last executing test programs: 1m26.290045806s ago: executing program 0 (id=4177): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = dup(r0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)=0x1) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m23.281636513s ago: executing program 0 (id=4180): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) socketpair(0x26, 0x5, 0x2000000, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) request_key(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x1e, 0x5f, 0xfe, 0x20, 0x4fc, 0x1528, 0x8228, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2b, 0xc0, 0xe2}}]}}]}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/109, 0x6d) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x6, 0x22, r0, 0x885, '\x00', 0x0, r2, 0x3, 0x3, 0x2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x0, 0x4, 0x8d, 0x3}, {0x8000}, {0x5, 0x1, 0x10}, {0x5, 0x2, 0x0, 0x5}], 0x10, 0xb}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) 59.429548331s ago: executing program 4 (id=4203): syz_emit_ethernet(0x7e, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = syz_usb_connect$cdc_ecm(0x1, 0x89, &(0x7f0000000040)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x8, 0x3, 0xff, 0x57}, 0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2c00021c100af8440000000f00070030c000003f3f000006bd0e6a00eaff000b1001024a000780059803"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc8299cbd2cc077f7}}, {0x89, &(0x7f0000000200)=ANY=[@ANYBLOB="89033043f662c0071e436d6112a25f4a0955eb6d52f9cfbd2387e49eaa5ffd45e1fe3ee174a7c278453bdf8f19b91b0e73c867f951fb4bad8d0c7229bd0348e0ac42cd22a66aab1e7be9204eebe1ea8f0a7908c89ad56db115a83d7e40d594938575011b6f5e6b540fd5a711400753cef1fe834bb8865a1584f858167dbdfa"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0xd1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, {0x15, &(0x7f0000000280)=@string={0x15, 0x3, "6fa69db80c76a123b7639b4705f36bfe6ce35e"}}]}) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x0, 0x4}, 0xffffffffffffff73) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x39, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 56.181986076s ago: executing program 4 (id=4204): io_uring_setup(0x5dbe, &(0x7f00000002c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0xfffffffe}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, 0xffffffffffffffff, 0x0) creat(&(0x7f00000007c0)='./bus\x00', 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x0, &(0x7f0000000540)) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) dup2(r1, r0) 53.607019902s ago: executing program 4 (id=4205): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)='\r', 0x1}, {&(0x7f0000000400)="f2eada35", 0x4}], 0x2}}, {{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x9, @remote, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000600)="4bc33ddf9263e02db93814fd5abe7a0034512ce26b4049bcec8ed36637e43922b33e5642b6871037f52b8504fa86b1015dc627b8b177e05afc5ee7c05c252cdc87fc0ab5d91d8cbb8a056542f77bf72c0ce5155277f88c56f019a3d0fedc4ee3b7e9b93608a01afff501b8a1b075daeabe65b1ecea3d1bc7d889f4a8437ec4c7767f4b8c5417a23aa29c9714de36e773e9475a8c4b13e948843ab4ddbd73308d0436b57a510262e4ea7f06bd21a6d22d499b825aa09eda410c7f6d326a3c2c8ce3314a679402aa9f99db3e9a2b388f032a1415807e65ece6771b0952cf", 0xdd}, {&(0x7f0000000700)="aeaf50a393853527207aadb3586b8623a13b78d9e22afb04f01586a731fd253db60a33f2a7adbf7702b183f008883d76cac3145e88b0301506ed9a06d14b92a3afe824b31362c7c7946ccbfa7a0529334506015dd26d79ecbb52b7d9e3e3f3a057f985cc01ba472ebe22463797ca9abb03cb3500e0fe74e0a970e458e6f67fefaf4cfa315efae18476fce3ab979326a5d022", 0x92}, {&(0x7f0000000100)="61cb26609a18f47b154aad108ba8b67d504f2bac7b8f58d7", 0x18}, {&(0x7f00000007c0)="7c7b8794c25efb7b998aec999502db8efb1e902254ad2db2b477508483ce399a2cda3dc691233a38a770a48f9600a8914287c7b429830d02154aabfd785989b100af962704ade4a8f17449b9b9c9ecc9b8c89259892fee4f0da4c740b0ffa6a208d52dcb88cd95311b7e824f51dd58d5e8eec60dce0da97bbf1fc2d294324e195e7f2b62e686", 0x86}, {&(0x7f0000000880)="3248a74dc475d6ef75c4684d2d5db304ea2c88097621a0dc15f5d278491ce3169ab0c9b795dc16cb46c88e0dc01a42af303e53879424fcd967b04dacd556c260e8bac23921a8e57f40", 0x49}], 0x6, &(0x7f0000000a00)=[{0x108, 0x10b, 0x1, "b340dc2f6572a8b6cd1249631b8fd0b5d9e42765e3ba2899c052e59f127b2d17a87437435a2e5daa4c89943bec7d03bdbe82873161b14e198580ffcce4148c2ee7731070081ae0031ecb58474e61d1b1f183e6114567ab22303a6012540471ea67f6f473b1f1444ae68c0af2ee7b3c20ff304c3ceb3fa7e78645888928efa13dd5111254de6c7277738ac18284b4e18cabd9bd4f7fcdebb17fb0223ca3f5230ba1706a4866aca84fb5fb2c522d0fc0be324aa9e6c0649125540588cc73dfdcc7a0ea04f642cd3a13d5ce0d3cfc728b09d04f2db88957ad713c5ec44e09343eb87e52431fabb908c50b5836d86f51add1da060d5a58fb6b"}], 0x108}}, {{&(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000bc0)="6ed0ccd3b617bfc08ab887115f262ec2f66558b2da947cdd346d42cf02fb657a1aaf03dfe187778214b01a29a732d283cb53548e6a4e1efaf29faaf1024170f7621c62cacfb3c29c7bb8e0fe493a23811032221e2bcb2f38f4a134a88b9a242ceada460553ed7bb9", 0x68}], 0x1, &(0x7f0000000c40)=[{0xb0, 0x107, 0x5, "b54d29381e72eab9ab6500a62aca869872bfe1e1d0eb6e483a16c94f41863ccba67f697d5d7f71bc8a217a964eecfb192e11a67df84157ecdf8cbbe013a0e78d14a06c1851edb96283852a1b086da19fc63059326f40deb595968bbc8a2786c04c87e86cfced60d747da1c483bceb6ac49e1bc9137078de41c86e6eba8fc73fdcfcf41a77492f86b76c485515d46161a6ba7d75247b01a6a37ec52299205"}, {0x70, 0x118, 0x57e0, "a36f13d247bcb964d3b477b9c978c37eca92af97605baa7994d45240f225686a66d0bb82f7933236f9d94fac8df98b9d08e0cd8c724424ad19924d62c0a380dd1637ab59b2a24864aa4e898fb8f0853228a7d705dffea0975deb8dc5385e"}, {0x68, 0x37, 0x9, "77312779a1b791bd5bcaf2e92f14e3fc1b02ce88c407cef6fcc62c086c8faff78409c4f22f840bb57ffd9608187eb17c48172d60d111d940f3d4d2040a9b1f582f6a044e61378cdeaec92774ac16e85945ae"}, {0x110, 0x102, 0x0, "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"}, {0x98, 0x0, 0x400, "d0231607b6717c948bdc5b5dd4db6b4fcde93b644e0c901e43a0ea03ca624eb9194ea4247289f8b2fd4f675b53729ec915ba12ce8ec9d1c582dbb936145ada63f834745a50357f0b6cebefff05cfe81b83d3e8b6c1a9507f2b1b568c6e0477aa30c8ebd4e7957886c868255c5d661ef5cb4f317e9590050cc3a61bac48a3c313e4f04ce33fab67"}], 0x330}}, {{&(0x7f0000000f80)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000003100)=[{0x10, 0x118, 0xc409}], 0x10}}], 0x4, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='afs\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52.623613855s ago: executing program 4 (id=4206): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x24}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x10}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r7 = syz_usb_connect$uac1(0x3, 0xc0, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x71, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x3, 0x5, [0x3, 0x1, 0x2, 0x1, 0x1], 0x23}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x83, 0x2, 0x84, 0x80, "", "f4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0xa5, 0xb, ')', "c1"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0x6, 0x3}, @as_header={0x7, 0x24, 0x1, 0xa, 0x4, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x4, "eec2cdc2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x74, 0x7, 0x9, {0x7, 0x25, 0x1, 0x80, 0x0, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x81, 0x4, 'clR\'jj'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x30, 0x9, 0x3, {0x7, 0x25, 0x1, 0x1, 0x3, 0x400}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xe, 0x8, 0x8, 0xff, 0x3}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x2, [{0x37, &(0x7f0000000300)=@string={0x37, 0x3, "7409550c9f64088dde8704db0456dd73ebc7d8fecb3c328b3450fd73df2aa9c4049960f92ad58982a41aba64d692901540755c1672"}}, {0x9b, &(0x7f00000005c0)=@string={0x9b, 0x3, "3a204b40236d6dc95c3ada9455fdcf6d55af4af34509c0b682d3b4ef39a2bbb603d9b987d0a78a2a5f6b0d60457a6c7f712e8360bf4873a8536662fc34c2997e0bb39cc7d2bb5ffb02da4f181449863be23a4c467f39f9a4f03d929b6d8a9de790d1f21f594ffbef16bfb349cc44e9fa7211d42018d4dbbd934531760a356ba5ee3fdb8d4df62542b0ec1c97bc936957260a8ad23c13eee89c"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x40, 0xf, 0x58, {0x58, 0x6, "0780574c3e04a1ecfbd41b05a9d062ad3b20cbcb378d8e547d890212a6652f9fb6065b5e1a647398fc731cc277806f2c30e8af032821a98bf1f5d0590ae7d51e8e2fe75c98bc4c68e0e71aeab75ac17df370002e6715"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000780)={0x20, 0x15, 0xa9, "74fa16ad57d1fc3249bd5d3959ff4c8028a69d43f10ae9b6657705595abeab927ef2c839f04bfb650adec86c9e3bf82e1b6d73e81ef14b3cb80a21585d33feda246a5614e184d20545c5a9000bceb0ca0161a9336e80828553d51ca6252cf6c17b0eb4376bafd91e473643339f7541779f3552d639bf9a10fb35229256c5d0dcb83ffc11eca93433f5be2b4d556b63a8ec802482d34b30e4848d0c24d4be4758ed0c87b60766185d0b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x81, 0x2, "9c7b"}, &(0x7f00000009c0)={0x20, 0x82, 0x1, 'r'}, &(0x7f0000000a00)={0x20, 0x83, 0x2, "99f4"}, &(0x7f0000000a40)={0x20, 0x84, 0x1, "de"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "5ea9c0"}}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x5, "d326132b1b"}, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c69005500000000010902120001000000000904"], 0x0) 49.226071916s ago: executing program 4 (id=4207): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000040)={0x0, 0x100, 0x1, 0x1}) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=@sha1={0x1, "35511452c723ee3cb261aabab03ed4511967dc52"}, 0x15, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 49.178402385s ago: executing program 2 (id=4161): socket$tipc(0x1e, 0x5, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000237000/0x4000)=nil, 0x4000}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0xfdfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x1ff, 0xf777, "00207d2020000000201b14700c1e0ac74f000000001200000000000900"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40), 0x0, 0x844) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "e5b6de5e"}, 0x40000000, 0x4, {}, 0x800000}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r6, &(0x7f0000000680)=[{&(0x7f0000000200)='S', 0x1}, {&(0x7f0000000400)="67ecde6232d5107f7aff443c8163d9c77247c1de80992df42cb5787c352e853a0078e8c04150ab2239d7b8a40af8ee8c15610ac11381000000000000000000400000000051", 0x45}, {&(0x7f0000000840)="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", 0x138}, {&(0x7f00000002c0)="65d6e955e8ded97b142eb1e200c65d3375393d476aaf391a102b8824b5512331677b258133d9f4eb3a7ba5fc7fdef7c7ffa5b92eccb536c4b5199912c650a4b12a0c556f519883329672fadf3872d8581f5a69ff42569bd3ce804b367db732b43a10d5a0d36e90d9cc1a113b557d42bb6b746ccba2d582ece1c6de2d012e9555c03f8e9c72fe0940c185f45568c6ee", 0x8f}, {&(0x7f00000005c0)="5dc06775a019fc7f25d98f3ea2758ae5e5874d40b7f6cd19f08d5b77f1f752825be3d6b419e9a5ad9fc6a07e96054256529be2ce0da67b6fa0be89a7c47aa14805eaaf7a5dc1c51cd2a067e3b5e7232ad95989510eca3a28dff8a64b0f266bc7635a3c7d694e6827072b0eed2964996a6eb786aba8d46eff5e088f0c0e7cc81c4b8f26f1bbc6611ce05aac7b5ba8816f9623a724773243823866632f3e8f7158bd2e0400000000000000", 0xaa}], 0x35, 0x4) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x0, 0x1000000}) 48.790519779s ago: executing program 4 (id=4208): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r3) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = socket$key(0xf, 0x3, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$VIDIOC_S_JPEGCOMP(r7, 0x408c563e, 0x0) write$cgroup_int(r5, &(0x7f00000004c0)=0x4, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000019c0), &(0x7f0000000000)=0x30) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0xfdef}, 0x1, 0x7}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfbf, r4, &(0x7f0000000380)="afb54259e89e51d1151189c73ca11a1180a9f5ab6733903d8d0abcd2217e9fc7cacf129016d529f2c0848c4af14e4e9a6e817b1e3085db5c893cad9c8338dd5c554b3fdc73b4d758a86bafa11f131ba062e6a1da2ce3121c28e29a43d1e70646f6bd82c2fd4d5e0bdbeba65faa426c74cc2cf097cd291f38ad865804d4c8fb999d04ce76252225b80bec1f290c8a", 0x8e, 0xffffffffffffffa0, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x30, r6, &(0x7f0000000600)="4ebd1250b1db46a5a74be753abd8fc82eacc4337efdd5be70d4f6a46af060beca2e65eab0f206eee4948bc51a87bfedd0ab6af2ccec32a88df0dc9ede0110bfa893519ec70fd35cbe23ebf14d7c4ab2a3209b6c04bc9aaa287fbe42c0fa47b80a6a2725adb8890dc7fe890dc7c", 0x6d, 0x5, 0x0, 0x3, r5}]) 47.209297058s ago: executing program 2 (id=4209): creat(&(0x7f0000000040)='./file0\x00', 0x1de) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @local}], 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x0) r5 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x401, 0x30, r5, 0x0) r6 = socket$inet(0x2, 0x3, 0x3) fsetxattr$smack_xattr_label(r6, &(0x7f0000000180)='security.SMACK64IPIN\x00', 0x0, 0x8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000200)='~', 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=[&(0x7f00000002c0)='gcB\xc6=\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX ==\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac:v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000001500)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x02\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xcbr\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tra\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x99?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9V\xc8\x8f/\xe08\x9e(\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb6\xef\xb0\xe5)#\x96%\xf7\x12v\xe7\x1d\xef\xb1\x06\xa3(3\xcd~\x17\xf9p\xce\xb6\xdf1\fC\xff\xa2', &(0x7f0000001080)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x86\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xfbl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\x06\x00\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1', &(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"S\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf2/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xe8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO\xaf\xdd\xa8$\xa5\n7\xfd\xa3\xfe\xef\xcb\xa0j\x8d~$\xd3\xe2\xb8', &(0x7f0000002500)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd\x18\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\\\a\xeba\x18\x95\x94\xea\xd4\xe8\xca\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14>\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9estQ\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1Z\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeaU\r\t\xcb\xb7\xc8\xc7vj\xbe/p\x91`w\xbb%\xc7\x88\x15\x9f\xd8^\x9e\x8f\xa5\xcfjQ\xab&\xd4\xfd{\xe3-\xa6[\xa3\x05\xeedw\x87\xb5\xf9\x8b\xbaV\xc4\xa6m\xbb\xe9kx\xba\xbdO\x8d(7\xf6\x00\xa5\xc5z\x93\f\x7f\xa4\xfc@\x90\xbd\xe7u\xe7x)\xce\xaa\x94#\xffA\t\xa1X\x97iZ\x1fsL\x992\xf7\x99\x00\x00\x00\x00\x83\xc6\xf9\x87\xac\x89\x952\x98\xc6i\v\xd6\x8f\xe7O\xbd\xdd\x888>\xe5~\xeb\xaa\x1f\xceuM%\xa3:\xf4S+X\\D\xcf\x94\xa3\x82\xfaK\x80=\xf9K\x8b\xd0\b\x88v\xf3\xa3\x9b%|K\x8b{&.\x94lu\xf0\x7f\x17\xb5x\xfc_\x02\x03\xd9\xfe\x03\x8e\"\xed\xf1\xa8\xd5\xdf\xae\x96\xc8f#r\x1a\xce4+\xaaJQ\xca\xe6\x82!6rH\xf2$#\xad\x80\xb2\xb0f\x030\xaaT\x01\x00[v\xf0\xb6\x88\xdf\x91\xfe\xd4\xb9\x9b\xe3\xa0)\x80\xfc\xddj,i\x848\xa3\x14e\xe4\x06[', &(0x7f0000000a00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f00000019c0)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d\x042mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=\xe4\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5\x9f@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5d!