last executing test programs: 1m51.402437746s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m37.841616452s ago: executing program 0 (id=3336): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0xff02, 0x4, 0x0, 0x3, 0x0, "f78c5603939fd820"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1m36.775478354s ago: executing program 0 (id=3339): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x7, 0x20, 0xffffffff, 0x0]}]}}}}}}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 1m35.68150685s ago: executing program 0 (id=3343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000660000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000001c0)="66bad004ec66baf80cb8e44eda8def66bafc0cb886e90000effdd93ac744240000980000c74424029100c0fe0f01cb0f011c24c74424002b010000c74424020d000000ff2c243e65f3420f0936262626460f01cf260f01c966b8e7008ec867d9e9", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x190003, 0x0, [0x8, 0xc24c, 0x0, 0x8, 0x8, 0x4e4, 0xe30351e, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.565518477s ago: executing program 0 (id=3347): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x224) 1m34.309106886s ago: executing program 0 (id=3349): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x40}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.587348503s ago: executing program 0 (id=3354): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 1m32.329896667s ago: executing program 32 (id=3354): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 1m29.75149352s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.183418565s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.769130085s ago: executing program 3 (id=3486): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000580)=""/159, 0x9f}], 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 1m1.678434508s ago: executing program 3 (id=3488): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x270, 0x280, 0x280, 0x0, 0x280, 0x338, 0x365, 0x350, 0x338, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'syzkaller1\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xff], [0x0, 0xffffffff], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 57.881255136s ago: executing program 3 (id=3499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/97, 0x4}], 0x1, 0x0, 0x0, 0x0) 56.869148505s ago: executing program 3 (id=3505): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 56.585397167s ago: executing program 3 (id=3507): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xce}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) 56.155080122s ago: executing program 3 (id=3509): syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x16a) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x8f, 0x0, 0xfffffffffffffffc}) 55.618217277s ago: executing program 33 (id=3509): syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x16a) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x8f, 0x0, 0xfffffffffffffffc}) 53.276092992s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.931791166s ago: executing program 5 (id=3533): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="140100001f000103000000000000000001"], 0x114}], 0x1}, 0x0) 50.780738678s ago: executing program 5 (id=3536): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000300)) 50.703629105s ago: executing program 5 (id=3538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x80, 0x686, 0x9b5f, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @loopback, @remote}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 50.521543653s ago: executing program 5 (id=3539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00') 50.433521725s ago: executing program 5 (id=3540): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/124, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xdddd1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 49.813421599s ago: executing program 5 (id=3543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00001100000000000000624703a511c106"], 0x11f7) 49.58626642s ago: executing program 34 (id=3543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00001100000000000000624703a511c106"], 0x11f7) 31.602447288s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.832581954s ago: executing program 6 (id=3623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x4}]}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = eventfd2(0x8, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x800000000, 0x0, 0x8, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.715842373s ago: executing program 2 (id=3624): sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="aba5751e3b3a7cf910779aa4accdedfb6e4b8a8346b9", 0x16, 0x40000, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 23.45721148s ago: executing program 6 (id=3625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000fa66a73d32df16bc070000000100010009000085badeebbd1e7b94b6", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000006e253e8004a8888f3ca359b44642e7c425d27ede54838474075db6b3c51c37a09f60c8435f019524b319af0cefaa40f196b8912cd938f38ee205fd5a4c29f035364bf383c10a2f7f212fafd5000ca1a0176545ffa", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgroups(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x6c}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) readv(0xffffffffffffffff, 0x0, 0x0) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 22.455605868s ago: executing program 6 (id=3626): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x200100, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 22.361059513s ago: executing program 6 (id=3627): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, 0x0, 0x4, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) 21.621400035s ago: executing program 2 (id=3631): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 21.296902255s ago: executing program 6 (id=3633): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 20.98535929s ago: executing program 6 (id=3636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0xfffffffd, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xfffffffd, 0x2, r2}) 19.929339782s ago: executing program 2 (id=3638): bpf$LINK_DETACH(0x22, 0x0, 0x0) eventfd(0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x64}}, 0x0) 18.555999894s ago: executing program 2 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x110) 17.907360281s ago: executing program 2 (id=3643): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') r2 = fanotify_init(0x0, 0x2) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/49, 0x31}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000340)=""/183, 0xb7) 17.773386583s ago: executing program 2 (id=3645): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 17.380260795s ago: executing program 35 (id=3645): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 12.556047827s ago: executing program 4 (id=3263): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000100)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b88828000066baf80cb8844b5f83ef66bafc0c66b87d0c66ef0f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb17b0b00000f323ed3db", 0x75}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.303203319s ago: executing program 1 (id=3673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000fa66a73d32df16bc070000000100010009000085badeebbd1e7b94b6", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100001600000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000006e253e8004a8888f3ca359b44642e7c425d27ede54838474075db6b3c51c37a09f60c8435f019524b319af0cefaa40f196b8912cd938f38ee205fd5a4c29f035364bf383c10a2f7f212fafd5000ca1a0176545ffa", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgroups(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x6c}}, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) readv(0xffffffffffffffff, 0x0, 0x0) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) 7.286976195s ago: executing program 7 (id=3674): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x10023, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 6.178989362s ago: executing program 1 (id=3675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = socket(0x1e, 0x4, 0x0) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000180)=""/34, 0x22}], 0x2}, 0x20) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "ba8a619f900e097eb2f4ad5a5f"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x8010) 6.103907732s ago: executing program 7 (id=3676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000240)=0x9) 5.862561581s ago: executing program 7 (id=3677): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x48, 0x2c, 0xd27, 0x40000, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x20000000) 5.769586387s ago: executing program 1 (id=3678): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @random="39ac19e44ffe"}, 0x10) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0x0, 0x1}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) 4.658694941s ago: executing program 36 (id=3636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0xfffffffd, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xfffffffd, 0x2, r2}) 3.81591235s ago: executing program 7 (id=3680): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.535643753s ago: executing program 1 (id=3681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.493549532s ago: executing program 1 (id=3682): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000001980)=""/1, 0x1}], 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 1.411909265s ago: executing program 1 (id=3683): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mount$pvfs2(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000002380)=ANY=[@ANYBLOB="23242c726e67002c002c232c2f6465762f76696d326d000c66756e4c5f434845434b2c736d61f5122b38a10b5733723d2c001a2ffa64e99f2e9d061608fe35af00"/77]) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002340)={[{@quota}, {@huge_always}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="e40000000201010800000000000000000a0000b5623ff3c08fb8db80050001"], 0xe4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800e10200000000000000000a800000"], 0x30}}, 0x10010) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) 417.461042ms ago: executing program 7 (id=3684): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 7 (id=3685): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x8, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmm'], 0xa) kernel console output (not intermixed with test programs): 2-1: USB disconnect, device number 44 [ 1414.580263][T15394] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1415.156076][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803536f800: rx timeout, send abort [ 1415.174980][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803536f800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1415.895776][ T5837] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input119 [ 1416.110148][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 1416.119301][T18074] netem: invalid attributes len -9 [ 1416.122611][ T5837] usb 1-1: USB disconnect, device number 34 [ 1416.124614][T18074] netem: change failed [ 1416.437601][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1416.747405][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1416.765420][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.853582][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.043410][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.253406][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1417.286572][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.312693][ T25] usb 3-1: config 0 descriptor?? [ 1417.854801][T18104] netlink: 'syz.0.3059': attribute type 10 has an invalid length. [ 1417.870304][T18104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1417.908372][T18104] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1417.927932][T18104] team0: Failed to send options change via netlink (err -105) [ 1417.942238][T18104] team0: Port device geneve0 added [ 1418.124306][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 1418.134910][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1418.147494][ T25] usb 3-1: USB disconnect, device number 50 [ 1420.262594][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1422.566316][T18185] pim6reg1: entered promiscuous mode [ 1422.571871][T18185] pim6reg1: entered allmulticast mode [ 1422.681463][T12143] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1423.054678][T12143] usb 1-1: Using ep0 maxpacket: 16 [ 1423.061469][T12143] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.072210][T12143] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1423.089579][T12143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.154661][T12143] usb 1-1: config 0 descriptor?? [ 1423.163835][T18201] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1423.199641][T12143] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input120 [ 1423.382054][T18183] input: syz0 as /devices/virtual/input/input121 [ 1423.507793][ T5180] bcm5974 1-1:0.0: could not read from device [ 1423.558021][ T5180] bcm5974 1-1:0.0: could not read from device [ 1423.588524][T12143] usb 1-1: USB disconnect, device number 35 [ 1423.597817][ T5180] bcm5974 1-1:0.0: could not read from device [ 1423.631715][ T5180] bcm5974 1-1:0.0: could not read from device [ 1425.069106][ T29] audit: type=1804 audit(1736445256.876:186): pid=18223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.3100" name="/newroot/571/file0/file0" dev="ramfs" ino=54871 res=1 errno=0 [ 1425.255089][T18230] kvm: user requested TSC rate below hardware speed [ 1425.831604][T18243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.080461][T18256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1427.344170][T18264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 1427.982306][T18281] pim6reg1: entered allmulticast mode [ 1429.389224][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 1430.228077][ T5871] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1430.446936][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1430.457396][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1430.470854][ T5871] usb 2-1: can't read configurations, error -71 [ 1430.524897][T18334] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1430.534654][T18334] overlayfs: failed to set xattr on upper [ 1430.540992][T15394] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1430.553669][T18334] overlayfs: ...falling back to redirect_dir=nofollow. [ 1430.560747][T18334] overlayfs: ...falling back to index=off. [ 1430.566575][T18334] overlayfs: ...falling back to uuid=null. [ 1430.574629][T18334] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1430.709282][T15394] usb 1-1: Using ep0 maxpacket: 8 [ 1430.721533][T15394] usb 1-1: config 252 has an invalid interface number: 217 but max is 0 [ 1430.729918][T15394] usb 1-1: config 252 has no interface number 0 [ 1430.752018][T15394] usb 1-1: config 252 interface 217 has no altsetting 0 [ 