0x2fa0 [ 1047.971086][ T30] hugetlb_fault+0x2248/0x2fa0 [ 1047.975930][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1048.005283][ T30] ? find_vma+0xc0/0x140 [ 1048.009878][ T30] ? __pfx_find_vma+0x10/0x10 [ 1048.014722][ T30] handle_mm_fault+0x930/0xaa0 [ 1048.020536][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 1048.025695][ T30] exc_page_fault+0x5c/0xc0 [ 1048.030597][ T30] asm_exc_page_fault+0x26/0x30 [ 1048.038718][ T30] RIP: 0033:0x7fdf07e51629 [ 1048.058724][ T30] RSP: 002b:00007ffc0c79d750 EFLAGS: 00010246 [ 1048.065076][ T30] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffffff7fffff [ 1048.088736][ T30] RDX: 3344c41238411d4a RSI: 0000000020800000 RDI: 00005555579333c8 [ 1048.096755][ T30] RBP: 00007fdf08137a80 R08: 00007fdf07e00000 R09: 0000000000000008 [ 1048.128809][ T30] R10: 0000000000000000 R11: 0000000000000003 R12: 00000000000d82a4 [ 1048.136817][ T30] R13: 00007ffc0c79d850 R14: 0000000000000032 R15: fffffffffffffffe [ 1048.192525][ T30] [ 1048.195746][ T30] INFO: task syz.3.650:9758 blocked for more than 144 seconds. [ 1048.203621][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1048.238716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.247449][ T30] task:syz.3.650 state:D stack:27664 pid:9758 tgid:9756 ppid:9496 flags:0x00004006 [ 1048.258230][ T30] Call Trace: [ 1048.268709][ T30] [ 1048.273048][ T30] __schedule+0xef5/0x5750 [ 1048.277540][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1048.297328][ T30] ? __pfx___schedule+0x10/0x10 [ 1048.302606][ T30] ? schedule+0x298/0x350 [ 1048.308784][ T30] ? __pfx_lock_release+0x10/0x10 [ 1048.313895][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1048.325036][ T30] ? lock_acquire+0x2f/0xb0 [ 1048.330632][ T30] ? schedule+0x1fd/0x350 [ 1048.339603][ T30] schedule+0xe7/0x350 [ 1048.343765][ T30] io_schedule+0xbf/0x130 [ 1048.348163][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1048.366569][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1048.378796][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1048.384699][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1048.404839][ T30] ? __pfx___might_resched+0x10/0x10 [ 1048.418559][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1048.423680][ T30] ? __vma_reservation_common+0x270/0x740 [ 1048.438670][ T30] __filemap_get_folio+0x6a4/0xaf0 [ 1048.443860][ T30] ? huge_pte_alloc+0x22e/0x3a0 [ 1048.460017][ T30] hugetlb_fault+0x16ff/0x2fa0 [ 1048.464901][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1048.479391][ T30] ? find_vma+0xc0/0x140 [ 1048.483708][ T30] ? __pfx_find_vma+0x10/0x10 [ 1048.488436][ T30] ? rep_movs_alternative+0x33/0x70 [ 1048.494625][ T30] handle_mm_fault+0x930/0xaa0 [ 1048.499803][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 1048.504985][ T30] exc_page_fault+0x5c/0xc0 [ 1048.511894][ T30] asm_exc_page_fault+0x26/0x30 [ 1048.516829][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 1048.523149][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1048.543321][ T30] RSP: 0000:ffffc90004887c48 EFLAGS: 00050246 [ 1048.549822][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 1048.557839][ T30] RDX: fffff52000910f98 RSI: ffffc90004887cb8 RDI: 000000002002b790 [ 1048.566554][ T30] RBP: 000000002002b790 R08: 0000000000000000 R09: fffff52000910f97 [ 1048.575075][ T30] R10: ffffc90004887cbf R11: 0000000000000000 R12: ffffc90004887cb8 [ 1048.585227][ T30] R13: 000000002002b798 R14: 0000000000000000 R15: 0000000020019680 [ 1048.598020][ T30] _copy_to_user+0xac/0xc0 [ 1048.608733][ T30] msr_read+0x14f/0x250 [ 1048.612978][ T30] ? __pfx_msr_read+0x10/0x10 [ 1048.617726][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 1048.636234][ T30] ? security_file_permission+0x71/0x210 [ 1048.647222][ T30] ? __pfx_msr_read+0x10/0x10 [ 1048.652163][ T30] vfs_read+0x1ce/0xbd0 [ 1048.656399][ T30] ? __fget_files+0x23a/0x3f0 [ 1048.675315][ T30] ? __pfx_lock_release+0x10/0x10 [ 1048.688719][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1048.694009][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1048.708714][ T30] ? lock_acquire+0x2f/0xb0 [ 1048.713290][ T30] ? __fget_files+0x40/0x3f0 [ 1048.717957][ T30] ? __fget_files+0x244/0x3f0 [ 1048.735197][ T30] ksys_read+0x12f/0x260 [ 1048.739764][ T30] ? __pfx_ksys_read+0x10/0x10 [ 1048.744638][ T30] do_syscall_64+0xcd/0x250 [ 1048.762292][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.768271][ T30] RIP: 0033:0x7fdf07f7dff9 [ 1048.789619][ T30] RSP: 002b:00007fdf08d1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1048.798121][ T30] RAX: ffffffffffffffda RBX: 00007fdf08135f80 RCX: 00007fdf07f7dff9 [ 1048.818346][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000004 [ 1048.830116][ T30] RBP: 00007fdf07ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 1048.838158][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.848642][ T30] R13: 0000000000000000 R14: 00007fdf08135f80 R15: 00007ffc0c79d5e8 [ 1048.856700][ T30] [ 1048.872625][ T30] [ 1048.872625][ T30] Showing all locks held in the system: [ 1048.898657][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 1048.904028][ T30] 1 lock held by khungtaskd/30: [ 1048.931274][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 1048.948322][ T30] 3 locks held by kworker/u8:4/69: [ 1048.968889][ T30] 2 locks held by getty/4982: [ 1048.983581][ T30] #0: ffff8880335aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1048.995383][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 1049.005956][ T30] 3 locks held by kworker/u8:10/5384: [ 1049.011439][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1049.028735][ T30] #1: ffffc90003f6fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1049.039423][ T30] #2: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1049.048698][ T30] 2 locks held by syz.3.650/9756: [ 1049.053763][ T30] #0: ffff88807ed59e18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 1049.064153][ T30] #1: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x1b4a/0x3320 [ 1049.076698][ T30] 3 locks held by syz.3.650/9758: [ 1049.082040][ T30] #0: ffff88807ed59e18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 1049.093892][ T30] #1: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0 [ 1049.128727][ T30] #2: ffff88805de7ece8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_vma_lock_read+0x105/0x140 [ 1049.158911][ T30] 3 locks held by syz.4.678/9917: [ 1049.163959][ T30] #0: ffff88802de5e148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980 [ 1049.199366][ T30] #1: ffff8880664f44b8 (&ctx->map_changing_lock){.+.+}-{3:3}, at: mfill_atomic_copy+0x1aca/0x1e70 [ 1049.210517][ T30] #2: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: mfill_atomic_copy+0x162c/0x1e70 [ 1049.239099][ T30] 2 locks held by syz.3.716/10132: [ 1049.244282][ T30] #0: ffff88807b2c42f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980 [ 1049.297055][ T30] #1: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0 [ 1049.348708][ T30] 2 locks held by syz.1.749/10299: [ 1049.368729][ T30] #0: ffff88802de5e070 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980 [ 1049.392424][ T30] #1: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0 [ 1049.418705][ T30] 1 lock held by syz-executor/10377: [ 1049.424058][ T30] 2 locks held by syz.4.826/10669: [ 1049.438772][ T30] #0: ffff888055552df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x13e/0x980 [ 1049.458744][ T30] #1: ffff888020eb8728 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x307/0x2fa0 [ 1049.478792][ T30] 7 locks held by syz-executor/10698: [ 1049.484225][ T30] #0: ffff88802f86c420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 1049.518881][ T30] #1: ffff88805d8e7c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1049.539008][ T30] #2: ffff888026e041e8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 1049.568750][ T30] #3: ffffffff8f47aba8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x187/0x730 [ 1049.589054][ T30] #4: ffff88805dbbd0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 1049.598418][ T30] #5: ffff88805dbb9250 (&devlink->lock_key#47){+.+.