last executing test programs: 3m47.975873734s ago: executing program 3 (id=1507): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x80900, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x7}, {}, {}, @ext={0x0, 0x0}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x242, @tick, 0x0, {}, 0x0, 0x0, 0x8}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000100)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSF2(r0, 0x541a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, "4a8e916a631c1bb0d198df42300766e34ded06", 0x401, 0x1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x16c, 0x2b8, 0x0, 0x0, 0xff000000, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x104, 0x16c, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x9}}, @common=@srh={{0x2c}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x2) 3m47.783982519s ago: executing program 3 (id=1508): socket$xdp(0x2c, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 3m47.419755033s ago: executing program 3 (id=1511): syz_usb_disconnect(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0xe8, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xea, 0x4b, 0xda, 0xff, 0x4971, 0x8024, 0x7fc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x2, 0x7f, 0xff, 0xa0, 0x2, [{{0x9, 0x4, 0x87, 0x43, 0x0, 0xbd, 0x9a, 0xfe, 0xf9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9a5b683d"}, {0x5, 0x24, 0x0, 0x1e0}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x3, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x70}}]}}, {{0x9, 0x4, 0xda, 0x19, 0x3, 0xa6, 0x4b, 0x67, 0x0, [], [{{0x9, 0x5, 0x4, 0x3, 0x400, 0x1, 0x9, 0xfd}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x2, 0x9, 0x6, [@generic={0x7f, 0x8, "ffa185034820f0161cd79da13b8e43c735422a2690665e37c1d5fa5dc7eae9ef7f16724fc1b7585534d4af6fae4d8bdaafdb4f9fd85349041ac84ab362e52245e3f266e8d65822d56655b2fc35cf70ce0030a8e5111f62c0b40d2161405ef8fd6d5635d85bee993b53e8e872130a34e89772a40eb037807e56787db649"}]}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x3f, &(0x7f0000000300)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e6f05f7ef5e3ab6c75b62fbf84b90e79"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "65cb5251e71e8c5886b3854350769f2d"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe5, 0x2, 0x2, 0x5400, 0x4}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x410}}, {0xde, &(0x7f0000000980)=@string={0xde, 0x3, "4fc20be60eb91719a4f93d7c6a7d52efb36f752b1c58a8a0bd5100f427a8e55bc4736ce5f21fb97c99034cfd9d27ae0b24b76e169179d3cca755142fbf60186146d80910bd9c4daeec7683ebc250ee55e0973b5c939500ae1d521e09ddc93a63103ec230ecb41eb686e8f038f4c376a1838fc5b0a86721c002634249fbfbbb4eeabdb0fa21c0bd1e28c72a70e975a1301b952aa8d1d3ec1e47986f42235e376d6c6a00a0388e16bc830c18e778101f148cd0916b36fd2c42b7d8e70852f333dc2543ce546783bc94ecb34065f0f42ca1f46694af279c966c0cc4a41d"}}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getpeername(r1, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000000c0)=0x80) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/223, 0xdf}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000500)=""/255, 0xff}], 0x3}}], 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 3m45.370883698s ago: executing program 3 (id=1515): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@bridge_delneigh={0x1c, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, r2, 0x2, 0x44}}, 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0xc0001, 0x0, [0x3, 0x0, 0x0, 0x5, 0x54]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="48b800200000000000000f23c00f21f83503000b000f23f8470f0946b988080000000895340000ba000000000f308f8828ef16060f01c2360fc736400f239f66450f2341c421896abc6c004d0000c74424000d000000c744240205000000c744240600000000", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) 3m44.876811005s ago: executing program 3 (id=1516): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x9}], 0x1, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x3, 0x3ff]}, 0x8, 0x800) timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) msync(&(0x7f00004a4000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x2000) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x10d, 0x40, &(0x7f00000011c0)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x320, 0x43c, 0xffffffff, 0x320, 0x320, 0x660, 0x660, 0xffffffff, 0x660, 0x660, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x22, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@broadcast, @icmp_id=0x64, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv6=@private2, @ipv6=@empty, @port=0x4e20, @gre_key=0x6edf}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0x7fffff80, 0xffffff00, 0xff], 'virt_wifi0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0xe, 0x93dc52c50bef494, 0x12}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast1, @icmp_id=0x66, @port=0x4e20}}}, {{@ipv6={@mcast2, @empty, [0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x2, 0x7, 0x2, 0x6}, 0x0, 0xa4, 0xec}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@private=0xa010101, @ipv4=@broadcast, @port=0x4e24, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3m42.339791712s ago: executing program 3 (id=1524): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x600002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) openat(0xffffffffffffffff, 0x0, 0x2201, 0x34) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) inotify_init1(0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 28.750288283s ago: executing program 2 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 11.128047127s ago: executing program 0 (id=1905): r0 = socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xc9) 9.701463326s ago: executing program 0 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 7.322675367s ago: executing program 0 (id=1912): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 6.799747395s ago: executing program 0 (id=1914): openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') read$FUSE(r3, &(0x7f0000007700)={0x2020}, 0x2020) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/16, 0xffffff9b}, {&(0x7f0000000080)=""/195, 0xcd}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) 6.373375553s ago: executing program 4 (id=1916): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 5.703655495s ago: executing program 4 (id=1917): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x0, "b15700000000ffffff6500ffffdd00"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5610067fbc45ff81050000c00e070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000208080041490040060408", 0x57}, {&(0x7f0000000980)="4c18611ab8c12c7d92e6923c67d9a8ec7fc0b24b8550c21e538b778860aa1ef9b221d803f731f7486d19c956640a6a7649c9b05954b5c6e69c894ccabc3d392100e8ea4e6d7eafca6c95b0f3fded5e8ed08cf9f7a75788c86272f246534a7a6b97e6b9b40ce83531b48a664eecc12b7f179804616a54938c7c1b48e66d56c5efa069e64ba90e80941b6e57350ff1768472c1392918c210ed762844e65818e813a6602ac59886851ba0936d", 0xab}], 0x2) 4.498801614s ago: executing program 4 (id=1918): rseq(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xfffffd43) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 4.189203313s ago: executing program 1 (id=1919): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x61c}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "d877"}]}, 0x44}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x7b, 0x1}}) read(r0, &(0x7f0000000000), 0x2000) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x3f) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}}) close(r0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0x0, @any, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}}, 0x14) 3.808017953s ago: executing program 0 (id=1920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3.467977643s ago: executing program 1 (id=1921): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) 3.082092824s ago: executing program 0 (id=1922): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x17, 0x1, 0x0, "9f76fe92f6d87e3a99080debac1874d47ee2318d4526f2148e84c532d56b46f0"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@allocspi={0xf4, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in6=@mcast2, @in=@multicast2, 0x0, 0x6}, {@in, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x7}}}}, 0xf4}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@private0}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0xea, 0x7a, 0x40, 0x12b8, 0xec62, 0x434, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x40, 0xde, 0x22, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c000000000000", @ANYRES32], 0x30}}, 0x0) r3 = shmat(0x0, &(0x7f00003cc000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f00000f5000/0x4000)=nil, 0x4000) shmdt(r3) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0) 3.002731904s ago: executing program 1 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.626488423s ago: executing program 2 (id=1861): pipe(&(0x7f0000000400)) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$amidi(&(0x7f0000000000), 0x200, 0x80041) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mq_open(&(0x7f00000010c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb4\xcf\xa1:}\xb8\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.563516556s ago: executing program 1 (id=1924): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) stat(0x0, &(0x7f0000000380)) lstat(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x900110, &(0x7f0000000600)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r1, 0xffffffffffffffff, 0x0) 2.223912029s ago: executing program 1 (id=1925): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x80000000, 0x3, 0x3, 0x7, 0x8, 0x5, 0x0, 0x7, 0x3, 0x7, 0x2, 0x5, 0x5}, {0x8e, 0x6, 0x9, 0x9, 0xff, 0x4, 0x6, 0x5, 0xd8, 0xf, 0x9, 0x4}, {0x1, 0x40, 0xb, 0x5, 0x8, 0x5, 0x5, 0xf, 0x5, 0xfd, 0xb, 0x3, 0xffffffffffffff88}], 0x5b}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x9, 0x7, 0xb7, 0x9, 0x36b, 0x9, 0x4, 0x7ff, 0x1a, 0x13, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "1f087db966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x170}}, 0x0) 2.129364668s ago: executing program 4 (id=1926): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x0, "b15700000000ffffff6500ffffdd00"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5610067fbc45ff81050000c00e070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000208080041490040060408", 0x57}, {&(0x7f0000000980)="4c18611ab8c12c7d92e6923c67d9a8ec7fc0b24b8550c21e538b778860aa1ef9b221d803f731f7486d19c956640a6a7649c9b05954b5c6e69c894ccabc3d392100e8ea4e6d7eafca6c95b0f3fded5e8ed08cf9f7a75788c86272f246534a7a6b97e6b9b40ce83531b48a664eecc12b7f179804616a54938c7c1b48e66d56c5efa069e64ba90e80941b6e57350ff1768472c1392918c210ed762844e65818e813a6602ac59886851ba0936d", 0xab}], 0x2) 1.939804932s ago: executing program 2 (id=1927): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) pread64(r0, 0x0, 0x0, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) eventfd(0x2) keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, &(0x7f00000001c0)) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000020540)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1b) fsopen(0x0, 0x0) 1.122641801s ago: executing program 4 (id=1928): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1fc653b9}}, './file0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x7, 0xb8d5, 0x0, {{0xb, 0x4, 0x0, 0x17, 0x2c, 0x66, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x18, 0x31, 0x0, 0x8, [0x5, 0x3, 0x3, 0x0, 0x4]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xace, 0x0, r0, 0x7, '\x00', r2, r3, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0xb16c, 0x248, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x20, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 917.45986ms ago: executing program 2 (id=1929): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffed6) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000300)={0x2f, @empty, 0x4e20, 0x2, 'ovf\x00', 0x5, 0x7, 0x6f}, 0x2c) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x0, 0x360, 0x360, 0x298, 0x1d0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@mcast2, 0x2}}}, {{@ipv6={@private0, @local, [], [], 'veth1_to_bond\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'rose0\x00', 'veth0\x00'}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x57c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x748, 0x4, 0x278, 0xffffffff, 0x0, 0xa0, 0x0, 0xffffffff, 0xffffffff, 0x1e4, 0x1e4, 0x1e4, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'syzkaller0\x00'}, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ipvlan0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2d4) 656.675205ms ago: executing program 2 (id=1930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 648.402513ms ago: executing program 4 (id=1931): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xfffffd43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ab07000000000000006d2d4fda00041800"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 111.597062ms ago: executing program 2 (id=1932): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x25) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020}, 0x2020) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="3de74caffb1d75c24b1772399b3815d46d4a4585ed5c42c975415decdc2a8f68dee3fbc55128", 0x26}, {0x0}], 0x2}}], 0x1, 0x0) 0s ago: executing program 1 (id=1933): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3000009, 0x4052, r3, 0xc5a90000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kernel console output (not intermixed with test programs): e the problem. [ 1227.892701][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.934968][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.941969][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.985664][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.095326][T16062] veth0_macvtap: entered promiscuous mode [ 1228.366140][T16335] hsr_slave_0: entered promiscuous mode [ 1228.453352][T16335] hsr_slave_1: entered promiscuous mode [ 1228.462698][T16335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1228.470309][T16335] Cannot create hsr debugfs directory [ 1228.553344][T13473] bridge_slave_0: left allmulticast mode [ 1228.559037][T13473] bridge_slave_0: left promiscuous mode [ 1228.622765][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.654352][T13473] bridge_slave_1: left allmulticast mode [ 1228.660054][T13473] bridge_slave_1: left promiscuous mode [ 1228.689866][T13473] bridge1: port 1(bridge_slave_1) entered disabled state [ 1228.734394][T13473] bridge_slave_1: left allmulticast mode [ 1228.741206][T13473] bridge_slave_1: left promiscuous mode [ 1228.754211][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.763909][T13473] bridge_slave_0: left allmulticast mode [ 1228.773256][T13473] bridge_slave_0: left promiscuous mode [ 1228.779139][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.796091][T13473] bridge_slave_1: left allmulticast mode [ 1228.801876][T13473] bridge_slave_1: left promiscuous mode [ 1228.812761][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.824152][T13473] bridge_slave_0: left allmulticast mode [ 1228.829828][T13473] bridge_slave_0: left promiscuous mode [ 1228.839731][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.741964][ T5231] Bluetooth: hci1: command tx timeout [ 1231.389171][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.474818][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.523031][T13473] bond0 (unregistering): Released all slaves [ 1231.962876][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.976445][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.987965][T13473] bond0 (unregistering): Released all slaves [ 1232.009972][T16062] veth1_macvtap: entered promiscuous mode [ 1232.153334][T16213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1232.418693][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.492755][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.516766][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.551336][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.572665][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.622641][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.652878][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.672622][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.702894][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.737974][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.766014][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.792775][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.836383][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.862191][T13473] tipc: Left network mode [ 1232.909875][T16213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1232.920492][T16213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1232.969845][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.003523][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.052791][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.083465][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.110695][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.132869][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.152597][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.173989][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.202936][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.227900][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.252629][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.292505][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.353594][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.447891][T16213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1233.534699][T16062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.568641][T16062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.603232][T16062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.612011][T16062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.080404][T16191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1234.091218][T16191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1234.472878][T16191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1234.552508][T16191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1235.013009][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.021148][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.402304][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.412589][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.652949][T13473] hsr_slave_0: left promiscuous mode [ 1235.659225][T13473] hsr_slave_1: left promiscuous mode [ 1235.681195][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.713068][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.743295][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.750788][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.805825][T13473] hsr_slave_0: left promiscuous mode [ 1235.844101][T13473] hsr_slave_1: left promiscuous mode [ 1235.912671][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.920179][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.984981][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.012677][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.036748][T13473] hsr_slave_0: left promiscuous mode [ 1236.052896][T13473] hsr_slave_1: left promiscuous mode [ 1236.064339][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.071856][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.111914][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.142823][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.307502][T13473] veth1_macvtap: left promiscuous mode [ 1236.315558][T13473] veth0_macvtap: left promiscuous mode [ 1236.324588][T13473] veth1_vlan: left promiscuous mode [ 1236.329944][T13473] veth0_vlan: left promiscuous mode [ 1236.336567][T13473] veth1_macvtap: left promiscuous mode [ 1236.342124][T13473] veth0_macvtap: left promiscuous mode [ 1236.355627][T13473] veth1_vlan: left promiscuous mode [ 1236.369948][T13473] veth0_vlan: left promiscuous mode [ 1236.376249][T13473] veth1_macvtap: left promiscuous mode [ 1236.381853][T13473] veth0_macvtap: left promiscuous mode [ 1236.412855][T13473] veth1_vlan: left promiscuous mode [ 1236.448629][T13473] veth0_vlan: left promiscuous mode [ 1238.310151][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1238.465513][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1239.055236][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.061567][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.537786][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1240.672366][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1243.239484][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1243.379890][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1245.122041][T16213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.354254][T16213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.369404][T16191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.391979][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.399142][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.519076][T16191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.610032][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.617189][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.727923][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.735103][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.783064][T16335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1245.811325][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.818495][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.925792][T16191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.940421][T16191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.970426][T16335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1246.006797][T16335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1246.095485][T16335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1246.279154][T16213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.436267][T16191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.545639][T16213] veth0_vlan: entered promiscuous mode [ 1246.579765][T16213] veth1_vlan: entered promiscuous mode [ 1246.618637][T16335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.639031][T16335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.650473][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.657679][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.733874][T16191] veth0_vlan: entered promiscuous mode [ 1246.759453][T16191] veth1_vlan: entered promiscuous mode [ 1246.792832][T16191] veth0_macvtap: entered promiscuous mode [ 1246.885665][T16335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1246.896204][T16335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1246.964981][T16335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.027303][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.034488][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.064101][T16191] veth1_macvtap: entered promiscuous mode [ 1247.086335][T16335] veth0_vlan: entered promiscuous mode [ 1247.097567][T16335] veth1_vlan: entered promiscuous mode [ 1247.161860][T16335] veth0_macvtap: entered promiscuous mode [ 1247.170287][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.192528][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.202376][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.213424][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.232854][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.243406][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.262564][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.273745][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.286637][T16191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.315991][T16213] veth0_macvtap: entered promiscuous mode [ 1247.344148][T16213] veth1_macvtap: entered promiscuous mode [ 1247.382257][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.393120][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.403141][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.414084][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.424320][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.435118][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.445241][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.455795][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.465853][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.482922][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.514668][T16213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.584579][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.595918][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.608548][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.653114][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.672627][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.693506][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.708474][T16191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.719569][T16191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.767316][T16191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.797864][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.809588][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.822811][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.834518][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.844794][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.855850][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.867188][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.878563][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.893115][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.904163][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.924857][T16213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.947862][T16335] veth1_macvtap: entered promiscuous mode [ 1247.967215][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.982677][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.993381][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.012648][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.022593][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.033116][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.043014][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.053580][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.063518][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.074318][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.084491][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.095504][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.107786][T16335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.145365][T16213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.202546][T16213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.211796][T16213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.227538][T16213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.241624][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.263605][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.273835][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.284880][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.302592][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.313463][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.323770][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.345774][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.356178][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.368217][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.382566][T16335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1248.403145][T16335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.423623][T16335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.436205][T16191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.449661][T16191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.458490][T16191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.472530][T16191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.638754][T16335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.653006][T16335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.661752][T16335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.670628][T16335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.866267][ T4046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.883365][ T4046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.941708][T13473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.952697][T13473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.979824][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.990288][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.184215][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.193188][T13473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.201512][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.211174][T13473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.246995][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.256395][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.509884][T16433] pimreg: entered allmulticast mode [ 1249.693527][T13358] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1249.824535][ T30] audit: type=1326 audit(1727306033.450:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16437 comm="syz.2.1680" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x0 [ 1249.859766][T13358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.898523][T13358] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1249.935093][T13358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.983679][T13358] usb 2-1: config 0 descriptor?? [ 1250.004198][T13358] pwc: Askey VC010 type 2 USB webcam detected. [ 1250.213881][T13358] pwc: send_video_command error -71 [ 1250.221718][T13358] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1250.260917][T13358] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1250.273289][ T5277] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1250.296325][T13358] usb 2-1: USB disconnect, device number 59 [ 1250.447413][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 1250.489560][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.556616][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1250.610746][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1250.640669][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1250.682679][ T5277] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 1250.712263][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.746567][ T5277] usb 5-1: config 0 descriptor?? [ 1250.803490][T13358] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1250.974216][T13358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.996291][T13358] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1251.019280][T13358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.039017][T13358] usb 2-1: config 0 descriptor?? [ 1251.053160][T13358] pwc: Askey VC010 type 2 USB webcam detected. [ 1251.188134][T16442] syzkaller1: entered promiscuous mode [ 1251.281811][T16442] syzkaller1: entered allmulticast mode [ 1251.455127][T13358] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1251.480422][T13358] pwc: recv_control_msg error -32 req 02 val 2700 [ 1251.509134][T13358] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1251.521310][T13358] pwc: recv_control_msg error -32 req 04 val 1000 [ 1251.530860][T13358] pwc: recv_control_msg error -32 req 04 val 1300 [ 1251.546513][T13358] pwc: recv_control_msg error -32 req 04 val 1400 [ 1251.558290][T13358] pwc: recv_control_msg error -32 req 02 val 2000 [ 1251.570317][T13358] pwc: recv_control_msg error -32 req 02 val 2100 [ 1251.604025][T13358] pwc: recv_control_msg error -32 req 04 val 1500 [ 1251.641995][T13358] pwc: recv_control_msg error -32 req 02 val 2500 [ 1251.651176][T13358] pwc: recv_control_msg error -32 req 02 val 2400 [ 1251.678305][T13358] pwc: recv_control_msg error -32 req 02 val 2600 [ 1251.692678][ T5277] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1251.777776][T16455] syzkaller0: entered allmulticast mode [ 1251.852834][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 1251.864343][ T5277] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 1251.884507][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.897531][T13358] pwc: recv_control_msg error -71 req 02 val 2800 [ 1251.923682][T13358] pwc: recv_control_msg error -71 req 04 val 1100 [ 1251.927936][ T5277] usb 3-1: config 0 descriptor?? [ 1251.943987][T13358] pwc: recv_control_msg error -71 req 04 val 1200 [ 1251.948807][ T5277] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1251.965914][T13358] pwc: Registered as video71. [ 1252.016686][T13358] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 1252.036829][T13358] usb 2-1: USB disconnect, device number 60 [ 1252.204291][T10125] usb 5-1: USB disconnect, device number 68 [ 1252.726251][T10125] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1252.856993][ T5277] usb 3-1: USB disconnect, device number 52 [ 