last executing test programs: 52.14961533s ago: executing program 1 (id=879): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x60, 0x4000, @fd_index=0x2, 0x7, 0xffffffff, 0x2f22, 0x10, 0x0, {0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e3100000000000000001400018001"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r11, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003020040000213"], 0x0, 0x0, 0x0}, 0x0) 48.505975265s ago: executing program 1 (id=887): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) io_uring_setup(0x703e, &(0x7f0000000180)) syz_io_uring_setup(0x1c68, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3a3}, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fb}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 48.021047502s ago: executing program 1 (id=888): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000001440)=[{&(0x7f0000001740)="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", 0x1169}, {&(0x7f00000002c0)="1e8a017509a401228f89a538c9f8919ca1359312625141549afdd50e79791b35af042f2c3074d26ef362a148db373975a37c867fc3099180391d0ea3e5b74c165d2c5e22f60bb9a9452b49eab32fc663a23f05f2", 0x54}, {&(0x7f00000014c0)="0904b3d8c745654cccb88b8e7fb5f02d3d2e5f0a591a5e36be75c1cbfaf582bea2fcd9cba1e0a532729f0388c7730377e31372433407f5c2d58f54ab479b9234d9fb21a1620961df92d87a8d252b0c04916b2b21fecfc4b66b85e9855430fe64c6a323947df15d0a7d8eef0339f8e4e8ffa7d9a4b1b096edd9eb929fdad73c0e4a6959ab08dd805d9fdb0abe4746d32499aef3dfac57bbc640e40413480178703d64e615b9ed6b4a914c4970f844f72d9a088f3991891af3c963a5d00c1c00"/204, 0xcc}, {&(0x7f00000003c0)="b4f66f1c6c93c836084ec4fbad3584bbaddc034215784920b314d2832fc9287f2d9d1b48ac9c8c4131588ce52746d8b47df92ccd30c02fead407961ca081836eda25d0469a1864ca25ee10bbdce27a970faf98e04f7a775eaa388d6569647bd70196a87bccfa79e606b8e5a99be8dd6b6a1a775e74e0e1cc84590e729b89dc5eb17a37896b6ab3d8be5f38ab84ae03146ea61c44256760ecb355a728ff97f3563d665ec7b8b1690c879c4cd69ce9971ddd14d19756b7d950b8375a11cd3086c4cb66fa32259e991f60f1022b67b48362df4502c9ca3c22cb9306a4d7f08f85e21bdf0d749e437eb2a9a7eb1be48f8dee598f9d00"/268, 0x55}, {&(0x7f00000013c0)="71f246394a4486ddd9e2b8a2f602aa658fda9df66253821c2a81768167cef2e9353a49a61e2090f533ca93e1b069a90dad411055fd6e8314e6efbebd6af03145a4b469b1709010117872262079735aa22ddd60edec38e2a7629d740956cc51791533cedd8ed08eab311d65a0", 0x6c}], 0x5) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="02030e00000000ab5d71acedd7c9560385dcb1080084d7dc", 0x18, 0x8010, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="0800deff4496"}, 0x14) ioctl$KDENABIO(r0, 0x4b36) connect(0xffffffffffffffff, &(0x7f00000015c0)=@llc={0x1a, 0x108, 0x6, 0x81, 0xff, 0x6}, 0x80) rt_sigprocmask(0x1, &(0x7f0000000200)={[0x7]}, &(0x7f0000000000), 0xfffffe75) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001700)={0x3, &(0x7f0000001680)=[{}, {0x34, 0x0, 0x0, 0xff}, {0x6}]}) socket(0xa, 0x0, 0x3a) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r4, &(0x7f0000002040)=""/81, 0x51, 0x7ffb) gettid() 45.637518546s ago: executing program 1 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040013"], 0x48}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getsadinfo={0x6c, 0x23, 0x300, 0x70bd26, 0x25dfdbfe, 0x0, [@sec_ctx={0x55, 0x8, {0x51, 0x8, 0x0, 0x1, 0x49, "3536390e3baaec2237d9c06938a6a1410e665b86bc774e802b18936ff62558305ef20dd6428d05061c29d356190a88cf2f4486c4fa255e1b70f05e2c53ebbda3a449da2a55aa071550"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0xfffffffffffffeb4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x400) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000012c0)={@local, @link_local={0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$TCSETA(r3, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r7}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r9 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') preadv(r9, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 28.790093362s ago: executing program 4 (id=936): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x60, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 27.481820402s ago: executing program 4 (id=941): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x7}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{r4}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=r2, @ANYRES8=0x0]}, @subvolid=0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000004001c"], 0x2c}}, 0x0) 26.638471914s ago: executing program 1 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040013"], 0x48}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getsadinfo={0x6c, 0x23, 0x300, 0x70bd26, 0x25dfdbfe, 0x0, [@sec_ctx={0x55, 0x8, {0x51, 0x8, 0x0, 0x1, 0x49, "3536390e3baaec2237d9c06938a6a1410e665b86bc774e802b18936ff62558305ef20dd6428d05061c29d356190a88cf2f4486c4fa255e1b70f05e2c53ebbda3a449da2a55aa071550"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0xfffffffffffffeb4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x400) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000012c0)={@local, @link_local={0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$TCSETA(r3, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r7}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r9 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') preadv(r9, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 26.424518451s ago: executing program 4 (id=944): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x81}, "af6462f54ef987680ee163bf8514e0873c9e98d71c5464927e70df4fe196d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed4598a6c34e7a152f8be713"}, 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x9}) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001240)=""/4091, &(0x7f0000001200)=0xffb) 25.679890988s ago: executing program 1 (id=946): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1b0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f00000000c0)=0x48b, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0xcd1ee77509a180ca, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000001080)={0xc, 0x0, 0x0}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1f7543, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000800)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r12, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r9, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, r5, &(0x7f0000000080)='\r', 0x1}]) 24.449697508s ago: executing program 4 (id=950): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0xc0902, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) unshare(0x2a020400) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200440c0) write$binfmt_aout(r2, 0x0, 0xad7) open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201e04012800000000000109022400010000000009040000010300000009210000000122020009078103e1000000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd203}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0xfffffbff}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 21.129633638s ago: executing program 4 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040013"], 0x48}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getsadinfo={0x6c, 0x23, 0x300, 0x70bd26, 0x25dfdbfe, 0x0, [@sec_ctx={0x55, 0x8, {0x51, 0x8, 0x0, 0x1, 0x49, "3536390e3baaec2237d9c06938a6a1410e665b86bc774e802b18936ff62558305ef20dd6428d05061c29d356190a88cf2f4486c4fa255e1b70f05e2c53ebbda3a449da2a55aa071550"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0xfffffffffffffeb4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x400) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000012c0)={@local, @link_local={0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$TCSETA(r3, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r7}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r9 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') preadv(r9, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 19.694651022s ago: executing program 4 (id=958): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.745872228s ago: executing program 2 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 9.331012294s ago: executing program 2 (id=1000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)={0x3c, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x3c}}, 0x0) 8.206031875s ago: executing program 0 (id=1002): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) 8.109042934s ago: executing program 0 (id=1003): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040804000c0002"], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90012000100050014010a0000000700ffff00000700fec57416d9932a7d507374d3d6ef5a318cee8b1c8ae79eae51cc2e2e1b6284ef6ff7e53b67a4f9a8eda14b893a88cd1665f0440571ca17b8b745538f42c9ac826b56300567118624acbec2ff3a6bb8411d542d4f1b1719a3f9807ec1cd6242c8069c4480bb6b42047b69bd220a42164cdc35f37de8af6eb801fb41d9bf4d6e52ae02fd77b070d1384c2e01f7ff41031ca86f9c3701b4626783901818beade000e1e994b098ef1f6813bf59975ea2e978fe8890fea906ce1f6a90c13c75459bdcd0254692462c5841215dd2d4291cf909a259c084c8b40ac5ac2e"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x4, 0x480000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000004d40)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)="629ea4de0b174e5dc41101a5c946d0c685d331130f4b742940838a7c3f1e4d30bfb1aefa2902fffe64b5a8a15f1376324c119c80b3c3d5b687131685969608b2679822f81dafa5316bb34eaea07c1433c32ba1131e54e5b2408cc8e55dafe68047a38dd52c0df7a289d76a35a0b84e8501ecbe27a9abf9c6f3615c86037613c5ab01ed4100d898148113109cc68a0414ff9b2f2bceb06b", 0x97}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000580)="8956fa6fb9396b188512f14a4afff4e2de0ff9b8723538a151f04fd4ebce3963336ed228c436fc967242f11f5ba8190718afdfdf8a2ae736204dd73132cf7f0d41af99472750b0f3adfa0b10936400fe590f95dad5af9b10a250f5e8676adb94a7fd1d36740e04df7c9bf95784bcb9e06446998ee1fa6723398b46c95d37e3f36679fc71d91c0fd72d8d41babfed37f035e55be142c7442d640e29758d872e79a98c26fb71b61eab9de31094092f7f391fd5e0f592b07ff97149a85f3130b55ab00f82ad790c", 0xc6}], 0x3, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x10}}, {{&(0x7f0000000780)=@file={0x0, '.\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0027a68158a1856e33000001000000b68c832b04eff892e82d1471f248b2d2b4914380eaa158d408def86a3bbe1f26b0805e5f012c62b870fd7627d478642d82d9c67e27045d92130b605577f9446601fd3adc4e49e8b3bda7c9d8d0e3bad0612b51a32a1c250a05161fe383d3cf911b01d89b42df24775c05d4c25ea762bfcf3d328800d26bce7104c99eee93270fa72c692514576547fb2c05707ccf8ed87f46c6d2aec15c46f2eaf88c3eb43b0a1ec2", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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", @ANYRESOCT], 0x80, 0x4004801}}], 0x2, 0x840) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000a40)={0x0, 'macsec0\x00'}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1d6bd585deeccf657bab442409427b157258bfd0f9e17a9ffd1e88"], 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="02c8e012000e00050015030a000400ff03ff0304000400"], 0x17) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040504bcf3b9c5", @ANYRES16=r3, @ANYRESOCT=0x0], 0x7) 5.358525409s ago: executing program 2 (id=1005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 5.201938965s ago: executing program 2 (id=1007): unshare(0x20000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000000c0), 0x10) 4.90336122s ago: executing program 0 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@broadcast}}}, 0xf8}}, 0x0) 4.769150873s ago: executing program 0 (id=1009): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) io_uring_setup(0x703e, &(0x7f0000000180)) syz_io_uring_setup(0x1c68, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3a3}, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fb}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 4.726080411s ago: executing program 2 (id=1010): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) 4.710064991s ago: executing program 3 (id=1011): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xfdef}}, 0x0) 4.586798948s ago: executing program 2 (id=1012): set_mempolicy(0x3, &(0x7f0000000340)=0xcf, 0x9) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [], 0x7fffffe, 0x0, &(0x7f0000000900)=[{}, {}, {}]}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @remote}, &(0x7f0000000380)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=r3, @ANYBLOB="000006"], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @initdev, @remote}, &(0x7f0000000500)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x40, 0xc8eadfb7869a34e1, 0x1, 0x2, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x67, 0x0, 0xf4, 0x29, 0x0, @local, @local, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x44, 0x32, 0x3, 0x9, [{@multicast2, 0x4}, {@private=0xa010100, 0x2}, {@empty, 0x6}, {@local}, {@local, 0xffff8181}, {@empty, 0x5}, {@empty, 0x8}, {@remote, 0xda}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'veth0_macvtap\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x20, 0xffff, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 4.461726276s ago: executing program 3 (id=1013): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000fe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="6c57d4ad82c0080836cd3764001e0008"], 0x2c}}, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) 3.727535147s ago: executing program 0 (id=1014): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x60, 0x4000, @fd_index=0x2, 0x7, 0xffffffff, 0x2f22, 0x10, 0x0, {0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e3100000000000000001400018001"], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xbc6, 0x3a}}}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x5c}}, 0x20000800) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003020040000213"], 0x0, 0x0, 0x0}, 0x0) 3.502140027s ago: executing program 3 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000240)={0x0, 0x0}, 0x0) splice(r5, &(0x7f0000000040), r6, 0x0, 0x808, 0x0) 3.113040965s ago: executing program 3 (id=1016): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040804000c0002"], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90012000100050014010a0000000700ffff00000700fec57416d9932a7d507374d3d6ef5a318cee8b1c8ae79eae51cc2e2e1b6284ef6ff7e53b67a4f9a8eda14b893a88cd1665f0440571ca17b8b745538f42c9ac826b56300567118624acbec2ff3a6bb8411d542d4f1b1719a3f9807ec1cd6242c8069c4480bb6b42047b69bd220a42164cdc35f37de8af6eb801fb41d9bf4d6e52ae02fd77b070d1384c2e01f7ff41031ca86f9c3701b4626783901818beade000e1e994b098ef1f6813bf59975ea2e978fe8890fea906ce1f6a90c13c75459bdcd0254692462c5841215dd2d4291cf909a259c084c8b40ac5ac2e"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x4, 0x480000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000004d40)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)="629ea4de0b174e5dc41101a5c946d0c685d331130f4b742940838a7c3f1e4d30bfb1aefa2902fffe64b5a8a15f1376324c119c80b3c3d5b687131685969608b2679822f81dafa5316bb34eaea07c1433c32ba1131e54e5b2408cc8e55dafe68047a38dd52c0df7a289d76a35a0b84e8501ecbe27a9abf9c6f3615c86037613c5ab01ed4100d898148113109cc68a0414ff9b2f2bceb06b", 0x97}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000580)="8956fa6fb9396b188512f14a4afff4e2de0ff9b8723538a151f04fd4ebce3963336ed228c436fc967242f11f5ba8190718afdfdf8a2ae736204dd73132cf7f0d41af99472750b0f3adfa0b10936400fe590f95dad5af9b10a250f5e8676adb94a7fd1d36740e04df7c9bf95784bcb9e06446998ee1fa6723398b46c95d37e3f36679fc71d91c0fd72d8d41babfed37f035e55be142c7442d640e29758d872e79a98c26fb71b61eab9de31094092f7f391fd5e0f592b07ff97149a85f3130b55ab00f82ad790c", 0xc6}], 0x3, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x10}}, {{&(0x7f0000000780)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000000840), 0x0, 0x0, 0x80, 0x4004801}}], 0x2, 0x840) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000a40)={0x0, 'macsec0\x00'}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="1d6bd585deeccf657bab442409427b157258bfd0f9e17a9ffd1e88"], 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="02c8e012000e00050015030a000400ff03ff0304000400"], 0x17) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040504bcf3b9c5", @ANYRES16=r3, @ANYRESOCT=0x0], 0x7) 1.451238s ago: executing program 3 (id=1017): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.291267887s ago: executing program 3 (id=1018): openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, 0x0, 0xe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0xc1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2f118174a9db3b934e6e19bd3772f2745e1d98fc849ab2b404"], 