last executing test programs: 2m38.384905503s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 2m21.344096339s ago: executing program 3 (id=1435): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64=r0], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 2m21.210607614s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 2m12.031259455s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 1m51.755042595s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m49.454906271s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 1m20.339177785s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m19.863020514s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 53.40325736s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 47.725740788s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 20.568128601s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 19.480324953s ago: executing program 4 (id=1279): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000125000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x10, 0x10}) 3.468575421s ago: executing program 0 (id=1840): sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20", 0x48, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.247503158s ago: executing program 0 (id=1841): ioperm(0x0, 0x7, 0x9) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) recvfrom$unix(r0, &(0x7f0000000280)=""/52, 0x34, 0x0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) bind$inet6(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r2) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r7, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000780)='GPL\x00'}, 0x90) 3.173079912s ago: executing program 2 (id=1842): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r3, 0xe4db529606c8752f, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x5c, r3, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4b}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000), 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr, 0x0, 0xfffffffd, 'lblc\x00', 0x11}, 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.326184521s ago: executing program 1 (id=1845): pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0xf, 0x7, 0x0, {{0x2, '.,'}}}, 0xf) write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e7c6af37117d0f0b96407452607ca45d4f3f05f9b4ab6927f17e3a41ec164a9e5ff6898a1be50f1c389cbccefb5784885c931910a9c2b7745bcb1f4a6efeb824b9e3c262d19fc3d7d583fee767d59dd3818d90558e7b780d74f16a5c3fdff637ffcd7af15c54866f7e52537fb9ff51764c3e7", @ANYRES16=r1], 0xfdeb) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@bridge_getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}]}, 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) landlock_restrict_self(r3, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) close(0x3) close(0x4) 2.130906764s ago: executing program 2 (id=1846): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.062579724s ago: executing program 0 (id=1847): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000200)=0xb0) 2.034678336s ago: executing program 1 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.90924012s ago: executing program 0 (id=1849): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020) 1.784858669s ago: executing program 1 (id=1850): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 1.573693289s ago: executing program 0 (id=1851): r0 = io_uring_setup(0x79af, &(0x7f0000001240)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000004c0)={0x0, 0x1, '\x00', [@pad1, @generic={0x0, 0x3, "e73cf3"}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003300)={0x2020}, 0x2020) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.57270362s ago: executing program 1 (id=1852): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), 0x3b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="8500000061000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81a15202164afe0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3712c7e93366796c7224a0c2c0213af2ecdf3c075e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb0000000000000000000000006aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5327592686ba3f12ac6cba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b651ebf942f7297f7b66254c567b7983f60f2744419a2f238f173d0000003cf4fbd775d9c07d8d591a4dac60ff00a629b3b200000000000000000000000009001d004e41ff9b4d00e07ff771cea08bea1fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14c519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ff7d0020ecccf41d81c8c510cf773171407191872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b745ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00"/720], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) listen(r0, 0x0) 1.324031902s ago: executing program 2 (id=1853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00030007"], 0xd) 1.186540923s ago: executing program 2 (id=1854): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.152625894s ago: executing program 0 (id=1855): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000002700)={0x1}) 657.333947ms ago: executing program 2 (id=1857): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x1}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x7dcee6712986e9ec}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0, 0x8, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x2f, 0x0, 0x40}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x2, 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe8e, 0x0, 0x0, 0x0, 0x1000}, [@map_val={0x18, 0x0, 0x2, 0x0, r4}]}, 0x0, 0x0, 0xd4, &(0x7f0000000280)=""/212, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6, 0xffffffffffffffff]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 480.163554ms ago: executing program 1 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "a8"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 306.117546ms ago: executing program 1 (id=1859): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x4e60, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="ed4e82bdc44b4626f17240da75126c6c124490d6e1b548078f2bfbb3b2144213deecccecf4af153de115e85615196635cc86e4ff71d9588a9cb2aba8fd4b07268cf929808a43aaa7e4b44392d9c67e552eb54fb946da44baf093388610fd928d0798bacc3f33eef8267a318bed8dd50596c299dbc4a80c70d3f13ce3cca7301a10769248fa9347cae6ab712db36abae3dece3acffbb18053b17615661d55ad0fcd4799bdf8b390dd43465bf7840fa33567cd5a94db399d6d6d2c942aecc2714b60634c03e6e02b8f8af3d42e5b512cf459f830cb0b6de118b8ffdff41db05d54e8d56c301df18e88080d8e", 0xeb}, {&(0x7f00000007c0)="b80d8b0089b7cb61da8d5df472181a26b15679ac7f8c78272d864af732b8b28aa0e1a48cbdf44ccb0e4f2112c22ee96f25a9b1119789158355ab025feb9a844f50cd0c85f365ceda583622fc9f84927e238c2c5fab979ce0e9ecfcb11b749e7ebd7d22afb9611270a35da1ea5c669a26a0f70a238ac146a1fe973c084b5dbcf56506997a21a2072f27a03e323520f7b6391eacf105f808ec8557bcc1e5c52e6a6fcf9c072a5527a9f8c7ef28713c6cebccafc270de073f7504c11aea2450", 0xbe}, {&(0x7f0000000600)="7eaf5fb1b36ff33d10c45c93c9ff37ab09bd57dbcc850d56553b3d4acb92e6fb2178dc510264eb4a5608f3f608735ca6d50347c7f2592d2cfc9aec9f5b2ecb156782d6ddb2a0db5c98ef2da4686ce20b30b791a26685e46ef1688c2b38f01eddf912f20a6710605379d66ccb9f54c8a76c038c43cea0067e52c9ed4cbfff8385a6ac2d858aa9effdf04051c7ee95687af2c67c80b626a85e0fb1d88170e92b3df62001a529aea5b6817906b83604d869aacca56c7eac589695cfe1c4d1780693b33c9bf96c778ea88dc338bcfe71fe0944f3666716521d6c09b627884a395deb06a490f077d2617722096769e31036", 0xef}], 0x3}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="189700000000009eb044c4d4240ff0cd3aaaedaed300000000000000000018ea0017202070251a33a5e8bf92000200000701f87d9f00f82e9f913b2ff2c6d8985572a3e24b8caa01d42a0e37"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = open$dir(&(0x7f0000000780)='./file0\x00', 0x44200, 0x54) open_tree(r5, &(0x7f0000000180)='./file0\x00', 0x9001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x802) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x82000000) 0s ago: executing program 2 (id=1860): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f0000001c40)='g\\B\xc6+\xd5\xb9\x93N\\\x87\x84K\xb9!\x03X =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03Q$\x94\xee$j\xd5\xb9\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w[\x14\x17T!3 C.\xa5\xb3\xe8\xcdI', &(0x7f0000002940)='gcB\xc6+\xbf\xcc_\x81\x06\xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x87\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2MO\xd7\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1\f2\xcfu\xe8\xa6\x14\xf1', 0x0, 0x0, &(0x7f0000002ec0)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00(\x86L\x85\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xbb\x1c\x1c\x99\xef=\xe0\xba\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x03\x00\xbd`Qa\xdc\xcb\xce\x91\xcdb\xd7\x9es\v&g\x06\xc3\x01\x004.\x8d\xf7F\xb0\xc4_g\x82\x96M`l\x84\xd9\xab\x85\x96FQn\x0e\xa9\xc6\x9e\xc4\xdbA\xafSt\x9d\x15\xb7\xbd\xd8k\xd3G\x80\x1dE\x168+\v\xfb_\xc3\xd3\xc9\x87\f8\x03\x8c\xed_\xeb\x9c\xbd]=Blu\x04-\x83)\x01\x9a\xde\xf1\xdf\xe3\xd7)\b\xee@,\xcc#\xc2\xf4p\x1a\xa9\xe9 :J.\xdf\xdb>y\x95+,m\xc7\xad\xf9a1\xa1\x91Ed\x86D\xe4Tc\xd6d\xf0\xc4\x04L\r\xa1\x88e\"F\x92\xdb\x06\x04\xca\xfdLK\xdb\x1c\x8a\xc9r2\xee\xd1x\x94\xe2\x8fy\x8a\v\xb8TfGF\x06\xbf\xe8\xe5\xb0\a\xd3d\xfc\x16\x14L*\xef\xcb{\f\x875\xf4\xfbMj\x00\x00\x00\x00\x10\xec\x1b\x90\x19\x9fi0[`6\x94\x90\xbe\xfd>~k\t\x1e3X\n\xc3\xb4ta-\xa4\xcb\xf9\x7fw?\xd4\x9d\xfd\xaaGS;\xb4wa\x1f8\x1c]4\xf3\x94.\xdf\xd67\x10\xee\\S\xb6\x88:od\xad\"\x9a%\xaf=\xe0\x8eD\xe1\xd7[\x0e\xa0\x8b\xd6\x03\x7f\x7f^9\xa3\xa4\xb7\xe7\x9d\xda\xcc\x02\x18s\x0e\x98\v\xeb\xb9_u\x8f\xe8\xf7v\x1f\x1eoZ-v\xe9\x94\xd4\xfa\x9c\xcf\xe3Ov\x80\xe8\v\x83\x11\x81[QsP\xd2[\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xc42G\xcb\x8b\xae\xa5M\xf3\x18>z\x9e6\xcer*\xbf3\xad@\xab\xadE\x19w\xa4k%\xd6S\x92\x88\xfcG\x18)\xba\x84X\xbd\x95|\x030\xf1\x88\xe9&[)\xde|\xb2\x96\xb5^\xb1pW\xe6\xce\xc9#\xa2 \x00\x05\xa1,9%\x8cq\x93T\fN\xbd\x1czY\x81\x04\xf0\x9f\xa5t\xd5u\x8e\xe4\xe6\x03\x85\x96\x9f}\xd7\xc8?\xc4\x878\x93\xbf\xad\xe2!\xcezoT\x8b\xd4}\xa3\xdf\xf3Ku7\x04|\xe4A\xad\xa2Vhe>j\x0ey\x1d1\x0f\x11\xf6\xe6\r\xb2\r\x9f\x83\x9b\x1a\xa5\xd0\xc5\xc3?\x7f\xfd\xc9o\x95u\xc7N|\xb1\x88\x1f\x88a,\x8c\x9f\xef\xdb\x83\\\x12\xf1\x03\x10\xb9n\x17\xb8v\tY}\xb9\x90O\x89\x02(\xb0\xb7\xd5y\xad\xd0\x92\xf3\xae\'R\xefV\xa1H\n_\x9cT\x88.,\xa6 6=\x97X\xa0\x1b\x9e\\ak\x99~\xc9\xce\xb6O\x90\x06\xc4\v>\xaa\xef\xc1\xf2mC\a\xa6\x06\x9b\x04:YO$$\xc1\xdc|\x90\xdb[\x89}\x01\xdc&\xb3bU\x1a\xb8[\\\xb6\x12\x91\x19tFU\xbaBv\xd6E%\x1b\x90\x86\f\x0e\xdf\xdf\xd4\xcb\xaa\xaf1\xceY\xa0\xc1\xb7\x00\xf5\x98(7\xc7\xa2\x8bC\x98\xf8\x95Y\x8b\\\xd6k.\xa4\xbe\xb3\x89\xe6@;\x0f>\xe5\\\x98s\xe6\x17\xe3\x9aY{\xd3\xbf\xe9C\v\xdc\xfd_\x05\xa9\xf2\xf1k#vm3I3\x8d\xb2', &(0x7f0000002480)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1']) kernel console output (not intermixed with test programs): scriptor, different from the interface descriptor's value: 0 [ 399.502346][ T5269] usb 2-1: language id specifier not provided by device, defaulting to English [ 399.517050][ T5269] usb 2-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 399.537179][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.551313][ T5269] usb 2-1: Product: syz [ 399.559008][ T5269] usb 2-1: SerialNumber: syz [ 399.573484][ T5269] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 399.690799][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.728876][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.750386][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.768665][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.782747][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.817032][ T25] usb 2-1: USB disconnect, device number 24 [ 399.839657][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.879617][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.915829][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.946416][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.967772][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.996418][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.018635][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.038988][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.061555][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.305037][ T9887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.313838][ T9887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.331162][ T9887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.347232][ T9887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.394387][ T1126] hsr_slave_0: left promiscuous mode [ 400.404806][ T1126] hsr_slave_1: left promiscuous mode [ 400.410656][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.418671][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.428710][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.436414][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.493788][ T1126] veth1_macvtap: left promiscuous mode [ 400.503770][ T1126] veth0_macvtap: left promiscuous mode [ 400.509466][ T1126] veth1_vlan: left promiscuous mode [ 400.519257][ T1126] veth0_vlan: left promiscuous mode [ 400.659343][T10224] Process accounting resumed [ 401.394196][T10231] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 401.490378][ T5216] Bluetooth: hci3: command tx timeout [ 401.938554][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 402.019047][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 402.072538][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 402.275743][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 402.307074][ T8] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 402.440419][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.608177][ T8] usb 3-1: config 0 descriptor?? [ 402.711731][ T8] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 403.493016][ T8] usb 3-1: USB disconnect, device number 20 [ 403.720811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.738418][ T5216] Bluetooth: hci3: command tx timeout [ 403.752661][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.795510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.822827][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.835556][T10164] chnl_net:caif_netlink_parms(): no params data found [ 403.890688][ T1126] IPVS: stop unused estimator thread 0... [ 405.135847][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.180653][T10164] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.187884][T10164] bridge_slave_0: entered allmulticast mode [ 405.207351][T10164] bridge_slave_0: entered promiscuous mode [ 405.244017][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.277078][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.305262][T10164] bridge_slave_1: entered allmulticast mode [ 405.336751][T10164] bridge_slave_1: entered promiscuous mode [ 405.857388][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.992051][ T5216] Bluetooth: hci3: command tx timeout [ 406.012618][T10164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.150024][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.251720][T10164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.389447][ T29] audit: type=1326 audit(642.848:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10306 comm="syz.1.1476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea89779f9 code=0x0 [ 406.483613][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.493858][T10313] ptrace attach of "./syz-executor exec"[5452] was attempted by "./syz-executor exec"[10313] [ 406.622579][ T9890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.632301][ T9890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.648262][ T9890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.692314][ T9890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.705469][ T9890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 406.713265][ T9890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.721214][T10164] team0: Port device team_slave_0 added [ 406.779635][T10313] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 406.823080][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.908410][T10164] team0: Port device team_slave_1 added [ 407.054496][T10164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.062458][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.123251][T10164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.162105][T10164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.192997][T10164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.224868][T10164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.038090][ T5216] Bluetooth: hci1: command tx timeout [ 410.716367][ T59] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 410.746399][ T1126] bridge_slave_1: left allmulticast mode [ 410.770342][ T1126] bridge_slave_1: left promiscuous mode [ 410.786769][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.875521][ T1126] bridge_slave_0: left allmulticast mode [ 410.903688][ T1126] bridge_slave_0: left promiscuous mode [ 410.922531][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.290072][ T5216] Bluetooth: hci1: command tx timeout [ 411.478442][ T59] usb 3-1: device descriptor read/64, error -71 [ 411.790171][ T59] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 411.947732][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.973813][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.995253][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 412.005576][ T1126] bond0 (unregistering): Released all slaves [ 412.014739][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 412.037389][ T59] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 412.045884][ T59] usb 3-1: Product: syz [ 412.066246][ T59] usb 3-1: Manufacturer: syz [ 412.080850][ T59] usb 3-1: SerialNumber: syz [ 412.094745][ T59] usb 3-1: config 0 descriptor?? [ 412.102158][T10164] hsr_slave_0: entered promiscuous mode [ 412.115954][ T59] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 412.134069][T10164] hsr_slave_1: entered promiscuous mode [ 412.157264][T10164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.165916][T10164] Cannot create hsr debugfs directory [ 412.740023][ T1126] hsr_slave_0: left promiscuous mode [ 412.746263][ T1126] hsr_slave_1: left promiscuous mode [ 412.775516][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.783023][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.814810][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.826430][ T59] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 412.835550][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.892395][ T1126] veth1_macvtap: left promiscuous mode [ 412.905764][ T1126] veth0_macvtap: left promiscuous mode [ 412.911447][ T1126] veth1_vlan: left promiscuous mode [ 412.926192][ T1126] veth0_vlan: left promiscuous mode [ 412.994133][ T5267] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 413.150608][ T5265] usb 3-1: USB disconnect, device number 22 [ 413.220287][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.253768][ T5267] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 413.276607][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.302395][ T5267] usb 1-1: config 0 descriptor?? [ 413.549275][ T5216] Bluetooth: hci1: command tx timeout [ 413.813707][ T5267] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 413.851054][ T5267] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input35 [ 414.007529][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 414.082189][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 414.159054][ T5267] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 414.794646][ T5267] usb 1-1: USB disconnect, device number 23 [ 415.564529][T10391] 9p: Unknown access argument 18446744073709551615: -34 [ 415.797305][ T5216] Bluetooth: hci1: command tx timeout [ 415.824495][T10316] chnl_net:caif_netlink_parms(): no params data found [ 415.848605][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 416.046112][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 416.066556][ T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 416.082932][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.098185][ T8] usb 3-1: Product: syz [ 416.102749][ T8] usb 3-1: Manufacturer: syz [ 416.107536][ T8] usb 3-1: SerialNumber: syz [ 416.116353][ T8] usb 3-1: config 0 descriptor?? [ 416.132203][ T8] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 416.273785][ T59] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 416.503609][ T59] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 416.517400][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.529071][ T59] usb 1-1: config 0 descriptor?? [ 416.606354][T10316] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.614215][T10316] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.622063][T10316] bridge_slave_0: entered allmulticast mode [ 416.630767][T10316] bridge_slave_0: entered promiscuous mode [ 416.640276][T10316] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.647953][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.656339][T10316] bridge_slave_1: entered allmulticast mode [ 416.663326][T10316] bridge_slave_1: entered promiscuous mode [ 416.672472][T10416] tunl0: entered promiscuous mode [ 416.684636][T10416] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 416.696291][T10416] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1500'. [ 416.833524][T10316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.850609][T10316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.873693][T10417] netlink: 'syz.1.1500': attribute type 2 has an invalid length. [ 416.996639][T10316] team0: Port device team_slave_0 added [ 417.005394][T10164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.015984][T10164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.027011][T10164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.048281][T10316] team0: Port device team_slave_1 added [ 417.052337][T10417] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 417.081701][T10417] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 417.103506][T10164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.134271][T10316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.148095][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.177060][T10316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.196719][T10316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.203710][T10316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.232345][T10316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.394900][T10316] hsr_slave_0: entered promiscuous mode [ 417.404286][T10316] hsr_slave_1: entered promiscuous mode [ 417.412896][T10316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.420475][T10316] Cannot create hsr debugfs directory [ 417.447230][T10422] netlink: 'syz.1.1501': attribute type 2 has an invalid length. [ 417.490055][ T8] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 417.534729][ T8] usb 3-1: USB disconnect, device number 23 [ 417.582183][ T5215] udevd[5215]: setting mode of /dev/bus/usb/003/023 to 020664 failed: No such file or directory [ 417.605606][ T5215] udevd[5215]: setting owner of /dev/bus/usb/003/023 to uid=0, gid=0 failed: No such file or directory [ 417.785670][T10164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.895348][T10164] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.952148][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.959349][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.026642][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.033846][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.314226][ T59] pegasus 1-1:0.0: can't reset MAC [ 418.332218][ T59] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 418.380038][ T59] usb 1-1: USB disconnect, device number 24 [ 418.718500][T10444] xt_TCPMSS: Only works on TCP SYN packets [ 419.543702][T10316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.585249][T10316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.624609][T10316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.692309][T10316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.830670][T10164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.869511][T10457] syz.0.1506: attempt to access beyond end of device [ 419.869511][T10457] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 419.904922][T10457] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 420.001749][T10316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.075103][T10316] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.153143][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.160696][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.230180][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.237536][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.516972][T10164] veth0_vlan: entered promiscuous mode [ 420.551370][T10164] veth1_vlan: entered promiscuous mode [ 420.698606][T10164] veth0_macvtap: entered promiscuous mode [ 420.734793][T10164] veth1_macvtap: entered promiscuous mode [ 420.911925][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.923174][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.937199][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.949901][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.067063][T10164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.239556][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.368184][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.604161][T10164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.662757][T10483] syz.2.1510[10483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.662902][T10483] syz.2.1510[10483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.688484][T10164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.791947][T10164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.849643][T10164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.893331][T10164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.906294][T10164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.925633][T10491] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 421.932562][T10164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.030980][ T29] audit: type=1326 audit(657.293:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10480 comm="syz.2.1510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2eaf779f9 code=0x0 [ 422.065269][T10316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.348707][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.378856][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.445668][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.468108][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.479887][T10509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.773905][T10316] veth0_vlan: entered promiscuous mode [ 423.833130][T10316] veth1_vlan: entered promiscuous mode [ 423.965716][T10316] veth0_macvtap: entered promiscuous mode [ 424.047919][T10316] veth1_macvtap: entered promiscuous mode [ 424.284873][T10549] input: syz0 as /devices/virtual/input/input36 [ 424.350944][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.361784][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.373078][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.383959][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.393991][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.547059][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.680346][T10316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.724846][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.769796][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.806258][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.857110][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.882192][T10316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.925841][T10316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.982471][T10316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.013695][T10316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.053554][T10316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.078495][T10316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.110128][T10316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.336881][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.381227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.497071][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.561216][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.719159][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.186321][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.592659][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.721410][ T9890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.741009][ T9890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.752052][ T9890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.780715][ T9890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.792115][ T9890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.809251][ T9890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.950971][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.136801][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 428.359577][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.381735][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.398234][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 428.427480][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.451343][ T12] bridge_slave_1: left allmulticast mode [ 428.457028][ T12] bridge_slave_1: left promiscuous mode [ 428.480308][ T25] usb 1-1: config 0 descriptor?? [ 428.484852][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.502253][ T12] bridge_slave_0: left allmulticast mode [ 428.508106][ T12] bridge_slave_0: left promiscuous mode [ 428.513874][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.953666][ T25] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 429.024625][ T25] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 429.178022][ T59] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 429.188519][ T25] arvo 0003:1E7D:30D4.0012: couldn't init struct arvo_device [ 429.213380][ T25] arvo 0003:1E7D:30D4.0012: couldn't install keyboard [ 429.256721][ T25] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -71 [ 429.306554][ T25] usb 1-1: USB disconnect, device number 25 [ 429.383661][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 429.402549][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 429.461432][ T59] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 429.470200][T10633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 429.480580][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.507775][ T59] usb 2-1: Product: syz [ 429.517124][ T59] usb 2-1: Manufacturer: syz [ 429.521769][ T59] usb 2-1: SerialNumber: syz [ 429.563267][ T59] usb 2-1: config 0 descriptor?? [ 429.582975][ T9890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.585551][ T59] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 429.614313][ T9890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.625222][ T9890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.662580][ T9890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.682516][ T9890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 429.699905][ T9890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.965111][ T25] usb 2-1: USB disconnect, device number 25 [ 430.090466][ T5216] Bluetooth: hci1: command tx timeout [ 