1430.759006][T15394] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 1430.783915][T15394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.798167][T15394] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1430.826761][T15394] dvb-usb: bulk message failed: -22 (2/0) [ 1430.832556][T15394] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1430.848655][T15394] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1430.869722][T15394] usb 1-1: media controller created [ 1430.890702][T15394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1430.914918][T15394] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1430.924241][T15394] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1430.975168][ T29] audit: type=1326 audit(1736445262.395:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18335 comm="syz.2.3140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e27985d29 code=0x0 [ 1430.997846][T15394] rc_core: IR keymap rc-dtt200u not found [ 1431.003616][T15394] Registered IR keymap rc-empty [ 1431.011957][T15394] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1431.041872][T15394] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input122 [ 1431.080679][T18344] binder: 18342:18344 ioctl 4018620d 0 returned -22 [ 1431.086656][T15394] dvb-usb: schedule remote query interval to 300 msecs. [ 1431.105310][T15394] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1431.147744][T18345] binder: 18342:18345 ioctl c0306201 0 returned -14 [ 1431.194290][T18347] input: syz0 as /devices/virtual/input/input123 [ 1431.439642][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1431.445657][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1431.650784][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 1432.140237][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1432.146293][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1432.483834][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1432.491354][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1432.823821][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1432.831608][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1432.837622][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1433.008067][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1433.034925][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.048331][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.069764][ T25] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1433.080556][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.104943][ T25] usb 3-1: config 0 descriptor?? [ 1433.178852][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1433.184643][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1433.478815][T18382] fuse: root generation should be zero [ 1433.527296][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1433.545802][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1433.615623][ T25] macally 0003:060B:0001.0039: unexpected long global item [ 1433.623576][ T25] macally 0003:060B:0001.0039: probe with driver macally failed with error -22 [ 1433.840459][T15394] usb 3-1: USB disconnect, device number 51 [ 1433.884386][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1433.891456][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1434.275289][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1434.281828][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1434.625644][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1434.631507][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1434.997299][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1435.003084][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1435.348990][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1435.354929][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1435.478121][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1435.653546][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1435.670376][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1435.691164][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1435.692872][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1435.699843][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1435.720032][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.728221][ T25] usb 3-1: Product: syz [ 1435.732419][ T25] usb 3-1: Manufacturer: syz [ 1435.748040][ T25] usb 3-1: SerialNumber: syz [ 1435.765608][ T25] usb 3-1: config 0 descriptor?? [ 1435.783434][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1435.792869][ T25] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1436.013250][ T29] audit: type=1804 audit(1736445267.100:188): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3163" name="/newroot/577/file0/file1" dev="ramfs" ino=56178 res=1 errno=0 [ 1436.054547][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1436.060393][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1436.396715][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1436.402538][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1436.447621][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1436.616372][T18378] syz_tun: entered allmulticast mode [ 1436.622250][T18378] syz_tun: left allmulticast mode [ 1436.628655][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3158'. [ 1436.738872][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1436.747921][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1437.091893][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1437.097680][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1437.122805][ T25] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1437.147069][ T25] em28xx 3-1:0.0: board has no eeprom [ 1437.208738][T18432] loop6: detected capacity change from 0 to 524287999 [ 1437.216153][ C1] blk_print_req_error: 21 callbacks suppressed [ 1437.216165][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.231542][ C1] buffer_io_error: 4 callbacks suppressed [ 1437.231552][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.250351][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.251763][ T25] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1437.259563][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.260958][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.274130][ T25] em28xx 3-1:0.0: dvb set to bulk mode. [ 1437.275270][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.289794][ T5871] em28xx 3-1:0.0: Binding DVB extension [ 1437.305944][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.315177][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.335930][ T25] usb 3-1: USB disconnect, device number 52 [ 1437.343935][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.353163][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.361928][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 1437.370387][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1437.379653][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1437.419718][ T5871] em28xx 3-1:0.0: Registering input extension [ 1437.427321][ T25] em28xx 3-1:0.0: Closing input extension [ 1437.435381][T18436] loop6: detected capacity change from 524287999 to 524288000 [ 1437.443547][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1437.449443][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1437.461791][T18432] loop6: unable to read partition table [ 1437.467843][T18432] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 1437.502038][ T25] em28xx 3-1:0.0: Freeing device [ 1437.786611][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1437.792590][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1438.128535][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1438.134346][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1439.028583][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.046995][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.057786][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.079716][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.090172][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.108802][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.122702][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.124964][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1439.142394][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.166558][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.172367][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1439.195342][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.230091][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.237533][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.272283][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.279770][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.289461][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.297654][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.305278][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.312724][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.320514][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1439.354079][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.368594][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.376070][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.395536][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.406360][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.422071][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.430082][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.443489][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.450927][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.491797][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.507660][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.529162][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1439.539711][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.547263][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.550331][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1439.555864][ T25] usb 5-1: config 0 has no interfaces? [ 1439.573251][ T25] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1439.593167][ T79] hid-generic 0000:0000:0003.003A: unknown main item tag 0x0 [ 1439.601542][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.612898][ T79] hid-generic 0000:0000:0003.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1439.633989][ T25] usb 5-1: config 0 descriptor?? [ 1439.913823][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1439.938519][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1439.942032][ T79] usb 5-1: USB disconnect, device number 54 [ 1440.298853][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1440.315482][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1441.041595][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1441.047483][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1441.485306][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1441.491090][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1441.580475][T18507] ALSA: seq fatal error: cannot create timer (-22) [ 1441.747931][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.755520][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.763473][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.770895][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.778701][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.786545][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.794264][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.801951][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.809739][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.817341][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.824758][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.832321][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.839781][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.847325][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.854930][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.862390][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.869825][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.870550][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1441.877324][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.890398][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.897875][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.905351][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.907392][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1441.912740][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.927999][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.935462][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.942860][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.950334][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.957916][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.965974][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.973582][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.981395][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.988913][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1441.996641][ T79] hid-generic 0000:0000:0003.003B: unknown main item tag 0x0 [ 1442.016771][ T79] hid-generic 0000:0000:0003.