1252.929353][T10125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1252.984287][T10125] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1253.025759][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 1253.041750][T10125] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1253.062545][T10125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.097651][T10125] usb 5-1: Product: syz [ 1253.101906][T10125] usb 5-1: Manufacturer: syz [ 1253.155477][T10125] usb 5-1: SerialNumber: syz [ 1253.184076][T10125] usb 5-1: config 0 descriptor?? [ 1253.236396][T10125] ti_usb_3410_5052 5-1:0.0: required endpoints missing [ 1253.366673][ T5277] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1253.574400][ T5277] usb 3-1: config 0 has an invalid interface number: 5 but max is 1 [ 1253.588702][ T5277] usb 3-1: config 0 has an invalid interface number: 18 but max is 1 [ 1253.609414][ T5277] usb 3-1: config 0 has no interface number 0 [ 1253.623341][ T5277] usb 3-1: config 0 has no interface number 1 [ 1253.632319][ T5277] usb 3-1: config 0 interface 5 has no altsetting 0 [ 1253.691088][ T5277] usb 3-1: New USB device found, idVendor=05d1, idProduct=9008, bcdDevice=1b.c2 [ 1253.707650][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.719963][ T5277] usb 3-1: Product: syz [ 1253.730638][ T5277] usb 3-1: Manufacturer: syz [ 1253.742699][ T5277] usb 3-1: SerialNumber: syz [ 1253.752697][ T5277] usb 3-1: config 0 descriptor?? [ 1253.770945][ T5277] ftdi_sio 3-1:0.5: FTDI USB Serial Device converter detected [ 1253.800176][ T5277] ftdi_sio ttyUSB0: unknown device type: 0x1bc2 [ 1253.833655][ T5277] ftdi_sio 3-1:0.18: FTDI USB Serial Device converter detected [ 1253.855167][ T5277] ftdi_sio ttyUSB1: unknown device type: 0x1bc2 [ 1254.138403][ T8] usb 3-1: USB disconnect, device number 53 [ 1254.169323][ T8] ftdi_sio 3-1:0.5: device disconnected [ 1254.202313][ T937] usb 5-1: USB disconnect, device number 69 [ 1254.211715][ T8] ftdi_sio 3-1:0.18: device disconnected [ 1254.572931][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1254.764009][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1254.776519][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.808542][ T9] usb 1-1: Product: syz [ 1254.826513][ T9] usb 1-1: Manufacturer: syz [ 1254.853660][ T9] usb 1-1: SerialNumber: syz [ 1254.877253][ T9] usb 1-1: config 0 descriptor?? [ 1255.200791][ T9] usb 1-1: USB disconnect, device number 74 [ 1256.751703][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.775499][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.821235][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.838799][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.847820][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1256.856347][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1257.216272][T13473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.322918][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1257.501474][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.533342][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.548673][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1257.572706][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1257.599774][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.622830][T13473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.635289][ T9] usb 5-1: config 0 descriptor?? [ 1257.891488][T13473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.040264][T13473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.069866][ T9] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 1258.120350][ T9] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 1258.207606][ T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1258.408295][ T9] usb 5-1: USB disconnect, device number 70 [ 1258.517583][T13473] bridge_slave_1: left allmulticast mode [ 1258.562872][T13473] bridge_slave_1: left promiscuous mode [ 1258.575341][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.959756][T13473] bridge_slave_0: left allmulticast mode [ 1258.965715][T13473] bridge_slave_0: left promiscuous mode [ 1258.972084][ T5236] Bluetooth: hci3: command tx timeout [ 1258.984937][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.184481][T16582] block device autoloading is deprecated and will be removed. [ 1260.198724][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.224402][T16582] syz.0.1717: attempt to access beyond end of device [ 1260.224402][T16582] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1260.261764][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.286965][T13473] bond0 (unregistering): Released all slaves [ 1260.317530][T16519] chnl_net:caif_netlink_parms(): no params data found [ 1260.406525][T16576] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 1260.436227][T16576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.449297][T16576] bond0: (slave team0): Enslaving as an active interface with an up link [ 1260.476332][T16579] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 1260.531872][T16579] bond0: (slave team0): Releasing backup interface [ 1260.571366][T16579] bridge0: port 3(team0) entered blocking state [ 1260.581806][T16579] bridge0: port 3(team0) entered disabled state [ 1260.597642][T16579] team0: entered allmulticast mode [ 1260.609182][T16579] team_slave_0: entered allmulticast mode [ 1260.628259][T16579] team_slave_1: entered allmulticast mode [ 1260.648341][T16579] team0: entered promiscuous mode [ 1260.660297][T16579] team_slave_0: entered promiscuous mode [ 1260.672736][T16579] team_slave_1: entered promiscuous mode [ 1261.042752][ T5236] Bluetooth: hci3: command tx timeout [ 1261.192188][ T937] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1261.396861][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.412745][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.566805][T16519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.582538][ T937] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1261.599838][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.619434][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.642936][T16519] bridge_slave_0: entered allmulticast mode [ 1261.650723][T16519] bridge_slave_0: entered promiscuous mode [ 1261.683962][ T937] usb 2-1: config 0 descriptor?? [ 1261.706068][T16519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.726239][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.756356][T16519] bridge_slave_1: entered allmulticast mode [ 1261.793524][T16519] bridge_slave_1: entered promiscuous mode [ 1261.841703][T16612] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1261.903765][T16591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.945780][T16591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.953146][T16614] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 1262.133262][T16605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.596508][T13473] hsr_slave_0: left promiscuous mode [ 1262.617630][T13473] hsr_slave_1: left promiscuous mode [ 1262.623899][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.634407][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.644767][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.653214][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.721483][T13473] veth1_macvtap: left promiscuous mode [ 1262.751961][T13473] veth0_macvtap: left promiscuous mode [ 1262.770029][T13473] veth1_vlan: left promiscuous mode [ 1262.782244][T13473] veth0_vlan: left promiscuous mode [ 1263.082649][ T6125] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1263.122970][ T5236] Bluetooth: hci3: command tx timeout [ 1263.293407][ T6125] usb 3-1: Using ep0 maxpacket: 16 [ 1263.315684][ T6125] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 1263.336975][ T6125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.378285][ T6125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1263.409639][ T6125] usb 3-1: config 0 has no interface number 0 [ 1263.418748][ T6125] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1263.432242][ T6125] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32 [ 1263.463031][ T6125] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0xD has invalid maxpacket 1023 [ 1263.492555][ T6125] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1263.512950][ T6125] usb 3-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1263.556840][ T6125] usb 3-1: config 0 interface 206 has no altsetting 0 [ 1263.582032][ T6125] usb 3-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1263.596739][ T6125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.639830][ T6125] usb 3-1: Product: syz [ 1263.666911][ T6125] usb 3-1: Manufacturer: syz [ 1263.671761][ T6125] usb 3-1: SerialNumber: syz [ 1263.680686][ T6125] usb 3-1: config 0 descriptor?? [ 1263.691615][T16633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1263.700100][T16633] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1264.901481][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1265.034734][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1265.218174][ T5236] Bluetooth: hci3: command tx timeout [ 1266.818142][ T937] usbhid 2-1:0.0: can't add hid device: -32 [ 1266.824635][ T937] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1266.895577][T16519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.940278][T16619] team_slave_0: entered promiscuous mode [ 1266.946620][T16619] team_slave_1: entered promiscuous mode [ 1266.962805][T16619] vlan2: entered promiscuous mode [ 1266.981137][T16619] team0: entered promiscuous mode [ 1266.987215][T16619] vlan2: entered allmulticast mode [ 1267.014786][T16619] team0: entered allmulticast mode [ 1267.020146][T16619] team_slave_0: entered allmulticast mode [ 1267.027930][T16619] team_slave_1: entered allmulticast mode [ 1267.076894][T16619] team0: left allmulticast mode [ 1267.081824][T16619] team_slave_0: left allmulticast mode [ 1267.092838][T16619] team_slave_1: left allmulticast mode [ 1267.098491][T16619] team0: left promiscuous mode [ 1267.123271][T16619] team_slave_0: left promiscuous mode [ 1267.128936][T16619] team_slave_1: left promiscuous mode [ 1267.252355][T16620] netlink: 'syz.4.1724': attribute type 17 has an invalid length. [ 1267.589689][ T6125] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.651275][ T6125] usb 3-1: USB disconnect, device number 54 [ 1267.804543][T16519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.878405][T16430] udevd[16430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1268.428371][T16519] team0: Port device team_slave_0 added [ 1268.473968][T10125] usb 2-1: USB disconnect, device number 61 [ 1268.483203][T16519] team0: Port device team_slave_1 added [ 1268.617487][T16519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.641472][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.755112][T16519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.808736][T16519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.861163][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.016469][T16519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.061919][T16673] @: renamed from vlan0 (while UP) [ 1269.532822][T16519] hsr_slave_0: entered promiscuous mode [ 1269.562760][ T8] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1269.588165][T16519] hsr_slave_1: entered promiscuous mode [ 1269.622698][T16519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1269.668229][T16519] Cannot create hsr debugfs directory [ 1269.712537][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1269.721316][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.742695][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1269.753293][ T8] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1269.767331][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1269.790318][T16687] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 1269.803096][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1736'. [ 1269.805513][ T937] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1269.837039][T16687] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1269.852483][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1269.874337][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1269.909123][T16685] warning: `syz.1.1736' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1269.949229][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.979024][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1270.017839][ T8] usb 3-1: SerialNumber: syz [ 1270.042537][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 1270.069478][T16683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1270.083610][ T937] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.132821][ T937] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1270.183680][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.247372][ T937] usb 5-1: config 0 descriptor?? [ 1270.271718][ T937] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1270.290482][ T937] usb 5-1: Detected SIO [ 1270.312556][ T937] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1270.459312][ T937] usb 3-1: USB disconnect, device number 55 [ 1270.492533][ T8] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1270.719382][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1270.786555][ T8] usb 2-1: config 0 has no interfaces? [ 1270.793344][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1270.819708][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.843402][ T8] usb 2-1: config 0 descriptor?? [ 1271.043249][T16704] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1740'. [ 1271.106269][ T8] usb 2-1: USB disconnect, device number 62 [ 1271.683278][ T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1271.813695][ T944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.902943][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1271.917881][ T8] usb 2-1: config 0 has no interfaces? [ 1271.933294][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1271.962812][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.004088][ T8] usb 2-1: config 0 descriptor?? [ 1272.130443][ T944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.258213][T16693] loop9: detected capacity change from 0 to 7 [ 1272.291899][T16693] loop9: [POWERTEC] [ 1272.307982][ T944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.443321][ T9] usb 5-1: USB disconnect, device number 71 [ 1272.487691][T16519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1272.491137][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1272.505250][ T8] usb 2-1: USB disconnect, device number 63 [ 1272.539678][T16723] syzkaller0: entered allmulticast mode [ 1272.603166][ T9] ftdi_sio 5-1:0.0: device disconnected [ 1272.667642][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1272.681101][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1272.691380][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1272.693883][ T944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.721813][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1272.733437][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1272.742100][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1272.772604][T16519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1272.856949][T16519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1272.867126][T16519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1272.972538][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1273.143242][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1273.225244][ T944] bridge_slave_1: left allmulticast mode [ 1273.225277][ T944] bridge_slave_1: left promiscuous mode [ 1273.225437][ T944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.229920][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 1273.262931][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.262965][ T9] usb 5-1: Product: syz [ 1273.262986][ T9] usb 5-1: Manufacturer: syz [ 1273.263005][ T9] usb 5-1: SerialNumber: syz [ 1273.264138][ T944] bridge_slave_0: left allmulticast mode [ 1273.264167][ T944] bridge_slave_0: left promiscuous mode [ 1273.264344][ T944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.273666][ T9] usb 5-1: config 0 descriptor?? [ 1273.310720][ T9] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 1273.575267][ T9] usb 5-1: USB disconnect, device number 72 [ 1273.576283][ T9] pvrusb2: Device being rendered inoperable [ 1274.386217][ T944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.415890][ T944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.447011][ T944] bond0 (unregistering): Released all slaves [ 1274.539245][T16742] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 