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1a) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a32000000000c000780080012400000000011000300686173683a6e65742c6e65742e3ac414c72e198a9f79f27a433700000008000066c857fbc44e05acc1245d2bdbe919ec23f63c6b9827f95b8a326539ad471aae2917186579d1d520fac9c09d77334e7c4910568dd197a0b8d0605a2987a28a3b33a5096a663aedab9aec712d73e64aade46ca5c5b4f6b08cb16297b8e58b02b8d4ae4e509322becdb345"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) dup(0xffffffffffffffff) 0s ago: executing program 0 (id=1019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2101) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$tun(r2, 0x0, 0x126a) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000140), 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x0, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x41) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="ff305a2510f69e16434baaf0ec3dff0a80a56c020000009d2ca2cceed7622c83f7ea010474fd00", 0x27, 0x400c1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000001faee88237b037270a5c000000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800500030002000000080001400000000008000240000000030900010073797a30000000000900024773797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000000000000300000007fd17e5ffff08000400000000000025f4", 0x39}], 0x1) kernel console output (not intermixed with test programs): 142] dib0700: firmware download failed at 7 with -22 [ 303.969615][ T5142] usb 2-1: USB disconnect, device number 18 [ 304.003950][ T8439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.659'. [ 304.014078][ T8441] netlink: 25 bytes leftover after parsing attributes in process `syz.3.659'. [ 304.030942][ T8403] vlan0: left promiscuous mode [ 304.342225][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 304.429006][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 304.599196][ T5164] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 304.724263][ T5142] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 304.799968][ T2483] IPVS: stop unused estimator thread 0... [ 304.804383][ T5164] usb 2-1: Using ep0 maxpacket: 16 [ 304.834229][ T5164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.864431][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.923521][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.935789][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 304.957297][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.963714][ T5164] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 304.969847][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.990179][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.000834][ T5142] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.012241][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.032909][ T5142] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.044155][ T5142] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.052875][ T5142] usb 4-1: Manufacturer: syz [ 305.066851][ T5142] usb 4-1: config 0 descriptor?? [ 305.233434][ T5164] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.270561][ T5164] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.288534][ T5164] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.318546][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.326023][ T5164] usb 2-1: Manufacturer: syz [ 305.354422][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.356611][ T5164] usb 2-1: config 0 descriptor?? [ 305.376414][ T8384] bridge_slave_0: entered allmulticast mode [ 305.396331][ T8384] bridge_slave_0: entered promiscuous mode [ 305.411020][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.418440][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.427133][ T8384] bridge_slave_1: entered allmulticast mode [ 305.445259][ T8384] bridge_slave_1: entered promiscuous mode [ 305.453443][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.455409][ T5142] rc_core: IR keymap rc-hauppauge not found [ 305.463077][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.473994][ T5142] Registered IR keymap rc-empty [ 305.476739][ T8388] bridge_slave_0: entered allmulticast mode [ 305.479249][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.491257][ T8388] bridge_slave_0: entered promiscuous mode [ 305.505322][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.512976][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.515028][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.662'. [ 305.521642][ T8388] bridge_slave_1: entered allmulticast mode [ 305.538913][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.540302][ T8388] bridge_slave_1: entered promiscuous mode [ 305.575518][ T5142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 305.591020][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 305.635284][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.655041][ T53] Bluetooth: hci1: command tx timeout [ 305.715474][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.753769][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.787392][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.794610][ T5164] rc_core: IR keymap rc-hauppauge not found [ 305.798504][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.807220][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.819888][ T5164] Registered IR keymap rc-empty [ 305.827808][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.832063][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.851268][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.860616][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.867763][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.661'. [ 305.870405][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.894578][ T53] Bluetooth: hci3: command tx timeout [ 305.902932][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.917047][ T5164] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 305.936915][ T5164] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input31 [ 305.957076][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.965669][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 305.994757][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.005125][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 306.037357][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.059693][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 306.068808][ T8384] team0: Port device team_slave_0 added [ 306.076541][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.105227][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 306.108624][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.127371][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.152434][ T5142] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 306.164350][ T5142] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 306.165563][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.186580][ T8388] team0: Port device team_slave_0 added [ 306.200939][ T5142] usb 4-1: USB disconnect, device number 25 [ 306.224655][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.261743][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.262035][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.307013][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.318209][ T8384] team0: Port device team_slave_1 added [ 306.354448][ T5164] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.379182][ T8388] team0: Port device team_slave_1 added [ 306.391243][ T5164] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 306.402031][ T5164] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 306.425853][ T5164] usb 2-1: USB disconnect, device number 19 [ 306.442336][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.512019][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.536708][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.583151][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.603328][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.620780][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.656794][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.859904][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.948991][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.982245][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.054292][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.071563][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.079050][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.116291][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.212716][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.671'. [ 307.222634][ T8501] netlink: 212 bytes leftover after parsing attributes in process `syz.1.671'. [ 307.232061][ T8501] netlink: 212 bytes leftover after parsing attributes in process `syz.1.671'. [ 307.399675][ T8384] hsr_slave_0: entered promiscuous mode [ 307.452111][ T8384] hsr_slave_1: entered promiscuous mode [ 307.479842][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.505427][ T8384] Cannot create hsr debugfs directory [ 307.536132][ T8388] hsr_slave_0: entered promiscuous mode [ 307.548664][ T8388] hsr_slave_1: entered promiscuous mode [ 307.562874][ T8388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.593963][ T8388] Cannot create hsr debugfs directory [ 307.720219][ T8500] delete_channel: no stack [ 307.734824][ T53] Bluetooth: hci1: command tx timeout [ 307.975136][ T53] Bluetooth: hci3: command tx timeout [ 308.211601][ T29] audit: type=1326 audit(1720498647.775:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.4.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x0 [ 308.246605][ T35] bridge_slave_1: left allmulticast mode [ 308.262779][ T35] bridge_slave_1: left promiscuous mode [ 308.271086][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.318203][ T35] bridge_slave_0: left allmulticast mode [ 308.341847][ T35] bridge_slave_0: left promiscuous mode [ 308.352132][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.527519][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.556435][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.582269][ T35] bond0 (unregistering): Released all slaves [ 309.985273][ T8559] x_tables: unsorted entry at hook 3 [ 310.244618][ T29] audit: type=1326 audit(1720498649.785:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x0 [ 310.289811][ T29] audit: type=1326 audit(1720498649.785:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=14 compat=0 ip=0x7f239612cf77 code=0x0 [ 310.321842][ T29] audit: type=1326 audit(1720498649.785:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7f239612c687 code=0x0 [ 310.560111][ T35] hsr_slave_0: left promiscuous mode [ 310.571908][ T35] hsr_slave_1: left promiscuous mode [ 310.585570][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.597131][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.606700][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.614596][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.653264][ T35] veth1_macvtap: left promiscuous mode [ 310.664900][ T35] veth0_macvtap: left promiscuous mode [ 310.673771][ T35] veth1_vlan: left promiscuous mode [ 310.683731][ T35] veth0_vlan: left promiscuous mode [ 310.776840][ T5142] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 310.984392][ T5142] usb 2-1: config 0 has no interfaces? [ 310.993030][ T5142] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 311.012270][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.024221][ T5142] usb 2-1: Product: syz [ 311.030073][ T5142] usb 2-1: Manufacturer: syz [ 311.044203][ T5142] usb 2-1: SerialNumber: syz [ 311.058502][ T5142] usb 2-1: config 0 descriptor?? [ 311.923814][ T35] team0 (unregistering): Port device team_slave_1 removed [ 312.086164][ T35] team0 (unregistering): Port device team_slave_0 removed [ 312.224166][ T5142] usb 2-1: USB disconnect, device number 20 [ 313.593711][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.696'. [ 313.868590][ T8594] netlink: 25 bytes leftover after parsing attributes in process `syz.1.696'. [ 314.270834][ T35] IPVS: stop unused estimator thread 0... [ 314.366211][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.695'. [ 314.522833][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 314.609378][ T8610] netlink: 25 bytes leftover after parsing attributes in process `syz.4.695'. [ 314.977069][ T8388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.033028][ T8388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.115037][ T8388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.227970][ T8388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.606647][ T8384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.686856][ T8384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.739635][ T8384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.828022][ T8384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.004569][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 316.177833][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.216688][ T25] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 316.236338][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.264509][ T25] usb 4-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 316.294919][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 316.304304][ T25] usb 4-1: Product: syz [ 316.308543][ T25] usb 4-1: Manufacturer: syz [ 316.313180][ T25] usb 4-1: SerialNumber: syz [ 316.368017][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.376010][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.400809][ T25] usb 4-1: config 0 descriptor?? [ 316.429273][ T25] cdc_acm 4-1:0.0: Zero length descriptor references [ 316.446740][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.454058][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.474337][ T25] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 316.585358][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.611439][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 316.636565][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 316.693361][ T29] audit: type=1326 audit(1720498656.245:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.1.707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5182b75bd9 code=0x0 [ 316.885386][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.936360][ T5144] usb 4-1: USB disconnect, device number 26 [ 317.005189][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.012911][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.045925][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.053430][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.341720][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.541275][ T8384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.653052][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.661619][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.714494][ T8384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.936451][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.423922][ T8388] veth0_vlan: entered promiscuous mode [ 318.458046][ T8384] veth0_vlan: entered promiscuous mode [ 318.526162][ T8388] veth1_vlan: entered promiscuous mode [ 318.633765][ T8384] veth1_vlan: entered promiscuous mode [ 318.873659][ T8388] veth0_macvtap: entered promiscuous mode [ 318.906250][ T8384] veth0_macvtap: entered promiscuous mode [ 318.937851][ T8388] veth1_macvtap: entered promiscuous mode [ 319.038212][ T8384] veth1_macvtap: entered promiscuous mode [ 319.122086][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.179374][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.212993][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.254346][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.298081][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.333304][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.358048][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.411945][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.460575][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.494069][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.558120][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.585941][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.614398][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.655567][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.701987][ T8388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.721360][ T8388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.742437][ T8388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.779133][ T8388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.872546][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.895661][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922177][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.975546][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.006108][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.034243][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.079319][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.114207][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.156246][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.217226][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.253682][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.281620][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.314399][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.330484][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.350457][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.389334][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.418928][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 320.428231][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.451114][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.482043][ T8384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.511462][ T8384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.531760][ T8384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.554286][ T8384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.629440][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 320.662675][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.719025][ T25] usb 4-1: Product: syz [ 320.727805][ T25] usb 4-1: Manufacturer: syz [ 320.753838][ T25] usb 4-1: SerialNumber: syz [ 320.786025][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.867500][ T5147] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.899399][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 320.904938][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.978340][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.242605][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.281597][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.344446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.365570][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.443711][ T2436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.489186][ T2436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.688501][ T29] audit: type=1326 audit(1720498661.245:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.3.714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4a9375bd9 code=0x0 [ 321.909592][ T8742] loop0: detected capacity change from 0 to 7 [ 322.014333][ T8742] Dev loop0: unable to read RDB block 7 [ 322.094687][ T8742] loop0: unable to read partition table [ 322.144765][ T8742] loop0: partition table beyond EOD, truncated [ 322.209227][ T8742] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 322.209227][ T8742] ) failed (rc=-5) [ 325.761520][ T5147] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 326.188116][ T5147] ath9k_htc: Failed to initialize the device [ 326.721084][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 326.794980][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 326.947663][ T8781] vlan0: entered promiscuous mode [ 328.583132][ T5159] usb 4-1: USB disconnect, device number 27 [ 328.593709][ T5159] usb 4-1: ath9k_htc: USB layer deinitialized [ 328.600955][ T8] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 328.831584][ T8] usb 2-1: string descriptor 0 read error: -22 [ 328.852603][ T8] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 328.900328][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.956422][ T8] usb 2-1: config 0 descriptor?? [ 329.110609][ T8801] loop0: detected capacity change from 0 to 7 [ 329.157558][ T8801] Dev loop0: unable to read RDB block 7 [ 329.198729][ T8801] loop0: unable to read partition table [ 329.227475][ T8801] loop0: partition table beyond EOD, truncated [ 329.259921][ T8801] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 329.259921][ T8801] ) failed (rc=-5) [ 329.528373][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 329.561465][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 329.580264][ T8780] vlan0: left promiscuous mode [ 329.600519][ T8] dib0700: firmware download failed at 7 with -22 [ 329.624919][ T8] usb 2-1: USB disconnect, device number 21 [ 330.092338][ T5147] IPVS: starting estimator thread 0... [ 330.207428][ T8824] IPVS: using max 24 ests per chain, 57600 per kthread [ 330.774348][ T5142] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 331.016478][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.030705][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 331.051549][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.065092][ T5142] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 331.074985][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.089819][ T5142] usb 5-1: config 0 descriptor?? [ 331.308962][ T5142] hid (null): invalid report_count 61986 [ 331.347289][ T5142] hid-led 0003:0FC5:B080.000B: invalid report_count 61986 [ 331.370846][ T5142] hid-led 0003:0FC5:B080.000B: item 0 2 1 9 parsing failed [ 331.401126][ T5142] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -22 [ 331.462974][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.474224][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.483394][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.502652][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.515140][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.524905][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.051669][ T5144] usb 5-1: USB disconnect, device number 27 [ 332.104772][ T5094] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 332.407450][ T8871] loop0: detected capacity change from 0 to 7 [ 332.441421][ T8871] Dev loop0: unable to read RDB block 7 [ 332.473671][ T8871] loop0: unable to read partition table [ 332.505519][ T8871] loop0: partition table beyond EOD, truncated [ 332.534238][ T8871] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 332.534238][ T8871] ) failed (rc=-5) [ 332.540408][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 333.073135][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.073260][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.073452][ T8855] bridge_slave_0: entered allmulticast mode [ 333.095301][ T8855] bridge_slave_0: entered promiscuous mode [ 333.105757][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.105893][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.106132][ T8855] bridge_slave_1: entered allmulticast mode [ 333.132099][ T8855] bridge_slave_1: entered promiscuous mode [ 333.410170][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.453075][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.574696][ T5094] Bluetooth: hci0: command tx timeout [ 334.050183][ T8906] sctp: [Deprecated]: syz.0.764 (pid 8906) Use of int in maxseg socket option. [ 334.050183][ T8906] Use struct sctp_assoc_value instead [ 334.282795][ T8908] program syz.0.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.319924][ T8855] team0: Port device team_slave_0 added [ 334.829206][ T8855] team0: Port device team_slave_1 added [ 334.854389][ T25] IPVS: starting estimator thread 0... [ 334.937447][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.956739][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.982906][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.022828][ T8920] IPVS: using max 24 ests per chain, 57600 per kthread [ 335.089501][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.157776][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.206476][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.232625][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.367977][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.645792][ T5094] Bluetooth: hci0: command tx timeout [ 335.780484][ T8855] hsr_slave_0: entered promiscuous mode [ 335.818503][ T8855] hsr_slave_1: entered promiscuous mode [ 335.848511][ T8855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.897137][ T8855] Cannot create hsr debugfs directory [ 336.510719][ T5094] Bluetooth: Frame is too long (len 18, expected len 5) [ 336.625159][ T8953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.873098][ T8855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.280116][ T8855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.459945][ T8855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.505803][ T29] audit: type=1326 audit(1720498677.075:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.1.778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5182b75bd9 code=0x0 [ 337.650963][ T8855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.724645][ T5094] Bluetooth: hci0: command tx timeout [ 338.281230][ T8855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.324823][ T8855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.367678][ T8855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.436397][ T8855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 338.477626][ T8986] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 338.924322][ T5147] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 338.955200][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.087312][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.129635][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.150226][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.157654][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.168420][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.179658][ T5147] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.210444][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.217713][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.235827][ T5147] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.274305][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.331951][ T5147] usb 5-1: config 0 descriptor?? [ 339.477595][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.804620][ T5094] Bluetooth: hci0: command tx timeout [ 339.846780][ T8855] veth0_vlan: entered promiscuous mode [ 339.880388][ T8855] veth1_vlan: entered promiscuous mode [ 340.001967][ T8855] veth0_macvtap: entered promiscuous mode [ 340.023203][ T5147] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 340.041854][ T8855] veth1_macvtap: entered promiscuous mode [ 340.063257][ T5147] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 340.079141][ T9004] netlink: 92 bytes leftover after parsing attributes in process `syz.0.788'. [ 340.113754][ T5147] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 340.142903][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 340.219109][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.253306][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.294914][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.368845][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.394375][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.422001][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.447501][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.480062][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.524650][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.562296][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.597952][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.615710][ T9009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.789'. [ 340.663494][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.730582][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.770770][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.790636][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.807019][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.820509][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.840664][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.869928][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.885188][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.905864][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.980857][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.030436][ T8855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.066273][ T8855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.089507][ T8855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.110610][ T8855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.484918][ C0] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 341.664411][ T8912] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 341.692325][ T2408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.739058][ T2408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.834345][ T8912] usb 5-1: device descriptor read/64, error -32 [ 341.966137][ T5094] Bluetooth: Frame is too long (len 18, expected len 5) [ 342.169505][ T2408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.190907][ T8912] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 342.241502][ T2408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.404347][ T8912] usb 5-1: device descriptor read/64, error -32 [ 342.684717][ T8912] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 342.775468][ T8912] usb 5-1: device descriptor read/8, error -32 [ 343.103494][ T9037] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 343.126519][ T5147] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 343.339253][ T5147] usb 4-1: Using ep0 maxpacket: 32 [ 343.356691][ T5147] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.375979][ T5147] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.435743][ T5147] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 343.461921][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.489420][ T5147] usb 4-1: config 0 descriptor?? [ 343.596948][ T8913] usb 5-1: USB disconnect, device number 28 [ 343.794754][ T8913] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 344.016269][ T8913] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 344.043425][ T8913] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 344.082215][ T8913] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 344.137755][ T8913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.330881][ T9054] FAULT_INJECTION: forcing a failure. [ 344.330881][ T9054] name failslab, interval 1, probability 0, space 0, times 0 [ 344.348865][ T9054] CPU: 1 PID: 9054 Comm: syz.2.800 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 344.359259][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 344.369721][ T9054] Call Trace: [ 344.373078][ T9054] [ 344.376248][ T9054] dump_stack_lvl+0x241/0x360 [ 344.381017][ T9054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.386329][ T9054] ? __pfx__printk+0x10/0x10 [ 344.390963][ T9054] ? netlink_insert+0x10b7/0x14b0 [ 344.396054][ T9054] should_fail_ex+0x3b0/0x4e0 [ 344.400913][ T9054] ? __alloc_skb+0x1c3/0x440 [ 344.405623][ T9054] should_failslab+0x9/0x20 [ 344.410188][ T9054] kmem_cache_alloc_node_noprof+0x71/0x320 [ 344.416225][ T9054] __alloc_skb+0x1c3/0x440 [ 344.420690][ T9054] ? __pfx___alloc_skb+0x10/0x10 [ 344.425684][ T9054] ? netlink_autobind+0xd6/0x2f0 [ 344.430676][ T9054] ? netlink_autobind+0x2b0/0x2f0 [ 344.435827][ T9054] netlink_sendmsg+0x631/0xcb0 [ 344.440676][ T9054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.446094][ T9054] ? __import_iovec+0x536/0x820 [ 344.451056][ T9054] ? aa_sock_msg_perm+0x91/0x160 [ 344.456299][ T9054] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.461674][ T9054] ? security_socket_sendmsg+0x87/0xb0 [ 344.467170][ T9054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.472489][ T9054] __sock_sendmsg+0x221/0x270 [ 344.477232][ T9054] ____sys_sendmsg+0x525/0x7d0 [ 344.482539][ T9054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.488057][ T9054] __sys_sendmsg+0x2b0/0x3a0 [ 344.492682][ T9054] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.497985][ T9054] ? vfs_write+0x7c4/0xc90 [ 344.502572][ T9054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.509107][ T9054] ? do_syscall_64+0x100/0x230 [ 344.514009][ T9054] ? do_syscall_64+0xb6/0x230 [ 344.518980][ T9054] do_syscall_64+0xf3/0x230 [ 344.523535][ T9054] ? clear_bhb_loop+0x35/0x90 [ 344.528243][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.534203][ T9054] RIP: 0033:0x7fb953b75bd9 [ 344.538672][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.558581][ T9054] RSP: 002b:00007fb954953048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.567905][ T9054] RAX: ffffffffffffffda RBX: 00007fb953d03f60 RCX: 00007fb953b75bd9 [ 344.575923][ T9054] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 344.584030][ T9054] RBP: 00007fb9549530a0 R08: 0000000000000000 R09: 0000000000000000 [ 344.593086][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.601087][ T9054] R13: 000000000000000b R14: 00007fb953d03f60 R15: 00007fb953e2fa78 [ 344.609110][ T9054] [ 344.789305][ T8913] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 344.809039][ T8913] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input32 [ 344.894630][ T8913] input: failed to attach handler kbd to device input32, error: -5 [ 344.921388][ T8913] usb 5-1: USB disconnect, device number 29 [ 345.261466][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 345.659136][ T8913] usb 4-1: USB disconnect, device number 28 [ 346.060126][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 346.116495][ T9083] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 346.495359][ T5148] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 346.685307][ T53] Bluetooth: hci3: command tx timeout [ 346.765075][ T5148] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 346.785938][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.796886][ T5148] usb 3-1: Product: syz [ 346.801845][ T5148] usb 3-1: Manufacturer: syz [ 346.809952][ T5148] usb 3-1: SerialNumber: syz [ 346.836521][ T5148] usb 3-1: config 0 descriptor?? [ 347.069806][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.132918][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.428858][ T5094] Bluetooth: Frame is too long (len 18, expected len 5) [ 347.437634][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.466661][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.490654][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 347.744483][ T8913] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 347.894392][ T8913] usb 4-1: device descriptor read/64, error -71 [ 348.175294][ T8913] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 348.344749][ T8913] usb 4-1: device descriptor read/64, error -71 [ 348.484948][ T8913] usb usb4-port1: attempt power cycle [ 348.924383][ T8913] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 349.046825][ T8913] usb 4-1: device descriptor read/8, error -71 [ 349.352961][ T29] audit: type=1800 audit(1720498688.915:997): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="/" dev="fuse" ino=1 res=0 errno=0 [ 349.384310][ T8913] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 349.443825][ T8913] usb 4-1: device descriptor read/8, error -71 [ 349.481775][ T5148] usb-storage 3-1:0.0: USB Mass Storage device detected [ 349.585277][ T8913] usb usb4-port1: unable to enumerate USB device [ 349.694021][ T5148] usb 3-1: USB disconnect, device number 25 [ 350.058888][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.441998][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.633871][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.884739][ T9147] fuse: Bad value for 'fd' [ 350.929414][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.006248][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 351.023854][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.054422][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.074699][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.087907][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.099089][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.107216][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.613148][ T12] bridge_slave_1: left allmulticast mode [ 351.635332][ T12] bridge_slave_1: left promiscuous mode [ 351.658746][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.695269][ T12] bridge_slave_0: left allmulticast mode [ 351.709145][ T12] bridge_slave_0: left promiscuous mode [ 351.723920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.494723][ T25] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 352.688513][ T25] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 352.720098][ T25] usb 2-1: string descriptor 0 read error: -22 [ 352.756070][ T25] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 352.772596][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.787240][ T25] usb 2-1: config 0 descriptor?? [ 353.110392][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.164746][ T5094] Bluetooth: hci1: command tx timeout [ 353.177071][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.231988][ T12] bond0 (unregistering): Released all slaves [ 353.469461][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 353.737624][ T25] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 353.778600][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 353.804834][ T9192] fuse: Bad value for 'fd' [ 353.814063][ T25] dib0700: firmware download failed at 7 with -22 [ 353.874616][ T25] usb 2-1: USB disconnect, device number 22 [ 354.314591][ T5094] Bluetooth: Frame is too long (len 18, expected len 5) [ 354.434304][ T5170] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 354.554704][ T12] hsr_slave_0: left promiscuous mode [ 354.586904][ T12] hsr_slave_1: left promiscuous mode [ 354.624296][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.640883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.661417][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.676739][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.714374][ T5170] usb 4-1: Using ep0 maxpacket: 16 [ 354.738512][ T5170] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 354.771865][ T5170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.792516][ T12] veth1_macvtap: left promiscuous mode [ 354.799343][ T5170] usb 4-1: Product: syz [ 354.807294][ T12] veth0_macvtap: left promiscuous mode [ 354.815982][ T5170] usb 4-1: Manufacturer: syz [ 354.822861][ T12] veth1_vlan: left promiscuous mode [ 354.829987][ T5170] usb 4-1: SerialNumber: syz [ 354.839504][ T12] veth0_vlan: left promiscuous mode [ 354.853121][ T5170] r8152-cfgselector 4-1: Unknown version 0x0000 [ 354.865769][ T5170] r8152-cfgselector 4-1: config 0 descriptor?? [ 355.254272][ T5094] Bluetooth: hci1: command tx timeout [ 355.349804][ T5094] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 355.564595][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 355.575192][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 355.586989][ T53] Bluetooth: hci3: hardware error 0x00 [ 356.646787][ T12] team0 (unregistering): Port device team_slave_1 removed [ 356.739874][ T12] team0 (unregistering): Port device team_slave_0 removed [ 357.325263][ T5094] Bluetooth: hci1: command tx timeout [ 357.646064][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 357.730782][ T29] audit: type=1326 audit(1720498697.285:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.1.857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5182b75bd9 code=0x0 [ 358.023693][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 358.134618][ T5146] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.436798][ T5146] usb 2-1: Using ep0 maxpacket: 8 [ 358.470692][ T5146] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 358.482291][ T5146] usb 2-1: config 0 has no interface number 0 [ 358.503723][ T5146] usb 2-1: config 0 interface 11 has no altsetting 0 [ 358.515106][ T5146] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=5a.16 [ 358.526693][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.558951][ T5146] usb 2-1: config 0 descriptor?? [ 358.616269][ T5146] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 358.644708][ T5146] usb 2-1: selecting invalid altsetting 0 [ 358.656993][ T1976] pvrusb2: Invalid write control endpoint [ 358.813187][ T1976] pvrusb2: Invalid write control endpoint [ 358.834224][ T1976] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 358.890615][ T1976] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 358.924777][ T1976] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 358.945120][ T1976] pvrusb2: Device being rendered inoperable [ 358.968402][ T1976] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 358.981003][ T1976] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 358.999597][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.021884][ T12] IPVS: stop unused estimator thread 0... [ 359.032866][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.051709][ T1976] pvrusb2: Attached sub-driver cx25840 [ 359.061457][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 359.071059][ T9153] bridge_slave_0: entered allmulticast mode [ 359.112653][ T9153] bridge_slave_0: entered promiscuous mode [ 359.138558][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.177644][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.218007][ T9153] bridge_slave_1: entered allmulticast mode [ 359.234890][ T1976] pvrusb2: Attempted to execute control transfer when device not ok [ 359.263149][ T9153] bridge_slave_1: entered promiscuous mode [ 359.274745][ T1976] pvrusb2: Attempted to execute control transfer when device not ok [ 359.323020][ T1976] pvrusb2: Attempted to execute control transfer when device not ok [ 359.369765][ T1976] pvrusb2: Attempted to execute control transfer when device not ok [ 359.396234][ T1976] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 359.413110][ T53] Bluetooth: hci1: command tx timeout [ 359.421403][ T5146] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 359.545452][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.592386][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.619834][ T5146] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 359.649496][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.700250][ T5146] usb 1-1: config 0 descriptor?? [ 359.723065][ T5146] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 359.797013][ T1976] TUNER: Unable to find symbol tda829x_probe() [ 359.820650][ T5148] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 359.855577][ T12] bridge_slave_1: left allmulticast mode [ 359.861348][ T12] bridge_slave_1: left promiscuous mode [ 359.893980][ T1976] DVB: Unable to find symbol tda9887_attach() [ 359.901475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.935365][ T12] bridge_slave_0: left allmulticast mode [ 359.952263][ T1976] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 359.959557][ T12] bridge_slave_0: left promiscuous mode [ 359.964985][ T1976] pvrusb2: Attached sub-driver tuner [ 359.974438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.994353][ T1976] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 359.997912][ T9301] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 360.019634][ T1976] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 360.226515][ T5146] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 360.233742][ T5146] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 360.254809][ T5146] usb 1-1: USB disconnect, device number 14 [ 360.394397][ T8912] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 360.595288][ T8912] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 360.610640][ T8912] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 360.626109][ T8912] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 360.635912][ T8912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.863789][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.881557][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.894520][ T8912] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 360.908261][ T12] bond0 (unregistering): Released all slaves [ 360.913856][ T8912] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input33 [ 360.928621][ T8912] input: failed to attach handler kbd to device input33, error: -5 [ 360.980550][ T8912] usb 5-1: USB disconnect, device number 30 [ 361.070292][ T9153] team0: Port device team_slave_0 added [ 361.087955][ T8911] usb 2-1: USB disconnect, device number 23 [ 361.089429][ T9153] team0: Port device team_slave_1 added [ 361.619319][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.648540][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.681880][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.828035][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.848568][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.953546][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.147893][ T12] hsr_slave_0: left promiscuous mode [ 362.179742][ T12] hsr_slave_1: left promiscuous mode [ 362.207924][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.230152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.278103][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.318271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.420516][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.434580][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.463489][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.503261][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.514628][ T12] veth1_macvtap: left promiscuous mode [ 362.521581][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 362.529382][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.588259][ T12] veth0_macvtap: left promiscuous mode [ 362.600945][ T12] veth1_vlan: left promiscuous mode [ 362.629949][ T12] veth0_vlan: left promiscuous mode [ 362.908028][ T9331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.907455][ T12] team0 (unregistering): Port device team_slave_1 removed [ 363.989710][ T12] team0 (unregistering): Port device team_slave_0 removed [ 364.016344][ T9347] FAULT_INJECTION: forcing a failure. [ 364.016344][ T9347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.029885][ T9347] CPU: 0 PID: 9347 Comm: syz.1.878 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 364.040017][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 364.050479][ T9347] Call Trace: [ 364.053828][ T9347] [ 364.056832][ T9347] dump_stack_lvl+0x241/0x360 [ 364.061662][ T9347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.066903][ T9347] ? __pfx__printk+0x10/0x10 [ 364.071703][ T9347] ? vfs_write+0x7c4/0xc90 [ 364.076272][ T9347] should_fail_ex+0x3b0/0x4e0 [ 364.081005][ T9347] _copy_from_user+0x2f/0xe0 [ 364.085642][ T9347] move_addr_to_kernel+0x82/0x150 [ 364.090709][ T9347] __sys_connect+0xc1/0x310 [ 364.095337][ T9347] ? __pfx___sys_connect+0x10/0x10 [ 364.100517][ T9347] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.106900][ T9347] ? do_syscall_64+0x100/0x230 [ 364.111839][ T9347] __x64_sys_connect+0x7a/0x90 [ 364.116646][ T9347] do_syscall_64+0xf3/0x230 [ 364.121200][ T9347] ? clear_bhb_loop+0x35/0x90 [ 364.125910][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.131881][ T9347] RIP: 0033:0x7f5182b75bd9 [ 364.136323][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.156257][ T9347] RSP: 002b:00007f5183926048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 364.164871][ T9347] RAX: ffffffffffffffda RBX: 00007f5182d03f60 RCX: 00007f5182b75bd9 [ 364.173009][ T9347] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 364.181011][ T9347] RBP: 00007f51839260a0 R08: 0000000000000000 R09: 0000000000000000 [ 364.189023][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.197019][ T9347] R13: 000000000000000b R14: 00007f5182d03f60 R15: 00007f5182e2fa78 [ 364.205055][ T9347] [ 364.384636][ T5170] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 364.607194][ T5170] usb 4-1: Using ep0 maxpacket: 16 [ 364.607771][ T5094] Bluetooth: hci3: command tx timeout [ 364.631208][ T5170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.643875][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.665336][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.675252][ T5170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 364.695039][ T5170] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.719034][ T5170] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.742117][ T5170] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.761486][ T5170] usb 4-1: Manufacturer: syz [ 364.794471][ T8911] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 364.805050][ T5170] usb 4-1: config 0 descriptor?? [ 365.027018][ T8911] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 365.055455][ T8911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.098326][ T8911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.136379][ T8911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 365.175516][ T8911] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 365.198397][ T8911] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 365.214027][ T8911] usb 2-1: Manufacturer: syz [ 365.225451][ T5170] rc_core: IR keymap rc-hauppauge not found [ 365.240947][ T8911] usb 2-1: config 0 descriptor?? [ 365.264474][ T5170] Registered IR keymap rc-empty [ 365.269867][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.330933][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.395404][ T5170] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 365.447302][ T5170] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 365.533059][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.587863][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.635742][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.698619][ T8911] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 365.706631][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.752749][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.763381][ T8911] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 365.805540][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.827554][ T8911] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 365.831226][ T9153] hsr_slave_0: entered promiscuous mode [ 365.874335][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.894871][ T9153] hsr_slave_1: entered promiscuous mode [ 365.922287][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.964968][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.986725][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 366.013791][ T5170] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 366.095850][ T5170] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 366.113459][ T5170] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 366.140308][ T5170] usb 4-1: USB disconnect, device number 34 [ 366.684257][ T5094] Bluetooth: hci3: command tx timeout [ 366.712301][ T12] IPVS: stop unused estimator thread 0... [ 367.256396][ T5148] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 367.474563][ T5148] usb 2-1: device descriptor read/64, error -32 [ 367.785602][ T5148] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 368.354490][ T9325] chnl_net:caif_netlink_parms(): no params data found [ 368.645963][ T5144] usb 2-1: USB disconnect, device number 24 [ 368.764269][ T5094] Bluetooth: hci3: command tx timeout [ 369.106927][ T29] audit: type=1326 audit(1720498708.675:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.1.