}-{3:3}, at: nsim_drv_probe+0xd5/0x1490 [ 1049.627772][ T30] #6: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x4c9/0xb20 [ 1049.651852][ T30] 2 locks held by syz-executor/10731: [ 1049.657280][ T30] #0: ffffffff8fee11a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1049.678715][ T30] #1: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1049.698946][ T30] 3 locks held by kvm-nx-lpage-re/10877: [ 1049.718963][ T30] #0: ffffffff8e20f3c8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x25/0x130 [ 1049.738909][ T30] #1: ffffffff8e05b950 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x12/0x40 [ 1049.758728][ T30] #2: ffffffff8e20f190 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_lock+0x37/0x40 [ 1049.769772][ T30] 3 locks held by syz.2.861/10880: [ 1049.774964][ T30] #0: ffff88806dc70d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1049.784701][ T30] #1: ffff88806dc70078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1049.796820][ T30] #2: ffffffff90149928 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1049.809952][ T30] [ 1049.821250][ T30] ============================================= [ 1049.821250][ T30] [ 1049.838994][ T30] NMI backtrace for cpu 1 [ 1049.843375][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1049.853936][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.864027][ T30] Call Trace: [ 1049.867359][ T30] [ 1049.870341][ T30] dump_stack_lvl+0x116/0x1f0 [ 1049.875090][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1049.880099][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1049.886158][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1049.892188][ T30] watchdog+0xf0c/0x1240 [ 1049.896461][ T30] ? __pfx_watchdog+0x10/0x10 [ 1049.901160][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1049.906413][ T30] ? __kthread_parkme+0x148/0x220 [ 1049.911491][ T30] ? __pfx_watchdog+0x10/0x10 [ 1049.916185][ T30] kthread+0x2c1/0x3a0 [ 1049.920281][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1049.925522][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.930177][ T30] ret_from_fork+0x45/0x80 [ 1049.934611][ T30] ? __pfx_kthread+0x10/0x10 [ 1049.939224][ T30] ret_from_fork_asm+0x1a/0x30 [ 1049.944036][ T30] [ 1049.947728][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1049.954193][ C0] NMI backtrace for cpu 0 [ 1049.954207][ C0] CPU: 0 UID: 0 PID: 10731 Comm: syz-executor Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1049.954237][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1049.954251][ C0] RIP: 0010:in_lock_functions+0x0/0x20 [ 1049.954294][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 48 81 ff 70 3f 24 8b 72 0c 31 c0 48 81 ff 41 6d [ 1049.954317][ C0] RSP: 0018:ffffc90004c2f3c0 EFLAGS: 00000246 [ 1049.954338][ C0] RAX: 0000000000000001 RBX: ffffffff813d4e71 RCX: 1ffffffff3504304 [ 1049.954355][ C0] RDX: 0000000000000000 RSI: ffffffff81eec3a3 RDI: ffffffff813d4e71 [ 1049.954371][ C0] RBP: ffffc90004c2f498 R08: ffffc90004c2f484 R09: ffffffff90f58e6e [ 1049.954388][ C0] R10: ffffc90004c2f450 R11: 0000000000007950 R12: ffffffff81794de0 [ 1049.954404][ C0] R13: ffffc90004c2f450 R14: 0000000000000000 R15: ffff888026750000 [ 1049.954421][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1049.954444][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1049.954461][ C0] CR2: 0000561ac9179300 CR3: 000000004997a000 CR4: 00000000003526f0 [ 1049.954495][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1049.954510][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1049.954526][ C0] Call Trace: [ 1049.954533][ C0] [ 1049.954542][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1049.954576][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1049.954616][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1049.954644][ C0] ? __pfx_in_lock_functions+0x10/0x10 [ 1049.954673][ C0] ? default_do_nmi+0x6a/0x160 [ 1049.954714][ C0] ? exc_nmi+0x170/0x1e0 [ 1049.954753][ C0] ? end_repeat_nmi+0xf/0x53 [ 1049.954786][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1049.954819][ C0] ? unwind_next_frame+0xb1/0x20c0 [ 1049.954849][ C0] ? kasan_save_stack+0x33/0x60 [ 1049.954875][ C0] ? unwind_next_frame+0xb1/0x20c0 [ 1049.954901][ C0] ? __pfx_in_lock_functions+0x10/0x10 [ 1049.954935][ C0] ? __pfx_in_lock_functions+0x10/0x10 [ 