^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x85\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\xe9\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe80x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x69}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020d00000a0000000000000000000000030005000000000002000000ffffffff009507bdbc66000000e33dd3baa69e603847c30000000005000600000000000a00000000000000fc0000000000000000000009392cbc1a693ffe1fe34c000000000000000000000000004d0e7926d39cffff000039438c92f054a3e1c068e96e4227"], 0x50}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.271982456s ago: executing program 1 (id=4236): socket$isdn_base(0x22, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000140), &(0x7f00000196c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0xa, 0x73e1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141a42, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x8) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000019380)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000019540)=""/224, 0xe0}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)=ANY=[@ANYBLOB="df5975f4bafcd044b950f48ac22ba7ad335011189dc5f9da570b2132eee684c6ae8b320ad618d723c982b29a0dd4fc7269626b1afd4744d28adf50fb565d7728624b968f54414a4c128c9c3741bb648efa657c23bed8ee467565088c856842d61f764ff2863531affebee39e33f108c52ee081b1603fad0f67"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) 7.085652627s ago: executing program 3 (id=4251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYRES64]) r4 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 5.865996289s ago: executing program 3 (id=4252): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x0, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x7ff}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20008000000000fc00"], 0x20}}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="4c00030007"], 0xd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x80000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x4000010) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x200, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 4.847193448s ago: executing program 3 (id=4253): creat(0x0, 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x15) r4 = socket$rds(0x15, 0x5, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3.809537535s ago: executing program 3 (id=4254): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @private1, 0x800}, 0x1c) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) utime(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000002c0)={0x2, 0x1}) 2.822504757s ago: executing program 3 (id=4255): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x20001) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x0, 0xfffffff8, &(0x7f0000000040)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x7f, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x5, 0x90, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, '[S[Y2'}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x5, 0x200, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x6, 0x2, 0x6, 0x5, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xac, 0xd5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x300, 0x45, 0x5f, 0x39, 0x8, 0xf}, 0x5, &(0x7f0000000a00)={0x5, 0xf, 0x5}, 0x6, [{0xc9, &(0x7f0000000ac0)=@string={0xc9, 0x3, "347e782edefbd563a13c12e1f1ed8d843af6b7fe74e593f3a479af00c23f14496e3a456e20076fce096edee8dc8d2b22109ad50b7036e1b67c3b6e4093485be17d443ec071270cf6d100461e4d1a2588df3569e846e53d268197bcc48f8249f67df61b4208033210acfae00b3ec7f8e9dc7725aba10a78eef87dc1199d21587a8670360b7ab8bb5c88588da1250df6a2aa3160f4791b58536edb3880dbd5286adffe1197a645b935bda36c8edfc3dc390b410312935da48e53ef51356671327e0bd6743a91f72a"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x421}}, {0xdf, &(0x7f0000000bc0)=@string={0xdf, 0x3, "f8655097073d68bede44ddf9b84a618b74c864c34f6874ca1238bdf6cb05d195ed7fcd625580f4d5908ae486cde7baa67effec42e69fb994594fcf21ef3df3c0f1c232a25786727af6804584f46e6abd868ad7a905092755a955cfda85434757175bde305530671dba9738d2d90d705d52b05617c3cfcf95f67dc40159789fd138ee12e3617396646dc250476084d7975f0df1b2d2b729428742d78e2ef461301a71bf1aa96188d735c0120a1c4e4755b9f96b0554528acca706751c87b94808943a9b5adbbd93a2fc176705694afd0364572cd37c50964d09def0417a"}}, {0xaa, &(0x7f0000000cc0)=@string={0xaa, 0x3, "661da80af4f00969585fc27428e0f4dcffae9f9694abfc42a721638cc776a3993ba2cd7ac66272eaaee0f1279ede437154cff4cff8220baed28c85de046cfac724e0b15f610c5b9d89034fd12082efe4b50fbbf716b5c2bcbc321e4914460ee8a46ca10f80e06372b3ebf95b244290f1469f8ef03c41382824302a28b75bfde54cfbd306112e0ba578f11933c97170218ce369bd69bb468af42b8bca100bfac29612909a007bda80"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x843}}, {0x101, &(0x7f0000000dc0)=@string={0x101, 0x3, "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"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 0s ago: executing program 3 (id=4256): openat$sndseq(0xffffffffffffff9c, 0x0, 0x529880) write$sndseq(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x20}}, 0x8000) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): dress (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.260075][T21257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.297880][T21257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.330811][T21257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.344289][T21257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.374719][T21257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.442899][T21257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.760010][ T9069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.777291][ T9069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.807750][ T9069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.817445][ T9069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.137489][T21492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1428.153689][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1428.153708][ T29] audit: type=1326 audit(1723344044.485:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21507 comm="syz.2.4036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da2b779f9 code=0x0 [ 1428.203897][T21516] Falling back ldisc for ttyS3. [ 1428.308189][T13360] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1428.318283][T13360] Bluetooth: hci1: Injecting HCI hardware error event [ 1428.329822][ T54] Bluetooth: hci1: hardware error 0x00 [ 1428.448785][T21519] netlink: 'syz.2.4038': attribute type 4 has an invalid length. [ 1428.976310][T21527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4039'. [ 1429.890285][ T29] audit: type=1326 audit(1723344046.995:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21548 comm="syz.4.4048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x0 [ 1430.955013][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1431.109670][T21574] kAFS: unparsable volume name [ 1431.123360][T21573] Falling back ldisc for ttyS3. [ 1432.693242][T21588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4058'. [ 1437.122570][T21623] kAFS: unparsable volume name [ 1437.223587][T21625] Falling back ldisc for ttyS3. [ 1437.447404][ T941] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1437.704187][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.757252][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.800577][ T941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.843616][ T941] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1437.883894][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.920869][ T941] usb 2-1: config 0 descriptor?? [ 1437.996247][T13360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1438.024477][T13360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1438.034702][T13360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1438.044248][T13360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1438.054118][T13360] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1438.061777][T13360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1438.714594][ T941] uclogic 0003:28BD:0055.002D: interface is invalid, ignoring [ 1438.822730][T21642] netlink: 'syz.2.4072': attribute type 4 has an invalid length. [ 1439.506573][ T5335] usb 2-1: USB disconnect, device number 111 [ 1439.598918][T21634] chnl_net:caif_netlink_parms(): no params data found [ 1440.156498][T13360] Bluetooth: hci6: command tx timeout [ 1440.168805][T21634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.175961][T21634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.207234][T21634] bridge_slave_0: entered allmulticast mode [ 1440.260302][T21634] bridge_slave_0: entered promiscuous mode [ 1440.300164][T21634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.325025][T21634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.344519][T21634] bridge_slave_1: entered allmulticast mode [ 1440.358750][T21634] bridge_slave_1: entered promiscuous mode [ 1440.377111][T21670] block nbd3: shutting down sockets [ 1440.528672][ T5335] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1440.543936][T21634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.589105][T21634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.787207][ T5335] usb 5-1: device descriptor read/64, error -71 [ 1440.868047][T21634] team0: Port device team_slave_0 added [ 1440.895703][T21634] team0: Port device team_slave_1 added [ 1441.587559][T21634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.594541][T21634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.626394][T21634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.644255][T21634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.651986][T21634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.657039][ T5335] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1441.705013][T21634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.812273][T21634] hsr_slave_0: entered promiscuous mode [ 1441.861400][ T5335] usb 5-1: device descriptor read/64, error -71 [ 1441.892277][T21634] hsr_slave_1: entered promiscuous mode [ 1441.907800][T21634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.923416][T21634] Cannot create hsr debugfs directory [ 1442.008736][ T5335] usb usb5-port1: attempt power cycle [ 1442.267106][T13360] Bluetooth: hci6: command tx timeout [ 1442.438001][ T5335] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1442.562276][ T5335] usb 5-1: device descriptor read/8, error -71 [ 1442.640284][T21687] netlink: 'syz.1.4084': attribute type 4 has an invalid length. [ 1442.795885][T21634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.836986][ T5335] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1442.903103][ T5335] usb 5-1: device descriptor read/8, error -71 [ 1443.049526][T21634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.065291][ T5335] usb usb5-port1: unable to enumerate USB device [ 1443.114011][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1443.335733][T21634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.594250][T21634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.150049][T21634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1444.169061][T21705] kAFS: unparsable volume name [ 1444.217171][T21634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1444.265058][T21634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1444.307062][T13360] Bluetooth: hci6: command tx timeout [ 1444.325949][T21634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1444.358683][ T9190] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1444.447061][T18308] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1444.557079][ T9190] usb 2-1: Using ep0 maxpacket: 32 [ 1444.578300][ T9190] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1444.596963][ T9190] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1444.605897][ T9190] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1444.645636][ T9190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1444.648576][T21634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.668631][T18308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.690014][ T9190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1444.710324][T18308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.727576][ T9190] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1444.752032][T18308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.754701][T21634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.775998][ T9190] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1444.806941][T18308] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1444.828074][T21709] FAULT_INJECTION: forcing a failure. [ 1444.828074][T21709] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.836683][ T9190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.840727][T21709] CPU: 0 UID: 0 PID: 21709 Comm: syz.4.4090 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1444.840760][T21709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1444.840773][T21709] Call Trace: [ 1444.840782][T21709] [ 1444.840793][T21709] dump_stack_lvl+0x241/0x360 [ 1444.880368][T21709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1444.885575][T21709] ? __pfx__printk+0x10/0x10 [ 1444.890172][T21709] should_fail_ex+0x3b0/0x4e0 [ 1444.894847][T21709] ? skb_clone+0x20c/0x390 [ 1444.899258][T21709] should_failslab+0xac/0x100 [ 1444.903930][T21709] ? skb_clone+0x20c/0x390 [ 1444.908339][T21709] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1444.913711][T21709] skb_clone+0x20c/0x390 [ 1444.917945][T21709] ? dev_queue_xmit_nit+0x220/0xc10 [ 1444.923138][T21709] dev_queue_xmit_nit+0x419/0xc10 [ 1444.928153][T21709] ? dev_queue_xmit_nit+0x2b/0xc10 [ 1444.933255][T21709] ? validate_xmit_skb+0x9f9/0x1120 [ 1444.938452][T21709] dev_hard_start_xmit+0x15f/0x7e0 [ 1444.943565][T21709] ? __pfx_validate_xmit_skb+0x10/0x10 [ 1444.949030][T21709] __dev_queue_xmit+0x1b63/0x3e90 [ 1444.954051][T21709] ? kasan_save_track+0x51/0x80 [ 1444.958900][T21709] ? ksys_write+0x1a0/0x2c0 [ 1444.963424][T21709] ? __dev_queue_xmit+0x2da/0x3e90 [ 1444.968544][T21709] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1444.973922][T21709] ? __copy_skb_header+0x437/0x5b0 [ 1444.979030][T21709] ? __asan_memcpy+0x40/0x70 [ 1444.983616][T21709] ? __copy_skb_header+0x437/0x5b0 [ 1444.988725][T21709] ? __skb_clone+0x454/0x6c0 [ 1444.993314][T21709] ? skb_clone+0x240/0x390 [ 1444.997726][T21709] __netlink_deliver_tap+0x54d/0x7c0 [ 1445.003016][T21709] ? netlink_deliver_tap+0x2e/0x1b0 [ 1445.008298][T21709] netlink_deliver_tap+0x19d/0x1b0 [ 1445.013408][T21709] netlink_unicast+0x7be/0x990 [ 1445.018172][T21709] ? __pfx_netlink_unicast+0x10/0x10 [ 1445.023466][T21709] ? __virt_addr_valid+0x183/0x530 [ 1445.028574][T21709] ? __check_object_size+0x49c/0x900 [ 1445.033855][T21709] ? bpf_lsm_netlink_send+0x9/0x10 [ 1445.038975][T21709] netlink_sendmsg+0x8e4/0xcb0 [ 1445.043763][T21709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.049048][T21709] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1445.054327][T21709] ? security_socket_sendmsg+0x87/0xb0 [ 1445.059866][T21709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.065139][T21709] __sock_sendmsg+0x221/0x270 [ 1445.069818][T21709] sock_write_iter+0x2dd/0x400 [ 1445.074584][T21709] ? __pfx_sock_write_iter+0x10/0x10 [ 1445.079879][T21709] ? bpf_lsm_file_permission+0x9/0x10 [ 1445.085244][T21709] ? security_file_permission+0x7f/0xa0 [ 1445.090788][T21709] vfs_write+0xa72/0xc90 [ 1445.095023][T21709] ? __pfx_sock_write_iter+0x10/0x10 [ 1445.100302][T21709] ? __pfx_vfs_write+0x10/0x10 [ 1445.105073][T21709] ksys_write+0x1a0/0x2c0 [ 1445.109398][T21709] ? __pfx_ksys_write+0x10/0x10 [ 1445.114240][T21709] ? do_syscall_64+0x100/0x230 [ 1445.118996][T21709] ? do_syscall_64+0xb6/0x230 [ 1445.123662][T21709] do_syscall_64+0xf3/0x230 [ 1445.128156][T21709] ? clear_bhb_loop+0x35/0x90 [ 1445.132827][T21709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.138710][T21709] RIP: 0033:0x7f50ca1779f9 [ 1445.143116][T21709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.162807][T21709] RSP: 002b:00007f50caf07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1445.171223][T21709] RAX: ffffffffffffffda RBX: 00007f50ca305f80 RCX: 00007f50ca1779f9 [ 1445.179185][T21709] RDX: 0000000000000027 RSI: 0000000020000000 RDI: 0000000000000004 [ 1445.187145][T21709] RBP: 00007f50caf07090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.195105][T21709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.203063][T21709] R13: 0000000000000000 R14: 00007f50ca305f80 R15: 00007ffd65b98098 [ 1445.211037][T21709] [ 1445.214174][T18308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.238331][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.245538][ T9069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.290189][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.297402][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.318087][T18308] usb 4-1: config 0 descriptor?? [ 1445.330406][ T9190] usb 2-1: config 0 descriptor?? [ 1445.753029][T18308] uclogic 0003:28BD:0055.002E: interface is invalid, ignoring [ 1446.287459][ T9190] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1446.323971][ T9190] usb 2-1: USB disconnect, device number 112 [ 1446.354928][ T9190] usblp0: removed [ 1446.363738][T16738] usb 4-1: USB disconnect, device number 87 [ 1446.389605][T13360] Bluetooth: hci6: command tx timeout [ 1446.648522][T21634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.749627][T21634] veth0_vlan: entered promiscuous mode [ 1446.767224][ T9190] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1446.773968][T21634] veth1_vlan: entered promiscuous mode [ 1446.819254][T21634] veth0_macvtap: entered promiscuous mode [ 1446.967104][ T9190] usb 2-1: Using ep0 maxpacket: 32 [ 1446.991876][ T9190] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1446.994822][T21634] veth1_macvtap: entered promiscuous mode [ 1447.026591][ T9190] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1447.036176][ T9190] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1447.045574][ T9190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1447.064471][ T9190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1447.078150][ T9190] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1447.097507][ T9190] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1447.106715][ T9190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.177041][ T9190] usb 2-1: config 0 descriptor?? [ 1447.382603][T21727] netlink: 'syz.4.4094': attribute type 4 has an invalid length. [ 1447.421859][ T9190] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1447.469884][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.490825][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.517349][ T9190] usb 2-1: USB disconnect, device number 113 [ 1447.534748][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.555226][ T9190] usblp0: removed [ 1447.571594][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.603562][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.627076][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.662425][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.695334][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.717158][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.737145][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.749491][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.764431][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.781187][T21634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1447.797464][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.810440][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.820404][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.831129][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.844252][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.854887][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.865075][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.875757][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.885654][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.905370][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.918425][T21634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.929139][T21634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.940989][T21634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.970404][T21634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.984777][T21634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.996597][T21634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.006514][T21634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.049532][ T9190] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1448.235546][ T9190] usb 2-1: device descriptor read/64, error -71 [ 1448.255740][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.289415][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.300017][ T9024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.338272][ T9190] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1449.358572][ T9024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.496994][ T9190] usb 2-1: device descriptor read/64, error -71 [ 1449.737050][ T9190] usb usb2-port1: attempt power cycle [ 1449.990385][ T5335] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1450.755191][ T5335] usb 1-1: Using ep0 maxpacket: 32 [ 1450.789274][ T5335] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1450.800524][ T5335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.835721][ T5335] usb 1-1: Product: syz [ 1450.848461][ T5335] usb 1-1: Manufacturer: syz [ 1450.853185][ T5335] usb 1-1: SerialNumber: syz [ 1451.446949][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 1451.454589][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4104'. [ 1451.478451][ T5335] usb 1-1: config 0 descriptor?? [ 1451.550079][T18671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1451.621405][T18671] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1451.630300][T18671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1451.641569][T18671] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1451.657686][T18671] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1451.665289][T18671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1451.701059][ T5335] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1452.191635][T21786] kAFS: unparsable volume name [ 1452.479964][ T5265] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1452.613886][T21774] chnl_net:caif_netlink_parms(): no params data found [ 1452.720647][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.762242][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.812934][ T5265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1452.864225][T21798] Falling back ldisc for ttyS3. [ 1452.879849][ T5265] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1452.919207][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.001776][ T5265] usb 4-1: config 0 descriptor?? [ 1453.091892][T21757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.114732][T21774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.123319][T21774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.139355][T21774] bridge_slave_0: entered allmulticast mode [ 1453.140453][T21757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.147324][T21774] bridge_slave_0: entered promiscuous mode [ 1453.219862][ T5335] gspca_ov534_9: reg_r err -71 [ 1453.239673][T21774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.273047][T21774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.322108][T21774] bridge_slave_1: entered allmulticast mode [ 1453.353010][T21774] bridge_slave_1: entered promiscuous mode [ 1453.486447][ T5265] uclogic 0003:28BD:0055.002F: interface is invalid, ignoring [ 1453.587161][ T5335] gspca_ov534_9: Unknown sensor 0000 [ 1453.587254][ T5335] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1453.603423][T21774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.620705][ T5335] usb 1-1: USB disconnect, device number 98 [ 1453.684646][T21774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.700622][ T5266] usb 4-1: USB disconnect, device number 88 [ 1453.747349][T18671] Bluetooth: hci7: command tx timeout [ 1453.907904][T21774] team0: Port device team_slave_0 added [ 1453.923809][T21814] Cannot find add_set index 0 as target [ 1453.965950][T21774] team0: Port device team_slave_1 added [ 1454.079500][ T29] audit: type=1400 audit(1723344071.185:1505): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=21809 comm="syz.1.4111" dest=20004 [ 1454.114335][T21774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.133857][T21774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.159908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.192990][T21774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.215565][T21774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.225129][T21774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.337001][T21774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.949951][ T5265] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1455.147031][ T5265] usb 5-1: device descriptor read/64, error -71 [ 1455.238802][T21774] hsr_slave_0: entered promiscuous mode [ 1455.265947][T21774] hsr_slave_1: entered promiscuous mode [ 1455.312796][T21774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.348532][T21774] Cannot create hsr debugfs directory [ 1455.877149][ T54] Bluetooth: hci7: command tx timeout [ 1456.147218][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 1456.177766][ T5265] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1456.327440][ T5265] usb 5-1: device descriptor read/64, error -71 [ 1456.450486][ T5265] usb usb5-port1: attempt power cycle [ 1456.476057][T21774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.506950][ T5335] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1456.659803][T21841] Falling back ldisc for ttyS3. [ 1456.710233][ T5335] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1456.740934][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.793115][ T5335] usb 4-1: Product: syz [ 1456.807827][ T5335] usb 4-1: Manufacturer: syz [ 1456.828609][ T5335] usb 4-1: SerialNumber: syz [ 1456.833435][T21774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.867520][ T5265] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1456.872507][ T5335] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1456.912774][ T5335] r8152-cfgselector 4-1: config 0 descriptor?? [ 1456.927808][ T5265] usb 5-1: device descriptor read/8, error -71 [ 1457.104460][T21774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.217035][ T5265] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1457.321285][T21774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.493045][ T5265] usb 5-1: device not accepting address 125, error -71 [ 1457.510598][ T5265] usb usb5-port1: unable to enumerate USB device [ 1457.796299][T21849] overlayfs: failed to resolve './file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1457.845402][T21774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1457.908344][T18671] Bluetooth: hci7: command tx timeout [ 1457.952621][ T5265] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1457.974444][T21774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1458.090156][T21774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1458.176962][ T5265] usb 5-1: Using ep0 maxpacket: 32 [ 1458.193896][T21774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1458.228096][ T5265] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1458.317497][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.352127][ T5265] usb 5-1: Product: syz [ 1458.384174][ T5265] usb 5-1: Manufacturer: syz [ 1458.415489][ T5265] usb 5-1: SerialNumber: syz [ 1458.440716][ T5265] usb 5-1: config 0 descriptor?? [ 1458.465762][ T5265] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1458.663691][T21774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.006640][ T5265] gspca_ov534_9: reg_w failed -110 [ 1459.755511][ T5265] gspca_ov534_9: Unknown sensor 0000 [ 1459.787296][ T5265] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1460.425681][T18671] Bluetooth: hci7: command tx timeout [ 1460.717315][T18671] Bluetooth: hci2: command 0x0406 tx timeout [ 1460.936477][ T5335] r8152-cfgselector 4-1: USB disconnect, device number 89 [ 1461.086157][ T9190] usb 5-1: USB disconnect, device number 126 [ 1461.666340][T21774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.919254][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.926631][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.996364][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.003615][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.185817][T21774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1462.218310][T21774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1462.407005][ T941] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1462.756987][ T941] usb 2-1: device descriptor read/64, error -71 [ 1462.788717][T21774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.103325][ T941] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1463.570423][T21774] veth0_vlan: entered promiscuous mode [ 1463.577580][ T941] usb 2-1: device descriptor read/64, error -71 [ 1463.628428][T21774] veth1_vlan: entered promiscuous mode [ 1463.728072][ T941] usb usb2-port1: attempt power cycle [ 1463.842947][T21774] veth0_macvtap: entered promiscuous mode [ 1463.873927][T21774] veth1_macvtap: entered promiscuous mode [ 1463.972601][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.028694][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.076497][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.140674][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.196987][ T941] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1464.204854][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.250523][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.270213][ T941] usb 2-1: device descriptor read/8, error -71 [ 1464.296623][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.358308][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.415284][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.470719][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.521091][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.547790][ T941] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1464.580167][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.607951][ T941] usb 2-1: device descriptor read/8, error -71 [ 1464.631185][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.707020][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.730410][T17984] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1464.769121][ T941] usb usb2-port1: unable to enumerate USB device [ 1464.778444][T21774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.858401][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.918212][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.938991][T17984] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1464.957046][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.001689][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.025911][T17984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.038820][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.081171][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.101858][T17984] usb 1-1: config 0 descriptor?? [ 1465.130670][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.176723][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.204198][T17984] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1465.217343][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.265125][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.306998][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.348068][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.385065][T21774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.454967][T21774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.501350][T17984] gspca_spca508: reg_read err -32 [ 1465.522092][T21774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.541458][T21774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.601221][T21774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.658924][T21774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.711649][T21774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.775950][T21898] netlink: 'syz.0.4133': attribute type 21 has an invalid length. [ 1465.793412][T21898] IPv6: NLM_F_CREATE should be specified when creating new route [ 1465.864159][T21898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1465.872321][T21898] IPv6: NLM_F_CREATE should be set when creating new route [ 1465.879660][T21898] IPv6: NLM_F_CREATE should be set when creating new route [ 1465.886998][T21898] IPv6: NLM_F_CREATE should be set when creating new route [ 1465.925310][ T941] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1466.101684][T21898] overlayfs: invalid origin (0000) [ 1466.157164][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 1466.209462][T17984] gspca_spca508: reg_read err -71 [ 1466.253932][ T941] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1466.269917][T17984] gspca_spca508: reg_read err -71 [ 1466.293382][T17984] gspca_spca508: reg write: error -71 [ 1466.299118][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.315508][T17984] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 1466.335465][ T941] usb 2-1: Product: syz [ 1466.356513][ T941] usb 2-1: Manufacturer: syz [ 1466.364771][T17984] usb 1-1: USB disconnect, device number 99 [ 1466.374998][ T941] usb 2-1: SerialNumber: syz [ 1466.419550][ T941] usb 2-1: config 0 descriptor?? [ 1466.456286][ T941] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1466.549050][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.575123][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.628003][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.635874][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.842356][T21926] netlink: 'syz.4.4140': attribute type 29 has an invalid length. [ 1466.877630][T21926] netlink: 'syz.4.4140': attribute type 29 has an invalid length. [ 1466.898808][ T29] audit: type=1326 audit(1723344084.005:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1466.906428][T21926] netlink: 'syz.4.4140': attribute type 29 has an invalid length. [ 1467.043561][ T29] audit: type=1326 audit(1723344084.045:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.201451][ T29] audit: type=1326 audit(1723344084.045:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.310246][ T29] audit: type=1326 audit(1723344084.045:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.333824][ T5266] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1467.420489][ T29] audit: type=1326 audit(1723344084.045:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.442151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.559438][ T5266] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1467.574490][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.592310][ T29] audit: type=1326 audit(1723344084.045:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.604026][ T5266] usb 3-1: config 0 descriptor?? [ 1467.755801][ T29] audit: type=1326 audit(1723344084.045:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.777517][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.832614][ T29] audit: type=1326 audit(1723344084.055:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee2376390 code=0x7ffc0000 [ 1467.967027][ T29] audit: type=1326 audit(1723344084.055:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1467.989700][ T941] gspca_ov534_9: reg_r err -71 [ 