430.172226][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.235015][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.269515][ T12] bond0 (unregistering): Released all slaves [ 430.392677][T10597] chnl_net:caif_netlink_parms(): no params data found [ 430.461699][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 431.107374][ T5267] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 431.441569][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 431.460721][ T5267] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 431.519128][ T5267] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 431.553388][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 431.623779][ T5267] usb 1-1: Product: syz [ 431.638954][ T5267] usb 1-1: Manufacturer: syz [ 431.643580][ T5267] usb 1-1: SerialNumber: syz [ 431.664825][ T5267] usb 1-1: config 0 descriptor?? [ 431.675750][T10672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.851557][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.878998][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.892605][T10597] bridge_slave_0: entered allmulticast mode [ 431.902290][T10597] bridge_slave_0: entered promiscuous mode [ 432.001281][ T5216] Bluetooth: hci3: command tx timeout [ 432.042868][ T12] hsr_slave_0: left promiscuous mode [ 432.073388][ T9] usb 1-1: USB disconnect, device number 26 [ 432.094255][ T12] hsr_slave_1: left promiscuous mode [ 432.113881][T10684] netlink: 'syz.2.1542': attribute type 11 has an invalid length. [ 432.123416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.147600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.166576][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.180497][T10696] netlink: 'syz.2.1542': attribute type 11 has an invalid length. [ 432.184604][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 432.200139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.252587][ T12] veth1_macvtap: left promiscuous mode [ 432.267214][ T12] veth0_macvtap: left promiscuous mode [ 432.272873][ T12] veth1_vlan: left promiscuous mode [ 432.291726][ T12] veth0_vlan: left promiscuous mode [ 432.343840][ T5216] Bluetooth: hci1: command tx timeout [ 432.405631][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 432.434815][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.479027][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.501841][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.533345][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.544393][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.587844][ T25] usb 2-1: config 0 descriptor?? [ 433.126927][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.183416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.480486][ T25] microsoft 0003:045E:07DA.0013: invalid report_size 61368 [ 433.493193][ T25] microsoft 0003:045E:07DA.0013: item 0 2 1 7 parsing failed [ 433.501765][ T25] microsoft 0003:045E:07DA.0013: parse failed [ 433.508152][ T25] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 433.805901][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.813122][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.828510][T10597] bridge_slave_1: entered allmulticast mode [ 433.846380][T10597] bridge_slave_1: entered promiscuous mode [ 433.889508][T10696] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 433.998825][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1544'. [ 434.251446][ T5216] Bluetooth: hci3: command tx timeout [ 434.403146][T10720] usb usb8: check_ctrlrecip: process 10720 (syz.2.1546) requesting ep 01 but needs 81 [ 434.412828][T10720] usb usb8: usbfs: process 10720 (syz.2.1546) did not claim interface 0 before use [ 434.635953][ T5216] Bluetooth: hci1: command tx timeout [ 435.096339][T10722] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 435.431306][ T5217] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 435.659366][ T5217] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 435.668826][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.681240][ T5217] usb 3-1: config 0 descriptor?? [ 435.695802][ T5217] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 436.161545][ T5217] gspca_sunplus: reg_w_riv err -71 [ 436.168503][ T5217] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 436.198034][ T5217] usb 3-1: USB disconnect, device number 24 [ 436.505824][ T5216] Bluetooth: hci3: command tx timeout [ 436.712759][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.769837][ T25] usb 2-1: USB disconnect, device number 26 [ 436.797498][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.854108][ T5216] Bluetooth: hci1: command tx timeout [ 436.951651][T10597] team0: Port device team_slave_0 added [ 437.001906][T10597] team0: Port device team_slave_1 added [ 437.172240][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.212812][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.320920][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.369904][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.987010][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.032647][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.049493][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 438.581011][T10641] chnl_net:caif_netlink_parms(): no params data found [ 438.819594][ T9890] Bluetooth: hci3: command tx timeout [ 438.897933][T10597] hsr_slave_0: entered promiscuous mode [ 438.921385][T10597] hsr_slave_1: entered promiscuous mode [ 438.941543][T10597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.949175][T10597] Cannot create hsr debugfs directory [ 439.214510][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.296082][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.316335][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.328410][T10641] bridge_slave_0: entered allmulticast mode [ 439.341931][T10641] bridge_slave_0: entered promiscuous mode [ 439.430948][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.472729][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.486399][ T5268] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 439.504032][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.511652][T10641] bridge_slave_1: entered allmulticast mode [ 439.543090][T10641] bridge_slave_1: entered promiscuous mode [ 439.556526][ T5217] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 439.631272][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.680261][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.718844][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 439.731324][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.759006][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.773353][ T5217] usb 1-1: Using ep0 maxpacket: 16 [ 439.804706][ T5268] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.818875][ T5217] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 439.833853][ T5268] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 439.844336][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.853763][ T5217] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 439.854598][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.863350][ T5217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.884521][ T5268] usb 3-1: config 0 descriptor?? [ 439.890236][ T5217] usb 1-1: Product: syz [ 439.906007][ T5217] usb 1-1: Manufacturer: syz [ 439.910824][ T5217] usb 1-1: SerialNumber: syz [ 439.930013][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.954816][ T5217] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input38 [ 440.050293][T10641] team0: Port device team_slave_0 added [ 440.133201][T10641] team0: Port device team_slave_1 added [ 440.188224][ T4653] bcm5974 1-1:1.0: could not read from device [ 440.213910][ T4653] bcm5974 1-1:1.0: could not read from device [ 440.221192][ T5217] usb 1-1: USB disconnect, device number 27 [ 440.233014][ T4653] bcm5974 1-1:1.0: could not read from device [ 440.375023][ T5268] wacom 0003:056A:0022.0014: unknown main item tag 0x0 [ 440.402198][ T5268] wacom 0003:056A:0022.0014: unbalanced collection at end of report description [ 440.487721][ T5268] wacom 0003:056A:0022.0014: parse failed [ 440.503656][ T5268] wacom 0003:056A:0022.0014: probe with driver wacom failed with error -22 [ 440.518394][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.547879][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.013222][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.151061][ T5268] usb 3-1: USB disconnect, device number 25 [ 441.498432][ T12] bridge_slave_1: left allmulticast mode [ 441.515266][ T12] bridge_slave_1: left promiscuous mode [ 441.527577][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.565881][ T12] bridge_slave_0: left allmulticast mode [ 441.578976][ T12] bridge_slave_0: left promiscuous mode [ 441.924455][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.037735][ T5217] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 442.323704][ T5217] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 442.344639][ T5217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 442.373095][ T5217] usb 1-1: Product: syz [ 442.389060][ T5217] usb 1-1: Manufacturer: syz [ 442.399062][ T5217] usb 1-1: SerialNumber: syz [ 442.419337][ T5217] usb 1-1: config 0 descriptor?? [ 442.430290][ T5217] ch341 1-1:0.0: ch341-uart converter detected [ 442.875402][ T5217] usb 1-1: failed to send control message: -71 [ 442.886509][ T5217] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 442.907264][ T5217] usb 1-1: USB disconnect, device number 28 [ 442.914296][ T5217] ch341 1-1:0.0: device disconnected [ 442.972860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.985407][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.996942][ T12] bond0 (unregistering): Released all slaves [ 443.032161][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.043269][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.087112][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.190308][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 443.222659][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 443.486258][T10641] hsr_slave_0: entered promiscuous mode [ 443.516416][T10641] hsr_slave_1: entered promiscuous mode [ 443.527964][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 443.537272][T10641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.557508][T10641] Cannot create hsr debugfs directory [ 444.387314][ T12] hsr_slave_0: left promiscuous mode [ 444.447644][ T12] hsr_slave_1: left promiscuous mode [ 444.544966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.589844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.674537][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.691649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.783157][ T12] veth1_macvtap: left promiscuous mode [ 444.788746][ T12] veth0_macvtap: left promiscuous mode [ 444.832442][ T12] veth1_vlan: left promiscuous mode [ 444.839709][ T12] veth0_vlan: left promiscuous mode [ 445.136444][T10833] netlink: 'syz.0.1573': attribute type 16 has an invalid length. [ 445.144364][T10833] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1573'. [ 446.727157][ T12] team0 (unregistering): Port device team_slave_1 removed [ 446.770993][ T12] team0 (unregistering): Port device team_slave_0 removed [ 447.227611][T10835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1573'. [ 448.609132][T10597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.643108][T10597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.844780][T10597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.882495][T10597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.312520][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.411589][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.475996][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.483170][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.564740][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.571916][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.735894][T10597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.873543][T10641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.944308][T10641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.968920][T10641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.982509][T10641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.022651][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1588'. [ 450.326866][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.376168][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.390396][T10893] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 450.419645][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.470023][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.477249][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.539422][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.546601][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.627474][T10597] veth0_vlan: entered promiscuous mode [ 450.725855][T10597] veth1_vlan: entered promiscuous mode [ 450.791527][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 451.007331][T10597] veth0_macvtap: entered promiscuous mode [ 451.032770][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 451.042242][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.091367][ T9] usb 2-1: config 0 descriptor?? [ 451.114086][ T9] usb 2-1: selecting invalid altsetting 1 [ 451.175291][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 451.308997][ T5215] udevd[5215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.364284][T10597] veth1_macvtap: entered promiscuous mode [ 451.401513][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.414681][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.451619][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.513751][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.560784][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.596715][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.644000][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.743090][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.764603][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.778058][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.793582][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.808885][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.831269][T10597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.846503][T10597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.867544][T10597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.889404][T10597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.004463][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.257613][ T4583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.299856][ T4583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.366367][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.386320][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.764302][ T5334] usb 2-1: USB disconnect, device number 27 [ 454.943423][T10641] veth0_vlan: entered promiscuous mode [ 454.961532][T10641] veth1_vlan: entered promiscuous mode [ 454.999258][T10641] veth0_macvtap: entered promiscuous mode [ 455.009064][T10641] veth1_macvtap: entered promiscuous mode [ 