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5182b75bd9 code=0x0 [ 369.209533][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.231399][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.242125][ T9325] bridge_slave_0: entered allmulticast mode [ 369.258048][ T9325] bridge_slave_0: entered promiscuous mode [ 369.286580][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.310019][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.321614][ T9325] bridge_slave_1: entered allmulticast mode [ 369.330001][ T9325] bridge_slave_1: entered promiscuous mode [ 369.457822][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.492197][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.671053][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.718056][ T9325] team0: Port device team_slave_0 added [ 369.738290][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.773074][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.816764][ T9325] team0: Port device team_slave_1 added [ 369.823574][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.922819][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.940422][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.980804][ T5147] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 370.016111][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.043994][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.061670][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.092687][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.185133][ T5147] usb 5-1: Using ep0 maxpacket: 16 [ 370.201528][ T5147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.237699][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.287548][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.301460][ T9325] hsr_slave_0: entered promiscuous mode [ 370.319082][ T5147] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 370.331781][ T9325] hsr_slave_1: entered promiscuous mode [ 370.348000][ T5147] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.362970][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.373331][ T5147] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.382145][ T9325] Cannot create hsr debugfs directory [ 370.409396][ T5147] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.433975][ T5147] usb 5-1: Manufacturer: syz [ 370.480428][ T5147] usb 5-1: config 0 descriptor?? [ 370.844898][ T5094] Bluetooth: hci3: command tx timeout [ 370.856571][ T5147] rc_core: IR keymap rc-hauppauge not found [ 370.862549][ T5147] Registered IR keymap rc-empty [ 370.875340][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 370.904660][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 370.955167][ T5147] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 371.019743][ T5147] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 371.070651][ T8] IPVS: starting estimator thread 0... [ 371.102818][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.117185][ T9443] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 371.161152][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.185694][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.220065][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.234597][ T9444] IPVS: using max 16 ests per chain, 38400 per kthread [ 371.275651][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.315317][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.375651][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.444566][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.494627][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.494869][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 371.545320][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.594274][ T5147] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.646401][ T5147] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 371.653622][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.677849][ T5147] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.726672][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.737296][ T5147] usb 5-1: USB disconnect, device number 31 [ 371.761348][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.813110][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.868338][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.919576][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.925381][ T9325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.975608][ T8] usb 4-1: config 0 descriptor?? [ 372.166728][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.179520][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.190610][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.208336][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.212395][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.234849][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 372.248671][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.308653][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.472279][ T9325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.497564][ T8] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 372.541473][ T8] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 372.582923][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.690526][ T9325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.692007][ T8] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 372.952229][ T9325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.186624][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.365965][ T9325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.422996][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.430277][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.531233][ T9325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.639475][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.646693][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.804011][ T9325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.826386][ T5144] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 373.845291][ T5147] usb 4-1: USB disconnect, device number 35 [ 373.847624][ T9325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.032400][ T35] bridge_slave_1: left allmulticast mode [ 374.046446][ T5144] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 374.050302][ T35] bridge_slave_1: left promiscuous mode [ 374.066381][ T5144] usb 5-1: string descriptor 0 read error: -22 [ 374.071352][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.080966][ T5144] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 374.090571][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.102233][ T5144] usb 5-1: config 0 descriptor?? [ 374.115802][ T35] bridge_slave_0: left allmulticast mode [ 374.121519][ T35] bridge_slave_0: left promiscuous mode [ 374.172686][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.369696][ T5094] Bluetooth: hci4: command tx timeout [ 375.672495][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.702623][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.740839][ T35] bond0 (unregistering): Released all slaves [ 375.987772][ T5144] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 376.027764][ T5144] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 376.060838][ T5144] dib0700: firmware download failed at 7 with -22 [ 376.087709][ T5144] usb 5-1: USB disconnect, device number 32 [ 376.444428][ T5094] Bluetooth: hci4: command tx timeout [ 376.652692][ T35] hsr_slave_0: left promiscuous mode [ 376.678586][ T35] hsr_slave_1: left promiscuous mode [ 376.703665][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.718652][ T9548] sctp: [Deprecated]: syz.4.906 (pid 9548) Use of int in maxseg socket option. [ 376.718652][ T9548] Use struct sctp_assoc_value instead [ 376.733342][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.761363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.776828][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.826951][ T35] veth1_macvtap: left promiscuous mode [ 376.832733][ T35] veth0_macvtap: left promiscuous mode [ 376.840836][ T35] veth1_vlan: left promiscuous mode [ 376.851098][ T35] veth0_vlan: left promiscuous mode [ 378.314209][ T5144] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 378.496277][ T35] team0 (unregistering): Port device team_slave_1 removed [ 378.525282][ T5094] Bluetooth: hci4: command tx timeout [ 378.554493][ T5144] usb 5-1: Using ep0 maxpacket: 32 [ 378.574975][ T5144] usb 5-1: config 0 has no interfaces? [ 378.609947][ T5144] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 378.619608][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.627852][ T5144] usb 5-1: Product: syz [ 378.632094][ T5144] usb 5-1: Manufacturer: syz [ 378.637228][ T5144] usb 5-1: SerialNumber: syz [ 378.715994][ T5144] usb 5-1: config 0 descriptor?? [ 378.730028][ T35] team0 (unregistering): Port device team_slave_0 removed [ 379.087634][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.096292][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.423550][ T9461] chnl_net:caif_netlink_parms(): no params data found [ 379.574963][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.968895][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.004550][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.011892][ T9461] bridge_slave_0: entered allmulticast mode [ 380.049569][ T9461] bridge_slave_0: entered promiscuous mode [ 380.081314][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.102043][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.111114][ T9461] bridge_slave_1: entered allmulticast mode [ 380.119768][ T9461] bridge_slave_1: entered promiscuous mode [ 380.195514][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.229752][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.240986][ T35] IPVS: stop unused estimator thread 0... [ 380.337254][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.433652][ T9461] team0: Port device team_slave_0 added [ 380.493258][ T9153] veth0_vlan: entered promiscuous mode [ 380.515915][ T9461] team0: Port device team_slave_1 added [ 380.605399][ T5094] Bluetooth: hci4: command tx timeout [ 380.633293][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.648646][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.680715][ T9461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.741801][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.763532][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.808274][ T9461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.843957][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.943995][ T9461] hsr_slave_0: entered promiscuous mode [ 380.979772][ T9461] hsr_slave_1: entered promiscuous mode [ 381.004024][ T8913] usb 5-1: USB disconnect, device number 33 [ 381.019988][ T9461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.052173][ T9461] Cannot create hsr debugfs directory [ 381.070646][ T9153] veth1_vlan: entered promiscuous mode [ 381.133862][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.141317][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.250804][ T9609] sctp: [Deprecated]: syz.4.916 (pid 9609) Use of int in maxseg socket option. [ 381.250804][ T9609] Use struct sctp_assoc_value instead [ 381.321668][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.328967][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.611172][ T9153] veth0_macvtap: entered promiscuous mode [ 381.712140][ T9153] veth1_macvtap: entered promiscuous mode [ 381.751774][ T9325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.829581][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.840730][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.858751][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.870815][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.888620][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.902992][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.921458][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.961270][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.978364][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.992436][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.003165][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.013203][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.024632][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.059453][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.082459][ T9153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.097249][ T9153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.112520][ T9153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.131774][ T9153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.303519][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.627633][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.678674][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.757632][ T9461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.841214][ T9461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.868038][ T9325] veth0_vlan: entered promiscuous mode [ 382.888657][ T9461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.916548][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.930365][ T9461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.953663][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.992204][ T9325] veth1_vlan: entered promiscuous mode [ 383.229874][ T9325] veth0_macvtap: entered promiscuous mode [ 383.300940][ T9325] veth1_macvtap: entered promiscuous mode [ 383.401908][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.432483][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 383.446147][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.490780][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.508206][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.518665][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.532154][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.569966][ T9654] binder: 9641:9654 ioctl c018620b 0 returned -14 [ 