1468.055141][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.070270][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.131475][ T29] audit: type=1326 audit(1723344084.055:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21924 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee23779f9 code=0x7ffc0000 [ 1468.367123][ T941] gspca_ov534_9: Unknown sensor 0000 [ 1468.367218][ T941] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1468.528691][ T941] usb 2-1: USB disconnect, device number 121 [ 1468.685515][T21933] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1468.768617][T21950] tipc: Enabling of bearer rejected, already enabled [ 1469.173631][T21958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1469.328489][ T941] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1469.428637][T18671] Bluetooth: hci4: command 0x0406 tx timeout [ 1469.517571][ T941] usb 1-1: device descriptor read/64, error -71 [ 1469.869299][ T941] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1470.401323][ T941] usb 1-1: device descriptor read/64, error -71 [ 1471.067518][ T941] usb usb1-port1: attempt power cycle [ 1471.567604][ T941] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1472.421753][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1472.421771][ T29] audit: type=1326 audit(1723344089.515:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1472.477760][ T941] usb 1-1: device descriptor read/8, error -71 [ 1472.591754][ T29] audit: type=1326 audit(1723344089.515:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1472.721216][ T29] audit: type=1326 audit(1723344089.525:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1472.731092][ T5266] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 1472.850913][ T29] audit: type=1326 audit(1723344089.525:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1472.885740][ T5266] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1472.940968][ T5266] [drm:udl_init] *ERROR* Selecting channel failed [ 1472.968634][ T29] audit: type=1326 audit(1723344089.525:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1473.056696][ T5266] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1473.077475][ T941] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1473.104499][ T5266] [drm] Initialized udl on minor 2 [ 1473.149376][ T29] audit: type=1326 audit(1723344089.575:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1473.178075][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 1473.197089][ T5266] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1473.262597][ T941] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1473.292206][ T5266] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1473.306655][ T29] audit: type=1326 audit(1723344089.575:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1473.317140][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.346041][ T5265] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1473.434404][ T5265] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1473.442491][ T941] usb 1-1: Product: syz [ 1473.443801][ T29] audit: type=1326 audit(1723344089.575:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1473.508015][ T941] usb 1-1: Manufacturer: syz [ 1473.527346][ T5265] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1473.534139][ T941] usb 1-1: SerialNumber: syz [ 1473.581337][ T941] usb 1-1: config 0 descriptor?? [ 1473.605287][ T29] audit: type=1326 audit(1723344089.665:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1473.693048][ T941] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1473.841729][ T29] audit: type=1326 audit(1723344089.675:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21970 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff79779f9 code=0x7ffc0000 [ 1475.754063][ T941] gspca_ov534_9: reg_r err -71 [ 1476.177953][ T941] gspca_ov534_9: Unknown sensor 0000 [ 1476.178375][ T941] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1477.087644][ T941] usb 1-1: USB disconnect, device number 103 [ 1477.588652][T22016] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1477.595279][T22016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1477.604173][T22016] vhci_hcd vhci_hcd.0: Device attached [ 1477.616396][T22017] vhci_hcd: cannot find the pending unlink 5 [ 1477.937346][ T941] usb 17-1: new high-speed USB device number 11 using vhci_hcd [ 1478.257399][T22017] vhci_hcd: connection reset by peer [ 1478.289116][ T78] vhci_hcd: stop threads [ 1478.293412][ T78] vhci_hcd: release socket [ 1478.334156][ T78] vhci_hcd: disconnect device [ 1478.780245][T17984] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1478.794096][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1478.824521][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1478.838452][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1478.849862][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1478.878242][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1478.886238][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1479.019150][T17984] usb 1-1: Using ep0 maxpacket: 32 [ 1479.837914][T17984] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1479.858412][T17984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.887777][T17984] usb 1-1: Product: syz [ 1479.917310][T17984] usb 1-1: Manufacturer: syz [ 1479.932948][T17984] usb 1-1: SerialNumber: syz [ 1479.977496][T17984] usb 1-1: config 0 descriptor?? [ 1480.008545][T17984] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1480.906968][T17984] gspca_ov534_9: reg_w failed -110 [ 1480.948840][ T54] Bluetooth: hci8: command tx timeout [ 1481.370768][T22024] chnl_net:caif_netlink_parms(): no params data found [ 1481.416989][T17984] gspca_ov534_9: Unknown sensor 0000 [ 1481.417053][T17984] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1482.809012][T22024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.816186][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.902444][T22024] bridge_slave_0: entered allmulticast mode [ 1482.946477][T22024] bridge_slave_0: entered promiscuous mode [ 1482.947560][ T9190] usb 1-1: USB disconnect, device number 104 [ 1482.995070][T22024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.027047][ T54] Bluetooth: hci8: command tx timeout [ 1483.030561][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.127105][T16738] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1483.135976][ T941] vhci_hcd: vhci_device speed not set [ 1483.141646][T22024] bridge_slave_1: entered allmulticast mode [ 1483.181380][T22024] bridge_slave_1: entered promiscuous mode [ 1483.314478][T22024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.385849][T16738] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1483.403056][T22024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.433756][T16738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1483.493255][T16738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1483.527385][T16738] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1483.558781][T16738] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1483.588883][T16738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.621844][T16738] usb 5-1: config 0 descriptor?? [ 1483.710742][T22024] team0: Port device team_slave_0 added [ 1483.862341][T18671] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1483.875834][T18671] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1483.887351][T18671] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1483.896931][T18671] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1483.905281][T18671] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1483.913138][T18671] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1483.997923][T22024] team0: Port device team_slave_1 added [ 1484.150823][ T941] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1484.342002][T22024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.384395][T22024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.511467][T22024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.620289][T22024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.658223][T22024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.780575][T22024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.807198][T22065] kAFS: unparsable volume name [ 1485.108535][T18671] Bluetooth: hci8: command tx timeout [ 1485.157540][ T9958] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1485.232490][T22024] hsr_slave_0: entered promiscuous mode [ 1485.298811][T22024] hsr_slave_1: entered promiscuous mode [ 1485.355513][T22024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1485.389619][T22024] Cannot create hsr debugfs directory [ 1485.436001][ T9958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.499526][ T9958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.549965][ T9958] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.641211][ T9958] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1485.732095][ T9958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.817874][ T9958] usb 1-1: config 0 descriptor?? [ 1485.942131][T16738] usbhid 5-1:0.0: can't add hid device: -71 [ 1485.978523][T16738] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1485.990696][T18671] Bluetooth: hci9: command tx timeout [ 1486.042804][T16738] usb 5-1: USB disconnect, device number 127 [ 1486.278299][ T9958] uclogic 0003:28BD:0055.0030: interface is invalid, ignoring [ 1486.950706][ T9190] usb 1-1: USB disconnect, device number 105 [ 1487.119201][T22024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.173850][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1487.185045][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1487.193655][T13360] Bluetooth: hci8: command tx timeout [ 1487.204227][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1487.220396][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1487.232217][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1487.243328][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1487.667692][ T9958] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1487.695189][T22024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.747962][T22059] chnl_net:caif_netlink_parms(): no params data found [ 1487.895953][ T9958] usb 5-1: Using ep0 maxpacket: 32 [ 1487.932493][ T9958] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1487.940262][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.941790][ T9958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.012556][ T9958] usb 5-1: Product: syz [ 1488.016766][ T9958] usb 5-1: Manufacturer: syz [ 1488.057444][ T9958] usb 5-1: SerialNumber: syz [ 1488.071695][ T54] Bluetooth: hci9: command tx timeout [ 1488.088394][ T9958] usb 5-1: config 0 descriptor?? [ 1488.110079][ T9958] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1488.341967][T22024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.532645][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.915127][T22024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.155633][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.273896][ T941] kernel read not supported for file /usbmon0 (pid: 941 comm: kworker/0:2) [ 1489.347759][ T54] Bluetooth: hci5: command tx timeout [ 1489.399346][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.577224][T22059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.608939][T22059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.616380][T22059] bridge_slave_0: entered allmulticast mode [ 1489.627167][T16738] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1489.669232][T22059] bridge_slave_0: entered promiscuous mode [ 1489.709149][T22074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.747468][T22059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.749283][T22074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.754628][T22059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.867150][T16738] usb 1-1: Using ep0 maxpacket: 8 [ 1489.877619][T22059] bridge_slave_1: entered allmulticast mode [ 1489.895156][T16738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.928666][T22059] bridge_slave_1: entered promiscuous mode [ 1489.936782][ T9958] gspca_ov534_9: reg_r err -71 [ 1489.977160][T16738] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1490.009580][T16738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1490.051937][T16738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1490.087029][T16738] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1490.131521][T22059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.133032][T16738] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1490.161940][ T54] Bluetooth: hci9: command tx timeout [ 1490.181596][T16738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1490.190288][T16738] usb 1-1: Product: syz [ 1490.194471][T16738] usb 1-1: Manufacturer: syz [ 1490.200294][T16738] usb 1-1: SerialNumber: syz [ 1490.209857][T16738] usb 1-1: config 0 descriptor?? [ 1490.274215][T22059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.307133][ T9958] gspca_ov534_9: Unknown sensor 0000 [ 1490.307226][ T9958] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1490.361770][ T9958] usb 5-1: USB disconnect, device number 2 [ 1490.430392][T16738] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1490.450256][T16738] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1490.581380][T22059] team0: Port device team_slave_0 added [ 1490.621333][T16738] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1490.632339][T16738] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1490.687675][T16738] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1490.697217][T22024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1490.761459][T22059] team0: Port device team_slave_1 added [ 1490.827347][T16738] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1490.936655][T22024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1490.994326][T22024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1491.169725][T22059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.211773][T22059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.272663][T16738] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1491.294092][T16738] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1491.304940][T22059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.379616][T16738] usb 1-1: USB disconnect, device number 106 [ 1491.430117][ T54] Bluetooth: hci5: command tx timeout [ 1491.629621][T22024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1491.750544][T22059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.777208][T22059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.877593][T22059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.933772][ T78] bridge_slave_1: left allmulticast mode [ 1491.956948][ T78] bridge_slave_1: left promiscuous mode [ 1492.227885][ T54] Bluetooth: hci9: command tx timeout [ 1492.310499][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.768552][ T78] bridge_slave_0: left allmulticast mode [ 1492.787744][ T78] bridge_slave_0: left promiscuous mode [ 1492.793444][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.107754][ T941] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1493.356771][ T941] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1493.398620][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.463922][ T941] usb 1-1: config 0 descriptor?? [ 1493.507422][ T54] Bluetooth: hci5: command tx timeout [ 1493.930899][T22108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.941557][T22108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.389130][T16738] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1495.374727][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.455433][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.517291][ T78] bond0 (unregistering): Released all slaves [ 1495.587571][ T54] Bluetooth: hci5: command tx timeout [ 1496.009854][ T78] tipc: Disabling bearer [ 1496.030329][ T78] tipc: Left network mode [ 1496.064884][T22070] chnl_net:caif_netlink_parms(): no params data found [ 1496.164124][T22059] hsr_slave_0: entered promiscuous mode [ 1496.229067][T22059] hsr_slave_1: entered promiscuous mode [ 1496.292661][T22059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1496.323666][T22059] Cannot create hsr debugfs directory [ 1496.630461][T22122] kAFS: unparsable volume name [ 1496.987353][T18308] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1497.261078][T18308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.359713][T18308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.417251][T18308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.485585][T18308] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1497.528620][T18308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.559254][T18308] usb 5-1: config 0 descriptor?? [ 1497.766457][ T78] hsr_slave_0: left promiscuous mode [ 1497.888271][ T78] hsr_slave_1: left promiscuous mode [ 1497.957779][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.992642][T18308] uclogic 0003:28BD:0055.0031: interface is invalid, ignoring [ 1497.997596][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.048955][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.087185][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.214041][ T78] veth1_macvtap: left promiscuous mode [ 1498.257112][ T78] veth0_macvtap: left promiscuous mode [ 1498.262851][ T78] veth1_vlan: left promiscuous mode [ 1498.307947][ T78] @ÿÿÿ: left promiscuous mode [ 1498.344511][T18308] usb 5-1: USB disconnect, device number 3 [ 1498.557154][ T941] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 1498.565712][ T941] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1498.597649][ T941] [drm:udl_init] *ERROR* Selecting channel failed [ 1498.640232][ T941] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 1498.667032][ T941] [drm] Initialized udl on minor 3 [ 1498.681670][ T941] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1498.727622][ T941] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1498.735876][ T9958] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1498.768087][ T9958] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1498.776076][ T9958] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1500.818726][T22148] input: syz1 as /devices/virtual/input/input51 [ 1501.431546][T18308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1501.685170][T18308] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1501.725631][T18308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.744303][T18308] usb 5-1: Product: syz [ 1501.754526][T18308] usb 5-1: Manufacturer: syz [ 1501.771934][T18308] usb 5-1: SerialNumber: syz [ 1501.805396][T18308] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1501.822305][T18308] r8152-cfgselector 5-1: config 0 descriptor?? [ 1501.875039][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1502.081707][T18308] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1502.107825][T18308] r8152-cfgselector 5-1: bad CDC descriptors [ 1502.131829][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1502.139736][T18308] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 1503.870382][T18671] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1503.885557][T18671] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1503.900554][T18671] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1503.925985][T18671] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1503.937311][T18671] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1504.008656][T18671] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1504.629848][ T941] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1505.549501][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1505.549520][ T29] audit: type=1326 audit(1723344122.285:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1505.675163][ T29] audit: type=1326 audit(1723344122.285:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1505.767195][ T29] audit: type=1326 audit(1723344122.285:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1505.874636][ T29] audit: type=1326 audit(1723344122.285:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1506.067477][T18671] Bluetooth: hci10: command tx timeout [ 1506.084305][T22070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.118820][ T29] audit: type=1326 audit(1723344122.285:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1507.697245][T22070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.704568][T22070] bridge_slave_0: entered allmulticast mode [ 1507.719864][ T29] audit: type=1326 audit(1723344122.285:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1507.850986][T22070] bridge_slave_0: entered promiscuous mode [ 1507.897288][ T29] audit: type=1326 audit(1723344122.285:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1508.048711][ T29] audit: type=1326 audit(1723344122.285:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1508.083715][T22070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.098560][T22070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.131713][T22070] bridge_slave_1: entered allmulticast mode [ 1508.139376][ T29] audit: type=1326 audit(1723344122.285:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1508.168782][T22070] bridge_slave_1: entered promiscuous mode [ 1508.178300][T22177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1508.218849][ T29] audit: type=1326 audit(1723344122.285:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22164 comm="syz.4.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1508.493460][T22070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.292075][ T9958] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1509.429859][T22070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.677930][T18671] Bluetooth: hci10: command tx timeout [ 1509.702346][T22070] team0: Port device team_slave_0 added [ 1509.754049][T22070] team0: Port device team_slave_1 added [ 1510.153082][T22059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.764094][T22059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.928203][T22070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.000378][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.209357][T22070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.297873][T22070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.304929][T22070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.457599][T22070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.756468][T18671] Bluetooth: hci10: command tx timeout [ 1512.243669][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1512.243690][ T29] audit: type=1326 audit(1723344128.975:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.344392][ T29] audit: type=1326 audit(1723344128.975:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.484138][ T29] audit: type=1326 audit(1723344128.975:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.532083][ T29] audit: type=1326 audit(1723344128.975:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.572846][T22059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.614620][ T29] audit: type=1326 audit(1723344128.975:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.719680][ T29] audit: type=1326 audit(1723344128.975:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.830043][ T29] audit: type=1326 audit(1723344128.975:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.939402][ T29] audit: type=1326 audit(1723344128.975:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1512.964107][T22059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.017118][ T29] audit: type=1326 audit(1723344128.975:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1513.129292][ T29] audit: type=1326 audit(1723344128.975:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22196 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ca1779f9 code=0x7ffc0000 [ 1513.234239][T22070] hsr_slave_0: entered promiscuous mode [ 1513.263801][T22214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1513.270449][T22214] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1513.278401][T22214] vhci_hcd vhci_hcd.0: Device attached [ 1513.285962][T22216] vhci_hcd: cannot find the pending unlink 5 [ 1513.299674][T22070] hsr_slave_1: entered promiscuous mode [ 1513.342533][T22070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.359042][T22070] Cannot create hsr debugfs directory [ 1513.463708][T22024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.547620][ T5265] usb 17-1: new high-speed USB device number 12 using vhci_hcd [ 1513.724992][T22216] vhci_hcd: connection reset by peer [ 1513.761337][ T12] vhci_hcd: stop threads [ 1513.765641][ T12] vhci_hcd: release socket [ 1513.801813][ T12] vhci_hcd: disconnect device [ 1513.827557][T18671] Bluetooth: hci10: command tx timeout [ 1513.930149][T22024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.057391][T22158] chnl_net:caif_netlink_parms(): no params data found [ 1514.198552][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.205691][ T9067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.349600][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.356927][ T9067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.939339][ T9958] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1515.803450][T22059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1515.890449][T22059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1515.962047][T22158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.981037][T22158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.017422][T22158] bridge_slave_0: entered allmulticast mode [ 1516.047689][T22158] bridge_slave_0: entered promiscuous mode [ 1516.078552][T22158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.085690][T22158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.127620][T22158] bridge_slave_1: entered allmulticast mode [ 1516.157156][T22158] bridge_slave_1: entered promiscuous mode [ 1516.222679][T22059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1516.317564][ T941] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 1516.441212][T22059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1516.527212][ T941] usb 5-1: device descriptor read/64, error -71 [ 1516.609203][T22158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.681399][T22158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.829150][ T941] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 1517.017912][ T941] usb 5-1: device descriptor read/64, error -71 [ 1517.147531][ T941] usb usb5-port1: attempt power cycle [ 1517.403756][T22158] team0: Port device team_slave_0 added [ 1517.629862][ T941] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 1517.688311][ T941] usb 5-1: device descriptor read/8, error -71 [ 1517.701052][T22158] team0: Port device team_slave_1 added [ 1517.941227][T22158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.957150][T22158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.987770][ T941] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 1518.047318][T22158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.065071][ T941] usb 5-1: device descriptor read/8, error -71 [ 1518.179352][T22158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.186330][T22158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.218090][ T941] usb usb5-port1: unable to enumerate USB device [ 1518.258322][T22158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.479312][T22158] hsr_slave_0: entered promiscuous mode [ 1518.507154][T22158] hsr_slave_1: entered promiscuous mode [ 1518.537099][T22158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.544697][T22158] Cannot create hsr debugfs directory [ 1518.707986][ T5265] vhci_hcd: vhci_device speed not set [ 1518.781774][T22024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.001792][T22070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1519.146240][T22070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1519.222650][T22070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1519.256536][T22070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1519.348216][T22059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.360121][ T941] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1519.929211][T22059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.204914][T22158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.597718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.604882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.681129][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.688455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.876608][T22158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.089902][T22024] veth0_vlan: entered promiscuous mode [ 1521.359390][T22158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.499913][T22024] veth1_vlan: entered promiscuous mode [ 1521.760028][T22158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.125059][T22024] veth0_macvtap: entered promiscuous mode [ 1522.218912][T22024] veth1_macvtap: entered promiscuous mode [ 1522.414327][T22070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.542252][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.618549][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.687449][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.737087][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.772033][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.811851][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.841612][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.887166][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.917453][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1522.966319][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.997156][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.038230][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.087282][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.127476][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.159537][T22024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.218516][T17984] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1523.325016][T22070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.397480][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.429556][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.439887][T17984] usb 5-1: Using ep0 maxpacket: 32 [ 1523.461238][T17984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.486010][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.509198][T17984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.522357][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.543388][T17984] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1523.566349][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.598181][T17984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.617104][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.638147][T17984] usb 5-1: config 0 descriptor?? [ 1523.657064][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.685573][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.737507][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.787731][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.836914][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.867092][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.918147][T22024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.957537][T22024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.000259][T22024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.042611][T22024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.088670][T22024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.108400][T17984] ft260 0003:0403:6030.0032: unknown main item tag 0x0 [ 1524.127443][T22024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.136178][T22024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.240914][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.248328][T17826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.269531][T17984] ft260 0003:0403:6030.0032: chip code: 5e81 abf2 [ 1524.432846][T22158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1524.488928][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.496089][T17826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.497058][T17984] ft260 0003:0403:6030.0032: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1524.613739][T22158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1524.653633][T22059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.680156][T17984] ft260 0003:0403:6030.0032: failed to retrieve status: -32, no wakeup [ 1524.689630][T22294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.728306][T22294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.788409][T22158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1524.823609][T17984] ft260 0003:0403:6030.0032: i2c bus error: 0x26 [ 1524.839314][T22158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1525.024780][T22294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.080823][T22294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.129893][ T5266] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1525.152179][T17984] ft260 0003:0403:6030.0032: failed to reset I2C controller: -71 [ 1525.272645][T17984] usb 5-1: USB disconnect, device number 9 [ 1525.408815][ T2568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.465512][T22059] veth0_vlan: entered promiscuous mode [ 1525.477423][ T2568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.679355][T22059] veth1_vlan: entered promiscuous mode [ 1525.774919][T17826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.810751][T17826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.017176][T22158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.060894][T22059] veth0_macvtap: entered promiscuous mode [ 1526.113772][T22059] veth1_macvtap: entered promiscuous mode [ 1526.321741][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1526.321760][ T29] audit: type=1804 