455.026058][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.066166][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.079008][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.101413][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.117003][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.131114][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.143324][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.162823][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.179294][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.194342][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.240229][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.255358][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.275849][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.292554][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.308782][T10641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.323228][T10641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.338073][T10641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.346914][T10641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.396455][ T5268] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 455.473932][ T2592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.493577][ T2592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.544186][ T4583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.626786][ T4583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.810404][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.838347][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.849497][ T5268] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 455.916419][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 455.987522][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.054956][ T5268] usb 3-1: config 0 descriptor?? [ 456.704214][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 456.730631][ T5268] waltop 0003:172F:0500.0015: item fetching failed at offset 5/7 [ 456.762119][ T5268] waltop 0003:172F:0500.0015: probe with driver waltop failed with error -22 [ 456.801590][T10997] bond2: entered promiscuous mode [ 456.889629][T11003] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 456.963083][T11003] batadv1: entered promiscuous mode [ 456.982442][T11003] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 457.003188][ T9] usb 3-1: USB disconnect, device number 26 [ 457.325475][ T4583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.576899][ T4583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.760144][ T4583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.853397][ T9890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.864815][ T9890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.898893][ T9890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.908395][ T9890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.916908][ T9890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 457.925944][ T9890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.949431][ T4583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.350096][T11021] chnl_net:caif_netlink_parms(): no params data found [ 458.390806][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 458.411392][ T4583] bridge_slave_1: left allmulticast mode [ 458.417114][ T4583] bridge_slave_1: left promiscuous mode [ 458.456396][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.488100][ T4583] bridge_slave_0: left allmulticast mode [ 458.493795][ T4583] bridge_slave_0: left promiscuous mode [ 458.516569][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.683147][ T9890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.720575][ T9890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.729028][ T9890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.736405][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 458.752109][ T9890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.761814][ T9890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.777967][ T9890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.955408][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 458.972839][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.049994][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.111847][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.255617][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.560416][ T9] usb 2-1: config 0 descriptor?? [ 459.695682][ T9] hub 2-1:0.0: USB hub found [ 459.922982][ T9] hub 2-1:0.0: 2 ports detected [ 460.032157][ T4583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.059580][ T4583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.083313][ T4583] bond0 (unregistering): Released all slaves [ 460.195768][ T5216] Bluetooth: hci1: command tx timeout [ 460.270765][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 460.405507][T11059] input: syz1 as /devices/virtual/input/input39 [ 461.291542][ T5216] Bluetooth: hci3: command tx timeout [ 461.410499][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 461.441752][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 461.476222][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.483440][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.521587][T11021] bridge_slave_0: entered allmulticast mode [ 461.552904][T11021] bridge_slave_0: entered promiscuous mode [ 461.628823][ T9] hub 2-1:0.0: activate --> -90 [ 461.725862][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.733131][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.761104][T11021] bridge_slave_1: entered allmulticast mode [ 461.789584][T11021] bridge_slave_1: entered promiscuous mode [ 461.928188][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 461.950931][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 461.958431][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 461.973260][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.982630][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 461.991940][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.002217][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.021235][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.032352][ T4583] hsr_slave_0: left promiscuous mode [ 462.038909][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.046501][ T4583] hsr_slave_1: left promiscuous mode [ 462.053480][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.062135][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.069630][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.080257][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.090059][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.097668][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.098668][ T9] usb 2-1-port2: cannot warm reset (err = -71) [ 462.106326][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.120779][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.122971][ T9] usb 2-1-port2: cannot warm reset (err = -71) [ 462.128643][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.142767][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.152953][ T9] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad? [ 462.157760][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.162438][ T5334] usb 2-1: USB disconnect, device number 28 [ 462.182944][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.199693][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.214675][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.223770][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.237118][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.244788][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 462.263400][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.272757][ T4583] veth1_macvtap: left promiscuous mode [ 462.277410][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.278767][ T4583] veth0_macvtap: left promiscuous mode [ 462.287089][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.291390][ T4583] veth1_vlan: left promiscuous mode [ 462.299091][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.313472][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.317650][ T4583] veth0_vlan: left promiscuous mode [ 462.321547][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.333782][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.343111][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.350608][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.359161][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.366728][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.374403][ T5268] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 462.383598][ T5268] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 462.418263][ T9890] Bluetooth: hci1: command tx timeout [ 462.462726][ T25] usb 3-1: config 0 has no interfaces? [ 462.468211][ T25] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 462.479918][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.493304][ T25] usb 3-1: config 0 descriptor?? [ 463.556777][ T9890] Bluetooth: hci3: command tx timeout [ 463.733587][ T4583] team0 (unregistering): Port device team_slave_1 removed [ 463.782265][ T4583] team0 (unregistering): Port device team_slave_0 removed [ 464.239682][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.246076][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.266518][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.335457][T11101] syz_tun: entered promiscuous mode [ 464.348800][T11101] batadv_slave_0: entered promiscuous mode [ 464.367097][T11101] syz_tun: left promiscuous mode [ 464.372540][T11101] batadv_slave_0: left promiscuous mode [ 464.402582][ T5334] usb 3-1: USB disconnect, device number 27 [ 464.543283][T11021] team0: Port device team_slave_0 added [ 464.588283][T11021] team0: Port device team_slave_1 added [ 464.670441][ T9890] Bluetooth: hci1: command tx timeout [ 464.720797][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.757538][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.783471][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.823764][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.876339][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 464.898557][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.905524][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.135369][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 465.258369][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 465.318909][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.462683][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 465.617342][ T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=f8.14 [ 465.658161][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.684354][ T8] usb 1-1: Product: syz [ 465.699614][ T8] usb 1-1: Manufacturer: syz [ 465.714544][ T8] usb 1-1: SerialNumber: syz [ 465.804468][ T9890] Bluetooth: hci3: command tx timeout [ 465.819910][ T8] usb 1-1: config 0 descriptor?? [ 465.828800][T11021] hsr_slave_0: entered promiscuous mode [ 465.848272][T11021] hsr_slave_1: entered promiscuous mode [ 465.865107][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.872303][ T8] usb 1-1: invalid MIDI in EP 0 [ 465.900989][T11021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.936132][T11021] Cannot create hsr debugfs directory [ 465.957575][T11039] chnl_net:caif_netlink_parms(): no params data found [ 465.988173][ T8] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 466.020170][T11132] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1632'. [ 466.163987][ T5211] udevd[5211]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.274238][ T4583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.329550][ T5268] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 466.367512][T11104] veth1_virt_wifi: entered allmulticast mode [ 466.387340][ T8] usb 1-1: USB disconnect, device number 29 [ 466.445399][ T4583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.552248][ T5268] usb 3-1: unable to get BOS descriptor or descriptor too short [ 466.562047][ T5268] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.576291][ T5268] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 466.581158][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.596830][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 466.598876][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.630308][T11039] bridge_slave_0: entered allmulticast mode [ 466.637955][ T5268] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 466.644542][T11039] bridge_slave_0: entered promiscuous mode [ 466.657295][ T5268] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 466.667225][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.675414][ T5268] usb 3-1: Product: syz [ 466.684284][ T5268] usb 3-1: Manufacturer: syz [ 466.689707][ T5268] usb 3-1: SerialNumber: syz [ 466.714970][ T5268] usb 3-1: config 0 descriptor?? [ 466.730617][T11134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 466.775806][ C1] usb 3-1: NFC: Urb failure (status -71) [ 466.806063][ T5268] usb 3-1: NFC: Unable to get FW version [ 466.823469][ T5268] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 466.841431][ T4583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.895739][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.914477][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.932245][T11039] bridge_slave_1: entered allmulticast mode [ 466.934567][ T9890] Bluetooth: hci1: command tx timeout [ 466.940331][T11039] bridge_slave_1: entered promiscuous mode [ 467.072592][ T4583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.086581][ T9] usb 3-1: USB disconnect, device number 28 [ 467.221918][T11148] afs: Unknown parameter ']äô£ÿ˜"D&¥9N¦åßù§ÈÓ¥œp eFF÷óŠ&{9«@' [ 467.858231][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.915266][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.075959][ T9890] Bluetooth: hci3: command tx timeout [ 468.810945][T11039] team0: Port device team_slave_0 added [ 468.823055][T11039] team0: Port device team_slave_1 added [ 469.371381][T11185] program syz.1.