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1442.065300][T18516] netlink: 'syz.1.3203': attribute type 1 has an invalid length. [ 1442.276503][ T7151] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1442.312421][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1442.318722][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1443.013513][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1443.053297][ T7151] usb 5-1: config 0 has no interfaces? [ 1443.063204][ T7151] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1443.073171][ T7151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.108539][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1443.162049][ T7151] usb 5-1: config 0 descriptor?? [ 1443.474772][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1443.480674][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1443.742486][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1443.816030][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1443.822148][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1443.963893][T12143] usb 5-1: USB disconnect, device number 55 [ 1444.266479][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1444.272266][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1444.606960][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1444.618790][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1444.949270][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1444.970389][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1445.302334][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1445.308124][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1445.510973][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1445.652669][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1445.665553][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1446.029356][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1446.035235][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1446.832760][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1446.838587][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1447.173693][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1447.179492][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1447.523359][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1447.529268][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1447.867881][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1447.873969][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1448.017280][T12143] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1448.177662][T12143] usb 5-1: Using ep0 maxpacket: 16 [ 1448.184266][T12143] usb 5-1: config 157 interface 0 has no altsetting 0 [ 1448.193170][T12143] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1448.202738][T12143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.211058][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1448.216801][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1448.224702][T12143] usb 5-1: Product: syz [ 1448.228876][T12143] usb 5-1: Manufacturer: syz [ 1448.234452][T12143] usb 5-1: SerialNumber: syz [ 1448.562553][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1448.570147][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1448.595468][T18633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.611370][T18633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.681761][T12143] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1448.698536][T12143] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1448.709110][T12143] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1448.717750][T12143] usb 5-1: media controller created [ 1448.730186][T12143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1448.896467][T12143] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1448.906096][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1448.911843][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1448.939836][T12143] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1448.952085][T12143] usb 5-1: USB disconnect, device number 56 [ 1449.257405][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1449.264611][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1449.284531][T18635] tipc: Enabled bearer , priority 10 [ 1449.600548][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1449.609303][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1450.555412][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1450.561205][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1450.893141][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1450.899037][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1451.019941][T15493] bridge0: port 4(syz_tun) entered disabled state [ 1451.079719][T15493] syz_tun (unregistering): left allmulticast mode [ 1451.089217][T15493] syz_tun (unregistering): left promiscuous mode [ 1451.096121][T15493] bridge0: port 4(syz_tun) entered disabled state [ 1451.256843][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1451.269967][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1451.327357][T18674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1451.336868][T15394] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1451.506289][T15394] usb 2-1: Using ep0 maxpacket: 8 [ 1451.540919][T15394] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 1451.549370][T15394] usb 2-1: config 0 has no interface number 0 [ 1451.564094][T15394] usb 2-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=15.ab [ 1451.596976][T15394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.618556][T15394] usb 2-1: Product: syz [ 1451.622968][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1451.628708][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1451.688090][T15394] usb 2-1: Manufacturer: syz [ 1451.688115][T15394] usb 2-1: SerialNumber: syz [ 1451.724848][T15394] usb 2-1: config 0 descriptor?? [ 1451.727535][T15394] iowarrior 2-1:0.211: no interrupt-in endpoint found [ 1452.497836][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1452.503615][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1452.563216][T15394] usb 2-1: USB disconnect, device number 47 [ 1452.838768][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1452.844541][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1452.937043][T18695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1452.946649][ T9800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1452.966429][ T9800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1452.976699][ T9800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1452.995106][ T9800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.010728][ T9800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1453.018364][ T9800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1453.042446][ T29] audit: type=1326 audit(1736445283.039:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.073898][ T9464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.082733][ T9464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1453.090782][ T9464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1453.113157][ T29] audit: type=1326 audit(1736445283.039:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.126522][ T9464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.135205][ T29] audit: type=1326 audit(1736445283.039:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.135241][ T29] audit: type=1326 audit(1736445283.039:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.135269][ T29] audit: type=1326 audit(1736445283.039:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.135299][ T29] audit: type=1326 audit(1736445283.039:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.135328][ T29] audit: type=1326 audit(1736445283.039:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.252005][ T29] audit: type=1326 audit(1736445283.039:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.273768][ T29] audit: type=1326 audit(1736445283.039:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.295572][ T29] audit: type=1326 audit(1736445283.039:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18700 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e27985d29 code=0x7fc00000 [ 1453.309567][ T9464] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1453.318084][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1453.328164][ T9464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1453.330000][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1453.998481][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1454.004757][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1454.038062][T18701] lo speed is unknown, defaulting to 1000 [ 1454.646377][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1454.652159][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1454.878570][T18701] chnl_net:caif_netlink_parms(): no params data found [ 1454.987519][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1454.993385][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1455.091877][ T79] kernel write not supported for file /sysvipc/msg (pid: 79 comm: kworker/1:1) [ 1455.101582][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.115099][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.141937][T18701] bridge_slave_0: entered allmulticast mode [ 1455.152546][T18701] bridge_slave_0: entered promiscuous mode [ 1455.259823][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.334320][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.351366][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1455.351416][T18701] bridge_slave_1: entered allmulticast mode [ 1455.357122][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1455.380670][T18701] bridge_slave_1: entered promiscuous mode [ 1455.450303][T18701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.471447][T18701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.619222][T18754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1455.691032][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1455.716618][ T9800] Bluetooth: hci2: command tx timeout [ 1455.717274][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1456.062704][T18701] team0: Port device team_slave_0 added [ 1456.103461][T18701] team0: Port device team_slave_1 added [ 1456.153461][T18701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.171131][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.221086][T18701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.237981][T18701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.246088][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.288656][T18701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.354432][T18701] hsr_slave_0: entered promiscuous mode [ 1456.367034][T18701] hsr_slave_1: entered promiscuous mode [ 1456.391877][T18701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.400480][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1456.406233][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1456.431793][T18701] Cannot create hsr debugfs directory [ 1457.313160][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1457.349637][T18772] vivid-000: disconnect [ 1457.357435][T18769] vivid-000: reconnect [ 1457.398255][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1457.451756][T18701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.737692][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1457.752262][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1458.028564][ T9800] Bluetooth: hci2: command tx timeout [ 1458.141392][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1458.147189][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1458.434540][T18701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.103732][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1459.109516][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1459.286806][T18701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.303966][T18799] input: syz0 as /devices/virtual/input/input125 [ 1459.469769][T18701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.531051][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1459.536833][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1460.553409][ T9800] Bluetooth: hci2: command tx timeout [ 1460.814347][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1460.820222][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1461.166832][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1461.178596][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1461.262934][T18821] kvm: kvm [18820]: vcpu0, guest rIP: 0x19 Unhandled WRMSR(0xc1) = 0xd [ 1461.285670][T18821] kvm: kvm [18820]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 1461.305117][T18701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1461.363385][T18701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1461.413084][T18701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1461.433632][T18701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1461.448930][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.464227][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.473589][T18833] input: syz0 as /devices/virtual/input/input126 [ 1461.488585][T18835] tipc: New replicast peer: 0.0.0.0 [ 1461.493985][T18835] tipc: Enabled bearer , priority 10 [ 1461.526585][T18837] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1461.530246][T12143] dvb-usb: bulk message failed: -22 (1/0) [ 1461.543314][T12143] dvb-usb: error -22 while querying for an remote control event. [ 1461.622276][T18701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.651032][T18701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.671445][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.678609][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.726371][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.733538][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.834441][T18701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1461.869993][T18701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1461.880713][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1461.896872][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1461.972145][T18847] : renamed from ipvlan1 [ 1462.637563][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1462.643482][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1462.707117][ T9800] Bluetooth: hci2: command tx timeout [ 1462.755734][ T5837] tipc: Node number set to 2130706433 [ 1462.973553][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1462.980697][T18701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.989706][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1464.042824][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1464.048777][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1464.171261][T18701] veth0_vlan: entered promiscuous mode [ 1464.194815][T18701] veth1_vlan: entered promiscuous mode [ 1464.254201][T18701] veth0_macvtap: entered promiscuous mode [ 1464.294021][T18701] veth1_macvtap: entered promiscuous mode [ 1464.334901][T18701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.348941][T18701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.362191][T18701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.373605][T18701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.384792][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1464.394922][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1464.417995][T18701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.439033][T18701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.467943][T18701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.489733][T18701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.507136][T18701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.519521][T18701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.536298][T18701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.551727][T18701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.608575][T18701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.622966][T18701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.644724][T18701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.666377][T18701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.737510][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1464.738297][T15394] dvb-usb: bulk message failed: -22 (1/0) [ 1464.780152][T15394] dvb-usb: error -22 while querying for an remote control event. [ 1464.919339][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1464.937704][ T25] usb 2-1: config 0 has no interfaces? [ 1464.945990][ T25] usb 2-1: New USB device found, idVendor=0445, idProduct=5010, bcdDevice= 0.00 [ 