1274.607864][T16742] team0: Port device netdevsim0 added [ 1274.812749][ T5236] Bluetooth: hci5: command tx timeout [ 1275.073713][T16753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1275.196715][ T944] hsr_slave_0: left promiscuous mode [ 1275.207710][ T944] hsr_slave_1: left promiscuous mode [ 1275.216008][ T944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.224889][ T944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.234563][ T944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.242183][ T944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.262803][ T9] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1275.287558][ T944] veth1_macvtap: left promiscuous mode [ 1275.293475][ T944] veth0_macvtap: left promiscuous mode [ 1275.299248][ T944] veth1_vlan: left promiscuous mode [ 1275.305113][ T944] veth0_vlan: left promiscuous mode [ 1275.448684][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 1275.465912][ T9] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 1275.485655][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1275.508613][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1275.529164][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.549961][ T9] usb 5-1: Product: à¡  [ 1275.562620][ T9] usb 5-1: Manufacturer: á°‰ [ 1275.582971][T16758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1275.637253][ T30] audit: type=1326 audit(1727306059.260:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1275.799460][ T30] audit: type=1326 audit(1727306059.260:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1275.872543][ T30] audit: type=1326 audit(1727306059.260:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1275.912551][ T30] audit: type=1326 audit(1727306059.260:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.002990][ T30] audit: type=1326 audit(1727306059.260:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.003042][ T30] audit: type=1326 audit(1727306059.260:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.003079][ T30] audit: type=1326 audit(1727306059.260:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.003140][ T30] audit: type=1326 audit(1727306059.260:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.003176][ T30] audit: type=1326 audit(1727306059.260:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.003210][ T30] audit: type=1326 audit(1727306059.260:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.1752" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7fc00000 [ 1276.299269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.892953][ T5236] Bluetooth: hci5: command tx timeout [ 1277.401261][ T944] team0 (unregistering): Port device team_slave_1 removed [ 1277.476870][ T944] team0 (unregistering): Port device team_slave_0 removed [ 1278.938865][ T9] usb 5-1: USB disconnect, device number 73 [ 1278.958621][T16519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.972902][ T5236] Bluetooth: hci5: command tx timeout [ 1279.064605][T16519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.107419][T16728] chnl_net:caif_netlink_parms(): no params data found [ 1279.157798][T16771] delete_channel: no stack [ 1279.193538][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.200863][T13473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.218251][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.226194][T13473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.274901][T16519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1279.285811][T16519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1279.315389][T16519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.347797][T16519] veth0_vlan: entered promiscuous mode [ 1279.360972][T16519] veth1_vlan: entered promiscuous mode [ 1279.614263][T16519] veth0_macvtap: entered promiscuous mode [ 1279.750102][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.757708][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.780961][T16519] veth1_macvtap: entered promiscuous mode [ 1279.797512][T16777] syzkaller0: entered allmulticast mode [ 1279.891649][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.910244][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.924771][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.935566][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.947341][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.959364][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.970195][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.981535][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.994162][T16519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.142603][ T2636] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1280.230482][T16728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.252801][T16728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.280856][T16728] bridge_slave_0: entered allmulticast mode [ 1280.294874][T16728] bridge_slave_0: entered promiscuous mode [ 1280.306102][ T2636] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1280.315315][T16728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.341418][T16728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.350678][ T2636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.359340][T16728] bridge_slave_1: entered allmulticast mode [ 1280.382778][ T2636] usb 5-1: Product: syz [ 1280.387113][ T2636] usb 5-1: Manufacturer: syz [ 1280.391752][ T2636] usb 5-1: SerialNumber: syz [ 1280.403570][ T2636] usb 5-1: config 0 descriptor?? [ 1280.421865][T16728] bridge_slave_1: entered promiscuous mode [ 1280.463471][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.492633][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.504808][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.516317][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.526984][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.537943][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.548227][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.561662][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.581809][T16519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.594659][T16519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.607092][T16519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.716551][T16519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.742826][T16519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.764786][T16519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.783790][ T2636] usb 5-1: USB disconnect, device number 74 [ 1280.804860][T16519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.843812][T16728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.861921][T16728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.042616][ T5236] Bluetooth: hci5: command tx timeout [ 1281.224498][T16728] team0: Port device team_slave_0 added [ 1281.279734][T16728] team0: Port device team_slave_1 added [ 1281.584051][T16728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.611624][T16728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.662896][T10125] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1281.688998][ T5236] Bluetooth: hci1: command tx timeout [ 1281.702729][T16728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.716875][T16728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.724898][T16728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.761442][T16728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.877924][T10125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.907593][T16728] hsr_slave_0: entered promiscuous mode [ 1281.909153][T10125] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1281.924173][T16728] hsr_slave_1: entered promiscuous mode [ 1281.931425][T10125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.931966][T16728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.986029][T10125] usb 2-1: config 0 descriptor?? [ 1281.992488][T16728] Cannot create hsr debugfs directory [ 1282.064788][T10125] pwc: Askey VC010 type 2 USB webcam detected. [ 1282.202184][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.222619][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.234361][T10125] pwc: send_video_command error -71 [ 1282.239804][T10125] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1282.258252][T10125] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1282.301596][T10125] usb 2-1: USB disconnect, device number 64 [ 1282.401159][ T9098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.432482][ T9098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.793271][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1283.026789][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.052494][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1283.072245][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.115866][ T9] usb 2-1: config 0 descriptor?? [ 1283.148684][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1283.174995][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1283.175043][ T30] audit: type=1326 audit(1727306066.800:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.276773][ T30] audit: type=1326 audit(1727306066.890:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.327373][ T30] audit: type=1326 audit(1727306066.890:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.381528][ T30] audit: type=1326 audit(1727306066.890:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.501230][ T30] audit: type=1326 audit(1727306066.970:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.556866][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1283.575504][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1283.601386][ T30] audit: type=1326 audit(1727306066.970:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.633921][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1283.643387][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1283.667217][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1283.681840][T16728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1283.700588][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1283.712109][T16728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1283.717548][ T30] audit: type=1326 audit(1727306066.970:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.728358][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1283.781600][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1283.803871][T16728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1283.817630][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1283.833544][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1283.838662][ T30] audit: type=1326 audit(1727306067.060:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.846513][T16728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1283.892643][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1283.918460][ T30] audit: type=1326 audit(1727306067.220:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.943654][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1283.967298][ T30] audit: type=1326 audit(1727306067.220:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1283.979079][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1284.039813][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 1284.258097][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1284.283580][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1284.292875][ T5278] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1284.343129][ T9] pwc: Registered as video71. [ 1284.349342][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 1284.384209][T16728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.445118][ T9] usb 2-1: USB disconnect, device number 65 [ 1284.463361][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.492513][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1284.513883][T16649] udevd[16649]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1284.539256][T16728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.548026][ T5278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1284.594528][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.614297][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.621759][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.631812][ T5278] usb 3-1: config 0 descriptor?? [ 1284.669666][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.676981][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.727071][T16866] syzkaller0: entered allmulticast mode [ 1285.075373][ T5278] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1285.106035][T16728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.113682][ T5278] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1285.121713][ T5278] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 1285.217263][T16728] veth0_vlan: entered promiscuous mode [ 1285.231133][T16728] veth1_vlan: entered promiscuous mode [ 1285.257820][T16728] veth0_macvtap: entered promiscuous mode [ 1285.269651][T16728] veth1_macvtap: entered promiscuous mode [ 1285.288872][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.299647][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.310571][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.321536][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.332691][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.344279][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.354484][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.365968][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.377182][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.388579][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.407137][T16728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.423837][ T5278] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1285.469812][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.488362][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.563251][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.608422][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.686194][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.687582][ T2636] usb 3-1: USB disconnect, device number 56 [ 1285.729902][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.786485][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.835166][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.868476][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.901955][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.941065][T16728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.962556][T16728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.991474][T16728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.019729][T16728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.042487][T16728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.059429][T16897] binder: 16896:16897 ioctl c0306201 0 returned -14 [ 1286.066404][T16728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.089988][T16728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.270613][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.312554][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.361818][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.370215][ T2636] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1286.383946][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.526783][ T2636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.551044][ T2636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.573972][ T2636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.672610][ T2636] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1286.750863][ T2636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.799448][ T2636] usb 5-1: config 0 descriptor?? [ 1287.072664][T10125] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1287.257044][T10125] usb 3-1: config 0 has no interfaces? [ 1287.264338][ T2636] glorious 0003:258A:0036.0024: unknown main item tag 0x0 [ 1287.273995][T10125] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1287.312499][T10125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.348667][ T2636] glorious 0003:258A:0036.0024: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 1287.383045][T10125] usb 3-1: config 0 descriptor?? [ 1287.563234][T10125] usb 5-1: USB disconnect, device number 75 [ 1287.597407][T16911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.630004][T16911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.651033][ T2636] usb 3-1: USB disconnect, device number 57 [ 1287.970592][T16932] netlink: 'syz.1.1781': attribute type 29 has an invalid