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.524129][T11182] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 469.596133][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.611160][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.639101][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.669760][T11176] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 469.685980][T11181] veth1_virt_wifi: left allmulticast mode [ 469.722163][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.765096][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.796373][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.847601][ T4583] bridge_slave_1: left allmulticast mode [ 469.875035][ T4583] bridge_slave_1: left promiscuous mode [ 469.889170][ T4583] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.911744][ T4583] bridge_slave_0: left allmulticast mode [ 469.927215][ T4583] bridge_slave_0: left promiscuous mode [ 469.932977][ T4583] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.957467][ T5268] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 470.187295][ T5268] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 470.199714][ T5268] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 470.211795][ T5268] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 470.221479][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.243311][T11182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.497442][ T4583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.516989][ T4583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.528653][ T4583] bond0 (unregistering): Released all slaves [ 470.635865][T11039] hsr_slave_0: entered promiscuous mode [ 470.659093][T11039] hsr_slave_1: entered promiscuous mode [ 470.666093][T11039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.674058][T11039] Cannot create hsr debugfs directory [ 470.696572][ T5268] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 470.714988][ T5268] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input40 [ 470.780035][ T5268] usb 1-1: USB disconnect, device number 30 [ 470.785972][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 470.894557][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 471.198461][ T4583] hsr_slave_0: left promiscuous mode [ 471.208076][ T4583] hsr_slave_1: left promiscuous mode [ 471.220298][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.229321][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.243989][ T4583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.704380][ T4583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.230242][ T4583] veth1_macvtap: left promiscuous mode [ 472.285727][ T4583] veth0_macvtap: left promiscuous mode [ 472.319175][ T4583] veth1_vlan: left promiscuous mode [ 472.324560][ T4583] veth0_vlan: left promiscuous mode [ 474.081987][ T4583] team0 (unregistering): Port device team_slave_1 removed [ 474.135233][ T4583] team0 (unregistering): Port device team_slave_0 removed [ 474.659224][T11253] netlink: 'syz.1.1659': attribute type 5 has an invalid length. [ 474.699356][T11021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 474.731357][T11021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 474.769803][T11021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 474.912715][T11021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 475.402378][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.554389][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.582253][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.589452][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.638156][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.645421][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.900493][T11039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.270860][T11039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.663098][T11039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.472801][T11039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.584786][T11273] Bluetooth: hci2: command 0x0406 tx timeout [ 477.862102][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.889392][ T5265] kernel write not supported for file /947/attr/keycreate (pid: 5265 comm: kworker/1:4) [ 478.256082][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.281901][T11021] veth0_vlan: entered promiscuous mode [ 478.318328][T11021] veth1_vlan: entered promiscuous mode [ 478.367693][T11039] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.471207][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.478426][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.503554][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.510926][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.574835][T11344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1680'. [ 478.660986][T11021] veth0_macvtap: entered promiscuous mode [ 478.726404][T11021] veth1_macvtap: entered promiscuous mode [ 478.787883][T11354] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1683'. [ 478.967531][T11039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.996327][T11039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.032531][T11358] 9pnet_fd: Insufficient options for proto=fd [ 479.183273][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.276873][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.368612][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.469338][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.572774][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.800449][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.082907][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.171541][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.272534][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.379800][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.413812][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.487795][T11021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.509849][T11021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.518623][T11021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.571519][T11021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.748316][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1688'. [ 481.120209][T11039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.149068][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 481.167771][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.200578][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.293949][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.311621][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.393053][ T25] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 481.414722][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.464180][ T25] usb 3-1: config 0 has no interface number 0 [ 481.485274][ T25] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 481.671758][ T25] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 481.680950][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.703199][ T25] usb 3-1: config 0 descriptor?? [ 482.845607][ T25] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 483.211721][ T8] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 483.448712][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.503794][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.552536][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 483.576649][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 483.611926][ T8] usb 2-1: string descriptor 0 read error: -22 [ 483.630969][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.660519][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.695215][T11403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.702472][T11403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.711259][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 483.741852][T11039] veth0_vlan: entered promiscuous mode [ 483.814776][T11039] veth1_vlan: entered promiscuous mode [ 484.057016][ T966] usb 3-1: Failed to submit usb control message: -110 [ 484.129307][ T966] usb 3-1: unable to send the bmi data to the device: -110 [ 484.227168][ T1126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.238350][ T966] usb 3-1: unable to get target info from device [ 484.269200][ T966] usb 3-1: could not get target info (-110) [ 484.301724][ T966] usb 3-1: could not probe fw (-110) [ 484.314805][ T5269] usb 3-1: USB disconnect, device number 29 [ 484.414332][T11039] veth0_macvtap: entered promiscuous mode [ 484.444962][T11039] veth1_macvtap: entered promiscuous mode [ 484.626322][ T1126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.668627][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.680584][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.702672][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.713227][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.724421][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.734877][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.746982][T11039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.770012][ T1126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.792693][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.805987][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.817214][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.828922][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.838845][T11039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.849371][T11039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.860732][T11039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.885768][ T1126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.908966][T11039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.918363][T11039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.931867][T11039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.941503][T11039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.094694][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.102585][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.201242][ T25] usb 2-1: USB disconnect, device number 29 [ 485.310650][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.318509][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.538280][ T1126] bridge_slave_1: left allmulticast mode [ 485.554292][ T1126] bridge_slave_1: left promiscuous mode [ 485.612438][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.875919][ T1126] bridge_slave_0: left allmulticast mode [ 485.892917][ T1126] bridge_slave_0: left promiscuous mode [ 486.479737][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.697717][T11273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.717024][T11273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.727302][T11273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.801376][T11273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.814809][T11273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 486.825435][T11273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.308458][ T9890] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 488.458728][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 488.610581][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 488.896147][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.905215][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 488.981827][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.134021][T11273] Bluetooth: hci1: command tx timeout [ 489.183656][ T1126] bond0 (unregistering): Released all slaves [ 489.470029][ T5269] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 490.540328][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 490.550286][ T5269] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 490.570785][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.624822][ T5269] usb 1-1: config 0 descriptor?? [ 490.662625][ T5269] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 490.883328][ T5269] usb 1-1: qt2_attach - failed to power on unit: -71 [ 490.890806][ T1126] hsr_slave_0: left promiscuous mode [ 490.896838][ T1126] hsr_slave_1: left promiscuous mode [ 490.901437][ T5269] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 490.910411][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.933021][ T5269] usb 1-1: USB disconnect, device number 31 [ 490.940293][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.963687][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.973582][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.018229][ T1126] veth1_macvtap: left promiscuous mode [ 491.027351][ T1126] veth0_macvtap: left promiscuous mode [ 491.035408][ T1126] veth1_vlan: left promiscuous mode [ 491.046885][ T1126] veth0_vlan: left promiscuous mode [ 491.365656][T11273] Bluetooth: hci1: command tx timeout [ 492.604204][ T9890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.617301][ T9890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.635451][ T9890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.645336][ T9890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.655337][ T9890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.663719][ T9890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.012774][ T29] audit: type=1326 audit(722.798:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.2.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2eaf779f9 code=0x0 [ 493.065507][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 493.156440][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 493.619876][ T9890] Bluetooth: hci1: command tx timeout [ 494.230601][T11453] chnl_net:caif_netlink_parms(): no params data found [ 494.814961][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.838409][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.905122][T11453] bridge_slave_0: entered allmulticast mode [ 494.962940][ T9890] Bluetooth: hci3: command tx timeout [ 495.715028][T11453] bridge_slave_0: entered promiscuous mode [ 495.740922][T11590] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd2": -EINTR [ 495.744100][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.835137][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.883618][ T9890] Bluetooth: hci1: command tx timeout [ 495.960570][T11453] bridge_slave_1: entered allmulticast mode [ 495.967949][T11453] bridge_slave_1: entered promiscuous mode [ 496.010715][T11606] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1725'. [ 496.217732][T11453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.320789][T11453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.427852][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.442444][T11616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.515869][T11611] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 496.543001][T11611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 497.557001][ T9890] Bluetooth: hci3: command tx timeout [ 497.571966][T11453] team0: Port device team_slave_0 added [ 497.600071][T11453] team0: Port device team_slave_1 added [ 498.023047][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.268033][ T5253] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 498.361142][T11453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.369053][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.400822][T11453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.603426][T11453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.647158][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.702133][ T5253] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 498.715400][ T5253] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 498.728137][ T5253] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 498.741007][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.753084][ T5253] usb 1-1: Product: syz [ 498.764159][ T5253] usb 1-1: Manufacturer: syz [ 498.774263][ T5253] usb 1-1: SerialNumber: syz [ 498.794338][T11453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.795669][ T5253] usb 1-1: config 0 descriptor?? [ 498.863963][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.889812][T11549] chnl_net:caif_netlink_parms(): no params data found [ 499.099359][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.131454][T11453] hsr_slave_0: entered promiscuous mode [ 499.153338][T11453] hsr_slave_1: entered promiscuous mode [ 499.164828][T11453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.176361][T11453] Cannot create hsr debugfs directory [ 499.201439][ T5253] usb 1-1: USB disconnect, device number 32 [ 499.246964][ T5215] udevd[5215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.337593][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.533220][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.541405][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.549420][T11549] bridge_slave_0: entered allmulticast mode [ 499.561937][T11549] bridge_slave_0: entered promiscuous mode [ 499.572476][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.580306][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.588549][T11549] bridge_slave_1: entered allmulticast mode [ 499.608025][T11549] bridge_slave_1: entered promiscuous mode [ 499.776176][T11273] Bluetooth: hci3: command tx timeout [ 499.973516][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.168969][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.325413][ T1126] bridge_slave_1: left allmulticast mode [ 500.339760][ T1126] bridge_slave_1: left promiscuous mode [ 500.346250][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.375480][ T1126] bridge_slave_0: left allmulticast mode [ 500.383191][ T1126] bridge_slave_0: left promiscuous mode [ 500.392841][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.127411][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.148820][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.161020][ T1126] bond0 (unregistering): Released all slaves [ 501.298904][T11549] team0: Port device team_slave_0 added [ 501.340857][T11549] team0: Port device team_slave_1 added [ 502.062518][T11273] Bluetooth: hci3: command 0x0419 tx timeout [ 502.285067][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.292890][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.320324][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.366840][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.423318][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 502.451417][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.535993][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.158044][T11549] hsr_slave_0: entered promiscuous mode [ 503.189033][T11549] hsr_slave_1: entered promiscuous mode [ 503.219328][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.239295][T11549] Cannot create hsr debugfs directory [ 503.280768][ T1126] hsr_slave_0: left promiscuous mode [ 503.291122][ T1126] hsr_slave_1: left promiscuous mode [ 503.307351][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.314783][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.336531][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.346791][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.382586][ T1126] veth1_macvtap: left promiscuous mode [ 503.388163][ T1126] veth0_macvtap: left promiscuous mode [ 503.395803][ T1126] veth1_vlan: left promiscuous mode [ 503.410901][ T1126] veth0_vlan: left promiscuous mode [ 504.281015][ T9890] Bluetooth: hci3: command 0x0419 tx timeout [ 504.314271][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 504.361834][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 504.913995][T11759] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1752'. [ 504.923515][T11759] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 507.473140][T11769] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 507.793539][T11766] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 508.687533][T11769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.691691][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 508.707208][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 508.716296][T11777] tipc: Started in network mode [ 508.721152][T11777] tipc: Node identity 1, cluster identity 4711 [ 508.727339][T11777] tipc: Node number set to 1 [ 508.828479][T11453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.865762][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 508.889801][T11453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.953165][T11453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.982564][T11453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 509.155548][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 509.303272][T11453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.361456][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 509.372389][ T5265] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 509.380658][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.402825][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.404476][T11453] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.425378][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.444654][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.479965][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.487149][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.496203][ T25] usb 2-1: config 0 descriptor?? [ 509.508396][ T25] hub 2-1:0.0: USB hub found [ 509.534439][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.541672][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.627748][ T5265] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 509.646567][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.680312][ T5265] usb 1-1: Product: syz [ 509.710117][ T5265] usb 1-1: Manufacturer: syz [ 509.715656][ T5265] usb 1-1: SerialNumber: syz [ 509.764838][T11804] input: syz0 as /devices/virtual/input/input42 [ 509.786068][ T5265] usb 1-1: config 0 descriptor?? [ 509.798167][ T25] hub 2-1:0.0: 1 port detected [ 509.821056][T11549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.828319][ T5265] gspca_main: kinect-2.14.0 probing 045e:02bf [ 509.877541][T11549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.930631][T11549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.987962][T11549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.211902][ T5253] usb 1-1: USB disconnect, device number 33 [ 510.431960][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.529817][T11453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.541852][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.565732][ T25] hub 2-1:0.0: activate --> -90 [ 510.572197][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.579306][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.729815][T11549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.750257][T11549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.849088][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.856289][ T5253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.047634][ T5268] usb 2-1: USB disconnect, device number 30 [ 511.055970][ T5265] usb 2-1: Failed to suspend device, error -19 [ 511.744110][T11825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.465663][T11453] veth0_vlan: entered promiscuous mode [ 512.478740][T11453] veth1_vlan: entered promiscuous mode [ 512.638352][T11453] veth0_macvtap: entered promiscuous mode [ 512.706777][T11453] veth1_macvtap: entered promiscuous mode [ 512.788299][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.829366][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.879070][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.906052][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.950186][T11845] input: syz0 as /devices/virtual/input/input44 [ 513.232599][T11848] tmpfs: Bad value for 'mpol' [ 513.423879][T11453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.461739][ T8] kernel read not supported for file /uinput (pid: 8 comm: kworker/0:0) [ 513.509865][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.521390][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.614080][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.714644][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.948337][T11453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.994860][T11453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.007170][T11453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.018926][T11453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.027846][T11453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.113907][ T5268] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 514.685197][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.721193][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.155787][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.414220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.422557][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.451417][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.472353][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.491185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.578078][ T5268] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.606569][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.644625][ T5268] usb 1-1: config 0 descriptor?? [ 515.764412][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 515.983025][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 515.990403][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.010325][ T9] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 516.018817][T11549] veth0_vlan: entered promiscuous mode [ 516.040818][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.045609][T11549] veth1_vlan: entered promiscuous mode [ 516.057601][ T9] usb 3-1: Product: syz [ 516.061785][ T9] usb 3-1: Manufacturer: syz [ 516.066385][ T9] usb 3-1: SerialNumber: syz [ 516.103388][ T9] usb 3-1: config 0 descriptor?? [ 516.130291][T11549] veth0_macvtap: entered promiscuous mode [ 516.137658][ T9] as10x_usb: device has been detected [ 516.143840][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 516.156529][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 516.171777][T11549] veth1_macvtap: entered promiscuous mode [ 516.205808][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 516.218363][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.252122][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.284540][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.303865][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.316895][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.323112][ T9] as10x_usb: error during firmware upload part1 [ 516.327503][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.348444][ T9] Registered device Abilis Systems DVB-Titan [ 516.357394][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.407546][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.449059][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.469410][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.480329][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.494913][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.508340][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.520721][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.542690][T11549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.551759][T11549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.563068][T11549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.575296][T11549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.626317][ T9890] Bluetooth: hci2: failed to read key size for handle 201 [ 516.637774][ T9890] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 516.723518][T11885] netlink: 'syz.1.1778': attribute type 11 has an invalid length. [ 516.792609][ T1126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.009797][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.045014][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.143399][ T5268] usbhid 1-1:0.0: can't add hid device: -71 [ 517.152290][ T5268] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.170648][ T5268] usb 1-1: USB disconnect, device number 34 [ 517.241356][ T1126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.271860][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.279800][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.327781][ T1126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.425330][ T1126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.571026][ T1126] bridge_slave_1: left allmulticast mode [ 517.579147][ T1126] bridge_slave_1: left promiscuous mode [ 517.585055][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.594018][ T1126] bridge_slave_0: left allmulticast mode [ 517.600105][ T1126] bridge_slave_0: left promiscuous mode [ 517.605780][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.953709][T11893] random: crng reseeded on system resumption [ 518.383755][T11273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.391457][T11893] Restarting kernel threads ... done. [ 518.393481][T11273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.410241][T11273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.420231][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.428924][T11273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.441416][T11273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 518.450689][T11273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.479834][ T25] usb 3-1: USB disconnect, device number 30 [ 518.489637][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.517971][ T1126] bond0 (unregistering): Released all slaves [ 518.558177][ T25] Unregistered device Abilis Systems DVB-Titan [ 518.578908][ T25] as10x_usb: device has been disconnected [ 518.841994][T11908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.359728][T11913] program syz.1.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.664728][T11273] Bluetooth: hci1: command tx timeout [ 520.874449][ T9890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 520.886752][ T1126] hsr_slave_0: left promiscuous mode [ 520.892822][ T9890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 520.901604][ T1126] hsr_slave_1: left promiscuous mode [ 520.907878][ T9890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 520.915313][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.923476][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 520.935694][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.943065][ T9890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 520.951904][ T9890] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 520.959885][ T9890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 520.974271][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.982058][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.026940][ T1126] veth1_macvtap: left promiscuous mode [ 521.032618][ T1126] veth0_macvtap: left promiscuous mode [ 521.040005][ T1126] veth1_vlan: left promiscuous mode [ 521.046156][ T1126] veth0_vlan: left promiscuous mode [ 521.084656][ T5334] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 521.128757][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 521.138767][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 521.151873][ T25] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 521.165561][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.176473][ T25] usb 1-1: Product: syz [ 521.180759][ T25] usb 1-1: Manufacturer: syz [ 521.185832][ T25] usb 1-1: SerialNumber: syz [ 521.196114][ T25] usb 1-1: config 0 descriptor?? [ 521.209424][ T25] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 521.279500][ T5334] usb 3-1: Using ep0 maxpacket: 8 [ 521.306335][ T5334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 521.329619][ T5334] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 521.341307][ T5334] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.355004][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 521.364409][ T5334] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 521.376132][ T5334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 521.384553][ T5334] usb 3-1: SerialNumber: syz [ 521.391203][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=55.33 [ 521.403001][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.414885][T11930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.422248][ T9] usb 2-1: Product: syz [ 521.426452][ T9] usb 2-1: Manufacturer: syz [ 521.431448][ T9] usb 2-1: SerialNumber: syz [ 521.437159][ T5334] hub 3-1:1.0: bad descriptor, ignoring hub [ 521.448614][ T9] usb 2-1: config 0 descriptor?? [ 521.454315][ T5334] hub 3-1:1.0: probe with driver hub failed with error -5 [ 521.468773][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 521.487942][ T9] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 521.492995][ T5268] usb 1-1: USB disconnect, device number 35 [ 521.667816][T11930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.745443][ T9] usb 2-1: USB disconnect, device number 31 [ 521.868540][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 521.915936][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 522.599627][ T5334] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 522.599691][T11943] netlink: 'syz.0.1791': attribute type 21 has an invalid length. [ 522.625803][T11943] netlink: 'syz.0.1791': attribute type 6 has an invalid length. [ 522.633795][T11943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1791'. [ 522.661135][T11899] chnl_net:caif_netlink_parms(): no params data found [ 522.677011][ T5334] usb 3-1: USB disconnect, device number 31 [ 522.707440][ T5334] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 