1465.161772][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.462727][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1465.468626][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1465.561904][ T25] usb 2-1: config 0 descriptor?? [ 1465.709629][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.730318][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.836193][T15607] dvb-usb: bulk message failed: -22 (1/0) [ 1465.849282][T15607] dvb-usb: error -22 while querying for an remote control event. [ 1465.884304][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.893731][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.916389][T15607] usb 2-1: USB disconnect, device number 48 [ 1466.511134][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 1466.610008][ T5837] dvb-usb: error -22 while querying for an remote control event. [ 1467.024369][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1467.426090][T15607] dvb-usb: bulk message failed: -22 (1/0) [ 1467.431976][T15607] dvb-usb: error -22 while querying for an remote control event. [ 1467.833408][T11967] dvb-usb: bulk message failed: -22 (1/0) [ 1467.839842][T11967] dvb-usb: error -22 while querying for an remote control event. [ 1469.113631][T11967] dvb-usb: bulk message failed: -22 (1/0) [ 1469.119422][T11967] dvb-usb: error -22 while querying for an remote control event. [ 1469.660200][T11967] dvb-usb: bulk message failed: -22 (1/0) [ 1469.666686][T11967] dvb-usb: error -22 while querying for an remote control event. [ 1469.993419][T15607] usb 1-1: USB disconnect, device number 36 [ 1470.110668][T18954] Process accounting resumed [ 1470.119244][T15607] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1471.307521][ T9464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1471.334193][ T9464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1471.350968][ T9464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1471.607639][ T9464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1471.618679][ T9464] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1471.626832][ T9464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1472.498860][T18970] lo speed is unknown, defaulting to 1000 [ 1472.914010][T18970] chnl_net:caif_netlink_parms(): no params data found [ 1473.090556][ T2978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.398345][T17610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1473.414268][T17610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1473.415678][ T2978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.433082][T17610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1473.446565][T17610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1473.457153][T17610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1473.464738][T17610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1473.587709][ T2978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.732572][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1473.842794][ T9800] Bluetooth: hci2: command tx timeout [ 1474.651646][T18970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.659006][T18970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.667317][T18970] bridge_slave_0: entered allmulticast mode [ 1474.675380][T18970] bridge_slave_0: entered promiscuous mode [ 1474.715921][T18970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.723411][T18970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.730640][T18970] bridge_slave_1: entered allmulticast mode [ 1474.738131][T18970] bridge_slave_1: entered promiscuous mode [ 1474.948545][ T2978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.014880][T18970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.056765][T18970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.167593][T19048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1475.209879][T18970] team0: Port device team_slave_0 added [ 1475.260334][T18970] team0: Port device team_slave_1 added [ 1475.290007][T19020] lo speed is unknown, defaulting to 1000 [ 1475.396489][T18970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.403481][T18970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.441320][T18970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.471814][ T2978] bridge_slave_1: left allmulticast mode [ 1475.477978][ T2978] bridge_slave_1: left promiscuous mode [ 1475.484463][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.500501][ T2978] bridge_slave_0: left allmulticast mode [ 1475.507002][ T2978] bridge_slave_0: left promiscuous mode [ 1475.512967][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.707336][ T9800] Bluetooth: hci3: command tx timeout [ 1476.058841][T17610] Bluetooth: hci2: command 0x041b tx timeout [ 1476.137993][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.150226][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.160816][ T2978] bond0 (unregistering): Released all slaves [ 1476.171746][T18970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.182291][T18970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1476.208748][ T5871] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1476.228135][T18970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.398090][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1476.415353][ T5871] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1476.432989][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.458386][ T5871] usb 2-1: config 0 descriptor?? [ 1476.699159][T18970] hsr_slave_0: entered promiscuous mode [ 1476.736047][T18970] hsr_slave_1: entered promiscuous mode [ 1476.749228][T18970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1476.764416][T18970] Cannot create hsr debugfs directory [ 1476.948538][ T5871] uclogic 0003:5543:0003.003C: No inputs registered, leaving [ 1477.035423][ T5871] uclogic 0003:5543:0003.003C: hidraw0: USB HID v0.01 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 1477.581126][ T5871] usb 2-1: USB disconnect, device number 49 [ 1477.796205][T19020] chnl_net:caif_netlink_parms(): no params data found [ 1477.868008][ T2978] hsr_slave_0: left promiscuous mode [ 1477.907331][ T2978] hsr_slave_1: left promiscuous mode [ 1477.921344][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.933588][T17610] Bluetooth: hci3: command tx timeout [ 1477.939173][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.954653][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.962450][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.991029][ T2978] veth1_macvtap: left promiscuous mode [ 1477.996878][ T2978] veth0_macvtap: left promiscuous mode [ 1478.002490][ T2978] veth1_vlan: left promiscuous mode [ 1478.008478][ T2978] veth0_vlan: left promiscuous mode [ 1478.271672][T17610] Bluetooth: hci2: command 0x041b tx timeout [ 1479.163078][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 1479.291353][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 1480.162000][T17610] Bluetooth: hci3: command tx timeout [ 1480.451927][T19020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.504030][T17610] Bluetooth: hci2: command 0x041b tx timeout [ 1480.581051][T19020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.589888][T19020] bridge_slave_0: entered allmulticast mode [ 1480.606569][T19020] bridge_slave_0: entered promiscuous mode [ 1480.840219][T19020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.848153][T19020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.089181][T19020] bridge_slave_1: entered allmulticast mode [ 1481.243776][T19020] bridge_slave_1: entered promiscuous mode [ 1481.460177][T19020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.515967][T19020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.584379][T18970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1481.644370][T18970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1481.849273][T18970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1481.919936][T19020] team0: Port device team_slave_0 added [ 1481.938725][T18970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1481.993004][T19020] team0: Port device team_slave_1 added [ 1482.269291][T19020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.276453][T19020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.422389][T17610] Bluetooth: hci3: command tx timeout [ 1482.456086][T19020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.498664][T19020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.508784][T19020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.546920][T19020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.638775][T19020] hsr_slave_0: entered promiscuous mode [ 1482.646267][T19020] hsr_slave_1: entered promiscuous mode [ 1482.656728][T19020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1482.664501][T19020] Cannot create hsr debugfs directory [ 1482.719563][T17610] Bluetooth: hci2: command 0x041b tx timeout [ 1482.732818][T19194] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1482.766092][T19194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1483.098959][T18970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.188141][T18970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.208777][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.215980][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.364656][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.372006][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.602867][T19020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1484.637165][T19020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1484.678290][T19020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1484.693515][T19230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.703219][T15607] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1484.758520][T18970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.810428][T19020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1484.868565][T15607] usb 3-1: Using ep0 maxpacket: 32 [ 1484.880349][T15607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.899927][T15607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.932715][T15607] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1484.941808][T15607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.997096][T15607] usb 3-1: config 0 descriptor?? [ 1485.033647][T15607] hub 3-1:0.0: USB hub found [ 1485.086926][T19020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.143837][T19020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.198609][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.205856][T11257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.230533][T15607] hub 3-1:0.0: 1 port detected [ 1485.279715][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.286899][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.440875][T18970] veth0_vlan: entered promiscuous mode [ 1485.451505][T15607] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1485.471519][T15607] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1485.487769][T18970] veth1_vlan: entered promiscuous mode [ 1485.503546][T15607] usbhid 3-1:0.0: can't add hid device: -71 [ 1485.510309][T15607] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1485.553484][T15607] usb 3-1: USB disconnect, device number 53 [ 1485.591842][T18970] veth0_macvtap: entered promiscuous mode [ 1485.637025][T18970] veth1_macvtap: entered promiscuous mode [ 1485.679655][T18970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.711974][T18970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.724757][T18970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.751316][T18970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.774238][T18970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.816108][T18970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.839505][T18970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.858394][T18970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.879926][T18970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.905778][T18970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.922895][T18970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.949596][T18970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.994217][T19020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.012637][T18970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.022228][T18970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.040341][T18970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.055551][T18970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.267237][T11257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.288406][T11257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.347662][T11854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.383276][T11854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.331256][T19290] ip6erspan0: entered allmulticast mode [ 1487.811373][T19020] veth0_vlan: entered promiscuous mode [ 1487.822413][T19020] veth1_vlan: entered promiscuous mode [ 1487.952101][T19020] veth0_macvtap: entered promiscuous mode [ 1487.980955][T19306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1488.020853][T19020] veth1_macvtap: entered promiscuous mode [ 1488.093271][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.133586][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.169160][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.218159][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3432'. [ 1488.239593][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.263985][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.294218][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.332525][T19020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.366867][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.385578][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.395454][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.447344][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.458132][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.469795][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.480075][T19020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.502618][T19020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.540849][T19020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.557744][T19020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.566501][T19020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.575506][T19020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.584376][T19020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.829584][T11854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.855651][T11854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.903466][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.925310][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.984604][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1489.192954][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1489.218694][ T25] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1489.227190][ T25] usb 6-1: config 0 has no interface number 0 [ 1489.277086][ T25] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1489.356172][ T25] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1489.391358][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.399515][ T25] usb 6-1: Product: syz [ 1489.461518][ T25] usb 6-1: Manufacturer: syz [ 1489.518914][ T25] usb 6-1: SerialNumber: syz [ 1489.653625][ T25] usb 6-1: config 0 descriptor?? [ 1489.800730][ T6265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.237441][ T6265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.204220][ T6265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.279485][T19381] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1491.923468][ T25] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1491.932091][ T25] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1491.939595][ T25] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1491.955715][ T25] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1492.070646][ T25] usb 6-1: USB disconnect, device number 2 [ 1492.210919][ T9464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1492.235855][ T9464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1492.265782][ T9464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1492.294274][ T9464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1492.315131][ T6265] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.330165][ T9464] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1492.337574][ T9464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1493.124384][T19387] lo speed is unknown, defaulting to 1000 [ 1493.144400][ T6265] bridge_slave_1: left allmulticast mode [ 1493.150194][ T6265] bridge_slave_1: left promiscuous mode [ 1493.158342][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.246212][ T6265] bridge_slave_0: left allmulticast mode [ 1493.253576][ T6265] bridge_slave_0: left promiscuous mode [ 1493.260924][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.539218][T17610] Bluetooth: hci3: command tx timeout [ 1495.170973][T19447] netlink: 'syz.5.3465': attribute type 1 has an invalid length. [ 1495.188241][T19447] netlink: 'syz.5.3465': attribute type 2 has an invalid length. [ 1495.201612][T19447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1495.255438][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.270626][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.282083][ T6265] bond0 (unregistering): Released all slaves [ 1495.306278][T19429] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1495.464176][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1495.661411][T19426] lo speed is unknown, defaulting to 1000 [ 1495.739210][T19460] kvm: MONITOR instruction emulated as NOP! [ 1496.172983][T19443] lo speed is unknown, defaulting to 1000 [ 1496.417798][T19387] chnl_net:caif_netlink_parms(): no params data found [ 1496.760568][T17610] Bluetooth: hci3: command tx timeout [ 1496.912848][ T6265] hsr_slave_0: left promiscuous mode [ 1496.959971][ T6265] hsr_slave_1: left promiscuous mode [ 1496.969044][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1496.985132][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.000091][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.025750][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.077835][ T6265] veth1_macvtap: left promiscuous mode [ 1497.091792][ T6265] veth0_macvtap: left promiscuous mode [ 1497.108919][ T6265] veth1_vlan: left promiscuous mode [ 1497.119652][ T6265] veth0_vlan: left promiscuous mode [ 1497.536340][T19501] overlayfs: statfs failed on './file0' [ 1497.766253][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1498.671452][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 1498.770154][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 1498.970319][T17610] Bluetooth: hci3: command tx timeout [ 1499.492724][T15394] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1499.602538][T19387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.609802][T19387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.617302][T19387] bridge_slave_0: entered allmulticast mode [ 1499.625009][T19387] bridge_slave_0: entered promiscuous mode [ 1499.636557][T19387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.655213][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.662485][T19387] bridge_slave_1: entered allmulticast mode [ 1499.669922][T19387] bridge_slave_1: entered promiscuous mode [ 1499.670239][T15394] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.710499][T15394] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.736289][T15394] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1499.752903][T15394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.788326][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1499.797396][T15394] usb 2-1: Product: syz [ 1499.797419][T15394] usb 2-1: Manufacturer: syz [ 1499.797434][T15394] usb 2-1: SerialNumber: syz [ 1500.018450][T19387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.063385][T19387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.113815][T15394] usb 2-1: 0:2 : does not exist [ 1500.123077][T15394] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1500.160076][T15394] usb 2-1: USB disconnect, device number 50 [ 1501.075653][T19387] team0: Port device team_slave_0 added [ 1501.139342][T19387] team0: Port device team_slave_1 added [ 1501.149090][T15781] udevd[15781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.193444][T17610] Bluetooth: hci3: command tx timeout [ 1501.268970][T19387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.282191][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.309327][T19387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.364544][T19387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.371546][T19387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.425638][T19387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.559241][T19387] hsr_slave_0: entered promiscuous mode [ 1501.609604][T19387] hsr_slave_1: entered promiscuous mode [ 1501.641430][T19387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1501.649049][T19387] Cannot create hsr debugfs directory [ 1501.706446][T15394] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1501.900306][T15394] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1501.911406][T15394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.966810][T15394] usb 2-1: config 0 descriptor?? [ 1502.012272][T15394] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1502.221728][T15394] gp8psk: usb in 128 operation failed. [ 1502.446940][T15394] gp8psk: FW Version = 144.22.38 (0x901626) Build 2022/167/212 [ 1502.984862][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3494'. [ 1503.333973][T15394] gp8psk: usb in 149 operation failed. [ 1503.339529][T15394] gp8psk: failed to get FPGA version [ 1503.356676][T15394] gp8psk: usb in 138 operation failed. [ 1503.362190][T15394] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1503.373774][T15394] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1503.405560][T15394] usb 2-1: USB disconnect, device number 51 [ 1503.894369][T19592] lo speed is unknown, defaulting to 1000 [ 1505.363420][T19636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1505.540994][T19387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1505.583367][T19387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1505.602680][T19387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1505.767870][T19387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1505.867216][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.910876][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.947390][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.954613][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.029930][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.037121][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.176454][T19387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1506.649081][T19387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.272798][T19387] veth0_vlan: entered promiscuous mode [ 1507.308772][T19387] veth1_vlan: entered promiscuous mode [ 1507.368532][T19387] veth0_macvtap: entered promiscuous mode [ 1507.384127][T19387] veth1_macvtap: entered promiscuous mode [ 1507.401520][T19692] input: syz1 as /devices/virtual/input/input127 [ 1507.434431][ T9464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1507.436456][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.459842][ T9464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.483141][ T9464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1507.502094][ T9464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1507.512055][ T9464] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1507.515916][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.532643][ T9464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1507.547546][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.604037][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.620539][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.633945][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.659627][T19387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.731134][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.764433][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.775640][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.795574][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.807027][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.824755][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.838701][T19387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.855894][T19387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.883838][T19387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.945802][T19387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.955961][T19387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.969148][T19387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.978433][T19387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.198238][T11854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.215082][T11854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.303182][T19695] lo speed is unknown, defaulting to 1000 [ 1508.356936][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.388835][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.446824][T17610] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1508.576746][T19727] kvm: user requested TSC rate below hardware speed [ 1508.788489][T19695] chnl_net:caif_netlink_parms(): no params data found [ 1508.962658][T19695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.981774][T19695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.995616][T19695] bridge_slave_0: entered allmulticast mode [ 1509.028866][T19695] bridge_slave_0: entered promiscuous mode [ 1509.073904][T19695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.081069][T19695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.108587][T19695] bridge_slave_1: entered allmulticast mode [ 1509.120095][T19695] bridge_slave_1: entered promiscuous mode [ 1509.234610][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.251206][T19695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.298105][T19695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.506131][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.571893][T19695] team0: Port device team_slave_0 added [ 1509.587365][T19695] team0: Port device team_slave_1 added [ 1509.690247][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.714031][T19695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.721539][T19695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.755826][T17610] Bluetooth: hci1: command tx timeout [ 1509.774804][T19695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.791729][T19695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.799306][T19695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.826219][T19695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.961858][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.997935][T19695] hsr_slave_0: entered promiscuous mode [ 1510.016584][T19695] hsr_slave_1: entered promiscuous mode [ 1510.024829][T19695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.039318][T19695] Cannot create hsr debugfs directory [ 1510.073291][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.234714][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1511.254852][ T9464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1511.276598][ T9464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1511.285900][ T9464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1511.295103][ T9464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1511.303614][ T9464] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1511.311320][ T9464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1511.544054][ T1141] bridge_slave_1: left allmulticast mode [ 1511.549754][ T1141] bridge_slave_1: left promiscuous mode [ 1511.560375][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.587277][ T1141] bridge_slave_0: left allmulticast mode [ 1511.592978][ T1141] bridge_slave_0: left promiscuous mode [ 1511.603392][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.746088][T19817] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3533'. [ 1511.969161][T17610] Bluetooth: hci1: command tx timeout [ 1512.445888][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.457914][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.468382][ T1141] bond0 (unregistering): Released all slaves [ 1512.496077][T19801] lo speed is unknown, defaulting to 1000 [ 1512.893631][T19695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1512.915558][T19695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1512.934322][T19695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1513.009335][T19695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1513.144791][T19841] binder: 19840:19841 ioctl c0306201 0 returned -14 [ 1513.594010][T17610] Bluetooth: hci3: command tx timeout [ 1513.792723][ T1141] hsr_slave_0: left promiscuous mode [ 1513.818240][ T1141] hsr_slave_1: left promiscuous mode [ 1513.884410][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.891900][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.957537][ T9464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1513.957846][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.968484][ T9464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1513.972882][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.000107][ T9464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1514.012664][ T9464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1514.022599][ T9464] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1514.033170][ T9464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1514.092464][ T1141] veth1_macvtap: left promiscuous mode [ 1514.098195][ T1141] veth0_macvtap: left promiscuous mode [ 1514.103962][ T1141] veth1_vlan: left promiscuous mode [ 1514.109886][ T1141] veth0_vlan: left promiscuous mode [ 1514.138753][ T79] kernel write not supported for file /2347/attr/keycreate (pid: 79 comm: kworker/1:1) [ 1514.192501][ T9464] Bluetooth: hci1: command tx timeout [ 1515.826669][ T9464] Bluetooth: hci3: command tx timeout [ 1516.330735][ T9464] Bluetooth: hci2: command tx timeout [ 1516.416306][ T9464] Bluetooth: hci1: command tx timeout [ 1516.678552][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1516.795160][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 1516.811520][ T79] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1516.982577][ T79] usb 2-1: Using ep0 maxpacket: 32 [ 1516.991619][ T79] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1517.008758][ T79] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1517.066791][ T79] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1517.078588][ T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.081330][T15607] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1517.086599][ T79] usb 2-1: Product: syz [ 1517.104491][ T79] usb 2-1: Manufacturer: syz [ 1517.109318][ T79] usb 2-1: SerialNumber: syz [ 1517.263471][T15607] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.275231][T15607] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1517.297867][T15607] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1517.307533][T15607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1517.316844][T15607] usb 3-1: SerialNumber: syz [ 1517.376921][ T79] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1517.569843][T19801] chnl_net:caif_netlink_parms(): no params data found [ 1517.645484][T15607] usb 3-1: 0:2 : does not exist [ 1517.658071][T15607] usb 3-1: unit 4 not found! [ 1517.688256][T19695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.703628][T15607] usb 3-1: USB disconnect, device number 54 [ 1517.839328][T19801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.856128][T19801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.893370][T19801] bridge_slave_0: entered allmulticast mode [ 1517.911450][T19801] bridge_slave_0: entered promiscuous mode [ 1517.922391][T19801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.933312][T19801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.941631][T19801] bridge_slave_1: entered allmulticast mode [ 1517.949576][T19801] bridge_slave_1: entered promiscuous mode [ 1517.985945][T15781] udevd[15781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1518.044254][ T9464] Bluetooth: hci3: command tx timeout [ 1518.086019][T19695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.123700][T19801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.166717][T19801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.216748][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.223957][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.244023][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.251187][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.252414][T15607] usb 2-1: USB disconnect, device number 52 [ 1518.278222][T15607] usblp0: removed [ 1518.347650][T19864] lo speed is unknown, defaulting to 1000 [ 1518.403169][T19801] team0: Port device team_slave_0 added [ 1518.438834][T19801] team0: Port device team_slave_1 added [ 1518.554146][ T9464] Bluetooth: hci2: command tx timeout [ 1518.730516][ T1141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.816408][T19801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.832437][T19801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.858738][T19915] netlink: 3112 bytes leftover after parsing attributes in process `syz.1.3559'. [ 1518.883509][T19801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.903493][T19801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.911955][T19801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.949816][T19801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.020679][ T1141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.285493][ T1141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.338633][T19695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1519.382443][T19801] hsr_slave_0: entered promiscuous mode [ 1519.388934][T19801] hsr_slave_1: entered promiscuous mode [ 1519.395073][T19801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.407300][T19801] Cannot create hsr debugfs directory [ 1519.823521][ T1141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.252855][T19934] tipc: Enabled bearer , priority 10 [ 1520.266001][ T9464] Bluetooth: hci3: command tx timeout [ 1520.779421][ T9464] Bluetooth: hci2: command tx timeout [ 1521.414008][T19695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.590334][T19864] chnl_net:caif_netlink_parms(): no params data found [ 1521.649843][ T1141] bridge_slave_1: left allmulticast mode [ 1521.667939][ T1141] bridge_slave_1: left promiscuous mode [ 1521.673713][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.711711][ T1141] bridge_slave_0: left allmulticast mode [ 1521.717420][ T1141] bridge_slave_0: left promiscuous mode [ 1521.727172][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.355390][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.381650][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.393625][ T1141] bond0 (unregistering): Released all slaves [ 1522.830345][ T79] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1523.001465][ T9464] Bluetooth: hci2: command tx timeout [ 1523.017167][T19695] veth0_vlan: entered promiscuous mode [ 1523.046917][ T79] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.057534][ T79] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1523.070771][ T79] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1523.080198][ T79] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.129556][T19864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.136969][T19864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.145253][T19864] bridge_slave_0: entered allmulticast mode [ 1523.154355][T19864] bridge_slave_0: entered promiscuous mode [ 1523.308707][T19864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.323146][T19864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.330650][T19864] bridge_slave_1: entered allmulticast mode [ 1523.339403][T19864] bridge_slave_1: entered promiscuous mode [ 1523.363943][T19695] veth1_vlan: entered promiscuous mode [ 1523.458144][T19864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.532398][T19864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.553330][ T79] usb 3-1: string descriptor 0 read error: -22 [ 1523.565396][ T79] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1523.651087][T19695] veth0_macvtap: entered promiscuous mode [ 1523.676106][T19864] team0: Port device team_slave_0 added [ 1523.712121][T19695] veth1_macvtap: entered promiscuous mode [ 1523.726555][T19990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1523.733733][T19864] team0: Port device team_slave_1 added [ 1523.747797][T19990] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1523.782013][T12143] usb 3-1: USB disconnect, device number 55 [ 1523.807288][T19801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1523.819563][T19990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1523.821927][T19801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1523.834780][T19990] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1523.851626][T19990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1523.860588][T19990] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1523.874649][T19864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.883555][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.916331][T19864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.929223][T19864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.936560][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.964683][T19864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.976407][T19801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1524.007148][T19801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1524.028052][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.043573][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.053829][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.064613][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.074882][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.085685][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.097201][T19695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.118996][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.135243][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.148250][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.160273][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.170606][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.181509][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.191441][T19695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.202273][T19695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.217582][T19695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.277848][ T7151] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1524.321536][T19864] hsr_slave_0: entered promiscuous mode [ 1524.329848][T19864] hsr_slave_1: entered promiscuous mode [ 1524.336081][T19864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.344726][T19864] Cannot create hsr debugfs directory [ 1524.354646][T19695] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.365232][T19695] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.374950][T19695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.384177][T19695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.415387][ T1141] hsr_slave_0: left promiscuous mode [ 1524.421305][ T1141] hsr_slave_1: left promiscuous mode [ 1524.449225][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.457356][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.475163][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.482920][ T7151] usb 2-1: Using ep0 maxpacket: 8 [ 1524.488217][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.502050][ T7151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.512519][ T7151] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1524.530205][ T7151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.545227][ T1141] veth1_macvtap: left promiscuous mode [ 1524.550762][ T1141] veth0_macvtap: left promiscuous mode [ 1524.557449][ T7151] usb 2-1: config 0 descriptor?? [ 1524.563953][ T1141] veth1_vlan: left promiscuous mode [ 1524.571582][ T7151] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1524.578134][ T1141] veth0_vlan: left promiscuous mode [ 1525.384202][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1525.459601][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 1526.341537][ T7151] gspca_vc032x: reg_w err -71 [ 1526.358295][ T7151] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1526.402140][ T7151] usb 2-1: USB disconnect, device number 53 [ 1526.680663][T19801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.725654][T11854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.763637][T11854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.784038][T19801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.852517][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.859642][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.923151][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.932211][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.939365][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.948350][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.004265][T19801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1527.048846][T19801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.457914][T19864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1527.523900][T19864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1527.584620][T19864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1527.626716][T19864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1527.851920][T19801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.992829][T19864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.042139][T19864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.143508][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.150631][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.179311][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.186508][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.620167][T19801] veth0_vlan: entered promiscuous mode [ 1528.681349][T19801] veth1_vlan: entered promiscuous mode [ 1528.803128][T19801] veth0_macvtap: entered promiscuous mode [ 1528.853440][T19801] veth1_macvtap: entered promiscuous mode [ 1528.935329][T19864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.976846][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.029498][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.057996][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.105600][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.115493][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.167739][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.192594][T19801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.224089][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.250840][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.298006][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.308500][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.363440][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.394392][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.422125][T19801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1529.448277][T19801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.482284][T19801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.547235][T19801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.587766][T19801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.596538][T19801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.629474][T19801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.955814][T19864] veth0_vlan: entered promiscuous mode [ 1529.980937][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.001596][T19864] veth1_vlan: entered promiscuous mode [ 1530.029900][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.119141][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.145796][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.172923][T20137] netlink: 'syz.1.3594': attribute type 10 has an invalid length. [ 1530.216682][T19864] veth0_macvtap: entered promiscuous mode [ 1530.294249][T20137] team_slave_0: left promiscuous mode [ 1530.300101][T20137] team_slave_1: left promiscuous mode [ 1530.351487][T20137] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1530.544009][T20137] team_slave_0: entered promiscuous mode [ 1530.549810][T20137] team_slave_1: entered promiscuous mode [ 1530.555619][T20137] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1530.676604][T20137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.718841][T20137] bond0: (slave team0): Enslaving as an active interface with an up link [ 1530.890647][T19864] veth1_macvtap: entered promiscuous mode [ 1530.990418][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.032874][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.076111][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.105014][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.136593][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.231824][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.254013][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.270811][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.306023][T19864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.455902][T11257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.486403][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.502514][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.523443][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.541202][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.551511][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.562932][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.573199][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.584186][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.594445][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.605300][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.625561][T19864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.686958][T11257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.712239][T19864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.722074][T19864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.733066][T19864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.742642][T19864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.793120][T11257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.913503][T11257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.974477][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.001157][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.181186][T11854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.278960][T11854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.366913][T20127] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1532.570219][T20127] usb 3-1: Using ep0 maxpacket: 16 [ 1532.648093][T20127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1532.699127][T20127] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1532.748931][T20127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.787315][T20127] usb 3-1: Product: syz [ 1532.791539][T20127] usb 3-1: Manufacturer: syz [ 1532.804854][T20127] usb 3-1: SerialNumber: syz [ 1532.888203][T11257] bridge_slave_1: left allmulticast mode [ 1532.894454][T11257] bridge_slave_1: left promiscuous mode [ 1532.903638][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.947550][T11257] bridge_slave_0: left allmulticast mode [ 1532.963177][T20127] usb 3-1: config 0 descriptor?? [ 1532.980905][T11257] bridge_slave_0: left promiscuous mode [ 1532.992477][T20127] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1533.005339][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.022353][T20127] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1533.207705][T17610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1533.226990][T17610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1533.239731][T17610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1533.287667][T17610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1533.350338][T17610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1533.359730][T17610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1533.672219][T20127] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1534.057221][T11257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.069046][T11257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.081127][T11257] bond0 (unregistering): Released all slaves [ 1534.575841][T20127] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1534.633516][T20127] em28xx 3-1:0.0: board has no eeprom [ 1534.670522][ T25] hid-generic 0005:7FFF:0008.003D: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1534.718255][T20127] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1534.731440][T20127] em28xx 3-1:0.0: dvb set to bulk mode. [ 1534.740103][ T25] em28xx 3-1:0.0: Binding DVB extension [ 1534.758184][T20127] usb 3-1: USB disconnect, device number 56 [ 1534.776232][T20127] em28xx 3-1:0.0: Disconnecting em28xx [ 1534.902133][ T25] em28xx 3-1:0.0: Registering input extension [ 1534.912994][T20204] lo speed is unknown, defaulting to 1000 [ 1534.939484][T20127] em28xx 3-1:0.0: Closing input extension [ 1535.057025][T20127] em28xx 3-1:0.0: Freeing device [ 1535.574186][ T9464] Bluetooth: hci3: command tx timeout [ 1535.773686][T11257] hsr_slave_0: left promiscuous mode [ 1535.786593][T11257] hsr_slave_1: left promiscuous mode [ 1535.802094][T11257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.819315][T11257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.835475][T11257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.861054][T11257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.925160][T11257] veth1_macvtap: left promiscuous mode [ 1535.937915][T11257] veth0_macvtap: left promiscuous mode [ 1535.950802][T11257] veth1_vlan: left promiscuous mode [ 1535.962861][T11257] veth0_vlan: left promiscuous mode [ 1537.352515][ T25] IPVS: starting estimator thread 0... [ 1538.151294][T20307] IPVS: using max 21 ests per chain, 50400 per kthread [ 1538.234639][T20308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1538.236656][ T9464] Bluetooth: hci3: command tx timeout [ 1538.995733][T11257] team0 (unregistering): Port device team_slave_1 removed [ 1539.143682][T11257] team0 (unregistering): Port device team_slave_0 removed [ 1540.375054][T20336] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1540.534190][ T9464] Bluetooth: hci3: command tx timeout [ 1540.971238][T20204] chnl_net:caif_netlink_parms(): no params data found [ 1541.195177][T20204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.211344][T20204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.226662][T20204] bridge_slave_0: entered allmulticast mode [ 1541.242139][T20204] bridge_slave_0: entered promiscuous mode [ 1541.272887][T20204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.280109][T20204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.300192][T20204] bridge_slave_1: entered allmulticast mode [ 1541.312695][T20204] bridge_slave_1: entered promiscuous mode [ 1541.492361][T20204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.538495][T20204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.637079][T20204] team0: Port device team_slave_0 added [ 1541.659070][T20204] team0: Port device team_slave_1 added [ 1541.785844][T20204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.804705][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.880868][T20204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.911327][T20204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.918653][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.972303][T20204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.766490][ T9464] Bluetooth: hci3: command tx timeout [ 1542.918262][T20394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1543.006561][T20204] hsr_slave_0: entered promiscuous mode [ 1543.095363][T20204] hsr_slave_1: entered promiscuous mode [ 1543.231513][T20204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.296670][T20204] Cannot create hsr debugfs directory [ 1543.480477][T20399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1544.189167][T20408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.099677][T20204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1545.123747][T20204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1545.153886][T20204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1545.168452][T20204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1545.321869][T20204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.383916][T20204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.418037][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.425192][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.459409][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.466603][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.759792][T17610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1545.774617][T17610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1545.784235][T17610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1545.793407][T17610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1545.805174][T17610] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1545.812596][T17610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.844391][T20204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.903619][T20450] binder: 20446:20450 ioctl c0306201 20000480 returned -14 [ 1547.017973][T20204] veth0_vlan: entered promiscuous mode [ 1547.083705][T20441] lo speed is unknown, defaulting to 1000 [ 1547.126646][T20204] veth1_vlan: entered promiscuous mode [ 1547.187498][T20204] veth0_macvtap: entered promiscuous mode [ 1547.218162][T20204] veth1_macvtap: entered promiscuous mode [ 1547.271429][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.298086][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.354744][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.386057][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.408397][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.430808][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.445501][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.456590][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.476700][T20204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.501830][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.521004][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.532299][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.558280][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.589234][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.609690][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.630149][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.651058][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.661380][T20204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.679948][T20204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.710960][T20479] block nbd1: NBD_DISCONNECT [ 1547.719078][T20204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.759669][T20479] block nbd1: Disconnected due to user request. [ 1547.771579][T20479] block nbd1: shutting down sockets [ 1547.811127][T20204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.820413][T20204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.829785][T20204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.838808][T20204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.060487][T17610] Bluetooth: hci4: command tx timeout [ 1548.138857][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.166931][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.317616][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1549.008816][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.033646][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.098803][T20441] chnl_net:caif_netlink_parms(): no params data found [ 1549.372646][T20441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.381174][T20441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.389353][T20441] bridge_slave_0: entered allmulticast mode [ 1549.396055][T20441] bridge_slave_0: entered promiscuous mode [ 1549.411605][T20441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.424407][T20441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.435957][T20441] bridge_slave_1: entered allmulticast mode [ 1549.443450][T20441] bridge_slave_1: entered promiscuous mode [ 1549.472644][T20441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.484918][T20441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.541982][T20441] team0: Port device team_slave_0 added [ 1549.553966][T20441] team0: Port device team_slave_1 added [ 1549.609789][T20441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.623538][T20441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.654890][T20441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.676354][T20441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.684678][T20441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.722230][T20441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.808538][T20441] hsr_slave_0: entered promiscuous mode [ 1549.852874][T20441] hsr_slave_1: entered promiscuous mode [ 1549.865478][T20441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1549.873278][T20441] Cannot create hsr debugfs directory [ 1549.945782][ T9464] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1550.250547][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.289655][T17610] Bluetooth: hci4: command tx timeout [ 1550.510250][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.650702][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.686501][T20441] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1550.700419][T20441] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1550.755587][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.812050][T20441] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1550.864030][T20441] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1551.265891][T20547] ALSA: seq fatal error: cannot create timer (-19) [ 1551.533526][ T1141] bridge_slave_1: left allmulticast mode [ 1551.590308][ T1141] bridge_slave_1: left promiscuous mode [ 1551.687716][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.968748][ T1141] bridge_slave_0: left allmulticast mode [ 1551.976940][ T1141] bridge_slave_0: left promiscuous mode [ 1551.984536][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.123659][ T9464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1552.137583][ T9464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1552.146721][ T9464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1552.157561][ T9464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1552.167639][ T9464] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1552.174961][ T9464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1552.507429][ T9464] Bluetooth: hci4: command tx timeout [ 1552.989854][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1552.989873][ T29] audit: type=1800 audit(1736445376.532:256): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3668" name="file0" dev="overlay" ino=120 res=0 errno=0 [ 1553.017586][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.049772][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.061619][ T1141] bond0 (unregistering): Released all slaves [ 1553.092889][T20441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.121008][ T25] IPVS: starting estimator thread 0... [ 1553.153078][T20441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.177488][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.184707][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.224094][T20571] IPVS: using max 22 ests per chain, 52800 per kthread [ 1553.236512][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.243696][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.270440][T20553] lo speed is unknown, defaulting to 1000 [ 1554.396374][ T9464] Bluetooth: hci3: command tx timeout [ 1554.745169][ T9464] Bluetooth: hci4: command tx timeout [ 1556.428949][T20441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.614482][ T9464] Bluetooth: hci3: command tx timeout [ 1556.721302][T20619] trusted_key: syz.1.3675 sent an empty control message without MSG_MORE. [ 1556.832707][ T1141] hsr_slave_0: left promiscuous mode [ 1556.854124][ T1141] hsr_slave_1: left promiscuous mode [ 1556.863414][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.872285][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.880335][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.888221][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.918838][ T1141] veth1_macvtap: left promiscuous mode [ 1556.924504][ T1141] veth0_macvtap: left promiscuous mode [ 1556.930139][ T1141] veth1_vlan: left promiscuous mode [ 1556.936392][ T1141] veth0_vlan: left promiscuous mode [ 1556.937133][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 1557.591378][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1557.669350][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 1558.355854][T17610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1558.373368][T17610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1558.382256][T17610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1558.394325][T17610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1558.402115][T17610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1558.417369][T17610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1558.690379][T20625] bridge0: entered promiscuous mode [ 1558.695908][T20625] bridge0: left promiscuous mode [ 1558.717372][T20628] erspan0: left allmulticast mode [ 1558.729536][T20628] erspan0: left promiscuous mode [ 1558.735258][T20628] bridge0: port 3(erspan0) entered disabled state [ 1558.804815][T20628] bridge_slave_1: left allmulticast mode [ 1558.810516][T20628] bridge_slave_1: left promiscuous mode [ 1558.827427][T20628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.838471][T17610] Bluetooth: hci3: command tx timeout [ 1558.847678][T20628] bridge_slave_0: left allmulticast mode [ 1558.871202][T20628] bridge_slave_0: left promiscuous mode [ 1558.877717][T20628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.966985][T20553] chnl_net:caif_netlink_parms(): no params data found [ 1559.180573][T20441] veth0_vlan: entered promiscuous mode [ 1559.232913][T20647] sctp: [Deprecated]: syz.1.3681 (pid 20647) Use of int in max_burst socket option deprecated. [ 1559.232913][T20647] Use struct sctp_assoc_value instead [ 1559.364445][T20441] veth1_vlan: entered promiscuous mode [ 1559.384649][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.391790][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.405827][T20553] bridge_slave_0: entered allmulticast mode [ 1559.413042][T20553] bridge_slave_0: entered promiscuous mode [ 1559.423957][T20632] lo speed is unknown, defaulting to 1000 [ 1559.439666][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.451656][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.459584][T20553] bridge_slave_1: entered allmulticast mode [ 1559.466728][T20553] bridge_slave_1: entered promiscuous mode [ 1559.496436][T20441] veth0_macvtap: entered promiscuous mode [ 1559.538203][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.562575][T20441] veth1_macvtap: entered promiscuous mode [ 1559.593594][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.744678][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.772614][T20553] team0: Port device team_slave_0 added [ 1559.801582][T20553] team0: Port device team_slave_1 added [ 1559.917394][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.979859][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.987320][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.018160][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.064315][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.074773][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.102372][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.185352][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.211703][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.233882][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.246764][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.264348][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.276218][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.303814][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.321805][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.365124][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.399088][T20441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.655005][T17610] Bluetooth: hci1: command tx timeout [ 1560.797262][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.065826][T17610] Bluetooth: hci3: command tx timeout [ 1561.191571][T20553] hsr_slave_0: entered promiscuous mode [ 1561.211040][T20553] hsr_slave_1: entered promiscuous mode [ 1561.218581][T20553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.227537][T20553] Cannot create hsr debugfs directory [ 1561.239056][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.281808][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.311625][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.355364][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.386140][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.432806][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.466632][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.487559][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.497429][T20441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.525309][T20441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.552823][T20441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.618772][T20441] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.644582][T20441] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.660936][T20441] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.690686][T20441] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.749887][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1562.289374][T20632] chnl_net:caif_netlink_parms(): no params data found [ 1562.437272][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.467853][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.514999][ T1141] bridge_slave_1: left allmulticast mode [ 1562.520695][ T1141] bridge_slave_1: left promiscuous mode [ 1562.530090][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.922823][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.508492][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1674.515496][ C0] rcu: 1-...!: (0 ticks this GP) idle=f914/1/0x4000000000000000 softirq=83931/83931 fqs=0 [ 1674.528184][ C0] rcu: (detected by 0, t=10502 jiffies, g=73889, q=2146 ncpus=2) [ 1674.536021][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1674.536062][ C1] NMI backtrace for cpu 1 [ 1674.536085][ C1] CPU: 1 UID: 0 PID: 20684 Comm: syz.1.3683 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 1674.536104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1674.536115][ C1] RIP: 0010:_raw_spin_lock_irq+0x108/0x120 [ 1674.536140][ C1] Code: f5 48 c7 04 24 0e 36 e0 45 4b c7 04 2f 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 75 13 48 8d 65 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc e8 89 3e fd ff 66 0f 1f 84 00 00 00 [ 1674.536153][ C1] RSP: 0018:ffffc90000a18d20 EFLAGS: 00000046 [ 1674.536169][ C1] RAX: b1984b2fe7f6b700 RBX: ffff8880b872c9c8 RCX: 0000000000000001 [ 1674.536180][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000a18c20 [ 1674.536192][ C1] RBP: ffffc90000a18d30 R08: 0000000000000003 R09: fffff52000143184 [ 1674.536203][ C1] R10: dffffc0000000000 R11: fffff52000143184 R12: 1ffff110170e593b [ 1674.536215][ C1] R13: 0000000000000001 R14: ffffc90000a18cc0 R15: dffffc0000000000 [ 1674.536227][ C1] FS: 00007ff4f4e676c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1674.536241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1674.536252][ C1] CR2: 0000555566864808 CR3: 000000004c4a0000 CR4: 00000000003526f0 [ 1674.536267][ C1] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1674.536277][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1674.536287][ C1] Call Trace: [ 1674.536295][ C1] [ 1674.536304][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1674.536344][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1674.536384][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1674.536427][ C1] ? nmi_handle+0x2a/0x5a0 [ 1674.536450][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1674.536470][ C1] ? nmi_handle+0x14f/0x5a0 [ 1674.536486][ C1] ? nmi_handle+0x2a/0x5a0 [ 1674.536502][ C1] ? _raw_spin_lock_irq+0x108/0x120 [ 1674.536519][ C1] ? default_do_nmi+0x63/0x160 [ 1674.536535][ C1] ? exc_nmi+0x123/0x1f0 [ 1674.536551][ C1] ? end_repeat_nmi+0xf/0x53 [ 1674.536571][ C1] ? _raw_spin_lock_irq+0x108/0x120 [ 1674.536588][ C1] ? _raw_spin_lock_irq+0x108/0x120 [ 1674.536606][ C1] ? _raw_spin_lock_irq+0x108/0x120 [ 1674.536623][ C1] [ 1674.536628][ C1] [ 1674.536634][ C1] __hrtimer_run_queues+0x670/0xd30 [ 1674.536662][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1674.536679][ C1] ? sched_clock+0x4a/0x70 [ 1674.536699][ C1] ? read_tsc+0x9/0x20 [ 1674.536715][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1674.536734][ C1] hrtimer_interrupt+0x403/0xa40 [ 1674.536764][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1674.536782][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1674.536800][ C1] [ 1674.536806][ C1] [ 1674.536811][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1674.536832][ C1] RIP: 0010:sock_recvmsg_nosec+0x34/0x1d0 [ 1674.536852][ C1] Code: 50 89 54 24 04 49 89 f4 49 89 ff 49 bd 00 00 00 00 00 fc ff df e8 8c 30 1e f8 4d 8d 77 20 4c 89 f3 48 c1 eb 03 42 80 3c 2b 00 <74> 08 4c 89 f7 e8 12 09 82 f8 bd 90 00 00 00 49 03 2e 48 89 e8 48 [ 1674.536865][ C1] RSP: 0018:ffffc90003ee78c0 EFLAGS: 00000246 [ 1674.536878][ C1] RAX: ffffffff89814344 RBX: 1ffff11004c0d304 RCX: 0000000000080000 [ 1674.536890][ C1] RDX: ffffc9000d80b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1674.536901][ C1] RBP: ffffc90003ee7a70 R08: ffffffff8981e179 R09: 0000000000000000 [ 1674.536912][ C1] R10: ffffc90003ee7980 R11: fffff520007dcf40 R12: ffffc90003ee7d00 [ 1674.536923][ C1] R13: dffffc0000000000 R14: ffff888026069820 R15: ffff888026069800 [ 1674.536939][ C1] ? ____sys_recvmsg+0x1a9/0x480 [ 1674.536955][ C1] ? sock_recvmsg_nosec+0x24/0x1d0 [ 1674.536979][ C1] ____sys_recvmsg+0x3cd/0x480 [ 1674.537000][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1674.537023][ C1] ? do_recvmmsg+0x44e/0xab0 [ 1674.537040][ C1] ? __might_fault+0xaa/0x120 [ 1674.537059][ C1] do_recvmmsg+0x426/0xab0 [ 1674.537082][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1674.537097][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1674.537123][ C1] ? futex_wait+0x285/0x360 [ 1674.537141][ C1] ? __pfx_futex_wait+0x10/0x10 [ 1674.537161][ C1] ? __pfx___sched_setaffinity+0x10/0x10 [ 1674.537179][ C1] ? rcu_is_watching+0x15/0xb0 [ 1674.537202][ C1] ? __pfx_do_futex+0x10/0x10 [ 1674.537229][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 1674.537248][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1674.537265][ C1] ? do_syscall_64+0x100/0x230 [ 1674.537285][ C1] ? do_syscall_64+0xb6/0x230 [ 1674.537304][ C1] do_syscall_64+0xf3/0x230 [ 1674.537323][ C1] ? clear_bhb_loop+0x35/0x90 [ 1674.537338][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.537358][ C1] RIP: 0033:0x7ff4f3f85d29 [ 1674.537377][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.537389][ C1] RSP: 002b:00007ff4f4e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1674.537405][ C1] RAX: ffffffffffffffda RBX: 00007ff4f4176080 RCX: 00007ff4f3f85d29 [ 1674.537417][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1674.537431][ C1] RBP: 00007ff4f4001b08 R08: 0000000000000000 R09: 0000000000000000 [ 1674.537441][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1674.537450][ C1] R13: 0000000000000000 R14: 00007ff4f4176080 R15: 00007ffd3bd6e8f8 [ 1674.537470][ C1] [ 1674.538049][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g73889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1675.075431][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=103361 [ 1675.083414][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g73889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1675.094785][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1675.104756][ C0] rcu: RCU grace-period kthread stack dump: [ 1675.110819][ C0] task:rcu_preempt state:I stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1675.121012][ C0] Call Trace: [ 1675.124299][ C0] [ 1675.127249][ C0] __schedule+0x17fb/0x4be0 [ 1675.131791][ C0] ? __pfx___schedule+0x10/0x10 [ 1675.136837][ C0] ? __pfx_lock_release+0x10/0x10 [ 1675.141887][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1675.148229][ C0] ? schedule+0x90/0x320 [ 1675.152488][ C0] schedule+0x14b/0x320 [ 1675.156657][ C0] schedule_timeout+0x15a/0x290 [ 1675.161521][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1675.166901][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1675.172207][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1675.177774][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1675.182632][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1675.187844][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1675.192625][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1675.197579][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1675.203482][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1675.208782][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1675.214693][ C0] ? finish_swait+0xd4/0x1e0 [ 1675.219386][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1675.223991][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1675.229199][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1675.235105][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1675.240141][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1675.245364][ C0] kthread+0x2f0/0x390 [ 1675.249458][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1675.254663][ C0] ? __pfx_kthread+0x10/0x10 [ 1675.259262][ C0] ret_from_fork+0x4b/0x80 [ 1675.263684][ C0] ? __pfx_kthread+0x10/0x10 [ 1675.268293][ C0] ret_from_fork_asm+0x1a/0x30 [ 1675.273087][ C0]