length. [ 1288.005721][T16932] netlink: 'syz.1.1781': attribute type 29 has an invalid length. [ 1288.529697][T16943] kernel read not supported for file / œ7³ÏüâW)ëÇ-ë (pid: 16943 comm: syz.2.1785) [ 1288.557751][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1288.557771][ T30] audit: type=1800 audit(1727306072.180:364): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1785" name=20019C1437B3CFFCC3A25729EBC72DEB dev="mqueue" ino=138278 res=0 errno=0 [ 1288.587742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.692066][ T2636] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1288.945988][ T2636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.979978][ T2636] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1289.022281][ T2636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.022988][ T30] audit: type=1326 audit(1727306072.640:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16938 comm="syz.1.1782" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 1289.065880][ T2636] usb 5-1: config 0 descriptor?? [ 1289.090238][ T2636] pwc: Askey VC010 type 2 USB webcam detected. [ 1289.142740][ T30] audit: type=1326 audit(1727306072.680:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16938 comm="syz.1.1782" exe="/root/syz-executor" sig=31 arch=40000003 syscall=267 compat=1 ip=0xf73cd579 code=0x0 [ 1289.336724][ T2636] pwc: send_video_command error -71 [ 1289.357898][ T2636] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1289.376538][ T2636] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1289.415384][ T2636] usb 5-1: USB disconnect, device number 76 [ 1289.873306][ T2636] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1290.065030][ T2636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.117963][ T2636] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1290.142634][ T2636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.172278][ T2636] usb 5-1: config 0 descriptor?? [ 1290.219736][ T2636] pwc: Askey VC010 type 2 USB webcam detected. [ 1290.644640][ T2636] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1290.686864][ T2636] pwc: recv_control_msg error -32 req 02 val 2700 [ 1290.746324][ T2636] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1290.792548][ T2636] pwc: recv_control_msg error -32 req 04 val 1000 [ 1290.834842][ T2636] pwc: recv_control_msg error -32 req 04 val 1300 [ 1290.870323][ T2636] pwc: recv_control_msg error -32 req 04 val 1400 [ 1290.904980][ T2636] pwc: recv_control_msg error -32 req 02 val 2000 [ 1290.948256][ T2636] pwc: recv_control_msg error -32 req 02 val 2100 [ 1290.996780][ T2636] pwc: recv_control_msg error -32 req 04 val 1500 [ 1291.022118][ T2636] pwc: recv_control_msg error -32 req 02 val 2500 [ 1291.033770][ T2636] pwc: recv_control_msg error -32 req 02 val 2400 [ 1291.100880][ T2636] pwc: recv_control_msg error -32 req 02 val 2600 [ 1291.119598][ T2636] pwc: recv_control_msg error -32 req 02 val 2900 [ 1291.343109][ T2636] pwc: recv_control_msg error -71 req 04 val 1100 [ 1291.378990][ T2636] pwc: recv_control_msg error -71 req 04 val 1200 [ 1291.414158][ T2636] pwc: Registered as video71. [ 1291.442174][ T2636] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 1291.504685][ T2636] usb 5-1: USB disconnect, device number 77 [ 1292.562253][T16978] No such timeout policy "syz0" [ 1293.385227][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1293.443170][T10125] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1293.627453][T10125] usb 1-1: Using ep0 maxpacket: 32 [ 1293.649952][T10125] usb 1-1: config 0 has an invalid interface number: 206 but max is 1 [ 1293.665006][ T937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1293.669861][T10125] usb 1-1: config 0 has no interface number 1 [ 1293.691415][T10125] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1293.720525][T10125] usb 1-1: config 0 interface 206 has no altsetting 0 [ 1293.721693][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 1293.751375][T10125] usb 1-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 1293.770058][T10125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.791660][T10125] usb 1-1: Product: syz [ 1293.800658][T10125] usb 1-1: Manufacturer: syz [ 1293.805445][T10125] usb 1-1: SerialNumber: syz [ 1293.813889][T10125] usb 1-1: config 0 descriptor?? [ 1293.850894][ T937] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.874727][ T937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.902852][ T937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1293.915104][ T937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.959978][ T937] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1293.969875][ T937] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1293.982521][ T937] usb 3-1: Product: syz [ 1293.986743][ T937] usb 3-1: Manufacturer: syz [ 1294.004580][ T937] cdc_wdm 3-1:1.0: skipping garbage [ 1294.009974][ T937] cdc_wdm 3-1:1.0: skipping garbage [ 1294.037300][ T937] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1294.062498][ T937] cdc_wdm 3-1:1.0: Unknown control protocol [ 1294.286800][ C1] wdm_int_callback: 572 callbacks suppressed [ 1294.286828][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1294.299543][ C1] wdm_int_callback: 572 callbacks suppressed [ 1294.299567][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1294.312132][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1294.318777][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1294.325191][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1294.338541][T10125] usb 3-1: USB disconnect, device number 58 [ 1295.212745][ T5236] Bluetooth: hci5: command tx timeout [ 1295.253411][T17012] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1808'. [ 1295.263530][T17012] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 1296.227247][ T5277] usb 1-1: USB disconnect, device number 75 [ 1296.435360][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 1297.277163][ T9098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.556964][ T9098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.828682][ T9098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.022547][T13358] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1298.048291][ T9098] team0: Port device netdevsim0 removed [ 1298.071694][ T9098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.202791][T13358] usb 5-1: Using ep0 maxpacket: 8 [ 1298.218403][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.237463][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.254067][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.266863][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.275257][T13358] usb 5-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 1298.284854][T13358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.294791][T13358] usb 5-1: Product: syz [ 1298.299073][T13358] usb 5-1: Manufacturer: syz [ 1298.305187][T13358] usb 5-1: SerialNumber: syz [ 1298.312863][T13358] usb 5-1: config 0 descriptor?? [ 1298.326105][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1298.336409][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.347227][T13358] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 1298.437021][T17055] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1298.492844][ T2636] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1298.597009][T17047] fuse: Bad value for 'fd' [ 1298.636233][T17047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.655796][ T2636] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1298.681073][ T2636] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1298.711542][T17047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.719780][ T2636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.750500][ T2636] usb 1-1: Product: syz [ 1298.769833][ T2636] usb 1-1: Manufacturer: syz [ 1298.779114][ T9098] bridge_slave_1: left allmulticast mode [ 1298.797812][ T2636] usb 1-1: SerialNumber: syz [ 1298.812476][ T9098] bridge_slave_1: left promiscuous mode [ 1298.841683][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.869712][T13358] gspca_sn9c20x: Write register 1000 failed -110 [ 1298.884013][T13358] gspca_sn9c20x: Device initialization failed [ 1298.890767][T13358] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 1298.908065][ T9098] bridge_slave_0: left allmulticast mode [ 1298.927047][T17061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.945069][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 1298.955366][ T9098] bridge_slave_0: left promiscuous mode [ 1298.965842][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.069491][T17061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.288707][T17065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.318981][T17065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.444628][ T2636] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1299.477307][T17047] usb 1-1: USB disconnect, device number 76 [ 1299.797656][T17047] usblp0: removed [ 1300.210414][ T9098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.227596][ T9098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.241589][ T9098] bond0 (unregistering): Released all slaves [ 1300.277755][ T5277] usb 5-1: USB disconnect, device number 78 [ 1300.412688][ T5236] Bluetooth: hci0: command tx timeout [ 1300.484758][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.495668][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.089507][ T9098] hsr_slave_0: left promiscuous mode [ 1301.121508][ T9098] hsr_slave_1: left promiscuous mode [ 1301.163275][ T9098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.201814][ T9098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.311020][ T9098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.349650][ T9098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.555724][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 1301.600731][ T9098] veth1_macvtap: left promiscuous mode [ 1301.633096][ T9098] veth0_macvtap: left promiscuous mode [ 1301.639807][ T9098] veth1_vlan: left promiscuous mode [ 1301.697705][ T9098] veth0_vlan: left promiscuous mode [ 1302.492492][ T5236] Bluetooth: hci0: command tx timeout [ 1303.402789][ T5277] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1303.553848][ T9098] team0 (unregistering): Port device team_slave_1 removed [ 1303.581398][ T5277] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1303.618990][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.636522][ T5277] usb 5-1: config 0 descriptor?? [ 1303.659566][ T5277] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 1303.692726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.755725][ T9098] team0 (unregistering): Port device team_slave_0 removed [ 1304.175897][ T5277] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1304.192538][ T5277] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1304.563626][ T5236] Bluetooth: hci0: command tx timeout [ 1305.060989][T17103] vlan2: entered promiscuous mode [ 1305.073176][T17103] dummy0: entered promiscuous mode [ 1305.089142][T17103] vlan2: entered allmulticast mode [ 1305.115342][T17103] dummy0: entered allmulticast mode [ 1305.146515][T17103] dummy0: left allmulticast mode [ 1305.151724][T17103] dummy0: left promiscuous mode [ 1305.217036][T17056] chnl_net:caif_netlink_parms(): no params data found [ 1305.431206][T17111] vlan1: entered promiscuous mode [ 1305.655891][ T30] audit: type=1326 audit(1727306089.260:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1305.680451][T17110] vlan1: left promiscuous mode [ 1305.704081][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.721904][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.758277][T17056] bridge_slave_0: entered allmulticast mode [ 1305.770131][ T30] audit: type=1326 audit(1727306089.260:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1305.796109][T17056] bridge_slave_0: entered promiscuous mode [ 1305.808751][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.828994][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.845330][ T30] audit: type=1326 audit(1727306089.260:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1305.869175][T17056] bridge_slave_1: entered allmulticast mode [ 1305.889001][T17056] bridge_slave_1: entered promiscuous mode [ 1305.914599][ T30] audit: type=1326 audit(1727306089.260:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.018487][ T30] audit: type=1326 audit(1727306089.260:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.083891][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.112797][ T30] audit: type=1326 audit(1727306089.260:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.145243][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.182780][ T30] audit: type=1326 audit(1727306089.260:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.211433][ T30] audit: type=1326 audit(1727306089.260:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.272520][ T30] audit: type=1326 audit(1727306089.260:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.393372][ T30] audit: type=1326 audit(1727306089.260:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17122 comm="syz.0.1835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1306.424183][T17056] team0: Port device team_slave_0 added [ 1306.468955][T17056] team0: Port device team_slave_1 added [ 1306.582304][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.642720][ T5236] Bluetooth: hci0: command tx timeout [ 1306.656722][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.699984][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.741587][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.748812][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.786846][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.977659][T17056] hsr_slave_0: entered promiscuous mode [ 1306.986604][T17056] hsr_slave_1: entered promiscuous mode [ 1307.011367][T17056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1307.018842][T13358] usb 5-1: USB disconnect, device number 79 [ 1307.028226][T17056] Cannot create hsr debugfs directory [ 1307.372965][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1307.543276][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1307.551486][ T9] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 1307.560581][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.581351][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1307.613079][ T9] usb 3-1: config 0 has no interface number 0 [ 1307.636559][ T9] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1307.657963][ T9] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32 [ 1307.678604][ T9] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0xD has invalid maxpacket 1023 [ 1307.719140][ T9] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1307.742651][T13358] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1307.759908][ T9] usb 3-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1307.802646][ T9] usb 3-1: config 0 interface 206 has no altsetting 0 [ 1307.819556][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1307.832581][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.852939][ T9] usb 3-1: Product: syz [ 1307.857138][ T9] usb 3-1: Manufacturer: syz [ 1307.882887][ T9] usb 3-1: SerialNumber: syz [ 1307.893890][T13358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.917987][ T9] usb 3-1: config 0 descriptor?? [ 1307.937092][T13358] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.953444][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1307.978954][T17144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1308.002486][T13358] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1308.032586][T13358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.066299][T13358] usb 5-1: config 0 descriptor?? [ 1308.274594][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.374636][ T9] usb 3-1: USB disconnect, device number 59 [ 1308.560975][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.585918][T17056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1308.626444][T17056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1308.643236][T13358] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1308.696686][T13358] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1308.724405][T17056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1308.766189][T17056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1308.946298][T17056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.005917][T17056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.037472][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.045078][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.247233][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.254557][T13473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.335849][ T9] usb 5-1: USB disconnect, device number 80 [ 1309.474555][T17056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.624984][T17056] veth0_vlan: entered promiscuous mode [ 1309.678429][T17056] veth1_vlan: entered promiscuous mode [ 1309.754657][T17056] veth0_macvtap: entered promiscuous mode [ 1309.786093][T17056] veth1_macvtap: entered promiscuous mode [ 1309.855654][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.869062][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.888164][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.915080][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.942045][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.964990][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.992271][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.033342][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.072488][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.102674][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.131824][T17056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.205029][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.242048][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.274145][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.312734][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.351140][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.385146][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.435299][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.483085][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.502859][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.524447][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.545987][T17056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.575282][T17056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.607208][T17199] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1310.615347][T17199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1310.620115][T17056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.698829][T17199] vhci_hcd vhci_hcd.0: Device attached [ 1310.700613][T17056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.762903][T17056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.828585][T17056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.878763][T17056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.920018][T17200] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 1310.932535][ T2636] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 1310.952559][ T5858] vhci_hcd: stop threads [ 1310.990556][ T5858] vhci_hcd: release socket [ 1311.042813][ T5858] vhci_hcd: disconnect device [ 1311.277209][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.313526][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.539217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.558609][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.996186][T17245] program syz.0.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.097920][T17245] team0: Port device macvlan2 added [ 1314.160792][ T5236] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1314.600059][T17283] vlan2: entered promiscuous mode [ 1314.605498][T17283] team0: entered promiscuous mode [ 1314.663187][T17283] team_slave_0: entered promiscuous mode [ 1314.681900][T17283] team_slave_1: entered promiscuous mode [ 1314.710475][T17283] vlan2: entered allmulticast mode [ 1314.729118][T17283] team0: entered allmulticast mode [ 1314.738421][T17283] team_slave_0: entered allmulticast mode [ 1314.753896][T17283] team_slave_1: entered allmulticast mode [ 1314.786177][T17283] team0: left allmulticast mode [ 1314.791665][T17283] team_slave_0: left allmulticast mode [ 1314.864214][T17283] team_slave_1: left allmulticast mode [ 1314.870192][T17283] team0: left promiscuous mode [ 1314.925037][T17283] team_slave_0: left promiscuous mode [ 1314.930625][T17283] team_slave_1: left promiscuous mode [ 1315.189778][T13473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.437917][T13473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.617063][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.635877][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.650200][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.695135][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.705450][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1315.714433][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1315.780793][T13473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.005395][ T5231] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1316.015739][ T5231] Bluetooth: hci5: Injecting HCI hardware error event [ 1316.031294][ T5231] Bluetooth: hci5: hardware error 0x00 [ 1316.072628][ T2636] vhci_hcd: vhci_device speed not set [ 1316.134326][T13473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.463352][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1316.625881][T13473] team0: left allmulticast mode [ 1316.656274][T13473] team_slave_0: left allmulticast mode [ 1316.666478][T13473] team_slave_1: left allmulticast mode [ 1316.672232][T13473] team0: left promiscuous mode [ 1316.687944][T13473] team_slave_0: left promiscuous mode [ 1316.699635][T13473] team_slave_1: left promiscuous mode [ 1316.729825][T13473] bridge0: port 3(team0) entered disabled state [ 1317.014646][T13473] bridge_slave_1: left allmulticast mode [ 1317.040916][T13473] bridge_slave_1: left promiscuous mode [ 1317.073181][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.133321][T13473] bridge_slave_0: left allmulticast mode [ 1317.139039][T13473] bridge_slave_0: left promiscuous mode [ 1317.192792][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.251013][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.279188][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.289111][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.301030][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.315294][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1317.335724][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1317.434904][ T55] Bluetooth: hci4: Malformed LE Event: 0x1b [ 1317.763985][ T55] Bluetooth: hci1: command tx timeout [ 1318.092805][ T5231] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1318.611284][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.631759][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.684205][T13473] bond0 (unregistering): Released all slaves [ 1319.486066][ T5231] Bluetooth: hci3: command tx timeout [ 1319.684899][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.692525][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.700007][T17302] bridge_slave_0: entered allmulticast mode [ 1319.710500][T17302] bridge_slave_0: entered promiscuous mode [ 1319.723725][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.730970][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.759522][T17302] bridge_slave_1: entered allmulticast mode [ 1319.777935][T17302] bridge_slave_1: entered promiscuous mode [ 1319.842676][ T5231] Bluetooth: hci1: command tx timeout [ 1319.853183][ T6125] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1319.874992][T13473] hsr_slave_0: left promiscuous mode [ 1319.927491][T13473] hsr_slave_1: left promiscuous mode [ 1319.935521][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.953408][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.960973][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.034072][ T6125] usb 2-1: Using ep0 maxpacket: 32 [ 1320.045807][ T6125] usb 2-1: config 140 has too many interfaces: 215, using maximum allowed: 32 [ 1320.072704][T13473] veth1_macvtap: left promiscuous mode [ 1320.078061][ T6125] usb 2-1: config 140 has an invalid descriptor of length 81, skipping remainder of the config [ 1320.091457][T13473] veth0_macvtap: left promiscuous mode [ 1320.112562][T13473] veth1_vlan: left promiscuous mode [ 1320.114788][ T6125] usb 2-1: config 140 has 2 interfaces, different from the descriptor's value: 215 [ 1320.118202][T13473] veth0_vlan: left promiscuous mode [ 1320.152623][ T6125] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.205082][ T6125] usb 2-1: config 140 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.235830][ T6125] usb 2-1: config 140 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1320.269145][ T6125] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1320.292521][ T6125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.300820][ T6125] usb 2-1: Product: syz [ 1320.306096][ T6125] usb 2-1: Manufacturer: syz [ 1320.310915][ T6125] usb 2-1: SerialNumber: syz [ 1320.617951][T13473] pimreg (unregistering): left allmulticast mode [ 1321.529348][ T5231] Bluetooth: hci3: command tx timeout [ 1321.922537][ T5231] Bluetooth: hci1: command tx timeout [ 1322.280152][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1322.464702][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1323.602585][ T5231] Bluetooth: hci3: command tx timeout [ 1324.002688][ T5231] Bluetooth: hci1: command tx timeout [ 1324.766419][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.816287][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.820161][ T6125] cdc_ncm 2-1:140.0: bind() failure [ 1324.868759][ T6125] cdc_ncm 2-1:140.1: CDC Union missing and no IAD found [ 1324.899987][ T6125] cdc_ncm 2-1:140.1: bind() failure [ 1324.936896][ T6125] usb 2-1: USB disconnect, device number 66 [ 1325.170108][T17302] team0: Port device team_slave_0 added [ 1325.198483][T17302] team0: Port device team_slave_1 added [ 1325.338949][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.365206][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.419904][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.439129][T17323] chnl_net:caif_netlink_parms(): no params data found [ 1325.479028][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.519160][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.602659][ T8] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1325.630903][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.682540][ T5231] Bluetooth: hci3: command tx timeout [ 1325.795700][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1325.813322][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1325.831411][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.907720][ T8] usb 5-1: config 0 descriptor?? [ 1325.968207][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 1325.989173][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 1326.257147][ T9] usb 5-1: USB disconnect, device number 81 [ 1326.286311][T17302] hsr_slave_0: entered promiscuous mode [ 1326.300568][T17433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1326.307595][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1326.361622][T17302] hsr_slave_1: entered promiscuous mode [ 1326.377985][T17433] vhci_hcd vhci_hcd.0: Device attached [ 1326.414542][T17302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.427664][T17437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.436928][T17302] Cannot create hsr debugfs directory [ 1326.470900][T17437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.531936][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.553357][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.563288][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.571675][T17323] bridge_slave_0: entered allmulticast mode [ 1326.582716][ T8] vhci_hcd: vhci_device speed not set [ 1326.615108][T17437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.619910][T17323] bridge_slave_0: entered promiscuous mode [ 1326.635014][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.645313][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.655536][T17323] bridge_slave_1: entered allmulticast mode [ 1326.663159][T17323] bridge_slave_1: entered promiscuous mode [ 1326.694055][ T8] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 1326.695496][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.780391][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.790478][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1326.836611][T17433] vhci_hcd vhci_hcd.0: port 0 already used [ 1326.957438][T13473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.089311][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.344718][T13473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.362743][T17434] vhci_hcd: connection reset by peer [ 1327.403791][ T944] vhci_hcd: stop threads [ 1327.409660][ T944] vhci_hcd: release socket [ 1327.422587][ T944] vhci_hcd: disconnect device [ 1327.449040][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.785232][T13473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.822315][T17444] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 1327.830887][T17444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.881798][T17444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.916685][T17444] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1327.972766][T17323] team0: Port device team_slave_0 added [ 1328.004439][ T5278] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1328.054369][T13473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.155018][T17323] team0: Port device team_slave_1 added [ 1328.185550][ T5278] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1328.196721][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.233484][ T5278] usb 2-1: config 0 descriptor?? [ 1328.457814][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.487567][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.560808][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.639622][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.675913][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.683453][T17450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.746878][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.758340][T17450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.042859][ T5278] [drm:udl_init] *ERROR* Selecting channel failed [ 1329.060490][T13473] bridge_slave_1: left allmulticast mode [ 1329.068858][ T5278] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1329.071649][T13473] bridge_slave_1: left promiscuous mode [ 1329.097524][ T5278] [drm] Initialized udl on minor 2 [ 1329.113192][ T5278] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1329.130580][ T5278] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1329.130710][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.155967][ T6125] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1329.181561][ T5278] usb 2-1: USB disconnect, device number 67 [ 1329.187804][T13473] bridge_slave_0: left allmulticast mode [ 1329.203190][ T6125] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1329.213403][T13473] bridge_slave_0: left promiscuous mode [ 1329.228224][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.982716][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1330.165786][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.192576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.212770][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1330.229101][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.259363][ T9] usb 2-1: config 0 descriptor?? [ 1330.735712][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.758723][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.781558][T13473] bond0 (unregistering): Released all slaves [ 1331.007750][T13358] usb 2-1: USB disconnect, device number 68 [ 1331.240311][T17323] hsr_slave_0: entered promiscuous mode [ 1331.300426][T17323] hsr_slave_1: entered promiscuous mode [ 1331.353691][T17323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.361806][T17323] Cannot create hsr debugfs directory [ 1331.852726][ T8] vhci_hcd: vhci_device speed not set [ 1331.956056][T13473] hsr_slave_0: left promiscuous mode [ 1331.977358][T13473] hsr_slave_1: left promiscuous mode [ 1332.033498][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.049186][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.078011][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.098602][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.221583][T13473] veth1_macvtap: left promiscuous mode [ 1332.249306][T13473] veth0_macvtap: left promiscuous mode [ 1332.267694][T13473] veth1_vlan: left promiscuous mode [ 1332.280404][T13473] veth0_vlan: left promiscuous mode [ 1332.432940][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1332.432962][ T30] audit: type=1326 audit(1727306116.050:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1332.562839][ T30] audit: type=1326 audit(1727306116.050:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1332.723083][ T30] audit: type=1326 audit(1727306116.050:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1332.780766][ T30] audit: type=1326 audit(1727306116.050:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1332.805756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.918838][ T30] audit: type=1326 audit(1727306116.050:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.009380][ T30] audit: type=1326 audit(1727306116.090:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.035842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.043534][ T30] audit: type=1326 audit(1727306116.090:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.070625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.101851][ T30] audit: type=1326 audit(1727306116.090:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.128797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.149137][ T30] audit: type=1326 audit(1727306116.100:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.177720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.199117][ T30] audit: type=1326 audit(1727306116.100:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 1333.228191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.325819][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.365802][ T5277] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1333.525023][ T5277] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 1333.533687][ T5277] usb 2-1: config 0 has no interface number 0 [ 1333.540484][ T5277] usb 2-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 1333.592024][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.624732][ T5277] usb 2-1: config 0 descriptor?? [ 1333.653569][ T5277] ftdi_sio 2-1:0.125: FTDI USB Serial Device converter detected [ 1333.688468][ T5277] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 1333.952697][ T5277] usb 2-1: USB disconnect, device number 69 [ 1333.965474][ T5277] ftdi_sio 2-1:0.125: device disconnected [ 1334.483117][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1334.649733][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1335.762847][T17540] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 1336.119511][T17302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1336.192797][T17302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1336.283223][T17302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1336.983588][T17302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.242536][ T8] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1337.420219][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1337.458343][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1337.484091][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.495207][ T8] usb 2-1: Product: syz [ 1337.500184][ T8] usb 2-1: Manufacturer: syz [ 1337.508644][ T8] usb 2-1: SerialNumber: syz [ 1337.546150][ T8] usb 2-1: config 0 descriptor?? [ 1337.575796][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1337.601624][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.714562][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.809443][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.816937][T13473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.868510][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.876627][T13473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.117235][T17323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1338.162189][T17323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1338.189017][ T8] gp8psk: usb in 146 operation failed. [ 1338.199657][T17323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1338.215518][ T8] gp8psk: failed to get FW version [ 1338.235144][ T8] gp8psk: usb in 149 operation failed. [ 1338.245176][ T8] gp8psk: failed to get FPGA version [ 1338.263388][T17302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1338.307917][T17323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1338.439319][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.454058][ T8] gp8psk: usb out operation failed. [ 1338.463021][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1338.506371][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1338.570422][ T8] usb 2-1: media controller created [ 1338.638902][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1338.651955][T17302] veth0_vlan: entered promiscuous mode [ 1338.727401][ T8] gp8psk_fe: Frontend revision 1 attached [ 1338.752286][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1338.765342][T17302] veth1_vlan: entered promiscuous mode [ 1338.800017][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1338.895066][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.916853][T17302] veth0_macvtap: entered promiscuous mode [ 1338.931339][ T8] gp8psk: usb in 138 operation failed. [ 1338.950229][T17302] veth1_macvtap: entered promiscuous mode [ 1338.958654][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1339.004691][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 1339.041177][ T8] usb 2-1: USB disconnect, device number 70 [ 1339.081043][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.109632][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.137013][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.182588][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.213848][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.265509][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.286328][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1339.306637][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1339.365552][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.391845][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.428408][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.500341][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.507515][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.557298][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.596538][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.647480][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.681255][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.730414][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.758964][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.772893][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.787295][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.800441][T17302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1339.817719][T17302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.843299][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.865769][T17302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.882647][T17302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.893883][T17302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.903311][T17302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.945648][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.952939][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.197699][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.365884][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.398413][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.452112][T17323] veth0_vlan: entered promiscuous mode [ 1340.519494][T17323] veth1_vlan: entered promiscuous mode [ 1340.569570][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.588460][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.736507][T17323] veth0_macvtap: entered promiscuous mode [ 1340.795052][T17323] veth1_macvtap: entered promiscuous mode [ 1340.858593][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.892472][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.917218][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.928465][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.938595][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.949126][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.959840][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.972177][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.983183][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.994016][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.005832][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.015997][T17601] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1341.016427][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.037831][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.048133][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.058761][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.069447][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.080553][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.090663][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.101239][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.111137][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.121799][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.131910][T17323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.142911][T17323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.154807][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.279044][T17323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.288426][T17323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.299227][T17323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.311373][T17323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.572802][ T5281] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1341.613126][T13473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.644071][T13473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.795042][ T5281] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.928224][ T5281] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1341.999368][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.021920][ T5281] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1342.069244][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.125410][ T5281] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1342.217399][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.251135][T17607] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1342.543239][T17628] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 1342.758260][ T5281] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1342.768892][ T5281] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input51 [ 1342.901594][ T5281] usb 2-1: USB disconnect, device number 71 [ 1342.907579][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1342.988231][T17639] syzkaller0: entered allmulticast mode [ 1343.531948][T17650] [ 1343.534349][T17650] ===================================================== [ 1343.541387][T17650] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 1343.550795][T17650] 6.11.0-syzkaller-10622-gaa486552a110 #0 Not tainted [ 1343.558027][T17650] ----------------------------------------------------- [ 1343.565667][T17650] syz.2.1932/17650 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 1343.573786][T17650] ffff88802dde4e10 (&ppp->rlock){+...}-{2:2}, at: ppp_disconnect_channel+0x9a/0x2d0 [ 1343.583607][T17650] [ 1343.583607][T17650] and this task is already holding: [ 1343.591713][T17650] ffff88802dde4e50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 1343.602501][T17650] which would create a new lock dependency: [ 1343.608465][T17650] (&ppp->wlock){+...}-{2:2} -> (&ppp->rlock){+...}-{2:2} [ 1343.615661][T17650] [ 1343.615661][T17650] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 1343.626457][T17650] (&pch->upl){++.-}-{2:2} [ 1343.626493][T17650] [ 1343.626493][T17650] ... which became SOFTIRQ-READ-irq-safe at: [ 1343.639296][T17650] lock_acquire+0x1ed/0x550 [ 1343.644219][T17650] _raw_read_lock_bh+0x3d/0x50 [ 1343.649173][T17650] ppp_input_error+0x60/0x1b0 [ 1343.653956][T17650] ppp_async_process+0x6d/0x150 [ 1343.659105][T17650] tasklet_action_common+0x321/0x4d0 [ 1343.665069][T17650] handle_softirqs+0x2c5/0x980 [ 1343.670056][T17650] run_ksoftirqd+0xca/0x130 [ 1343.674686][T17650] smpboot_thread_fn+0x544/0xa30 [ 1343.680016][T17650] kthread+0x2f0/0x390 [ 1343.684219][T17650] ret_from_fork+0x4b/0x80 [ 1343.689277][T17650] ret_from_fork_asm+0x1a/0x30 [ 1343.694338][T17650] [ 1343.694338][T17650] to a SOFTIRQ-READ-irq-unsafe lock: [ 1343.702070][T17650] (&pch->downl){+.+.}-{2:2} [ 1343.702105][T17650] [ 1343.702105][T17650] ... which became SOFTIRQ-READ-irq-unsafe at: [ 1343.715165][T17650] ... [ 1343.715180][T17650] lock_acquire+0x1ed/0x550 [ 1343.722408][T17650] _raw_spin_lock+0x2e/0x40 [ 1343.727118][T17650] ppp_input+0x18b/0xa10 [ 1343.731867][T17650] pppoe_rcv_core+0x117/0x310 [ 1343.736666][T17650] __release_sock+0x243/0x350 [ 1343.741643][T17650] release_sock+0x61/0x1f0 [ 1343.746759][T17650] pppoe_sendmsg+0xd5/0x750 [ 1343.751634][T17650] __sock_sendmsg+0x221/0x270 [ 1343.756596][T17650] ____sys_sendmsg+0x52a/0x7e0 [ 1343.761582][T17650] __sys_sendmmsg+0x4a8/0x730 [ 1343.766908][T17650] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1343.772799][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1343.778134][T17650] do_fast_syscall_32+0x34/0x80 [ 1343.783292][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.790176][T17650] [ 1343.790176][T17650] other info that might help us debug this: [ 1343.790176][T17650] [ 1343.800453][T17650] Chain exists of: [ 1343.800453][T17650] &pch->upl --> &ppp->wlock --> &pch->downl [ 1343.800453][T17650] [ 1343.813103][T17650] Possible interrupt unsafe locking scenario: [ 1343.813103][T17650] [ 1343.822152][T17650] CPU0 CPU1 [ 1343.829860][T17650] ---- ---- [ 1343.835236][T17650] lock(&pch->downl); [ 1343.839857][T17650] local_irq_disable(); [ 1343.846895][T17650] lock(&pch->upl); [ 1343.853340][T17650] lock(&ppp->wlock); [ 1343.859966][T17650] [ 1343.863427][T17650] lock(&pch->upl); [ 1343.867609][T17650] [ 1343.867609][T17650] *** DEADLOCK *** [ 1343.867609][T17650] [ 1343.876294][T17650] 3 locks held by syz.2.1932/17650: [ 1343.881606][T17650] #0: ffff888077f25c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1343.892714][T17650] #1: ffff88807fea6258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppoe_release+0x59/0x820 [ 1343.902781][T17650] #2: ffff88802dde4e50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 1343.913232][T17650] [ 1343.913232][T17650] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 1343.924727][T17650] -> (&pch->upl){++.-}-{2:2} { [ 1343.930317][T17650] HARDIRQ-ON-W at: [ 1343.934588][T17650] lock_acquire+0x1ed/0x550 [ 1343.940956][T17650] _raw_write_lock_bh+0x35/0x50 [ 1343.948277][T17650] ppp_bridge_channels+0x32/0x4c0 [ 1343.955153][T17650] ppp_ioctl+0xe8f/0x1cd0 [ 1343.962501][T17650] ppp_compat_ioctl+0x161/0x770 [ 1343.969237][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1343.976386][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1343.983796][T17650] do_fast_syscall_32+0x34/0x80 [ 1343.991980][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.000625][T17650] HARDIRQ-ON-R at: [ 1344.004712][T17650] lock_acquire+0x1ed/0x550 [ 1344.011877][T17650] _raw_read_lock_bh+0x3d/0x50 [ 1344.018504][T17650] ppp_channel_push+0x2c/0x220 [ 1344.025128][T17650] ppp_write+0x2b0/0x3e0 [ 1344.031318][T17650] vfs_writev+0x5a9/0xba0 [ 1344.037506][T17650] __ia32_compat_sys_pwritev+0x1db/0x2e0 [ 1344.045116][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.052218][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.058921][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.067114][T17650] IN-SOFTIRQ-R at: [ 1344.071211][T17650] lock_acquire+0x1ed/0x550 [ 1344.077582][T17650] _raw_read_lock_bh+0x3d/0x50 [ 1344.085250][T17650] ppp_input_error+0x60/0x1b0 [ 1344.092046][T17650] ppp_async_process+0x6d/0x150 [ 1344.100499][T17650] tasklet_action_common+0x321/0x4d0 [ 1344.108089][T17650] handle_softirqs+0x2c5/0x980 [ 1344.114715][T17650] run_ksoftirqd+0xca/0x130 [ 1344.121247][T17650] smpboot_thread_fn+0x544/0xa30 [ 1344.128385][T17650] kthread+0x2f0/0x390 [ 1344.134935][T17650] ret_from_fork+0x4b/0x80 [ 1344.141234][T17650] ret_from_fork_asm+0x1a/0x30 [ 1344.148075][T17650] INITIAL USE at: [ 1344.152085][T17650] lock_acquire+0x1ed/0x550 [ 1344.158405][T17650] _raw_write_lock_bh+0x35/0x50 [ 1344.165229][T17650] ppp_bridge_channels+0x32/0x4c0 [ 1344.172120][T17650] ppp_ioctl+0xe8f/0x1cd0 [ 1344.178222][T17650] ppp_compat_ioctl+0x161/0x770 [ 1344.184936][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1344.192914][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.199890][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.206606][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.214727][T17650] INITIAL READ USE at: [ 1344.219157][T17650] lock_acquire+0x1ed/0x550 [ 1344.226296][T17650] _raw_read_lock_bh+0x3d/0x50 [ 1344.233553][T17650] ppp_channel_push+0x2c/0x220 [ 1344.240903][T17650] ppp_write+0x2b0/0x3e0 [ 1344.247358][T17650] vfs_writev+0x5a9/0xba0 [ 1344.253895][T17650] __ia32_compat_sys_pwritev+0x1db/0x2e0 [ 1344.261735][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.269965][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.278637][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.287267][T17650] } [ 1344.289880][T17650] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 1344.299692][T17650] -> (&ppp->wlock){+...