522.914911][T11273] Bluetooth: hci1: command tx timeout [ 523.023055][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.041704][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.082491][T11899] bridge_slave_0: entered allmulticast mode [ 523.124420][T11899] bridge_slave_0: entered promiscuous mode [ 523.163531][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.176216][T11273] Bluetooth: hci3: command tx timeout [ 523.179242][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.209324][T11952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.219891][T11899] bridge_slave_1: entered allmulticast mode [ 523.227213][T11899] bridge_slave_1: entered promiscuous mode [ 523.248639][T11952] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.279480][T11964] netlink: 'syz.1.1795': attribute type 8 has an invalid length. [ 523.289082][T11964] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.294818][T11952] netlink: 'syz.1.1795': attribute type 5 has an invalid length. [ 523.316428][T11952] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1795'. [ 523.405093][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.470431][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.702647][T11899] team0: Port device team_slave_0 added [ 523.750168][T11899] team0: Port device team_slave_1 added [ 523.964415][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.972009][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.004144][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.096899][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.111886][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.158092][ T9890] Bluetooth: hci5: sending frame failed (-49) [ 524.166728][T11273] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 524.179855][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.391929][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.480397][ T9890] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 524.499773][T11935] chnl_net:caif_netlink_parms(): no params data found [ 524.592547][T11899] hsr_slave_0: entered promiscuous mode [ 524.603975][T11899] hsr_slave_1: entered promiscuous mode [ 524.614337][T11899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.624651][T11899] Cannot create hsr debugfs directory [ 524.668095][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.903567][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.155261][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.168513][ T9890] Bluetooth: hci1: command tx timeout [ 525.396518][T11935] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.406914][T11935] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.414123][T11935] bridge_slave_0: entered allmulticast mode [ 525.420249][ T5265] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 525.428663][ T9890] Bluetooth: hci3: command tx timeout [ 525.447703][T11935] bridge_slave_0: entered promiscuous mode [ 525.457101][T11935] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.465213][T11935] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.472741][T11935] bridge_slave_1: entered allmulticast mode [ 525.481050][T11935] bridge_slave_1: entered promiscuous mode [ 525.586997][T11935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.635491][ T5265] usb 2-1: Using ep0 maxpacket: 8 [ 525.639501][T11935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.652400][ T5265] usb 2-1: config 0 has no interfaces? [ 525.669398][ T5265] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.684823][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.693431][ T5265] usb 2-1: Product: syz [ 525.699617][ T5265] usb 2-1: Manufacturer: syz [ 525.704405][ T5265] usb 2-1: SerialNumber: syz [ 525.712525][ T5265] usb 2-1: config 0 descriptor?? [ 525.751195][T11935] team0: Port device team_slave_0 added [ 525.762529][T11935] team0: Port device team_slave_1 added [ 526.025674][T11935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.032830][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.060240][T11935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.073213][T11935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.080629][T11935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.108576][T11935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.133001][ T1126] bridge_slave_1: left allmulticast mode [ 526.138657][ T1126] bridge_slave_1: left promiscuous mode [ 526.153963][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.165906][ T1126] bridge_slave_0: left allmulticast mode [ 526.171566][ T1126] bridge_slave_0: left promiscuous mode [ 526.177686][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.258739][ T5268] usb 2-1: USB disconnect, device number 32 [ 526.598308][ T29] audit: type=1804 audit(753.811:139): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1809" name="/newroot/376/bus/bus" dev="overlay" ino=2032 res=1 errno=0 [ 527.422825][ T9890] Bluetooth: hci1: command tx timeout [ 527.523086][T12040] usb usb8: usbfs: process 12040 (syz.1.1810) did not claim interface 0 before use [ 527.682381][ T9890] Bluetooth: hci3: command 0x040f tx timeout [ 527.720062][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.750435][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.777764][ T1126] bond0 (unregistering): Released all slaves [ 528.587041][T12053] bridge0: entered promiscuous mode [ 528.595570][T12053] bridge0: left promiscuous mode [ 528.758777][T11935] hsr_slave_0: entered promiscuous mode [ 528.774395][T11935] hsr_slave_1: entered promiscuous mode [ 528.780984][T11935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.797980][T11935] Cannot create hsr debugfs directory [ 528.822818][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 528.898394][T12059] binder: 12058:12059 ioctl 8912 20000540 returned -22 [ 529.192278][ T1126] hsr_slave_0: left promiscuous mode [ 529.209304][ T1126] hsr_slave_1: left promiscuous mode [ 529.226029][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.242108][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.264608][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.283040][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.381418][ T1126] veth1_macvtap: left promiscuous mode [ 529.394781][ T1126] veth0_macvtap: left promiscuous mode [ 529.408840][ T1126] veth1_vlan: left promiscuous mode [ 529.442787][ T1126] veth0_vlan: left promiscuous mode [ 529.513780][ T5268] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 529.744671][ T5268] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.794880][ T5268] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 529.839539][ T5268] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.880448][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.904729][T12069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 529.917631][ T5268] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.947026][T11273] Bluetooth: hci3: command 0x040f tx timeout [ 530.170089][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.183899][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.184838][ T5334] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 530.304361][ T5265] usb 3-1: USB disconnect, device number 32 [ 530.440535][ T5334] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 530.462069][ T5334] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 530.473447][ T5334] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 530.493221][ T5334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.513374][T12084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 530.700175][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 530.759194][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 530.810737][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.817215][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.426465][T12067] tipc: Started in network mode [ 531.437917][T12067] tipc: Node identity ac1414aa, cluster identity 4711 [ 531.446991][T12067] tipc: Enabled bearer , priority 10 [ 531.670743][T11899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.694789][T11899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.938188][T11899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.073139][ T5334] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 532.087649][ T5334] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input45 [ 532.110039][T11899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 532.190217][T11273] Bluetooth: hci3: command 0x040f tx timeout [ 532.330631][ T5334] usb 1-1: USB disconnect, device number 36 [ 532.330692][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 532.563513][ T25] tipc: Node number set to 2886997162 [ 532.861780][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.065063][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.121770][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.128936][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.159537][ T29] audit: type=1326 audit(759.866:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.202010][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.209225][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.227142][ T29] audit: type=1326 audit(759.884:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.276642][ T29] audit: type=1326 audit(759.921:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.312990][ T29] audit: type=1326 audit(759.949:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.378833][T12103] orangefs_mount: mount request failed with -4 [ 533.437408][ T29] audit: type=1326 audit(759.949:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.539521][ T29] audit: type=1326 audit(759.958:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.596882][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.628142][ T29] audit: type=1326 audit(759.958:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c33779f9 code=0x7ffc0000 [ 533.657082][ T29] audit: type=1326 audit(759.958:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0c336e9a7 code=0x7ffc0000 [ 533.691703][ T29] audit: type=1326 audit(759.958:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c3313379 code=0x7ffc0000 [ 533.725206][ T29] audit: type=1326 audit(759.958:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12119 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0c336e9a7 code=0x7ffc0000 [ 533.767019][T11935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.813714][T11935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.851786][T11935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.865522][T11935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.095420][T11935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.200311][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.254179][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.261366][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.297736][ T5265] IPVS: starting estimator thread 0... [ 534.336975][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.344177][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.432003][T12153] IPVS: using max 36 ests per chain, 86400 per kthread [ 534.531066][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.692955][T11899] veth0_vlan: entered promiscuous mode [ 534.805456][T11899] veth1_vlan: entered promiscuous mode [ 534.952217][T11899] veth0_macvtap: entered promiscuous mode [ 534.995041][T11899] veth1_macvtap: entered promiscuous mode [ 535.053833][T11935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.090898][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.124123][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.158695][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.188216][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.224184][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.264988][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.296042][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.328598][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.349542][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.361270][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.385244][T12176] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 535.424767][T11899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.446554][T12176] kvm: pic: non byte read [ 535.450120][T11899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.480812][T11899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.483258][T12176] kvm: pic: level sensitive irq not supported [ 535.490100][T12176] kvm: pic: non byte read [ 535.502704][T11899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.873687][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.882695][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.953160][T12199] Bluetooth: MGMT ver 1.23 [ 536.019473][T11935] veth0_vlan: entered promiscuous mode [ 536.047565][ T2592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.078594][ T2592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.099988][T11935] veth1_vlan: entered promiscuous mode [ 536.215503][T11935] veth0_macvtap: entered promiscuous mode [ 536.257704][T11935] veth1_macvtap: entered promiscuous mode [ 536.326949][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.348176][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.361621][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.384404][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.401135][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.420831][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.453725][T11935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.614616][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.665968][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.692487][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.724993][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.761181][T11935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.771647][T11935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.820571][T11935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.166819][T11935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.176282][T11935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.185831][T11935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.195757][T11935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.303886][ T9890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.315252][ T9890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.323460][ T9890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.331949][ T9890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.340494][ T9890] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 537.348515][ T9890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.578622][T11273] Bluetooth: hci0: command tx timeout [ 651.062143][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 651.069145][ C1] rcu: 0-...!: (1 GPs behind) idle=6bd4/1/0x4000000000000000 softirq=46022/46023 fqs=45 [ 651.080666][ C1] rcu: (detected by 1, t=10506 jiffies, g=57405, q=340 ncpus=2) [ 651.088398][ C1] Sending NMI from CPU 1 to CPUs 0: [ 651.093633][ C0] NMI backtrace for cpu 0 [ 651.093657][ C0] CPU: 0 UID: 0 PID: 12224 Comm: syz.1.1859 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 651.093675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 651.093684][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 651.093712][ C0] Code: 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 00 d7 03 00 65 8b 05 a0 5d 70 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 [ 651.093725][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000046 [ 651.093740][ C0] RAX: 0000000000010002 RBX: 0000000000000001 RCX: ffff88806d39da00 [ 651.093751][ C0] RDX: ffff88806d39da00 RSI: 0000000000000001 RDI: 0000000000000000 [ 651.093761][ C0] RBP: ffffc90000007ea8 R08: ffffffff8180be12 R09: 1ffffffff1fed33d [ 651.093772][ C0] R10: dffffc0000000000 R11: fffffbfff1fed33e R12: 1ffff1101724593b [ 651.093784][ C0] R13: dffffc0000000000 R14: ffff888068091340 R15: ffff8880b922c880 [ 651.093795][ C0] FS: 000055559214f500(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 651.093809][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.093821][ C0] CR2: 0000000020003c80 CR3: 000000006edf0000 CR4: 00000000003506f0 [ 651.093834][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.093843][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.093853][ C0] Call Trace: [ 651.093861][ C0] [ 651.093869][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 651.093887][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 651.093908][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 651.093924][ C0] ? nmi_handle+0x2a/0x5a0 [ 651.093949][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 651.093966][ C0] ? nmi_handle+0x14f/0x5a0 [ 651.093981][ C0] ? nmi_handle+0x2a/0x5a0 [ 651.093996][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 651.094015][ C0] ? default_do_nmi+0x63/0x160 [ 651.094031][ C0] ? exc_nmi+0x123/0x1f0 [ 651.094047][ C0] ? end_repeat_nmi+0xf/0x53 [ 651.094066][ C0] ? __hrtimer_run_queues+0x3b2/0xd50 [ 651.094085][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 651.094105][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 651.094125][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 651.094144][ C0] [ 651.094149][ C0] [ 651.094154][ C0] __hrtimer_run_queues+0x3b2/0xd50 [ 651.094171][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 651.094199][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 651.094216][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 651.094237][ C0] hrtimer_interrupt+0x396/0x990 [ 651.094267][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 651.094290][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 651.094309][ C0] [ 651.094314][ C0] [ 651.094325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 651.094341][ C0] RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x90 [ 651.094357][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 48 89 fb eb 18 48 89 df e8 ce 35 52 0a e8 c9 c0 35 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc f3 0f 1e fa 49 bf 00 00 00 00 00 fc ff [ 651.094369][ C0] RSP: 0018:ffffc900033df6a8 EFLAGS: 00000286 [ 651.094382][ C0] RAX: 742b9f8c9ba7fd00 RBX: ffff8880b923e9c0 RCX: ffffffff94ce6903 [ 651.094394][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f8b40 [ 651.094405][ C0] RBP: ffffc900033df8b0 R08: ffffffff8ff699ef R09: 1ffffffff1fed33d [ 651.094417][ C0] R10: dffffc0000000000 R11: fffffbfff1fed33e R12: 0000000000000002 [ 651.094427][ C0] R13: 0000000000000000 R14: ffff8880b923f758 R15: dffffc0000000000 [ 651.094450][ C0] __schedule+0x19e8/0x4a10 [ 651.094482][ C0] ? __pfx___schedule+0x10/0x10 [ 651.094499][ C0] ? irqentry_exit+0x63/0x90 [ 651.094517][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 651.094546][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 651.094565][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 651.094583][ C0] ? __pfx___schedule+0x10/0x10 [ 651.094606][ C0] irqentry_exit+0x5e/0x90 [ 651.094623][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 651.094639][ C0] RIP: 0010:futex_wait_queue+0x166/0x1d0 [ 651.094659][ C0] Code: 89 eb 74 6c e8 3b 9e 0c 00 48 8b 2c 24 e8 e2 d5 2e 0a 42 80 7c 3d 00 00 74 08 48 89 df e8 22 b7 70 00 4c 89 33 48 8b 54 24 08 <48> 89 d0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 3d c7 02 00 00 00 00 [ 651.094671][ C0] RSP: 0018:ffffc900033dfa38 EFLAGS: 00000246 [ 651.094684][ C0] RAX: 0000000000400040 RBX: ffff88806d39f160 RCX: 0000000000000001 [ 651.094694][ C0] RDX: ffff88806d39da18 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 651.094705][ C0] RBP: 1ffff1100da73e2c R08: ffffffff8ff699ef R09: 1ffffffff1fed33d [ 651.094716][ C0] R10: dffffc0000000000 R11: fffffbfff1fed33e R12: ffffc900033dfc80 [ 651.094727][ C0] R13: ffffc900033dfaf8 R14: ffffffff8186d6f7 R15: dffffc0000000000 [ 651.094739][ C0] ? futex_wait_queue+0x27/0x1d0 [ 651.094766][ C0] ? futex_wait_queue+0x14e/0x1d0 [ 651.094786][ C0] __futex_wait+0x17f/0x320 [ 651.094808][ C0] ? __pfx___futex_wait+0x10/0x10 [ 651.094830][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 651.094854][ C0] ? ktime_add_safe+0x38/0x70 [ 651.094877][ C0] futex_wait+0x101/0x360 [ 651.094897][ C0] ? __pfx_futex_wait+0x10/0x10 [ 651.094917][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 651.094935][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 651.094953][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 651.094972][ C0] ? ktime_get+0x3c/0xb0 [ 651.094989][ C0] do_futex+0x33b/0x560 [ 651.095009][ C0] ? __pfx_do_futex+0x10/0x10 [ 651.095031][ C0] __se_sys_futex+0x3f9/0x480 [ 651.095052][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 651.095069][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.095088][ C0] ? do_syscall_64+0x100/0x230 [ 651.095110][ C0] ? __x64_sys_futex+0x21/0xf0 [ 651.095128][ C0] do_syscall_64+0xf3/0x230 [ 651.095147][ C0] ? clear_bhb_loop+0x35/0x90 [ 651.095164][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.095185][ C0] RIP: 0033:0x7fdea89779f9 [ 651.095204][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.095216][ C0] RSP: 002b:00007ffe457d7c98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 651.095231][ C0] RAX: ffffffffffffffda RBX: 000000000007bf27 RCX: 00007fdea89779f9 [ 651.095242][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdea8b06064 [ 651.095252][ C0] RBP: 00007fdea8b06064 R08: 00007fdea8b05f80 R09: 00007ffe457d7f7f [ 651.095263][ C0] R10: 00007ffe457d7d90 R11: 0000000000000246 R12: 0000000000000032 [ 651.095273][ C0] R13: 00007ffe457d7d90 R14: 00007ffe457d7db0 R15: 000000000007bef5 [ 651.095293][ C0] [ 651.095621][ C1] rcu: rcu_preempt kthread starved for 10280 jiffies! g57405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 651.757890][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 651.767874][ C1] rcu: RCU grace-period kthread stack dump: [ 651.773772][ C1] task:rcu_preempt state:R running task stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 651.785550][ C1] Call Trace: [ 651.788841][ C1] [ 651.791790][ C1] __schedule+0x17ae/0x4a10 [ 651.796334][ C1] ? __pfx___schedule+0x10/0x10 [ 651.801208][ C1] ? __pfx_lock_release+0x10/0x10 [ 651.806245][ C1] ? __asan_memset+0x23/0x50 [ 651.810852][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 651.816672][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.823019][ C1] ? schedule+0x90/0x320 [ 651.827276][ C1] schedule+0x14b/0x320 [ 651.831446][ C1] schedule_timeout+0x1be/0x310 [ 651.836308][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 651.841695][ C1] ? __pfx_process_timeout+0x10/0x10 [ 651.846998][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 651.852561][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 651.857518][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 651.862743][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 651.868822][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 651.874115][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 651.880029][ C1] ? finish_swait+0xd4/0x1e0 [ 651.884635][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 651.889239][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 651.894447][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 651.900357][ C1] ? __kthread_parkme+0x169/0x1d0 [ 651.905400][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 651.910610][ C1] kthread+0x2f0/0x390 [ 651.914690][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 651.919897][ C1] ? __pfx_kthread+0x10/0x10 [ 651.924509][ C1] ret_from_fork+0x4b/0x80 [ 651.928935][ C1] ? __pfx_kthread+0x10/0x10 [ 651.933537][ C1] ret_from_fork_asm+0x1a/0x30 [ 651.938329][ C1] [ 651.941353][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 651.947679][ C1] CPU: 1 UID: 0 PID: 1126 Comm: kworker/u8:7 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 651.958533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 651.968595][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 651.974599][ C1] RIP: 0010:smp_call_function_many_cond+0x1878/0x29d0 [ 651.981369][ C1] Code: 00 00 00 00 fc ff df 75 07 e8 24 10 0c 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 08 10 0c 00 e4 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 4c 89 ef e8 d1 27 70 [ 652.000982][ C1] RSP: 0018:ffffc900042f5ec0 EFLAGS: 00000293 [ 652.007061][ C1] RAX: ffffffff81876648 RBX: 1ffff11017248c61 RCX: ffff888022829e00 [ 652.015038][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 652.023018][ C1] RBP: ffffc900042f60a0 R08: ffffffff81876617 R09: 1ffff9200085ebc8 [ 652.030994][ C1] R10: dffffc0000000000 R11: ffffffff8142d5e0 R12: dffffc0000000000 [ 652.038970][ C1] R13: ffff8880b9246308 R14: ffff8880b933fb40 R15: 0000000000000000 [ 652.046947][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 652.055880][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.062467][ C1] CR2: 00007ff2eb1020c0 CR3: 000000001c6fc000 CR4: 00000000003506f0 [ 652.070448][ C1] Call Trace: [ 652.073735][ C1] [ 652.076587][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 652.082933][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 652.088591][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 652.094410][ C1] ? __pfx_lock_release+0x10/0x10 [ 652.099460][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 652.105717][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 652.111109][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 652.116757][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 652.121963][ C1] ? acct_account_cputime+0x207/0x210 [ 652.127350][ C1] ? update_process_times+0x1ce/0x230 [ 652.132738][ C1] ? tick_nohz_handler+0x37c/0x500 [ 652.137862][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 652.143332][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 652.148709][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 652.154715][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 652.160441][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 652.166531][ C1] ? hrtimer_interrupt+0x396/0x990 [ 652.171677][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 652.177846][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 652.183662][ C1] [ 652.186597][ C1] [ 652.189534][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 652.195701][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 652.200993][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 652.207151][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 652.213316][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 652.219486][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 652.224780][ C1] ? __lock_acquire+0x137a/0x2040 [ 652.229819][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 652.235043][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 652.241822][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.246596][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 652.251802][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 652.257093][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 652.262215][ C1] flush_tlb_mm_range+0x329/0x5c0 [ 652.267255][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 652.272807][ C1] ? page_ext_get+0x1d6/0x2a0 [ 652.277506][ C1] ptep_clear_flush+0x11a/0x170 [ 652.282371][ C1] page_vma_mkclean_one+0x58a/0x9a0 [ 652.287594][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 652.293328][ C1] ? __pfx_validate_chain+0x10/0x10 [ 652.298553][ C1] page_mkclean_one+0x280/0x420 [ 652.303419][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 652.308811][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 652.314280][ C1] ? vma_interval_tree_iter_next+0x31b/0x340 [ 652.320272][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 652.325658][ C1] rmap_walk_file+0x52f/0x9f0 [ 652.330360][ C1] folio_mkclean+0x262/0x440 [ 652.334964][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 652.340091][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 652.345547][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 652.351219][ C1] ? __pfx_lock_release+0x10/0x10 [ 652.356262][ C1] ? folio_mapping+0x1b4/0x430 [ 652.361047][ C1] folio_clear_dirty_for_io+0x22b/0xcf0 [ 652.366618][ C1] ? __pfx_folio_clear_dirty_for_io+0x10/0x10 [ 652.372705][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 652.377658][ C1] ? filemap_get_folios_tag+0x1ce/0x890 [ 652.383224][ C1] mpage_submit_folio+0x88/0x230 [ 652.388183][ C1] mpage_process_page_bufs+0x6c9/0x8d0 [ 652.393662][ C1] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 652.399564][ C1] ? kasan_save_track+0x51/0x80 [ 652.404427][ C1] ? kasan_save_track+0x3f/0x80 [ 652.409311][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 652.415675][ C1] ? ext4_init_io_end+0x29/0x130 [ 652.420626][ C1] ? rcu_is_watching+0x15/0xb0 [ 652.425400][ C1] ? ext4_init_io_end+0x29/0x130 [ 652.430352][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 652.436004][ C1] ext4_do_writepages+0xc52/0x3d40 [ 652.441142][ C1] ? __kasan_slab_free+0x37/0x60 [ 652.446092][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 652.451953][ C1] ? worker_thread+0x86d/0xd40 [ 652.456730][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 652.461706][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 652.467305][ C1] ? rcu_read_lock_any_held+0xb7/0x160 [ 652.472792][ C1] ext4_writepages+0x213/0x3c0 [ 652.477568][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 652.482875][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 652.488088][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 652.493385][ C1] do_writepages+0x35d/0x870 [ 652.497994][ C1] ? __pfx_do_writepages+0x10/0x10 [ 652.503128][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 652.508163][ C1] ? writeback_sb_inodes+0x5ea/0x1380 [ 652.513548][ C1] ? __pfx_lock_release+0x10/0x10 [ 652.518582][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 652.523624][ C1] __writeback_single_inode+0x165/0x10b0 [ 652.529275][ C1] writeback_sb_inodes+0x99c/0x1380 [ 652.534490][ C1] ? mark_lock+0x9a/0x350 [ 652.538882][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 652.544592][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 652.550072][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 652.555726][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 652.560774][ C1] __writeback_inodes_wb+0x11b/0x260 [ 652.566086][ C1] wb_writeback+0x495/0xd40 [ 652.570625][ C1] ? queue_io+0x321/0x5a0 [ 652.574990][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 652.580035][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.586052][ C1] wb_workfn+0xba1/0x1090 [ 652.590592][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 652.595386][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.601388][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.607756][ C1] ? process_scheduled_works+0x945/0x1830 [ 652.613489][ C1] process_scheduled_works+0xa2c/0x1830 [ 652.619079][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.625084][ C1] ? assign_work+0x364/0x3d0 [ 652.629693][ C1] worker_thread+0x86d/0xd40 [ 652.634314][ C1] ? __kthread_parkme+0x169/0x1d0 [ 652.639354][ C1] ? __pfx_worker_thread+0x10/0x10 [ 652.644478][ C1] kthread+0x2f0/0x390 [ 652.648557][ C1] ? __pfx_worker_thread+0x10/0x10 [ 652.653679][ C1] ? __pfx_kthread+0x10/0x10 [ 652.658282][ C1] ret_from_fork+0x4b/0x80 [ 652.662710][ C1] ? __pfx_kthread+0x10/0x10 [ 652.667318][ C1] ret_from_fork_asm+0x1a/0x30 [ 652.672109][ C1]