audit(1723344143.425:1582): pid=22335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4207" name="/newroot/146/bus/bus" dev="overlay" ino=808 res=1 errno=0 [ 1526.345974][T22158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.401549][T22335] Invalid ELF header magic: != ELF [ 1526.490051][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.537426][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.587009][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.627813][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.654860][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.695902][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.726976][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.787053][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.818282][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.858010][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.906998][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.937027][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.967098][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.997726][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.037287][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.067317][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.099409][T22059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.123918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.131166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.177684][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.184850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.270287][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.297070][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.321279][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.337225][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.377023][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.410540][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.451574][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.483946][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.557355][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.607014][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.637458][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.668693][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.707467][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.757528][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.798264][T22059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.843351][T22059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.910572][T22059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.072172][T22070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.170080][T22059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.236928][T22059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.245667][T22059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.038926][T22059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.551039][T22070] veth0_vlan: entered promiscuous mode [ 1529.597887][ T5266] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1529.607552][T22358] tipc: Enabling of bearer rejected, failed to enable media [ 1529.756335][T22070] veth1_vlan: entered promiscuous mode [ 1529.891204][T17154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.915874][T17154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.994409][T22158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.161281][T22070] veth0_macvtap: entered promiscuous mode [ 1530.188762][T17826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.242203][T17826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.243434][T22070] veth1_macvtap: entered promiscuous mode [ 1530.400582][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.467947][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.495417][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.528357][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.563491][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.607432][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.651720][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.687672][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.903104][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.914137][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.933844][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.018148][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.028334][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.043596][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.070527][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.391371][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.606384][T22371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.259467][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.270170][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.291283][T22070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.299621][T22371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.324931][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.361879][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.397128][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.431703][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.466418][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.503799][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.524879][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.553609][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.593955][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.636362][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.654490][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.666519][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.679035][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.713606][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.726506][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.744737][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.755842][T22070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.800999][T22070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.835702][T22070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.914942][T22158] veth0_vlan: entered promiscuous mode [ 1532.947664][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1532.962575][T22070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.008960][T22070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.056176][T22070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.088996][T22070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.286681][T22379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.319416][T22379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.364887][T22158] veth1_vlan: entered promiscuous mode [ 1533.602479][T22158] veth0_macvtap: entered promiscuous mode [ 1533.643316][T22158] veth1_macvtap: entered promiscuous mode [ 1533.792303][T22174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.796689][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.831159][T22174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.849571][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.888305][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.955801][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.986086][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.034732][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.064276][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.079983][T22386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.114045][T22386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.124362][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.166236][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.207287][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.257282][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.303073][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.364337][T22388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.367943][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.409788][T22388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.452328][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.510371][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.569841][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.617578][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.657959][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.723008][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.763105][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.793559][T22158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.875120][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.930251][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.966780][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.006025][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.047085][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.087188][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.127189][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.215748][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.226023][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.237810][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.249185][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.390469][ T5266] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1535.407235][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.438575][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.672710][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.687181][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.722754][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.750670][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.793592][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.821243][T22158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.849360][T22158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.510556][T22158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.820111][T22158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.833240][T22158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.864794][T22158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.897142][T22158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.062283][ T9068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.112190][ T9068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.837282][ T9958] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1539.887734][T22407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.897854][T22407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.035353][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.075564][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.102464][T22415] netlink: 'syz.3.4173': attribute type 29 has an invalid length. [ 1540.148422][T22415] netlink: 'syz.3.4173': attribute type 29 has an invalid length. [ 1540.171333][T22415] netlink: 'syz.3.4173': attribute type 29 has an invalid length. [ 1540.465871][T22419] netlink: 'syz.0.4189': attribute type 4 has an invalid length. [ 1540.531638][T22421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.597919][T22421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.745901][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1540.763601][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1540.777670][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1540.789600][T22419] netlink: 'syz.0.4189': attribute type 4 has an invalid length. [ 1540.800900][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1540.811313][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1540.819688][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1541.147465][ T5265] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1541.352898][ T5265] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1541.367073][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.387398][ T5265] usb 4-1: Product: syz [ 1541.389865][T21751] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1541.400286][ T5265] usb 4-1: Manufacturer: syz [ 1541.400310][ T5265] usb 4-1: SerialNumber: syz [ 1541.405276][ T5265] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1541.419215][ T5265] r8152-cfgselector 4-1: config 0 descriptor?? [ 1541.641820][T22422] chnl_net:caif_netlink_parms(): no params data found [ 1541.671573][T21751] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1541.708122][T21751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.750177][T21751] usb 2-1: Product: syz [ 1541.754386][T21751] usb 2-1: Manufacturer: syz [ 1541.793582][T21751] usb 2-1: SerialNumber: syz [ 1541.848710][T21751] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1541.868030][T22434] binder: BINDER_SET_CONTEXT_MGR already set [ 1541.875001][T21751] r8152-cfgselector 2-1: config 0 descriptor?? [ 1541.893450][T22434] binder: 22432:22434 ioctl 4018620d 20000040 returned -16 [ 1541.901086][ T5265] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1541.923281][ T5265] r8152-cfgselector 4-1: bad CDC descriptors [ 1541.942208][ T5265] r8152-cfgselector 4-1: USB disconnect, device number 90 [ 1542.174079][T22434] syz.0.4225 (22434): drop_caches: 2 [ 1542.298460][T22422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.316761][T22422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.345183][T22422] bridge_slave_0: entered allmulticast mode [ 1542.370196][T22422] bridge_slave_0: entered promiscuous mode [ 1542.401694][T21751] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1542.415163][T22422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.441692][T21751] r8152-cfgselector 2-1: bad CDC descriptors [ 1542.465337][T22422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.498523][T21751] r8152-cfgselector 2-1: USB disconnect, device number 122 [ 1542.520947][T22422] bridge_slave_1: entered allmulticast mode [ 1542.550103][T22422] bridge_slave_1: entered promiscuous mode [ 1542.880505][T18671] Bluetooth: hci11: command tx timeout [ 1544.189886][T22422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.288828][T22422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.559452][T22451] tipc: Started in network mode [ 1544.594385][T22453] Falling back ldisc for ttyS3. [ 1544.594661][T22451] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1544.672776][T22451] tipc: New replicast peer: fe80:0000:0000:0000:1600:0000:0000:00bb [ 1544.823713][T22451] tipc: Enabled bearer , priority 10 [ 1544.919599][T22422] team0: Port device team_slave_0 added [ 1544.967357][T18671] Bluetooth: hci11: command tx timeout [ 1545.019126][T22422] team0: Port device team_slave_1 added [ 1545.575355][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1545.589048][T17984] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1545.607557][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1545.608897][T22422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.632859][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1545.653235][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1545.665837][T22422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1545.718732][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1545.768136][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1545.853318][T22422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.947261][T17984] tipc: Node number set to 1 [ 1545.978854][T22465] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 1546.013969][T22422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.050765][T22422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.146450][T22422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.283991][T22465] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 1546.344790][T22468] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 1546.397826][T22422] hsr_slave_0: entered promiscuous mode [ 1546.448640][T22422] hsr_slave_1: entered promiscuous mode [ 1546.487047][T17984] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1546.522842][T22422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1546.553819][T22422] Cannot create hsr debugfs directory [ 1547.124261][T18671] Bluetooth: hci11: command tx timeout [ 1547.188410][T17984] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1547.260045][T17984] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1547.346401][T17984] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1547.479742][T17984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.538855][T17984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1547.579963][T17984] usb 2-1: invalid MIDI out EP 0 [ 1547.858271][T17984] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1547.907792][T18671] Bluetooth: hci12: command tx timeout [ 1547.945907][T17984] usb 2-1: USB disconnect, device number 123 [ 1548.804357][T22482] udevd[22482]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1549.034076][T22422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.130599][T22485] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4235'. [ 1549.162287][T22485] FAULT_INJECTION: forcing a