383.584270][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.614055][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.659291][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.706794][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.723537][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.788437][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.810697][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.825355][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.842445][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.854227][ T9325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.884018][ T9325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.909884][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.000761][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.085836][ T9325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.126952][ T9325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.159139][ T9325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.214989][ T9325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.391013][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.404593][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.408287][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.418814][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.436647][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.445396][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.454501][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.687601][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.694915][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.715550][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.722853][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.021409][ T9461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.034964][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.042877][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.145727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.153738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.425985][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.520414][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 385.556048][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 385.840905][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.856846][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.872874][ T9669] bridge_slave_0: entered allmulticast mode [ 385.883977][ T9669] bridge_slave_0: entered promiscuous mode [ 385.947127][ T9461] veth0_vlan: entered promiscuous mode [ 385.962481][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.980052][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.991669][ T9669] bridge_slave_1: entered allmulticast mode [ 386.020858][ T9669] bridge_slave_1: entered promiscuous mode [ 386.118715][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.161012][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.188733][ T9461] veth1_vlan: entered promiscuous mode [ 386.375347][ T9669] team0: Port device team_slave_0 added [ 386.409727][ T9669] team0: Port device team_slave_1 added [ 386.525394][ T53] Bluetooth: hci0: command tx timeout [ 386.540947][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.564838][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.603512][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.662524][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.679297][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.713437][ T9710] Cannot find add_set index 0 as target [ 386.796249][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.905938][ T9461] veth0_macvtap: entered promiscuous mode [ 386.963254][ T9461] veth1_macvtap: entered promiscuous mode [ 387.133874][ T9669] hsr_slave_0: entered promiscuous mode [ 387.147705][ T9669] hsr_slave_1: entered promiscuous mode [ 387.176378][ T9669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.200866][ T9669] Cannot create hsr debugfs directory [ 387.436003][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.460500][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.491692][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.516224][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.559852][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.590863][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.633555][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.645226][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.671541][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.690743][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.709856][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.748089][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.806959][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.824681][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.835403][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.846486][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.863411][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.893924][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.906933][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.917298][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.930506][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.943029][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.000072][ T9461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.010155][ T9461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.021844][ T9461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.030873][ T9461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.291130][ T9669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.357160][ T9737] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 388.435604][ T9737] batman_adv: batadv0: Adding interface: team0 [ 388.443515][ T9737] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.484791][ T9737] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 388.511120][ T9738] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 388.522269][ T9738] netlink: 2 bytes leftover after parsing attributes in process `syz.0.939'. [ 388.531714][ T9738] team0: entered promiscuous mode [ 388.537281][ T9738] team_slave_0: entered promiscuous mode [ 388.544895][ T9738] team_slave_1: entered promiscuous mode [ 388.559013][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.572268][ T9738] batman_adv: batadv0: Interface activated: team0 [ 388.579570][ T9738] batman_adv: batadv0: Interface deactivated: team0 [ 388.587490][ T9738] batman_adv: batadv0: Removing interface: team0 [ 388.603696][ T9738] bridge0: port 3(team0) entered blocking state [ 388.610730][ T9738] bridge0: port 3(team0) entered disabled state [ 388.615500][ T53] Bluetooth: hci0: command tx timeout [ 388.627720][ T9738] team0: entered allmulticast mode [ 388.633312][ T9738] team_slave_0: entered allmulticast mode [ 388.641792][ T9738] team_slave_1: entered allmulticast mode [ 388.661374][ T9738] bridge0: port 3(team0) entered blocking state [ 388.669306][ T9738] bridge0: port 3(team0) entered forwarding state [ 388.752075][ T9669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.023008][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 389.034976][ T9669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.166978][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.189802][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.294780][ T29] audit: type=1326 audit(1720498728.855:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.351153][ T9669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.377990][ T9748] openvswitch: netlink: Message has 4 unknown bytes. [ 389.384220][ T29] audit: type=1326 audit(1720498728.885:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.516749][ T29] audit: type=1326 audit(1720498728.885:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.583690][ T2436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.589901][ T29] audit: type=1326 audit(1720498728.885:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.631559][ T2436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.685359][ T29] audit: type=1326 audit(1720498728.895:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.824045][ T29] audit: type=1326 audit(1720498728.895:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.933881][ T29] audit: type=1326 audit(1720498728.905:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 389.999652][ T29] audit: type=1326 audit(1720498728.905:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 390.039770][ T29] audit: type=1326 audit(1720498728.905:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 390.073354][ T29] audit: type=1326 audit(1720498728.915:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2396175bd9 code=0x7ffc0000 [ 390.209666][ T9669] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.298923][ T9669] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.356828][ T9669] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.430328][ T9669] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.694522][ T53] Bluetooth: hci0: command tx timeout [ 390.854383][ T9759] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 390.963262][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.080516][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.160142][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.167430][ T8913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.243793][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.251295][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.624954][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.807468][ T9669] veth0_vlan: entered promiscuous mode [ 391.876767][ T9669] veth1_vlan: entered promiscuous mode [ 392.025556][ T9669] veth0_macvtap: entered promiscuous mode [ 392.064982][ T9669] veth1_macvtap: entered promiscuous mode [ 392.147550][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.180322][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.209165][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.233627][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.253763][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.280720][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.291936][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.303058][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.313868][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.325273][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.344404][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.385136][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.437463][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.554360][ T5147] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 392.616256][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.668066][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.702534][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.739508][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.754006][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.774310][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 392.774735][ T53] Bluetooth: hci0: command tx timeout [ 392.784631][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.818052][ T5147] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.864411][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.908253][ T5147] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 392.947561][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.969119][ T9790] syz.0.951 (9790): /proc/9782/oom_adj is deprecated, please use /proc/9782/oom_score_adj instead. [ 392.988468][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.998724][ T9789] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 393.015425][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.031027][ T5147] usb 5-1: config 0 descriptor?? [ 393.048479][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.104650][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.135954][ T5147] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 393.214893][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.216985][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.302161][ T9669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.394199][ T9669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.414182][ T9669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.447745][ T9669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.914588][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.948062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.102575][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.134330][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.246136][ T9797] openvswitch: netlink: Message has 4 unknown bytes. [ 394.815013][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 395.034214][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 395.079129][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.129319][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.173102][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.218491][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.260419][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.337426][ T5142] usb 5-1: USB disconnect, device number 34 [ 395.351666][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 395.402357][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 395.450957][ T8] usb 4-1: Manufacturer: syz [ 395.482890][ T8] usb 4-1: config 0 descriptor?? [ 395.945954][ T8] rc_core: IR keymap rc-hauppauge not found [ 395.963906][ T8] Registered IR keymap rc-empty [ 395.989576][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.034473][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.115229][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 396.161894][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 396.226113][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.253901][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 396.294763][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.304727][ T5142] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 396.354643][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.395343][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.434518][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.494695][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.505158][ T5142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.536375][ T5142] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 396.556083][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.568599][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.594659][ T5142] usb 1-1: Product: syz [ 396.604503][ T5142] usb 1-1: Manufacturer: syz [ 396.614513][ T5142] usb 1-1: SerialNumber: syz [ 396.624379][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.639237][ T5142] usb 1-1: config 0 descriptor?? [ 396.658652][ T5142] cytherm 1-1:0.0: Cypress thermometer device now attached [ 396.684355][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.734459][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 396.807566][ T8] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 396.834360][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 396.868109][ T8] usb 4-1: USB disconnect, device number 36 [ 396.898189][ T5147] usb 1-1: USB disconnect, device number 15 [ 396.915332][ T5147] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 397.084686][ T53] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 397.095282][ T53] Bluetooth: hci3: Injecting HCI hardware error event [ 397.105391][ T5094] Bluetooth: hci3: hardware error 0x00 [ 397.565687][ T9819] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.164475][ T5094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 399.309461][ T9846] ALSA: seq fatal error: cannot create timer (-22) [ 401.796801][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.817853][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.834853][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.898170][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.914631][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 401.932863][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.375356][ T9884] sctp: [Deprecated]: syz.2.974 (pid 9884) Use of int in maxseg socket option. [ 402.375356][ T9884] Use struct sctp_assoc_value instead [ 402.457626][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.719470][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.844436][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.065049][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.378357][ T9877] chnl_net:caif_netlink_parms(): no params data found [ 