1049.954965][ C0] ? __pfx_in_lock_functions+0x10/0x10 [ 1049.954994][ C0] [ 1049.955001][ C0] [ 1049.955009][ C0] preempt_count_add+0x76/0x150 [ 1049.955048][ C0] unwind_next_frame+0xb1/0x20c0 [ 1049.955075][ C0] ? kasan_save_stack+0x33/0x60 [ 1049.955103][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1049.955136][ C0] arch_stack_walk+0x95/0x100 [ 1049.955170][ C0] ? kasan_save_stack+0x33/0x60 [ 1049.955198][ C0] stack_trace_save+0x95/0xd0 [ 1049.955229][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1049.955262][ C0] ? __lock_acquire+0xbdd/0x3ce0 [ 1049.955288][ C0] kasan_save_stack+0x33/0x60 [ 1049.955313][ C0] ? kasan_save_stack+0x33/0x60 [ 1049.955365][ C0] __kasan_record_aux_stack+0xba/0xd0 [ 1049.955403][ C0] kmem_cache_free+0x305/0x4b0 [ 1049.955431][ C0] ? __put_anon_vma+0x114/0x3a0 [ 1049.955474][ C0] __put_anon_vma+0x114/0x3a0 [ 1049.955503][ C0] unlink_anon_vmas+0x58a/0x820 [ 1049.955534][ C0] free_pgtables+0x12c/0x950 [ 1049.955560][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1049.955586][ C0] ? lock_acquire+0x2f/0xb0 [ 1049.955607][ C0] ? exit_mmap+0x208/0xb30 [ 1049.955635][ C0] ? __pfx_down_write+0x10/0x10 [ 1049.955672][ C0] exit_mmap+0x3d7/0xb30 [ 1049.955698][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1049.955722][ C0] ? __mutex_lock+0x1a6/0x9c0 [ 1049.955767][ C0] __mmput+0x12a/0x480 [ 1049.955794][ C0] mmput+0x62/0x70 [ 1049.955819][ C0] do_exit+0x9bf/0x2d70 [ 1049.955873][ C0] ? get_signal+0x8f2/0x2770 [ 1049.955903][ C0] ? __pfx_do_exit+0x10/0x10 [ 1049.955938][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1049.955968][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1049.956001][ C0] do_group_exit+0xd3/0x2a0 [ 1049.956039][ C0] get_signal+0x25fb/0x2770 [ 1049.956073][ C0] ? __pfx_get_signal+0x10/0x10 [ 1049.956107][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1049.956144][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1049.956185][ C0] ? rcu_is_watching+0x12/0xc0 [ 1049.956237][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1049.956272][ C0] do_syscall_64+0xda/0x250 [ 1049.956307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.956339][ C0] RIP: 0033:0x7fcaf237fe8c [ 1049.956358][ C0] Code: Unable to access opcode bytes at 0x7fcaf237fe62. [ 1049.956370][ C0] RSP: 002b:00007ffea1db4fd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1049.956395][ C0] RAX: 000000000000006c RBX: 00007fcaf3064620 RCX: 00007fcaf237fe8c [ 1049.956413][ C0] RDX: 000000000000006c RSI: 00007fcaf3064670 RDI: 0000000000000003 [ 1049.956430][ C0] RBP: 0000000000000000 R08: 00007ffea1db5024 R09: 000000000000000c [ 1049.956452][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1049.956469][ C0] R13: 0000000000000000 R14: 00007fcaf3064670 R15: 0000000000000000 [ 1049.956494][ C0] [ 1050.448202][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1050.455107][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 1050.465653][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1050.475756][ T30] Call Trace: [ 1050.479065][ T30] [ 1050.482032][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1050.486855][ T30] panic+0x71d/0x800 [ 1050.490815][ T30] ? __pfx_panic+0x10/0x10 [ 1050.495295][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1050.500719][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1050.506765][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1050.512186][ T30] ? watchdog+0xd76/0x1240 [ 1050.516644][ T30] ? watchdog+0xd69/0x1240 [ 1050.521112][ T30] watchdog+0xd87/0x1240 [ 1050.525415][ T30] ? __pfx_watchdog+0x10/0x10 [ 1050.530322][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1050.535923][ T30] ? __kthread_parkme+0x148/0x220 [ 1050.541314][ T30] ? __pfx_watchdog+0x10/0x10 [ 1050.546051][ T30] kthread+0x2c1/0x3a0 [ 1050.550187][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.555436][ T30] ? __pfx_kthread+0x10/0x10 [ 1050.560080][ T30] ret_from_fork+0x45/0x80 [ 1050.564560][ T30] ? __pfx_kthread+0x10/0x10 [ 1050.569177][ T30] ret_from_fork_asm+0x1a/0x30 [ 1050.574002][ T30] [ 1050.577437][ T30] Kernel Offset: disabled [ 1050.581772][ T30] Rebooting in 86400 seconds..