failure. [ 1549.162287][T22485] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.190104][T18671] Bluetooth: hci11: command tx timeout [ 1549.220337][T22485] CPU: 0 UID: 0 PID: 22485 Comm: syz.3.4235 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1549.231135][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1549.241219][T22485] Call Trace: [ 1549.244513][T22485] [ 1549.247459][T22485] dump_stack_lvl+0x241/0x360 [ 1549.252171][T22485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.257398][T22485] ? __pfx__printk+0x10/0x10 [ 1549.262016][T22485] ? __kmalloc_noprof+0xb0/0x400 [ 1549.266977][T22485] ? __pfx___might_resched+0x10/0x10 [ 1549.272290][T22485] should_fail_ex+0x3b0/0x4e0 [ 1549.276987][T22485] ? fib_trie_table+0x33/0x1e0 [ 1549.281770][T22485] should_failslab+0xac/0x100 [ 1549.286475][T22485] ? fib_trie_table+0x33/0x1e0 [ 1549.291259][T22485] __kmalloc_noprof+0xd8/0x400 [ 1549.296047][T22485] fib_trie_table+0x33/0x1e0 [ 1549.300660][T22485] fib_new_table+0x14c/0x2d0 [ 1549.305272][T22485] inet_rtm_newroute+0x131/0x290 [ 1549.310234][T22485] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1549.315755][T22485] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1549.321232][T22485] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1549.326205][T22485] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1549.331354][T22485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1549.336854][T22485] ? ref_tracker_free+0x643/0x7e0 [ 1549.341904][T22485] netlink_rcv_skb+0x1e3/0x430 [ 1549.346681][T22485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1549.352149][T22485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1549.357455][T22485] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.362656][T22485] netlink_unicast+0x7f0/0x990 [ 1549.367426][T22485] ? __pfx_netlink_unicast+0x10/0x10 [ 1549.372706][T22485] ? __virt_addr_valid+0x183/0x530 [ 1549.377831][T22485] ? __check_object_size+0x49c/0x900 [ 1549.383135][T22485] ? bpf_lsm_netlink_send+0x9/0x10 [ 1549.388268][T22485] netlink_sendmsg+0x8e4/0xcb0 [ 1549.393059][T22485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.398343][T22485] ? __import_iovec+0x536/0x820 [ 1549.403198][T22485] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1549.408537][T22485] ? security_socket_sendmsg+0x87/0xb0 [ 1549.414004][T22485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.419278][T22485] __sock_sendmsg+0x221/0x270 [ 1549.423957][T22485] ____sys_sendmsg+0x525/0x7d0 [ 1549.428736][T22485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.434035][T22485] __sys_sendmsg+0x2b0/0x3a0 [ 1549.438629][T22485] ? __pfx___sys_sendmsg+0x10/0x10 [ 1549.443742][T22485] ? vfs_write+0x7c4/0xc90 [ 1549.448184][T22485] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1549.454506][T22485] ? do_syscall_64+0x100/0x230 [ 1549.459263][T22485] ? do_syscall_64+0xb6/0x230 [ 1549.463930][T22485] do_syscall_64+0xf3/0x230 [ 1549.468434][T22485] ? clear_bhb_loop+0x35/0x90 [ 1549.473107][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.478992][T22485] RIP: 0033:0x7fda7b3779f9 [ 1549.483400][T22485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.503007][T22485] RSP: 002b:00007fda7c0d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1549.511419][T22485] RAX: ffffffffffffffda RBX: 00007fda7b505f80 RCX: 00007fda7b3779f9 [ 1549.519387][T22485] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1549.527367][T22485] RBP: 00007fda7c0d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.535345][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.543335][T22485] R13: 0000000000000000 R14: 00007fda7b505f80 R15: 00007ffceb8924f8 [ 1549.551331][T22485] [ 1549.987197][T18671] Bluetooth: hci12: command tx timeout [ 1550.032777][T22422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.072663][ T5266] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1550.241291][T22488] xt_TCPMSS: Only works on TCP SYN packets [ 1550.419090][T22492] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1550.419090][T22492] The task syz.3.4237 (22492) triggered the difference, watch for misbehavior. [ 1550.896217][T22422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.459473][T22422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.531462][T22462] chnl_net:caif_netlink_parms(): no params data found [ 1552.077863][T18671] Bluetooth: hci12: command tx timeout [ 1553.793319][T22462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.828401][T22462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.835665][T22462] bridge_slave_0: entered allmulticast mode [ 1553.898308][T22462] bridge_slave_0: entered promiscuous mode [ 1553.958416][T22462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.965517][T22462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.018317][T22462] bridge_slave_1: entered allmulticast mode [ 1554.025092][T22462] bridge_slave_1: entered promiscuous mode [ 1554.147570][T18671] Bluetooth: hci12: command tx timeout [ 1554.370114][T22462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.427451][T22422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1554.468879][T22422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1554.522328][T22462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.737379][T22422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1554.839523][T22508] netlink: 'syz.3.4240': attribute type 6 has an invalid length. [ 1554.929302][T22422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1555.268831][T22462] team0: Port device team_slave_0 added [ 1555.447205][T22462] team0: Port device team_slave_1 added [ 1556.015209][T17984] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1556.849629][T22462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.856612][T22462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.977311][T22462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.082293][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1557.099430][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1557.099473][T22462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.124758][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1557.153495][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1557.176421][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1557.192411][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1557.197803][T22462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.387007][T22462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.688849][T22462] hsr_slave_0: entered promiscuous mode [ 1557.842334][T22462] hsr_slave_1: entered promiscuous mode [ 1557.873793][T22462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1557.927461][T22462] Cannot create hsr debugfs directory [ 1558.281947][T22422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.038645][T22422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.212867][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.220136][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.347518][T18671] Bluetooth: hci13: command tx timeout [ 1559.463220][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.470421][T17154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.820839][T22462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.253773][T22422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1560.314092][ T9958] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1560.346952][T22422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1560.698590][T22531] Falling back ldisc for ttyS3. [ 1560.814042][T22462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.097545][T22519] chnl_net:caif_netlink_parms(): no params data found [ 1561.427747][T18671] Bluetooth: hci13: command tx timeout [ 1561.927166][T22536] Falling back ldisc for ttyS3. [ 1562.001212][T22462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.148633][T22539] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1562.167804][T22539] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1562.187404][T22539] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1562.198992][T22539] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1562.220886][T22539] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1562.237524][T22539] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1562.638649][T22462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.999939][T22422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.508521][T22540] Bluetooth: hci13: command tx timeout [ 1563.523695][T22519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.552384][T22519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.583011][T22519] bridge_slave_0: entered allmulticast mode [ 1563.604790][T22519] bridge_slave_0: entered promiscuous mode [ 1563.774790][T22540] Bluetooth: hci6: command 0x0406 tx timeout [ 1564.081885][T22519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.191063][T22519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.217827][T22519] bridge_slave_1: entered allmulticast mode [ 1564.254653][T22519] bridge_slave_1: entered promiscuous mode [ 1564.308307][T22540] Bluetooth: hci14: command tx timeout [ 1564.327053][ T5266] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1564.557355][ T5266] usb 4-1: Using ep0 maxpacket: 32 [ 1564.607486][ T5266] usb 4-1: config 0 has an invalid interface number: 141 but max is 0 [ 1564.664738][ T5266] usb 4-1: config 0 has no interface number 0 [ 1564.687463][ T5266] usb 4-1: config 0 interface 141 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1564.750431][ T5266] usb 4-1: config 0 interface 141 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1564.804523][ T5266] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1564.851678][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.878500][ T5266] usb 4-1: Product: syz [ 1564.903054][ T5266] usb 4-1: Manufacturer: syz [ 1564.930853][ T5266] usb 4-1: SerialNumber: syz [ 1564.968091][ T5266] usb 4-1: config 0 descriptor?? [ 1565.060190][T22519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.175585][T22519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.587918][T22540] Bluetooth: hci13: command tx timeout [ 1565.728479][T22462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1565.983927][T22462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1566.169232][T22519] team0: Port device team_slave_0 added [ 1566.371096][T22462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1566.387841][T22540] Bluetooth: hci14: command tx timeout [ 1566.549725][T22462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1566.649728][T22519] team0: Port device team_slave_1 added [ 1566.714474][ T5265] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1567.038406][ T5265] usb 4-1: USB disconnect, device number 91 [ 1567.661132][T22519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.767316][T22519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.007303][T22519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.202913][T22537] chnl_net:caif_netlink_parms(): no params data found [ 1568.266249][T22519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.306756][T22519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.462471][T22519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.474999][T22540] Bluetooth: hci14: command tx timeout [ 1569.295560][T22519] hsr_slave_0: entered promiscuous mode [ 1569.374734][T22519] hsr_slave_1: entered promiscuous mode [ 1569.458035][T22519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1569.465639][T22519] Cannot create hsr debugfs directory [ 1570.304397][T22422] veth0_vlan: entered promiscuous mode [ 1570.551035][T22540] Bluetooth: hci14: command tx timeout [ 1570.561480][ T5265] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1570.707581][T22579] Falling back ldisc for ttyS3. [ 1571.102789][ T2568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.024446][ T2568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.481531][ T2568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.566080][T22537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.609493][T22537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.627556][T22537] bridge_slave_0: entered allmulticast mode [ 1572.648893][T22537] bridge_slave_0: entered promiscuous mode [ 1572.678912][T22537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.686054][T22537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.727277][T22537] bridge_slave_1: entered allmulticast mode [ 1572.758631][T22537] bridge_slave_1: entered promiscuous mode [ 1572.792486][T22422] veth1_vlan: entered promiscuous mode [ 1572.847205][ T941] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1573.057207][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 1573.068504][ T2568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.121165][ T941] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1573.132454][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.159395][ T941] usb 4-1: Product: syz [ 1573.163595][ T941] usb 4-1: Manufacturer: syz [ 1573.177369][ T941] usb 4-1: SerialNumber: syz [ 1573.210141][ T941] usb 4-1: config 0 descriptor?? [ 1573.229657][ T941] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1573.284349][T22462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.335076][T22537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.468681][T22537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.744867][T22537] team0: Port device team_slave_0 added [ 1573.805815][T22537] team0: Port device team_slave_1 added [ 1573.910898][T22540] Bluetooth: hci7: command 0x0406 tx timeout [ 1573.929646][T22462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.209808][T22537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.233545][T22537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.308776][T22537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.393770][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.401061][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.446404][T22422] veth0_macvtap: entered promiscuous mode [ 1574.498645][T22537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.505612][T22537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.550503][T22586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.565251][T22537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.570100][T22586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.619826][T22407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.627059][T22407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.650447][ T941] gspca_ov534_9: reg_w failed -71 [ 1574.698311][T22422] veth1_macvtap: entered promiscuous mode [ 1574.876080][ T2568] bridge_slave_1: left allmulticast mode [ 1574.907749][ T2568] bridge_slave_1: left promiscuous mode [ 1574.913618][ T2568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.951301][ T2568] bridge_slave_0: left allmulticast mode [ 1574.961843][ T2568] bridge_slave_0: left promiscuous mode [ 1574.979964][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.077299][ T941] gspca_ov534_9: Unknown sensor 0000 [ 1575.077400][ T941] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1575.135194][ T941] usb 4-1: USB disconnect, device number 92 [ 1575.680010][ T30] INFO: task syz.0.4031:21481 blocked for more than 143 seconds. [ 1575.699307][ T30] Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1575.757407][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1575.796427][ T30] task:syz.0.4031 state:D stack:25624 pid:21481 tgid:21477 ppid:20080 flags:0x00004006 [ 1575.827140][ T30] Call Trace: [ 1575.830453][ T30] [ 1575.833403][ T30] __schedule+0x17ae/0x4a10 [ 1575.928846][ T30] ? __pfx___schedule+0x10/0x10 [ 1575.933762][ T30] ? __pfx_lock_release+0x10/0x10 [ 1575.991677][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1576.026975][ T30] ? schedule+0x90/0x320 [ 1576.031276][ T30] schedule+0x14b/0x320 [ 1576.035460][ T30] io_schedule+0x8d/0x110 [ 1576.067163][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1576.072626][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1576.113319][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1576.119307][ T30] ? format_decode+0x6bc/0x1bb0 [ 1576.124187][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1576.147842][ T30] do_read_cache_folio+0xb9/0x820 [ 1576.152932][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1576.177040][ T30] read_part_sector+0xb3/0x330 [ 1576.181865][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 1576.196982][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 1576.201802][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1576.221106][ T30] ? snprintf+0xda/0x120 [ 1576.225402][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 1576.257086][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 1576.261733][ T30] ? vsnprintf+0x184/0x1da0 [ 1576.266267][ T30] ? __pfx_snprintf+0x10/0x10 [ 1576.287160][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 1576.292069][ T30] bdev_disk_changed+0x72c/0x13d0 [ 1576.309855][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1576.323302][ T30] ? file_init_path+0x437/0x580 [ 1576.338418][ T30] blkdev_get_whole+0x2d2/0x450 [ 1576.343318][ T30] bdev_open+0x2d4/0xc60 [ 1576.357749][ T30] bdev_file_open_by_dev+0x1b0/0x230 [ 1576.363171][ T30] disk_scan_partitions+0x1be/0x2b0 [ 1576.387096][ T30] blkdev_common_ioctl+0x14e2/0x2410 [ 1576.392422][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 1576.407298][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1576.412987][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1576.437238][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1576.443291][ T30] ? __asan_memset+0x23/0x50 [ 1576.477223][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1576.482401][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1576.517330][ T30] ? file_to_blk_mode+0xd5/0x140 [ 1576.537170][ T30] blkdev_ioctl+0x4cd/0x6b0 [ 1576.541729][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1576.546779][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1576.562435][ T30] ? security_file_ioctl+0x87/0xb0 [ 1576.586934][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1576.592012][ T30] __se_sys_ioctl+0xfc/0x170 [ 1576.596629][ T30] do_syscall_64+0xf3/0x230 [ 1576.617020][ T30] ? clear_bhb_loop+0x35/0x90 [ 1576.621756][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.661394][ T30] RIP: 0033:0x7f96c07779f9 [ 1576.665866][ T30] RSP: 002b:00007f96c15b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.697061][ T30] RAX: ffffffffffffffda RBX: 00007f96c0906058 RCX: 00007f96c07779f9 [ 1576.705090][ T30] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000008 [ 1576.731949][ T30] RBP: 00007f96c07e58ee R08: 0000000000000000 R09: 0000000000000000 [ 1576.766958][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.774980][ T30] R13: 0000000000000000 R14: 00007f96c0906058 R15: 00007fff5a9243b8 [ 1576.810395][ T30] [ 1576.813519][ T30] INFO: task syz.0.4031:21487 blocked for more than 144 seconds. [ 1576.847147][ T30] Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1576.854825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1576.907120][ T30] task:syz.0.4031 state:D stack:22656 pid:21487 tgid:21477 ppid:20080 flags:0x00000004 [ 1576.936980][ T30] Call Trace: [ 1576.940303][ T30] [ 1576.943247][ T30] __schedule+0x17ae/0x4a10 [ 1576.962649][ T5266] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1576.995886][ T30] ? __pfx___schedule+0x10/0x10 [ 1577.023650][ T30] ? __pfx_lock_release+0x10/0x10 [ 1577.041290][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1577.068572][ T30] ? schedule+0x90/0x320 [ 1577.072874][ T30] schedule+0x14b/0x320 [ 1577.107567][ T30] io_schedule+0x8d/0x110 [ 1577.111960][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1577.127010][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1577.132877][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1577.160853][ T30] __filemap_get_folio+0xb7/0xc10 [ 1577.165944][ T30] iomap_write_begin+0x529/0x16f0 [ 1577.187462][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1577.193852][ T30] ? __lock_acquire+0x137a/0x2040 [ 1577.207086][ T30] ? __pfx_iomap_write_begin+0x10/0x10 [ 1577.212619][ T30] ? fault_in_readable+0x1d3/0x2b0 [ 1577.227801][ T30] ? __pfx_fault_in_readable+0x10/0x10 [ 1577.233301][ T30] ? rcu_is_watching+0x15/0xb0 [ 1577.257005][ T30] ? I_BDEV+0xd/0x20 [ 1577.260958][ T30] ? fault_in_iov_iter_readable+0x229/0x280 [ 1577.297055][ T30] iomap_file_buffered_write+0x61c/0xdc0 [ 1577.302782][ T30] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1577.337049][ T30] ? current_time+0x1be/0x2b0 [ 1577.344300][ T30] ? preempt_count_add+0x93/0x190 [ 1577.367108][ T30] ? mnt_put_write_access_file+0xbb/0x100 [ 1577.372897][ T30] ? file_update_time+0x3b8/0x430 [ 1577.417211][ T30] blkdev_write_iter+0x406/0x5d0 [ 1577.422231][ T30] vfs_write+0xa72/0xc90 [ 1577.426501][ T30] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1577.456923][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1577.461738][ T30] ? do_futex+0x33b/0x560 [ 1577.466108][ T30] ksys_write+0x1a0/0x2c0 [ 1577.503071][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1577.517153][ T30] ? do_syscall_64+0x100/0x230 [ 1577.521969][ T30] ? do_syscall_64+0xb6/0x230 [ 1577.526685][ T30] do_syscall_64+0xf3/0x230 [ 1577.567031][ T30] ? clear_bhb_loop+0x35/0x90 [ 1577.571851][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.597565][ T30] RIP: 0033:0x7f96c07779f9 [ 1577.602036][ T30] RSP: 002b:00007f96c1575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1577.657003][ T30] RAX: ffffffffffffffda RBX: 00007f96c0906208 RCX: 00007f96c07779f9 [ 1577.665030][ T30] RDX: 0000000000000012 RSI: 00000000200004c0 RDI: 0000000000000008 [ 1577.707596][ T30] RBP: 00007f96c07e58ee R08: 0000000000000000 R09: 0000000000000000 [ 1577.715618][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.777178][ T30] R13: 0000000000000000 R14: 00007f96c0906208 R15: 00007fff5a9243b8 [ 1577.785225][ T30] [ 1577.807409][ T30] [ 1577.807409][ T30] Showing all locks held in the system: [ 1577.815165][ T30] 1 lock held by khungtaskd/30: [ 1577.856107][ T30] #0: ffffffff8e7382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1577.897328][ T30] 1 lock held by kcompactd0/33: [ 1577.902225][ T30] 3 locks held by kworker/u8:4/62: [ 1577.927127][ T30] #0: ffff888029b9d948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1577.977034][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1578.027467][ T30] #2: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1578.048610][ T30] 1 lock held by kswapd0/90: [ 1578.053244][ T30] 3 locks held by kworker/0:2/941: [ 1578.087059][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1578.137236][ T30] #1: ffffc90003a57d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1578.179069][ T30] #2: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1578.217127][ T30] 5 locks held by kworker/u8:7/2568: [ 1578.222457][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1578.257282][ T30] #1: ffffc900096dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1578.307698][ T30] #2: ffffffff8fa62ed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1578.327057][ T30] #3: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 1578.336026][ T30] #4: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1578.388390][ T30] 2 locks held by dhcpcd/4883: [ 1578.393195][ T30] #0: ffff88801c2d9678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 1578.417298][ T30] #1: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 1578.426188][ T30] 2 locks held by getty/4967: [ 1578.447005][ T30] #0: ffff88802fa920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1578.468735][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1578.497626][ T30] 2 locks held by kworker/u8:2/13080: [ 1578.503048][ T30] 3 locks held by kworker/1:2/15025: [ 1578.517519][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1578.537587][ T30] #1: ffffc90002da7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1578.567076][ T30] #2: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1578.593337][ T30] 1 lock held by syz.2.3937/21107: [ 1578.607477][ T30] 1 lock held by syz.0.4031/21481: [ 1578.612626][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.637058][ T30] 1 lock held by syz.2.4075/21658: [ 1578.643688][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.667240][ T30] 1 lock held by syz.2.4100/21946: [ 1578.688006][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.707502][ T30] 1 lock held by syz.1.4157/21988: [ 1578.712654][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.737297][ T30] 1 lock held by syz.0.4180/22101: [ 1578.742439][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.776559][ T30] 1 lock held by syz.4.4208/22348: [ 1578.788027][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.807641][ T30] 1 lock held by syz.2.4216/22388: [ 1578.812805][ T30] #0: ffff8880213be4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 1578.838891][ T30] 3 locks held by kworker/u8:8/22407: [ 1578.844299][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1578.879957][ T30] #1: ffffc90004a7fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1578.907299][ T30] #2: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1578.916347][ T30] 1 lock held by syz-executor/22422: [ 1578.937113][ T30] #0: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1578.946603][ T30] 1 lock held by syz-executor/22462: [ 1578.967181][ T30] #0: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1578.976666][ T30] 7 locks held by syz-executor/22519: [ 1579.007060][ T30] #0: ffff88802a824420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1579.016037][ T30] #1: ffff88801ecde488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1579.047185][ T30] #2: ffff888022affb48 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1579.067095][ T30] #3: ffffffff8f30c8a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1579.097537][ T30] #4: ffff888015bbf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1579.117426][ T30] #5: ffff888152f98250 (&devlink->lock_key#28){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1579.137599][ T30] #6: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1579.146551][ T30] 1 lock held by syz-executor/22537: [ 1579.168538][ T30] #0: ffffffff8fa6fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1579.197652][ T30] 3 locks held by syz.3.4256/22591: [ 1579.202883][ T30] #0: ffff888163bc0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1579.226916][ T30] #1: ffff888163bc0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1579.236668][ T30] #2: ffffffff8fbdb368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1579.267810][ T30] [ 1579.270172][ T30] ============================================= [ 1579.270172][ T30] [ 1579.297159][ T30] NMI backtrace for cpu 1 [ 1579.301524][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1579.312038][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1579.322108][ T30] Call Trace: [ 1579.325394][ T30] [ 1579.328326][ T30] dump_stack_lvl+0x241/0x360 [ 1579.333009][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.338201][ T30] ? __pfx__printk+0x10/0x10 [ 1579.342784][ T30] ? vprintk_emit+0x631/0x770 [ 1579.347475][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1579.352510][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1579.357459][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1579.362910][ T30] ? _printk+0xd5/0x120 [ 1579.367089][ T30] ? __pfx__printk+0x10/0x10 [ 1579.371672][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1579.376602][ T30] ? __pfx__printk+0x10/0x10 [ 1579.381195][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1579.386212][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1579.392185][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1579.398164][ T30] watchdog+0xfee/0x1030 [ 1579.402406][ T30] ? watchdog+0x1ea/0x1030 [ 1579.406831][ T30] ? __pfx_watchdog+0x10/0x10 [ 1579.411519][ T30] kthread+0x2f0/0x390 [ 1579.415588][ T30] ? __pfx_watchdog+0x10/0x10 [ 1579.420263][ T30] ? __pfx_kthread+0x10/0x10 [ 1579.424852][ T30] ret_from_fork+0x4b/0x80 [ 1579.429263][ T30] ? __pfx_kthread+0x10/0x10 [ 1579.433847][ T30] ret_from_fork_asm+0x1a/0x30 [ 1579.438619][ T30] [ 1579.443944][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1579.450984][ C0] NMI backtrace for cpu 0 [ 1579.450998][ C0] CPU: 0 UID: 0 PID: 5266 Comm: kworker/0:6 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1579.451018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1579.451030][ C0] Workqueue: events nsim_dev_trap_report_work [ 1579.451052][ C0] RIP: 0010:memset_orig+0x3a/0xb0 [ 1579.451071][ C0] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 48 89 47 08 <48> 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 [ 1579.451086][ C0] RSP: 0018:ffffc900047df490 EFLAGS: 00000246 [ 1579.451100][ C0] RAX: 0000000000000000 RBX: ffff8881f8478000 RCX: 0000000000000000 [ 1579.451112][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffed103f08ffc0 [ 1579.451123][ C0] RBP: ffff88823fff7ef0 R08: ffffea0007e11e37 R09: 0000000000000000 [ 1579.451136][ C0] R10: ffffed103f08f000 R11: fffff94000fc23c7 R12: 0000000000000001 [ 1579.451148][ C0] R13: 0000000000000008 R14: 0000000000008000 R15: dffffc0000000000 [ 1579.451160][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1579.451174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.451191][ C0] CR2: 0000000020089000 CR3: 000000004a912000 CR4: 00000000003506f0 [ 1579.451206][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1579.451216][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1579.451227][ C0] Call Trace: [ 1579.451234][ C0] [ 1579.451242][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1579.451262][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1579.451287][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1579.451305][ C0] ? nmi_handle+0x2a/0x5a0 [ 1579.451331][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1579.451351][ C0] ? nmi_handle+0x14f/0x5a0 [ 1579.451367][ C0] ? nmi_handle+0x2a/0x5a0 [ 1579.451384][ C0] ? memset_orig+0x3a/0xb0 [ 1579.451399][ C0] ? default_do_nmi+0x63/0x160 [ 1579.451419][ C0] ? exc_nmi+0x123/0x1f0 [ 1579.451437][ C0] ? end_repeat_nmi+0xf/0x53 [ 1579.451461][ C0] ? memset_orig+0x3a/0xb0 [ 1579.451478][ C0] ? memset_orig+0x3a/0xb0 [ 1579.451495][ C0] ? memset_orig+0x3a/0xb0 [ 1579.451511][ C0] [ 1579.451517][ C0] [ 1579.451523][ C0] kasan_unpoison+0x46/0x70 [ 1579.451540][ C0] __kasan_unpoison_pages+0x24/0x30 [ 1579.451558][ C0] post_alloc_hook+0xbd/0x230 [ 1579.451577][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 1579.451601][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1579.451631][ C0] ? mark_lock+0x9a/0x350 [ 1579.451661][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 1579.451685][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 1579.451706][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1579.451731][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1579.451757][ C0] alloc_slab_page+0x5f/0x120 [ 1579.451776][ C0] allocate_slab+0x5a/0x2f0 [ 1579.451794][ C0] ___slab_alloc+0xcd1/0x14b0 [ 1579.451820][ C0] ? __alloc_skb+0x1f3/0x440 [ 1579.451842][ C0] ? __alloc_skb+0x1f3/0x440 [ 1579.451858][ C0] __slab_alloc+0x58/0xa0 [ 1579.451884][ C0] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 1579.451907][ C0] ? __alloc_skb+0x1f3/0x440 [ 1579.451925][ C0] ? __alloc_skb+0x1f3/0x440 [ 1579.451941][ C0] kmalloc_reserve+0x111/0x2a0 [ 1579.451961][ C0] __alloc_skb+0x1f3/0x440 [ 1579.451981][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1579.452000][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1579.452018][ C0] ? kmem_cache_free+0x145/0x350 [ 1579.452043][ C0] nsim_dev_trap_report_work+0x254/0xaa0 [ 1579.452072][ C0] ? process_scheduled_works+0x945/0x1830 [ 1579.452092][ C0] process_scheduled_works+0xa2c/0x1830 [ 1579.452129][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1579.452156][ C0] ? assign_work+0x364/0x3d0 [ 1579.452185][ C0] worker_thread+0x86d/0xd40 [ 1579.452215][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1579.452239][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1579.452260][ C0] kthread+0x2f0/0x390 [ 1579.452283][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1579.452304][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.452328][ C0] ret_from_fork+0x4b/0x80 [ 1579.452350][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.452373][ C0] ret_from_fork_asm+0x1a/0x30 [ 1579.452404][ C0] [ 1579.957309][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1579.964203][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 1579.974715][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1579.984779][ T30] Call Trace: [ 1579.988066][ T30] [ 1579.991007][ T30] dump_stack_lvl+0x241/0x360 [ 1579.995704][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1580.000916][ T30] ? __pfx__printk+0x10/0x10 [ 1580.005527][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1580.011538][ T30] ? vscnprintf+0x5d/0x90 [ 1580.015875][ T30] panic+0x349/0x860 [ 1580.019787][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1580.025948][ T30] ? __pfx_panic+0x10/0x10 [ 1580.030377][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1580.035763][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1580.041324][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1580.046706][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1580.052866][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1580.059036][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1580.065202][ T30] watchdog+0x102d/0x1030 [ 1580.069543][ T30] ? watchdog+0x1ea/0x1030 [ 1580.073976][ T30] ? __pfx_watchdog+0x10/0x10 [ 1580.078669][ T30] kthread+0x2f0/0x390 [ 1580.082760][ T30] ? __pfx_watchdog+0x10/0x10 [ 1580.087452][ T30] ? __pfx_kthread+0x10/0x10 [ 1580.092062][ T30] ret_from_fork+0x4b/0x80 [ 1580.096499][ T30] ? __pfx_kthread+0x10/0x10 [ 1580.101109][ T30] ret_from_fork_asm+0x1a/0x30 [ 1580.105901][ T30] [ 1580.109141][ T30] Kernel Offset: disabled [ 1580.113452][ T30] Rebooting in 86400 seconds..