403.525498][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 403.677348][ T35] bridge_slave_1: left allmulticast mode [ 403.683239][ T35] bridge_slave_1: left promiscuous mode [ 403.689398][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.699864][ T35] bridge_slave_0: left allmulticast mode [ 403.708833][ T35] bridge_slave_0: left promiscuous mode [ 403.716126][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.046873][ T53] Bluetooth: hci5: command tx timeout [ 405.186112][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.265912][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.290225][ T35] bond0 (unregistering): Released all slaves [ 405.370370][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.3.989'. [ 405.460278][ T9915] netem: unknown loss type 0 [ 405.469318][ T9915] netem: change failed [ 405.827313][ T9921] ALSA: seq fatal error: cannot create timer (-22) [ 406.033425][ T9925] loop0: detected capacity change from 0 to 1 [ 406.049958][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.087430][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.115293][ T9877] bridge_slave_0: entered allmulticast mode [ 406.125431][ T53] Bluetooth: hci5: command tx timeout [ 406.146566][ T9877] bridge_slave_0: entered promiscuous mode [ 406.219748][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.264448][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.304476][ T9877] bridge_slave_1: entered allmulticast mode [ 406.327206][ T9877] bridge_slave_1: entered promiscuous mode [ 406.799121][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.859349][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.265001][ T35] hsr_slave_0: left promiscuous mode [ 407.290549][ T35] hsr_slave_1: left promiscuous mode [ 407.320506][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.338210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.370319][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.395804][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.497059][ T35] veth1_macvtap: left promiscuous mode [ 407.518264][ T35] veth0_macvtap: left promiscuous mode [ 407.534358][ T35] veth1_vlan: left promiscuous mode [ 407.553183][ T35] veth0_vlan: left promiscuous mode [ 407.823207][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.836453][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.848281][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.859123][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.867553][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.893515][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.229380][ T53] Bluetooth: hci5: command tx timeout [ 408.929716][ T9906] syz.3.989: vmalloc error: size 2147483648, failed to allocated page array size 4194304, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 408.982678][ T9906] CPU: 1 PID: 9906 Comm: syz.3.989 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 408.992754][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 409.002862][ T9906] Call Trace: [ 409.006190][ T9906] [ 409.009158][ T9906] dump_stack_lvl+0x241/0x360 [ 409.013910][ T9906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.019178][ T9906] ? __pfx__printk+0x10/0x10 [ 409.023860][ T9906] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 409.030336][ T9906] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 409.036897][ T9906] warn_alloc+0x278/0x410 [ 409.041441][ T9906] ? __pfx_warn_alloc+0x10/0x10 [ 409.046340][ T9906] ? do_replace_finish+0xcc/0x1b10 [ 409.051482][ T9906] ? __get_vm_area_node+0x23d/0x270 [ 409.056711][ T9906] __vmalloc_node_range_noprof+0x69f/0x1460 [ 409.062741][ T9906] ? pfn_valid+0x403/0x440 [ 409.067301][ T9906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.073877][ T9906] ? do_replace_finish+0xcc/0x1b10 [ 409.079044][ T9906] vmalloc_noprof+0x79/0x90 [ 409.083581][ T9906] ? do_replace_finish+0xcc/0x1b10 [ 409.088745][ T9906] do_replace_finish+0xcc/0x1b10 [ 409.093735][ T9906] ? __pfx___might_resched+0x10/0x10 [ 409.099234][ T9906] ? __might_fault+0xaa/0x120 [ 409.103947][ T9906] ? __pfx_lock_release+0x10/0x10 [ 409.109020][ T9906] ? __pfx_do_replace_finish+0x10/0x10 [ 409.114540][ T9906] ? __might_fault+0xc6/0x120 [ 409.119247][ T9906] do_replace+0x450/0x5b0 [ 409.123598][ T9906] ? mark_lock+0x9a/0x350 [ 409.128210][ T9906] ? __pfx_do_replace+0x10/0x10 [ 409.133095][ T9906] ? bpf_lsm_capable+0x9/0x10 [ 409.137809][ T9906] ? security_capable+0x90/0xb0 [ 409.143358][ T9906] do_ebt_set_ctl+0x2d5/0x17d0 [ 409.148248][ T9906] ? release_sock+0x30/0x1f0 [ 409.152873][ T9906] ? __lock_acquire+0x1346/0x1fd0 [ 409.157948][ T9906] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 409.163243][ T9906] ? __pfx___might_resched+0x10/0x10 [ 409.168763][ T9906] ? nf_setsockopt+0x240/0x2c0 [ 409.173577][ T9906] ? __pfx_lock_release+0x10/0x10 [ 409.178645][ T9906] ? rcu_is_watching+0x15/0xb0 [ 409.183430][ T9906] ? trace_contention_end+0x3c/0x120 [ 409.188772][ T9906] ? __mutex_lock+0x2ef/0xd70 [ 409.193621][ T9906] ? __mutex_unlock_slowpath+0x21d/0x750 [ 409.199395][ T9906] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 409.204843][ T9906] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.210963][ T9906] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.215869][ T9906] nf_setsockopt+0x295/0x2c0 [ 409.220507][ T9906] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 409.226435][ T9906] do_sock_setsockopt+0x3af/0x720 [ 409.231564][ T9906] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 409.237121][ T9906] ? __fget_files+0x29/0x470 [ 409.241946][ T9906] ? __fget_files+0x3f6/0x470 [ 409.246772][ T9906] __sys_setsockopt+0x1ae/0x250 [ 409.251693][ T9906] __x64_sys_setsockopt+0xb5/0xd0 [ 409.256952][ T9906] do_syscall_64+0xf3/0x230 [ 409.261720][ T9906] ? clear_bhb_loop+0x35/0x90 [ 409.266546][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.272516][ T9906] RIP: 0033:0x7fde9b175bd9 [ 409.277147][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.297408][ T9906] RSP: 002b:00007fde9bf9d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.305868][ T9906] RAX: ffffffffffffffda RBX: 00007fde9b303f60 RCX: 00007fde9b175bd9 [ 409.313856][ T9906] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 409.322297][ T9906] RBP: 00007fde9b1e4e60 R08: 0000000000000108 R09: 0000000000000000 [ 409.330341][ T9906] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.338440][ T9906] R13: 000000000000000b R14: 00007fde9b303f60 R15: 00007fde9b42fa78 [ 409.346670][ T9906] [ 409.413121][ T9906] Mem-Info: [ 409.417385][ T9906] active_anon:7933 inactive_anon:0 isolated_anon:0 [ 409.417385][ T9906] active_file:10722 inactive_file:38339 isolated_file:0 [ 409.417385][ T9906] unevictable:0 dirty:264 writeback:0 [ 409.417385][ T9906] slab_reclaimable:10925 slab_unreclaimable:100648 [ 409.417385][ T9906] mapped:17853 shmem:4108 pagetables:738 [ 409.417385][ T9906] sec_pagetables:0 bounce:0 [ 409.417385][ T9906] kernel_misc_reclaimable:0 [ 409.417385][ T9906] free:1318533 free_pcp:3865 free_cma:0 [ 409.505024][ T9906] Node 0 active_anon:30204kB inactive_anon:0kB active_file:42888kB inactive_file:153288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71500kB dirty:1064kB writeback:0kB shmem:14980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10544kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 409.552869][ T9906] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 409.607894][ T9906] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.647508][ T9906] lowmem_reserve[]: 0 2571 2571 0 0 [ 409.657441][ T9906] Node 0 DMA32 free:1459484kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:30164kB inactive_anon:0kB active_file:42888kB inactive_file:152976kB unevictable:0kB writepending:1060kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:9556kB local_pcp:264kB free_cma:0kB [ 409.659220][ T35] team0 (unregistering): Port device team_slave_1 removed [ 409.703159][ T9906] lowmem_reserve[]: 0 0 0 0 0 [ 409.716437][ T9906] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 409.745097][ T9906] lowmem_reserve[]: 0 0 0 0 0 [ 409.749948][ T9906] Node 1 Normal free:3809024kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:3580kB free_cma:0kB [ 409.782241][ T9906] lowmem_reserve[]: 0 0 0 0 0 [ 409.787147][ T9906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.800265][ T9906] Node 0 DMA32: 423*4kB (UME) 190*8kB (UE) 168*16kB (UME) 437*32kB (UME) 290*64kB (UME) 69*128kB (UME) 22*256kB (UME) 11*512kB (UM) 9*1024kB (UM) 8*2048kB (UME) 338*4096kB (M) = 1468588kB [ 409.822675][ T9906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.835921][ T9906] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 3*64kB (UM) 2*128kB (UM) 1*256kB (U) 2*512kB (UM) 0*1024kB 1*2048kB (U) 929*4096kB (M) = 3809024kB [ 409.852832][ T9906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.862972][ T9906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.877245][ T9906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.887442][ T9906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.897197][ T9906] 53190 total pagecache pages [ 409.897986][ T35] team0 (unregistering): Port device team_slave_0 removed [ 409.902187][ T9906] 0 pages in swap cache [ 409.922962][ T9906] Free swap = 124668kB [ 409.929875][ T9906] Total swap = 124996kB [ 409.934557][ T9906] 2097051 pages RAM [ 409.938392][ T9906] 0 pages HighMem/MovableOnly [ 409.943291][ T9906] 400871 pages reserved [ 409.949176][ T9906] 0 pages cma reserved [ 409.965929][ T53] Bluetooth: hci2: command tx timeout [ 410.284436][ T53] Bluetooth: hci5: command tx timeout [ 410.977986][ T9877] team0: Port device team_slave_0 added [ 411.011731][ T9877] team0: Port device team_slave_1 added [ 411.224743][ T6727] bond0: (slave syz_tun): Releasing backup interface [ 411.494809][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.514713][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.598144][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.670455][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.688341][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.763384][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.044707][ T53] Bluetooth: hci2: command tx timeout [ 412.081399][ T9985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1012'. [ 412.130418][ T9877] hsr_slave_0: entered promiscuous mode [ 412.160355][ T9877] hsr_slave_1: entered promiscuous mode [ 412.180388][ T9877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.190927][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 412.190944][ T29] audit: type=1326 audit(1720498751.755:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9b175bd9 code=0x7fc00000 [ 412.227574][ T9877] Cannot create hsr debugfs directory [ 412.274268][ T29] audit: type=1326 audit(1720498751.795:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fde9b175bd9 code=0x7fc00000 [ 412.872319][ T29] audit: type=1326 audit(1720498752.415:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9b175bd9 code=0x7fc00000 [ 413.111898][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 413.325087][ T8911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 413.380838][ T9955] chnl_net:caif_netlink_parms(): no params data found [ 413.519581][ T53] Bluetooth: Frame is too long (len 18, expected len 5) [ 413.568701][ T8911] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 413.654482][ T8911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.715040][ T8911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.766456][ T8911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 413.796860][ T8911] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 413.814151][ T8911] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 413.822301][ T8911] usb 1-1: Manufacturer: syz [ 413.859882][ T8911] usb 1-1: config 0 descriptor?? [ 414.175622][ T53] Bluetooth: hci2: command tx timeout [ 414.300642][ T8911] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 414.309995][ T8911] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 414.338671][ T8911] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 414.606394][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.626796][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.636337][ T9955] bridge_slave_0: entered allmulticast mode [ 414.649966][ T9955] bridge_slave_0: entered promiscuous mode [ 414.676974][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.700096][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.721024][ T9955] bridge_slave_1: entered allmulticast mode [ 414.740006][ T9955] bridge_slave_1: entered promiscuous mode [ 414.906313][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.957309][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.138955][ T9955] team0: Port device team_slave_0 added [ 415.172772][ T9955] team0: Port device team_slave_1 added [ 415.369969][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.392961][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.456168][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.532785][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.556540][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.618277][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.634818][ T5142] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 415.677225][ T9877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.692708][ T9877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.824241][ T8911] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 415.842319][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 415.848217][ T9877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.871977][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.899458][ T9955] hsr_slave_0: entered promiscuous mode [ 415.902932][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.923700][ T9955] hsr_slave_1: entered promiscuous mode [ 415.935607][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.954523][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 415.955512][ T9955] Cannot create hsr debugfs directory [ 415.980829][ T5142] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 415.986409][ T8911] usb 1-1: device descriptor read/64, error -32 [ 416.005473][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.053437][ T5142] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 416.053935][ T9877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.074794][ T5142] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 416.083352][ T5142] usb 4-1: Manufacturer: syz [ 416.113687][ T5142] usb 4-1: config 0 descriptor?? [ 416.206923][ T53] Bluetooth: hci2: command tx timeout [ 416.294376][ T8911] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 416.554965][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1018'. [ 416.901778][ T5142] rc_core: IR keymap rc-hauppauge not found [ 416.908733][ T5142] Registered IR keymap rc-empty [ 416.913792][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 416.963886][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 417.067947][ T9955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.081622][ T5142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 417.132325][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 417.146457][ T8913] usb 1-1: USB disconnect, device number 16 [ 417.176008][T10037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1019'. [ 417.220602][T10038] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1019'. [ 417.234914][ T5142] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 417.276873][ C0] ------------[ cut here ]------------ [ 417.283203][ C0] WARNING: CPU: 0 PID: 10034 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 417.292404][ C0] Modules linked in: [ 417.296361][ C0] CPU: 0 PID: 10034 Comm: syz.0.1019 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 417.306611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 417.316734][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 417.322534][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 417.342323][ C0] RSP: 0018:ffffc90000006c50 EFLAGS: 00010002 [ 417.348439][ C0] RAX: 0000000080010101 RBX: ffff888029c50000 RCX: 0000000000000002 [ 417.356457][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 417.364510][ C0] RBP: 0100000000000004 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 417.372505][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 417.380508][ C0] R13: ffff888029895a00 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 417.388512][ C0] FS: 00007f0c413126c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 