}-{2:2} { [ 1344.304685][T17650] HARDIRQ-ON-W at: [ 1344.308709][T17650] lock_acquire+0x1ed/0x550 [ 1344.315517][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.321965][T17650] ppp_get_stats64+0xc3/0x290 [ 1344.328411][T17650] dev_get_stats+0xad/0xa00 [ 1344.334684][T17650] rtnl_fill_stats+0x47/0x880 [ 1344.341056][T17650] rtnl_fill_ifinfo+0x18da/0x2270 [ 1344.348661][T17650] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1344.356032][T17650] rtmsg_ifinfo+0x91/0x1b0 [ 1344.362753][T17650] register_netdevice+0x1774/0x1b00 [ 1344.369732][T17650] ppp_dev_configure+0x883/0xb10 [ 1344.376601][T17650] ppp_ioctl+0x797/0x1cd0 [ 1344.382731][T17650] ppp_compat_ioctl+0x161/0x770 [ 1344.389638][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1344.396786][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.403754][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.410846][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.418866][T17650] INITIAL USE at: [ 1344.422792][T17650] lock_acquire+0x1ed/0x550 [ 1344.428899][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.435247][T17650] ppp_get_stats64+0xc3/0x290 [ 1344.441530][T17650] dev_get_stats+0xad/0xa00 [ 1344.447800][T17650] rtnl_fill_stats+0x47/0x880 [ 1344.454220][T17650] rtnl_fill_ifinfo+0x18da/0x2270 [ 1344.460847][T17650] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1344.467982][T17650] rtmsg_ifinfo+0x91/0x1b0 [ 1344.473984][T17650] register_netdevice+0x1774/0x1b00 [ 1344.480776][T17650] ppp_dev_configure+0x883/0xb10 [ 1344.487394][T17650] ppp_ioctl+0x797/0x1cd0 [ 1344.493304][T17650] ppp_compat_ioctl+0x161/0x770 [ 1344.499737][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1344.506719][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.513516][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.519965][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.527884][T17650] } [ 1344.530475][T17650] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 1344.539901][T17650] ... acquired at: [ 1344.543837][T17650] lock_acquire+0x1ed/0x550 [ 1344.548533][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.553489][T17650] ppp_connect_channel+0x174/0x650 [ 1344.558798][T17650] ppp_ioctl+0xdd4/0x1cd0 [ 1344.563521][T17650] ppp_compat_ioctl+0x161/0x770 [ 1344.568614][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1344.574131][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.579450][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.584487][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.591023][T17650] [ 1344.593565][T17650] [ 1344.593565][T17650] the dependencies between the lock to be acquired [ 1344.593579][T17650] and SOFTIRQ-READ-irq-unsafe lock: [ 1344.607582][T17650] -> (&pch->downl){+.+.}-{2:2} { [ 1344.612697][T17650] HARDIRQ-ON-W at: [ 1344.616819][T17650] lock_acquire+0x1ed/0x550 [ 1344.623274][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.629985][T17650] ppp_unregister_channel+0x7c/0x300 [ 1344.637477][T17650] ppp_asynctty_close+0xf8/0x190 [ 1344.644533][T17650] tty_ldisc_kill+0xa3/0x1a0 [ 1344.651070][T17650] tty_ldisc_release+0x1a1/0x200 [ 1344.657862][T17650] tty_release_struct+0x2b/0xe0 [ 1344.664728][T17650] tty_release+0xd06/0x12c0 [ 1344.671188][T17650] __fput+0x23f/0x880 [ 1344.677016][T17650] task_work_run+0x24f/0x310 [ 1344.684152][T17650] syscall_exit_to_user_mode+0x168/0x370 [ 1344.691736][T17650] __do_fast_syscall_32+0xc4/0x110 [ 1344.698906][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.705778][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.713944][T17650] SOFTIRQ-ON-W at: [ 1344.718980][T17650] lock_acquire+0x1ed/0x550 [ 1344.725334][T17650] _raw_spin_lock+0x2e/0x40 [ 1344.731690][T17650] ppp_input+0x18b/0xa10 [ 1344.738158][T17650] pppoe_rcv_core+0x117/0x310 [ 1344.744687][T17650] __release_sock+0x243/0x350 [ 1344.751924][T17650] release_sock+0x61/0x1f0 [ 1344.758313][T17650] pppoe_sendmsg+0xd5/0x750 [ 1344.764691][T17650] __sock_sendmsg+0x221/0x270 [ 1344.771225][T17650] ____sys_sendmsg+0x52a/0x7e0 [ 1344.777939][T17650] __sys_sendmmsg+0x4a8/0x730 [ 1344.784751][T17650] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1344.792162][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.799336][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.806051][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.814671][T17650] INITIAL USE at: [ 1344.819098][T17650] lock_acquire+0x1ed/0x550 [ 1344.825908][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.832528][T17650] ppp_unregister_channel+0x7c/0x300 [ 1344.839908][T17650] ppp_asynctty_close+0xf8/0x190 [ 1344.846708][T17650] tty_ldisc_kill+0xa3/0x1a0 [ 1344.853052][T17650] tty_ldisc_release+0x1a1/0x200 [ 1344.859882][T17650] tty_release_struct+0x2b/0xe0 [ 1344.866624][T17650] tty_release+0xd06/0x12c0 [ 1344.872983][T17650] __fput+0x23f/0x880 [ 1344.878725][T17650] task_work_run+0x24f/0x310 [ 1344.886266][T17650] syscall_exit_to_user_mode+0x168/0x370 [ 1344.893759][T17650] __do_fast_syscall_32+0xc4/0x110 [ 1344.901143][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.908720][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.917264][T17650] } [ 1344.919871][T17650] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 1344.930753][T17650] ... acquired at: [ 1344.934760][T17650] lock_acquire+0x1ed/0x550 [ 1344.939649][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1344.944877][T17650] ppp_connect_channel+0x194/0x650 [ 1344.950631][T17650] ppp_ioctl+0xdd4/0x1cd0 [ 1344.955168][T17650] ppp_compat_ioctl+0x161/0x770 [ 1344.960315][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1344.965927][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1344.971380][T17650] do_fast_syscall_32+0x34/0x80 [ 1344.976624][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.983242][T17650] [ 1344.985576][T17650] -> (&ppp->rlock){+...}-{2:2} { [ 1344.990586][T17650] HARDIRQ-ON-W at: [ 1344.994582][T17650] lock_acquire+0x1ed/0x550 [ 1345.000793][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1345.007775][T17650] ppp_get_stats64+0x33/0x290 [ 1345.014159][T17650] dev_get_stats+0xad/0xa00 [ 1345.020372][T17650] rtnl_fill_stats+0x47/0x880 [ 1345.026731][T17650] rtnl_fill_ifinfo+0x18da/0x2270 [ 1345.033719][T17650] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1345.040863][T17650] rtmsg_ifinfo+0x91/0x1b0 [ 1345.046959][T17650] register_netdevice+0x1774/0x1b00 [ 1345.053830][T17650] ppp_dev_configure+0x883/0xb10 [ 1345.060453][T17650] ppp_ioctl+0x797/0x1cd0 [ 1345.066459][T17650] ppp_compat_ioctl+0x161/0x770 [ 1345.073007][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1345.080063][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1345.086874][T17650] do_fast_syscall_32+0x34/0x80 [ 1345.093487][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.101518][T17650] INITIAL USE at: [ 1345.105428][T17650] lock_acquire+0x1ed/0x550 [ 1345.111527][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1345.117972][T17650] ppp_get_stats64+0x33/0x290 [ 1345.124333][T17650] dev_get_stats+0xad/0xa00 [ 1345.130420][T17650] rtnl_fill_stats+0x47/0x880 [ 1345.136684][T17650] rtnl_fill_ifinfo+0x18da/0x2270 [ 1345.143289][T17650] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 1345.150631][T17650] rtmsg_ifinfo+0x91/0x1b0 [ 1345.156646][T17650] register_netdevice+0x1774/0x1b00 [ 1345.163431][T17650] ppp_dev_configure+0x883/0xb10 [ 1345.169973][T17650] ppp_ioctl+0x797/0x1cd0 [ 1345.175895][T17650] ppp_compat_ioctl+0x161/0x770 [ 1345.182326][T17650] __se_compat_sys_ioctl+0x510/0xc90 [ 1345.189210][T17650] __do_fast_syscall_32+0xb4/0x110 [ 1345.195913][T17650] do_fast_syscall_32+0x34/0x80 [ 1345.202351][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.210287][T17650] } [ 1345.212814][T17650] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 1345.221515][T17650] ... acquired at: [ 1345.225424][T17650] lock_acquire+0x1ed/0x550 [ 1345.230137][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1345.235351][T17650] ppp_disconnect_channel+0x9a/0x2d0 [ 1345.241088][T17650] ppp_unregister_channel+0xb9/0x300 [ 1345.246566][T17650] pppox_unbind_sock+0x5c/0xb0 [ 1345.251606][T17650] pppoe_release+0x16e/0x820 [ 1345.256396][T17650] sock_close+0xbc/0x240 [ 1345.260926][T17650] __fput+0x23f/0x880 [ 1345.265105][T17650] task_work_run+0x24f/0x310 [ 1345.269886][T17650] syscall_exit_to_user_mode+0x168/0x370 [ 1345.275713][T17650] __do_fast_syscall_32+0xc4/0x110 [ 1345.281017][T17650] do_fast_syscall_32+0x34/0x80 [ 1345.286069][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.292596][T17650] [ 1345.294933][T17650] [ 1345.294933][T17650] stack backtrace: [ 1345.300863][T17650] CPU: 0 UID: 0 PID: 17650 Comm: syz.2.1932 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 1345.311309][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1345.321602][T17650] Call Trace: [ 1345.324914][T17650] [ 1345.327866][T17650] dump_stack_lvl+0x241/0x360 [ 1345.332665][T17650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1345.337884][T17650] ? __pfx__printk+0x10/0x10 [ 1345.342490][T17650] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1345.348850][T17650] validate_chain+0x4ebd/0x5920 [ 1345.353759][T17650] ? __pfx_validate_chain+0x10/0x10 [ 1345.358980][T17650] ? __pfx_validate_chain+0x10/0x10 [ 1345.365251][T17650] ? __pfx_validate_chain+0x10/0x10 [ 1345.370748][T17650] ? look_up_lock_class+0x77/0x170 [ 1345.375899][T17650] ? unwind_get_return_address+0x4d/0x90 [ 1345.381567][T17650] ? mark_lock+0x9a/0x360 [ 1345.385912][T17650] __lock_acquire+0x1384/0x2050 [ 1345.390806][T17650] lock_acquire+0x1ed/0x550 [ 1345.395360][T17650] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1345.400839][T17650] ? __pfx_lock_acquire+0x10/0x10 [ 1345.405920][T17650] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1345.411536][T17650] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1345.417373][T17650] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1345.422768][T17650] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1345.428252][T17650] _raw_spin_lock_bh+0x35/0x50 [ 1345.433031][T17650] ? ppp_disconnect_channel+0x9a/0x2d0 [ 1345.438516][T17650] ppp_disconnect_channel+0x9a/0x2d0 [ 1345.443924][T17650] ppp_unregister_channel+0xb9/0x300 [ 1345.449429][T17650] pppox_unbind_sock+0x5c/0xb0 [ 1345.454244][T17650] pppoe_release+0x16e/0x820 [ 1345.458854][T17650] ? __pfx_down_write+0x10/0x10 [ 1345.463743][T17650] sock_close+0xbc/0x240 [ 1345.468026][T17650] ? __pfx_sock_close+0x10/0x10 [ 1345.472991][T17650] __fput+0x23f/0x880 [ 1345.477002][T17650] task_work_run+0x24f/0x310 [ 1345.481635][T17650] ? __pfx_task_work_run+0x10/0x10 [ 1345.486763][T17650] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1345.492605][T17650] syscall_exit_to_user_mode+0x168/0x370 [ 1345.498305][T17650] __do_fast_syscall_32+0xc4/0x110 [ 1345.503715][T17650] ? exc_page_fault+0x590/0x8c0 [ 1345.508853][T17650] do_fast_syscall_32+0x34/0x80 [ 1345.513733][T17650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1345.520093][T17650] RIP: 0023:0xf7ff2579 [ 1345.524291][T17650] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1345.544036][T17650] RSP: 002b:00000000f75dfb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1345.552483][T17650] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1345.560510][T17650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1345.568507][T17650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.576537][T17650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1345.584678][T17650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.592670][T17650] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1347.188782][T13473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.288382][T13473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.340450][T13473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.459902][T13473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.572186][T13473] bridge_slave_1: left allmulticast mode [ 1347.578016][T13473] bridge_slave_1: left promiscuous mode [ 1347.593667][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.613595][T13473] bridge_slave_0: left allmulticast mode [ 1347.619287][T13473] bridge_slave_0: left promiscuous mode [ 1347.642652][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.946752][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.959132][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.984619][T13473] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1347.996943][T13473] bond0 (unregistering): Released all slaves [ 1348.379241][T13473] hsr_slave_0: left promiscuous mode [ 1348.394038][T13473] hsr_slave_1: left promiscuous mode [ 1348.413121][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.420705][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.468022][T13473] veth1_macvtap: left promiscuous mode [ 1348.482492][T13473] veth0_macvtap: left promiscuous mode [ 1348.488804][T13473] veth1_vlan: left promiscuous mode [ 1348.502744][T13473] veth0_vlan: left promiscuous mode [ 1348.764891][T13473] team0 (unregistering): Port device macvlan2 removed [ 1349.325660][T13473] team0 (unregistering): Port device team_slave_1 removed [ 1349.383440][T13473] team0 (unregistering): Port device team_slave_0 removed [ 1350.142175][T13473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.235527][T13473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.290228][T13473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.443460][T13473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.826528][T13473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.966036][T13473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.045454][T13473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.096307][T13473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.246059][T13473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.358240][T13473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.485924][T13473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.598443][T13473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.876932][T13473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.004501][T13473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.048005][T13473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.165844][T13473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.276933][T13473] bridge_slave_1: left allmulticast mode [ 1352.292720][T13473] bridge_slave_1: left promiscuous mode [ 1352.300697][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.334563][T13473] bridge_slave_0: left allmulticast mode [ 1352.340506][T13473] bridge_slave_0: left promiscuous mode [ 1352.350387][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.418054][T13473] bridge_slave_1: left allmulticast mode [ 1352.432604][T13473] bridge_slave_1: left promiscuous mode [ 1352.464961][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.494165][T13473] bridge_slave_0: left allmulticast mode [ 1352.500481][T13473] bridge_slave_0: left promiscuous mode [ 1352.508015][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.543622][T13473] bridge_slave_1: left allmulticast mode [ 1352.553565][T13473] bridge_slave_1: left promiscuous mode [ 1352.559742][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.685634][T13473] bridge_slave_0: left allmulticast mode [ 1352.691341][T13473] bridge_slave_0: left promiscuous mode [ 1352.697419][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.745994][T13473] bridge_slave_1: left allmulticast mode [ 1352.752459][T13473] bridge_slave_1: left promiscuous mode [ 1352.758317][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.774946][T13473] bridge_slave_0: left allmulticast mode [ 1352.780970][T13473] bridge_slave_0: left promiscuous mode [ 1352.792757][T13473] bridge0: port 1(bridge_slave_0) entered disabled state