417.397472][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.404137][ C0] CR2: 0000000020002038 CR3: 00000000535e4000 CR4: 00000000003506f0 [ 417.412157][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.420148][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.428264][ C0] Call Trace: [ 417.431583][ C0] [ 417.434440][ C0] ? __warn+0x163/0x4e0 [ 417.438636][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 417.443855][ C0] ? report_bug+0x2b3/0x500 [ 417.448403][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 417.453571][ C0] ? handle_bug+0x3e/0x70 [ 417.458036][ C0] ? exc_invalid_op+0x1a/0x50 [ 417.462751][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 417.467799][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 417.472845][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 417.478107][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 417.483008][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 417.488781][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 417.494205][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 417.500233][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 417.505470][ C0] dummy_timer+0x830/0x45d0 [ 417.510039][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 417.515052][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 417.520025][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 417.525246][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 417.531358][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 417.537119][ C0] hrtimer_interrupt+0x396/0x990 [ 417.542123][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 417.548236][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 417.554172][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.560231][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 417.566258][ C0] Code: 8b e8 24 07 2c 0a 65 66 8b 05 d4 d6 a9 7e 66 85 c0 75 5d bf 01 00 00 00 e8 8d 9f 0b 00 e8 68 8d 43 00 fb 65 8b 05 98 d6 a9 7e <85> c0 75 05 e8 17 b8 a6 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 417.585954][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000282 [ 417.592040][ C0] RAX: 0000000080000101 RBX: 1ffff92000000e80 RCX: ffffffff8172da6a [ 417.600028][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe980 [ 417.608038][ C0] RBP: ffffc90000007490 R08: ffffffff92fa763f R09: 1ffffffff25f4ec7 [ 417.616109][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ec8 R12: dffffc0000000000 [ 417.624129][ C0] R13: 1ffff92000000e84 R14: ffffc90000007420 R15: 0000000000000201 [ 417.632312][ C0] ? mark_lock+0x9a/0x350 [ 417.636692][ C0] ? ieee80211_rx_handlers+0xb7af/0xb820 [ 417.642342][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 417.648075][ C0] ? ieee80211_frame_allowed+0x204/0x380 [ 417.653767][ C0] ieee80211_rx_handlers+0xb7af/0xb820 [ 417.659308][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 417.665245][ C0] ? mark_lock+0x9a/0x350 [ 417.669606][ C0] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 417.675996][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 417.682875][ C0] ? kcov_remote_start+0x4c0/0x7e0 [ 417.688013][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 417.693271][ C0] ? sta_info_hash_lookup+0x4e/0x60 [ 417.698523][ C0] ieee80211_rx_list+0x2968/0x3780 [ 417.703690][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 417.708754][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 417.714260][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 417.719421][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.725421][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.731760][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 417.736797][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 417.741747][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 417.748086][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 417.753626][ C0] ? skb_dequeue+0x113/0x150 [ 417.758325][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 417.764357][ C0] tasklet_action_common+0x321/0x4d0 [ 417.769742][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 417.775573][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.781950][ C0] ? workqueue_softirq_action+0xca/0x140 [ 417.787616][ C0] handle_softirqs+0x2c4/0x970 [ 417.792430][ C0] ? do_softirq+0x11b/0x1e0 [ 417.796975][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 417.802294][ C0] do_softirq+0x11b/0x1e0 [ 417.806687][ C0] [ 417.809625][ C0] [ 417.812567][ C0] ? __pfx_do_softirq+0x10/0x10 [ 417.817425][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 417.823069][ C0] ? rcu_is_watching+0x15/0xb0 [ 417.827858][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 417.833061][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 417.838373][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 417.843492][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 417.849258][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 417.854527][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 417.859684][ C0] __dev_queue_xmit+0x16c9/0x3d30 [ 417.864767][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 417.869923][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 417.875339][ C0] ? mark_lock+0x9a/0x350 [ 417.879690][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.885699][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.892089][ C0] ? ip_finish_output2+0xa14/0x1380 [ 417.897346][ C0] ? ip_finish_output2+0x45f/0x1380 [ 417.902582][ C0] ip_finish_output2+0xd41/0x1380 [ 417.907632][ C0] ? ip_finish_output2+0x45f/0x1380 [ 417.912895][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 417.918410][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 417.923270][ C0] ? __ip_finish_output+0x347/0x400 [ 417.928500][ C0] __ip_queue_xmit+0x118c/0x1b70 [ 417.933551][ C0] ? __ip_queue_xmit+0x5f/0x1b70 [ 417.938594][ C0] l2tp_ip_sendmsg+0x63b/0x1670 [ 417.943569][ C0] ? l2tp_ip_sendmsg+0x3fe/0x1670 [ 417.948620][ C0] ? inet_sendmsg+0x330/0x390 [ 417.953355][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 417.958925][ C0] __sock_sendmsg+0x1a6/0x270 [ 417.963698][ C0] ____sys_sendmsg+0x525/0x7d0 [ 417.968500][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.973808][ C0] ? __might_fault+0xaa/0x120 [ 417.978628][ C0] __sys_sendmmsg+0x3b2/0x740 [ 417.983367][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 417.988603][ C0] ? wake_up_q+0xdc/0x120 [ 417.992946][ C0] ? futex_wait+0x285/0x360 [ 417.997464][ C0] ? __pfx_futex_wait+0x10/0x10 [ 418.002379][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 418.007773][ C0] ? l2tp_ip_connect+0x29f/0x310 [ 418.012905][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.018661][ C0] ? do_futex+0x33b/0x560 [ 418.023008][ C0] ? __sys_connect+0x16b/0x310 [ 418.027814][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.033807][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.040144][ C0] ? do_syscall_64+0x100/0x230 [ 418.045219][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 418.050084][ C0] do_syscall_64+0xf3/0x230 [ 418.054611][ C0] ? clear_bhb_loop+0x35/0x90 [ 418.059423][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.065407][ C0] RIP: 0033:0x7f0c40575bd9 [ 418.069999][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.089738][ C0] RSP: 002b:00007f0c41312048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.098207][ C0] RAX: ffffffffffffffda RBX: 00007f0c40703f60 RCX: 00007f0c40575bd9 [ 418.106197][ C0] RDX: 00000000040000cf RSI: 0000000020000900 RDI: 0000000000000009 [ 418.114187][ C0] RBP: 00007f0c405e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 418.122209][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.130290][ C0] R13: 000000000000000b R14: 00007f0c40703f60 R15: 00007f0c4082fa78 [ 418.138297][ C0] [ 418.141340][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.148725][ C0] CPU: 0 PID: 10034 Comm: syz.0.1019 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 418.159002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 418.169094][ C0] Call Trace: [ 418.172382][ C0] [ 418.175237][ C0] dump_stack_lvl+0x241/0x360 [ 418.179953][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.185178][ C0] ? __pfx__printk+0x10/0x10 [ 418.189796][ C0] ? _printk+0xd5/0x120 [ 418.193980][ C0] ? vscnprintf+0x5d/0x90 [ 418.198327][ C0] panic+0x349/0x860 [ 418.202283][ C0] ? __warn+0x172/0x4e0 [ 418.206458][ C0] ? __pfx_panic+0x10/0x10 [ 418.210892][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 418.216127][ C0] __warn+0x346/0x4e0 [ 418.220215][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 418.225369][ C0] report_bug+0x2b3/0x500 [ 418.229732][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 418.234858][ C0] handle_bug+0x3e/0x70 [ 418.239030][ C0] exc_invalid_op+0x1a/0x50 [ 418.243552][ C0] asm_exc_invalid_op+0x1a/0x20 [ 418.248422][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 418.254178][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 418.274025][ C0] RSP: 0018:ffffc90000006c50 EFLAGS: 00010002 [ 418.280240][ C0] RAX: 0000000080010101 RBX: ffff888029c50000 RCX: 0000000000000002 [ 418.288263][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 418.296270][ C0] RBP: 0100000000000004 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 418.304323][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 418.312312][ C0] R13: ffff888029895a00 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 418.320408][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 418.325466][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 418.330341][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 418.336115][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 418.341636][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 418.347673][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 418.353020][ C0] dummy_timer+0x830/0x45d0 [ 418.357898][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 418.362875][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 418.367858][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 418.373132][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 418.379175][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 418.384925][ C0] hrtimer_interrupt+0x396/0x990 [ 418.389894][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 418.395910][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 418.401579][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 418.407611][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 418.413712][ C0] Code: 8b e8 24 07 2c 0a 65 66 8b 05 d4 d6 a9 7e 66 85 c0 75 5d bf 01 00 00 00 e8 8d 9f 0b 00 e8 68 8d 43 00 fb 65 8b 05 98 d6 a9 7e <85> c0 75 05 e8 17 b8 a6 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 418.433625][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000282 [ 418.439824][ C0] RAX: 0000000080000101 RBX: 1ffff92000000e80 RCX: ffffffff8172da6a [ 418.447901][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe980 [ 418.456007][ C0] RBP: ffffc90000007490 R08: ffffffff92fa763f R09: 1ffffffff25f4ec7 [ 418.464150][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ec8 R12: dffffc0000000000 [ 418.472197][ C0] R13: 1ffff92000000e84 R14: ffffc90000007420 R15: 0000000000000201 [ 418.480285][ C0] ? mark_lock+0x9a/0x350 [ 418.484640][ C0] ? ieee80211_rx_handlers+0xb7af/0xb820 [ 418.490389][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.496154][ C0] ? ieee80211_frame_allowed+0x204/0x380 [ 418.501828][ C0] ieee80211_rx_handlers+0xb7af/0xb820 [ 418.507347][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 418.513220][ C0] ? mark_lock+0x9a/0x350 [ 418.517593][ C0] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 418.524114][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 418.530861][ C0] ? kcov_remote_start+0x4c0/0x7e0 [ 418.536111][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 418.541349][ C0] ? sta_info_hash_lookup+0x4e/0x60 [ 418.546593][ C0] ieee80211_rx_list+0x2968/0x3780 [ 418.551844][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 418.556920][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 418.562457][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 418.567523][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.573694][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.580193][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 418.585345][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 418.590311][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.596837][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 418.602335][ C0] ? skb_dequeue+0x113/0x150 [ 418.606970][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 418.612993][ C0] tasklet_action_common+0x321/0x4d0 [ 418.618304][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 418.624141][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.630505][ C0] ? workqueue_softirq_action+0xca/0x140 [ 418.636179][ C0] handle_softirqs+0x2c4/0x970 [ 418.640959][ C0] ? do_softirq+0x11b/0x1e0 [ 418.645496][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 418.650842][ C0] do_softirq+0x11b/0x1e0 [ 418.655200][ C0] [ 418.658162][ C0] [ 418.661098][ C0] ? __pfx_do_softirq+0x10/0x10 [ 418.666008][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 418.671798][ C0] ? rcu_is_watching+0x15/0xb0 [ 418.676614][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 418.681946][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 418.687291][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 418.692439][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.698182][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 418.703419][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 418.708560][ C0] __dev_queue_xmit+0x16c9/0x3d30 [ 418.713638][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 418.718786][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 418.724189][ C0] ? mark_lock+0x9a/0x350 [ 418.728562][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.734581][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.741115][ C0] ? ip_finish_output2+0xa14/0x1380 [ 418.746355][ C0] ? ip_finish_output2+0x45f/0x1380 [ 418.751669][ C0] ip_finish_output2+0xd41/0x1380 [ 418.756714][ C0] ? ip_finish_output2+0x45f/0x1380 [ 418.761930][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 418.767885][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 418.772774][ C0] ? __ip_finish_output+0x347/0x400 [ 418.778012][ C0] __ip_queue_xmit+0x118c/0x1b70 [ 418.783011][ C0] ? __ip_queue_xmit+0x5f/0x1b70 [ 418.787969][ C0] l2tp_ip_sendmsg+0x63b/0x1670 [ 418.792873][ C0] ? l2tp_ip_sendmsg+0x3fe/0x1670 [ 418.797926][ C0] ? inet_sendmsg+0x330/0x390 [ 418.802612][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 418.808209][ C0] __sock_sendmsg+0x1a6/0x270 [ 418.812924][ C0] ____sys_sendmsg+0x525/0x7d0 [ 418.817752][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.823344][ C0] ? __might_fault+0xaa/0x120 [ 418.828060][ C0] __sys_sendmmsg+0x3b2/0x740 [ 418.832797][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 418.838055][ C0] ? wake_up_q+0xdc/0x120 [ 418.842496][ C0] ? futex_wait+0x285/0x360 [ 418.847103][ C0] ? __pfx_futex_wait+0x10/0x10 [ 418.851969][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 418.857350][ C0] ? l2tp_ip_connect+0x29f/0x310 [ 418.862312][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.868068][ C0] ? do_futex+0x33b/0x560 [ 418.872599][ C0] ? __sys_connect+0x16b/0x310 [ 418.877494][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.883494][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.889863][ C0] ? do_syscall_64+0x100/0x230 [ 418.894652][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 418.899531][ C0] do_syscall_64+0xf3/0x230 [ 418.904057][ C0] ? clear_bhb_loop+0x35/0x90 [ 418.908764][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.914689][ C0] RIP: 0033:0x7f0c40575bd9 [ 418.919128][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.939017][ C0] RSP: 002b:00007f0c41312048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.947653][ C0] RAX: ffffffffffffffda RBX: 00007f0c40703f60 RCX: 00007f0c40575bd9 [ 418.955791][ C0] RDX: 00000000040000cf RSI: 0000000020000900 RDI: 0000000000000009 [ 418.963803][ C0] RBP: 00007f0c405e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 418.971803][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.979920][ C0] R13: 000000000000000b R14: 00007f0c40703f60 R15: 00007f0c4082fa78 [ 418.987948][ C0] [ 418.991302][ C0] Kernel Offset: disabled [ 418.995794][ C0] Rebooting in 86400 seconds..