last executing test programs: 5.734631815s ago: executing program 0 (id=2575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000003480)={0xffffffff, 0x0, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffe, 0x0, 0xd}, 'syz1\x00', 0x2c}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(0x0, 0x1, 0x101100) socket(0x2, 0x805, 0x0) read(r4, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) fstat(0xffffffffffffffff, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5000000008021100000008020000900000"], 0x42) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x1c) 5.726000219s ago: executing program 3 (id=2576): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "b718073c8f78"}]}}}]}, 0x6c}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 4.520424399s ago: executing program 1 (id=2582): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2400c0a2) close(0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa11080045000038000000000001907864010102ac1414aa03009078030000004500000000000000000100009daa0000ac1414bb0000000000002000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc0100000000000000000000000000130700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.520166933s ago: executing program 3 (id=2583): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) 4.3458567s ago: executing program 1 (id=2584): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.306907616s ago: executing program 2 (id=2585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf252500000008000200df17edea4fc06c94ecacee34251112c29219bea9b6ba614c6c0d32f2f1fb49e862759858300db60592fbe6f90c7d1971d13b5e0452ca2ca50c106855005f708c9ab982f8a039448258f93a5cf53ba0b60bb28183b1efc6ba48fa9e33f9c7623d3c3b0b1a7179", @ANYRES32=0x0, @ANYBLOB="05002a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) 3.72939597s ago: executing program 0 (id=2586): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)="2407f5b7c765e717b0f98983de453ed4d240a3a886", 0x3}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x9, 0x8002) r5 = socket$inet(0x2, 0x1, 0x100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x6, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x7, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0xfff, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x800024, 0x8006, 0x1, 0x5, 0x2, 0x5, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x9, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xe1, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0x8, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x10007, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x800, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xffff, 0x4e7, 0x5, 0x0, 0x2008007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0x1, 0x80, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.491914532s ago: executing program 3 (id=2587): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x100, 0x10, 0x2, 0x10, 0x8000001, 0x5, 0x0, 0xfffffbf8, 0x80008, 0x1ffffff, 0x8, 0x1, 0x0, 0x20003, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x81, 0xf39e, 0x3, 0x8, 0x2006, 0x4, 0xfffffff8]}) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket$key(0xf, 0x3, 0x2) connect$inet6(r2, 0x0, 0x0) 3.322704324s ago: executing program 1 (id=2588): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.033367907s ago: executing program 2 (id=2589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) 2.16801024s ago: executing program 1 (id=2590): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendfile(r1, r1, 0x0, 0x23) 2.100832222s ago: executing program 3 (id=2591): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r2, r2, 0x0, 0x23) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) 2.099386725s ago: executing program 1 (id=2592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 2.099257695s ago: executing program 2 (id=2593): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2400c0a2) close(0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa11080045000038000000000001907864010102ac1414aa03009078030000004500000000000000000100009daa0000ac1414bb0000000000002000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc0100000000000000000000000000130700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.056131459s ago: executing program 1 (id=2594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000003480)={0xffffffff, 0x0, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffe, 0x0, 0xd}, 'syz1\x00', 0x2c}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(0x0, 0x1, 0x101100) socket(0x2, 0x805, 0x0) read(r4, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) fstat(0xffffffffffffffff, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5000000008021100000008020000900000"], 0x42) r5 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x1c) 2.034633174s ago: executing program 3 (id=2595): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) 1.989158714s ago: executing program 2 (id=2596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x500}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@initdev, @in=@local}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000008c0)=0xe4) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.099471135s ago: executing program 0 (id=2597): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write(r0, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa329", 0x16) 1.098195866s ago: executing program 0 (id=2598): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 952.70561ms ago: executing program 2 (id=2599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) 950.144745ms ago: executing program 3 (id=2607): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './trace\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2d, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 182.040113ms ago: executing program 0 (id=2600): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "b718073c8f78"}]}}}]}, 0x6c}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 157.93µs ago: executing program 0 (id=2601): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="d9b604") 0s ago: executing program 2 (id=2602): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) setreuid(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendfile(r1, r1, 0x0, 0x23) kernel console output (not intermixed with test programs): [ 331.385144][T12860] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.385176][T12860] __do_fast_syscall_32+0x13a/0x8b0 [ 331.385225][T12860] ? lockdep_hardirqs_on+0x7d/0x110 [ 331.385253][T12860] do_fast_syscall_32+0x32/0x70 [ 331.385282][T12860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.385305][T12860] RIP: 0023:0xf739efec [ 331.385324][T12860] Code: Unable to access opcode bytes at 0xf739efc2. [ 331.385332][T12860] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 331.385350][T12860] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 331.385364][T12860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.385376][T12860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.385390][T12860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 331.385402][T12860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.385426][T12860] [ 331.405259][ T3268] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 331.441609][T12863] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2220'. [ 331.483259][T12865] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 331.483279][T12865] netlink: 'syz.0.2221': attribute type 268 has an invalid length. [ 331.566132][ T3268] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 331.567232][ T3268] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.567268][ T3268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.574614][ T3268] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 331.574809][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 331.574912][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 331.578753][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 331.578820][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 331.582599][ T3268] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 331.584791][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 331.584864][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 331.593698][ T3268] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 332.241161][ T3268] usb 7-1: USB disconnect, device number 38 [ 332.293732][ T3268] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 332.299528][ T3268] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 332.300009][ T3268] keyspan 7-1:1.0: device disconnected [ 332.396099][T12874] syzkaller0: entered promiscuous mode [ 332.396116][T12874] syzkaller0: entered allmulticast mode [ 333.417227][T12884] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 333.438251][T12884] __nla_validate_parse: 3 callbacks suppressed [ 333.438264][T12884] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2227'. [ 333.472501][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2228'. [ 333.523871][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 333.728144][T12894] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2231'. [ 333.728169][T12894] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2231'. [ 333.728183][T12894] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2231'. [ 333.738112][T12898] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 333.738124][T12898] netlink: 'syz.0.2230': attribute type 268 has an invalid length. [ 333.738132][T12898] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2230'. [ 333.853270][T12905] Cache volume key already in use (9p,syz,) [ 334.153117][T12914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 334.161606][T12914] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2236'. [ 334.211355][T12917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2237'. [ 334.212106][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 334.346270][T12925] netlink: Invalid conntrack helper [ 334.346286][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.452403][T12927] syzkaller0: entered promiscuous mode [ 334.452420][T12927] syzkaller0: entered allmulticast mode [ 334.715182][T12929] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 334.715202][T12929] netlink: 'syz.0.2242': attribute type 268 has an invalid length. [ 335.159874][T12936] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 336.029309][T12960] netlink: Invalid conntrack helper [ 336.029333][T12960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.908589][T12968] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 336.933984][T12970] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 336.933997][T12970] netlink: 'syz.3.2255': attribute type 268 has an invalid length. [ 336.971812][T12973] input: syz1 as /devices/virtual/input/input53 [ 336.972233][T12966] FAULT_INJECTION: forcing a failure. [ 336.972233][T12966] name failslab, interval 1, probability 0, space 0, times 0 [ 336.972251][T12966] CPU: 0 UID: 0 PID: 12966 Comm: syz.1.2253 Not tainted syzkaller #0 PREEMPT(full) [ 336.972279][T12966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 336.972285][T12966] Call Trace: [ 336.972290][T12966] [ 336.972295][T12966] dump_stack_lvl+0x100/0x190 [ 336.972315][T12966] should_fail_ex.cold+0x5/0xa [ 336.972331][T12966] should_failslab+0xc2/0x120 [ 336.972351][T12966] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 336.972368][T12966] ? find_held_lock+0x2b/0x80 [ 336.972384][T12966] ? sock_alloc_inode+0x26/0x2c0 [ 336.972400][T12966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 336.972414][T12966] sock_alloc_inode+0x26/0x2c0 [ 336.972427][T12966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 336.972440][T12966] alloc_inode+0x68/0x250 [ 336.972452][T12966] sock_alloc+0x44/0x280 [ 336.972464][T12966] ? security_socket_create+0x7f/0x250 [ 336.972483][T12966] __sock_create+0xc2/0x860 [ 336.972500][T12966] __sys_socket+0x14d/0x260 [ 336.972515][T12966] ? xfd_validate_state+0x129/0x190 [ 336.972533][T12966] ? __pfx___sys_socket+0x10/0x10 [ 336.972568][T12966] __ia32_sys_socket+0x72/0xb0 [ 336.972583][T12966] ? lockdep_hardirqs_on+0x7d/0x110 [ 336.972598][T12966] __do_fast_syscall_32+0x13a/0x8b0 [ 336.972613][T12966] ? lockdep_hardirqs_on+0x7d/0x110 [ 336.972629][T12966] do_fast_syscall_32+0x32/0x70 [ 336.972645][T12966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.972661][T12966] RIP: 0023:0xf746efec [ 336.972675][T12966] Code: Unable to access opcode bytes at 0xf746efc2. [ 336.972680][T12966] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 336.972692][T12966] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 336.972700][T12966] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.972707][T12966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.972713][T12966] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 336.972720][T12966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.972734][T12966] [ 336.972784][T12966] socket: no more sockets [ 337.255224][ T5887] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 337.405142][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 337.405869][ T5887] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 337.408846][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.408962][ T5887] usb 7-1: Product: syz [ 337.408977][ T5887] usb 7-1: Manufacturer: syz [ 337.408990][ T5887] usb 7-1: SerialNumber: syz [ 337.410975][ T5887] usb 7-1: config 0 descriptor?? [ 337.822360][ T5887] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 337.823991][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.824386][ T5887] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 337.824410][ T5887] usb 7-1: media controller created [ 337.829192][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.928704][T12989] netlink: Invalid conntrack helper [ 337.928720][T12989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.033070][T12972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.033631][ T5887] zl10353_read_register: readreg error (reg=127, ret==0) [ 338.033657][ T5887] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 338.033664][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 338.036634][ T5887] usb 7-1: USB disconnect, device number 39 [ 338.052049][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 338.599700][T12995] __nla_validate_parse: 9 callbacks suppressed [ 338.599719][T12995] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2264'. [ 338.599737][T12995] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2264'. [ 338.599751][T12995] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2264'. [ 338.812139][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 338.812151][ T43] audit: type=1326 audit(1791381670.352:18909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.812293][ T43] audit: type=1326 audit(1791381670.352:18910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.814611][ T43] audit: type=1326 audit(1791381670.352:18911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.814636][ T43] audit: type=1326 audit(1791381670.352:18912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.814656][ T43] audit: type=1326 audit(1791381670.352:18913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.814902][ T43] audit: type=1326 audit(1791381670.352:18914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.814997][ T43] audit: type=1326 audit(1791381670.352:18915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.815650][ T43] audit: type=1326 audit(1791381670.362:18916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.816239][ T43] audit: type=1326 audit(1791381670.362:18917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.0.2266" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf739efec code=0x7ffc0000 [ 338.905228][ T5845] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 339.056076][ T5845] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 339.057238][ T5845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.057277][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.068506][ T5845] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 339.068700][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 339.068753][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 339.069899][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 339.069962][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 339.075268][ T5845] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 339.077540][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 339.077604][ T5845] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 339.083017][ T5845] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 339.667413][ T5845] usb 7-1: USB disconnect, device number 40 [ 339.675250][ T5845] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 339.681547][ T5845] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 339.682056][ T5845] keyspan 7-1:1.0: device disconnected [ 339.813156][T13009] FAULT_INJECTION: forcing a failure. [ 339.813156][T13009] name failslab, interval 1, probability 0, space 0, times 0 [ 339.813202][T13009] CPU: 0 UID: 0 PID: 13009 Comm: syz.2.2267 Not tainted syzkaller #0 PREEMPT(full) [ 339.813216][T13009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.813224][T13009] Call Trace: [ 339.813228][T13009] [ 339.813233][T13009] dump_stack_lvl+0x100/0x190 [ 339.813257][T13009] should_fail_ex.cold+0x5/0xa [ 339.813274][T13009] should_failslab+0xc2/0x120 [ 339.813293][T13009] kmem_cache_alloc_noprof+0x92/0x6a0 [ 339.813309][T13009] ? __pfx_map_id_range_down+0x10/0x10 [ 339.813326][T13009] ? rcu_is_watching+0x13/0xc0 [ 339.813340][T13009] ? security_inode_alloc+0x3b/0x2c0 [ 339.813354][T13009] security_inode_alloc+0x3b/0x2c0 [ 339.813365][T13009] inode_init_always_gfp+0xc6f/0xfb0 [ 339.813384][T13009] alloc_inode+0x8e/0x250 [ 339.813396][T13009] sock_alloc+0x44/0x280 [ 339.813410][T13009] ? security_socket_create+0x7f/0x250 [ 339.813429][T13009] __sock_create+0xc2/0x860 [ 339.813446][T13009] __sys_socket+0x14d/0x260 [ 339.813462][T13009] ? xfd_validate_state+0x129/0x190 [ 339.813480][T13009] ? __pfx___sys_socket+0x10/0x10 [ 339.813500][T13009] __ia32_sys_socket+0x72/0xb0 [ 339.813515][T13009] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.813530][T13009] __do_fast_syscall_32+0x13a/0x8b0 [ 339.813545][T13009] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.813561][T13009] do_fast_syscall_32+0x32/0x70 [ 339.813576][T13009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.813591][T13009] RIP: 0023:0xf73fefec [ 339.813604][T13009] Code: Unable to access opcode bytes at 0xf73fefc2. [ 339.813610][T13009] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 339.813623][T13009] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 339.813631][T13009] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.813638][T13009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.813645][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.813651][T13009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.813666][T13009] [ 339.813678][T13009] socket: no more sockets [ 340.072130][T13023] input: syz1 as /devices/virtual/input/input54 [ 340.129877][T13027] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2273'. [ 340.129893][T13027] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2273'. [ 340.129902][T13027] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2273'. [ 340.182427][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'. [ 340.365988][ T43] audit: type=1326 audit(1791381671.892:18918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.1.2277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 340.545147][ T3268] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 340.669669][T13040] FAULT_INJECTION: forcing a failure. [ 340.669669][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 340.669689][T13040] CPU: 2 UID: 0 PID: 13040 Comm: syz.2.2278 Not tainted syzkaller #0 PREEMPT(full) [ 340.669704][T13040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.669711][T13040] Call Trace: [ 340.669715][T13040] [ 340.669720][T13040] dump_stack_lvl+0x100/0x190 [ 340.669740][T13040] should_fail_ex.cold+0x5/0xa [ 340.669755][T13040] should_failslab+0xc2/0x120 [ 340.669775][T13040] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 340.669791][T13040] ? find_held_lock+0x2b/0x80 [ 340.669805][T13040] ? sock_alloc_inode+0x26/0x2c0 [ 340.669822][T13040] ? __pfx_sock_alloc_inode+0x10/0x10 [ 340.669837][T13040] sock_alloc_inode+0x26/0x2c0 [ 340.669850][T13040] ? __pfx_sock_alloc_inode+0x10/0x10 [ 340.669866][T13040] alloc_inode+0x68/0x250 [ 340.669878][T13040] sock_alloc+0x44/0x280 [ 340.669890][T13040] ? security_socket_create+0x7f/0x250 [ 340.669909][T13040] __sock_create+0xc2/0x860 [ 340.669931][T13040] __sys_socket+0x14d/0x260 [ 340.669946][T13040] ? fput+0x7c/0x100 [ 340.669964][T13040] ? __pfx___sys_socket+0x10/0x10 [ 340.669980][T13040] ? ksys_write+0x1ac/0x250 [ 340.669995][T13040] ? __pfx_ksys_write+0x10/0x10 [ 340.670013][T13040] __ia32_sys_socket+0x72/0xb0 [ 340.670030][T13040] ? lockdep_hardirqs_on+0x7d/0x110 [ 340.670045][T13040] __do_fast_syscall_32+0x13a/0x8b0 [ 340.670060][T13040] ? lockdep_hardirqs_on+0x7d/0x110 [ 340.670076][T13040] do_fast_syscall_32+0x32/0x70 [ 340.670091][T13040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.670106][T13040] RIP: 0023:0xf73fefec [ 340.670120][T13040] Code: Unable to access opcode bytes at 0xf73fefc2. [ 340.670126][T13040] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 340.670139][T13040] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 340.670147][T13040] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.670154][T13040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.670161][T13040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.670168][T13040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.670182][T13040] [ 340.670188][T13040] socket: no more sockets [ 340.886346][ T3268] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 340.888481][ T3268] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.888706][ T3268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.913590][ T3268] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 340.914384][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 340.914552][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 340.921208][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 340.921396][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 340.928604][ T3268] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 340.942618][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 340.942891][ T3268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 340.952346][ T3268] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 341.480914][ T5845] usb 5-1: USB disconnect, device number 35 [ 341.492661][ T5845] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 341.495543][ T5845] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 341.495812][ T5845] keyspan 5-1:1.0: device disconnected [ 341.925171][ T5845] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 342.075670][ T5845] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 342.076664][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.076697][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.081765][ T5845] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 342.081854][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 342.081881][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 342.082402][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 342.082435][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 342.084842][ T5845] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 342.086192][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 342.086226][ T5845] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 342.089236][ T5845] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 344.871400][ T5845] usb 5-1: USB disconnect, device number 36 [ 344.876296][ T5845] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 344.877533][ T5845] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 344.877817][ T5845] keyspan 5-1:1.0: device disconnected [ 345.298150][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.303520][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.309047][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.313930][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.316575][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.359205][T13088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.359221][T13088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.359229][T13088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 345.423094][T13092] FAULT_INJECTION: forcing a failure. [ 345.423094][T13092] name failslab, interval 1, probability 0, space 0, times 0 [ 345.423116][T13092] CPU: 0 UID: 0 PID: 13092 Comm: syz.3.2287 Not tainted syzkaller #0 PREEMPT(full) [ 345.423130][T13092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.423137][T13092] Call Trace: [ 345.423141][T13092] [ 345.423147][T13092] dump_stack_lvl+0x100/0x190 [ 345.423166][T13092] should_fail_ex.cold+0x5/0xa [ 345.423183][T13092] should_failslab+0xc2/0x120 [ 345.423202][T13092] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 345.423219][T13092] ? find_held_lock+0x2b/0x80 [ 345.423234][T13092] ? sock_alloc_inode+0x26/0x2c0 [ 345.423250][T13092] ? __pfx_sock_alloc_inode+0x10/0x10 [ 345.423265][T13092] sock_alloc_inode+0x26/0x2c0 [ 345.423278][T13092] ? __pfx_sock_alloc_inode+0x10/0x10 [ 345.423292][T13092] alloc_inode+0x68/0x250 [ 345.423305][T13092] sock_alloc+0x44/0x280 [ 345.423316][T13092] ? security_socket_create+0x7f/0x250 [ 345.423341][T13092] __sock_create+0xc2/0x860 [ 345.423359][T13092] __sys_socket+0x14d/0x260 [ 345.423374][T13092] ? xfd_validate_state+0x129/0x190 [ 345.423392][T13092] ? __pfx___sys_socket+0x10/0x10 [ 345.423413][T13092] __ia32_sys_socket+0x72/0xb0 [ 345.423429][T13092] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.423445][T13092] __do_fast_syscall_32+0x13a/0x8b0 [ 345.423460][T13092] ? lockdep_hardirqs_on+0x7d/0x110 [ 345.423475][T13092] do_fast_syscall_32+0x32/0x70 [ 345.423491][T13092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.423506][T13092] RIP: 0023:0xf740efec [ 345.423519][T13092] Code: Unable to access opcode bytes at 0xf740efc2. [ 345.423526][T13092] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 345.423538][T13092] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 345.423545][T13092] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.423552][T13092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.423558][T13092] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 345.423565][T13092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.423579][T13092] [ 345.423585][T13092] socket: no more sockets [ 345.537544][T13104] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 345.595837][T13105] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2294'. [ 345.865290][ T5887] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 345.961703][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.961782][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.961944][T13084] bridge_slave_0: entered allmulticast mode [ 345.962829][T13084] bridge_slave_0: entered promiscuous mode [ 345.965400][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.965522][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.965615][T13084] bridge_slave_1: entered allmulticast mode [ 345.967106][T13084] bridge_slave_1: entered promiscuous mode [ 345.990426][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.991977][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.009231][T13084] team0: Port device team_slave_0 added [ 346.010521][T13084] team0: Port device team_slave_1 added [ 346.022869][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.022879][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.022892][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.027418][ T5887] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 346.028745][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.028768][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.029863][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.029872][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.029970][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.039906][ T5887] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 346.039999][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 346.040027][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 346.040560][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 346.040592][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 346.044745][ T5887] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 346.045567][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 346.045600][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 346.051196][ T5887] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 346.309760][T13084] hsr_slave_0: entered promiscuous mode [ 346.310176][T13084] hsr_slave_1: entered promiscuous mode [ 346.310468][T13084] debugfs: 'hsr0' already exists in 'hsr' [ 346.310481][T13084] Cannot create hsr debugfs directory [ 346.890587][ T3268] usb 5-1: USB disconnect, device number 37 [ 346.893954][ T3268] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 346.903923][ T3268] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 346.904566][ T3268] keyspan 5-1:1.0: device disconnected [ 347.014001][T13084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.020221][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.020755][T13084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.038816][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.039413][T13084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.044727][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.045587][T13084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.049016][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.087151][T13084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.092630][T13084] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.099783][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.099833][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.103621][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.103663][ T6837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.130151][T13084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.329591][T13159] FAULT_INJECTION: forcing a failure. [ 347.329591][T13159] name failslab, interval 1, probability 0, space 0, times 0 [ 347.329615][T13159] CPU: 2 UID: 0 PID: 13159 Comm: syz.0.2302 Not tainted syzkaller #0 PREEMPT(full) [ 347.329628][T13159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.329636][T13159] Call Trace: [ 347.329640][T13159] [ 347.329645][T13159] dump_stack_lvl+0x100/0x190 [ 347.329665][T13159] should_fail_ex.cold+0x5/0xa [ 347.329681][T13159] should_failslab+0xc2/0x120 [ 347.329701][T13159] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 347.329717][T13159] ? find_held_lock+0x2b/0x80 [ 347.329733][T13159] ? sock_alloc_inode+0x26/0x2c0 [ 347.329749][T13159] ? __pfx_sock_alloc_inode+0x10/0x10 [ 347.329764][T13159] sock_alloc_inode+0x26/0x2c0 [ 347.329778][T13159] ? __pfx_sock_alloc_inode+0x10/0x10 [ 347.329791][T13159] alloc_inode+0x68/0x250 [ 347.329803][T13159] sock_alloc+0x44/0x280 [ 347.329814][T13159] ? security_socket_create+0x7f/0x250 [ 347.329834][T13159] __sock_create+0xc2/0x860 [ 347.329852][T13159] __sys_socket+0x14d/0x260 [ 347.329867][T13159] ? xfd_validate_state+0x129/0x190 [ 347.329884][T13159] ? __pfx___sys_socket+0x10/0x10 [ 347.329904][T13159] __ia32_sys_socket+0x72/0xb0 [ 347.329922][T13159] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.329937][T13159] __do_fast_syscall_32+0x13a/0x8b0 [ 347.329952][T13159] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.329967][T13159] do_fast_syscall_32+0x32/0x70 [ 347.329983][T13159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.329997][T13159] RIP: 0023:0xf739efec [ 347.330010][T13159] Code: Unable to access opcode bytes at 0xf739efc2. [ 347.330015][T13159] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 347.330028][T13159] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 347.330037][T13159] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.330044][T13159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.330051][T13159] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.330058][T13159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.330072][T13159] [ 347.330079][T13159] socket: no more sockets [ 347.365472][ T5739] Bluetooth: hci4: command tx timeout [ 347.402696][T13166] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 347.459740][T13168] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2304'. [ 347.721092][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.876477][T13084] veth0_vlan: entered promiscuous mode [ 347.880076][T13084] veth1_vlan: entered promiscuous mode [ 347.895835][T13084] veth0_macvtap: entered promiscuous mode [ 347.898324][T13084] veth1_macvtap: entered promiscuous mode [ 347.908261][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.912179][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.931086][ T7342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.958137][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.958180][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.976695][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.976708][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.986050][ T7342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.986096][ T7342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.986131][ T7342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.030267][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 348.030412][T13179] 8021q: VLANs not supported on gre0 [ 348.032916][T13179] gre0: Master is either lo or non-ether device [ 348.295861][ T5887] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 348.515708][T13138] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 348.555807][ T5887] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 348.556707][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.556731][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.561800][ T5887] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 348.561910][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 348.561938][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 348.562483][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 348.562515][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 348.563611][ T5887] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 348.564584][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 348.564617][ T5887] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 348.567296][ T5887] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 348.573391][T13192] syzkaller0: entered promiscuous mode [ 348.573403][T13192] syzkaller0: entered allmulticast mode [ 348.639327][T13197] netlink: 'syz.3.2311': attribute type 1 has an invalid length. [ 348.639341][T13197] netlink: 'syz.3.2311': attribute type 268 has an invalid length. [ 348.639349][T13197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2311'. [ 348.688883][T13138] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 348.689836][T13138] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.689860][T13138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.701170][T13138] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 348.701359][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 348.701414][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 348.704855][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 348.704922][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 348.708858][T13138] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 348.713371][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 348.713405][T13138] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 348.715473][T13138] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 348.750200][T13199] FAULT_INJECTION: forcing a failure. [ 348.750200][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 348.750221][T13199] CPU: 2 UID: 0 PID: 13199 Comm: syz.3.2312 Not tainted syzkaller #0 PREEMPT(full) [ 348.750235][T13199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.750242][T13199] Call Trace: [ 348.750246][T13199] [ 348.750251][T13199] dump_stack_lvl+0x100/0x190 [ 348.750276][T13199] should_fail_ex.cold+0x5/0xa [ 348.750292][T13199] should_failslab+0xc2/0x120 [ 348.750313][T13199] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 348.750329][T13199] ? find_held_lock+0x2b/0x80 [ 348.750343][T13199] ? sock_alloc_inode+0x26/0x2c0 [ 348.750358][T13199] ? __pfx_sock_alloc_inode+0x10/0x10 [ 348.750373][T13199] sock_alloc_inode+0x26/0x2c0 [ 348.750387][T13199] ? __pfx_sock_alloc_inode+0x10/0x10 [ 348.750400][T13199] alloc_inode+0x68/0x250 [ 348.750413][T13199] sock_alloc+0x44/0x280 [ 348.750425][T13199] ? security_socket_create+0x7f/0x250 [ 348.750446][T13199] __sock_create+0xc2/0x860 [ 348.750465][T13199] __sys_socket+0x14d/0x260 [ 348.750479][T13199] ? xfd_validate_state+0x129/0x190 [ 348.750498][T13199] ? __pfx___sys_socket+0x10/0x10 [ 348.750518][T13199] __ia32_sys_socket+0x72/0xb0 [ 348.750533][T13199] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.750548][T13199] __do_fast_syscall_32+0x13a/0x8b0 [ 348.750563][T13199] ? lockdep_hardirqs_on+0x7d/0x110 [ 348.750579][T13199] do_fast_syscall_32+0x32/0x70 [ 348.750595][T13199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.750610][T13199] RIP: 0023:0xf740efec [ 348.750624][T13199] Code: Unable to access opcode bytes at 0xf740efc2. [ 348.750629][T13199] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 348.750641][T13199] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003 [ 348.750649][T13199] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.750656][T13199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.750663][T13199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.750670][T13199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.750685][T13199] [ 348.750691][T13199] socket: no more sockets [ 349.446578][ T5739] Bluetooth: hci4: command tx timeout [ 349.816296][ T3268] usb 5-1: USB disconnect, device number 38 [ 349.880672][ T3268] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 349.904457][ T3268] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 349.913881][ T3268] keyspan 5-1:1.0: device disconnected [ 349.957514][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 350.698460][ T3268] usb 7-1: USB disconnect, device number 41 [ 350.707193][ T3268] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 350.709873][ T3268] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 350.710154][ T3268] keyspan 7-1:1.0: device disconnected [ 350.769441][T13232] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 350.769464][T13232] netlink: 'syz.1.2321': attribute type 268 has an invalid length. [ 350.769479][T13232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2321'. [ 350.838054][T13237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.840844][T13237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.842508][T13235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2322'. [ 350.842521][T13235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2322'. [ 350.842530][T13235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2322'. [ 350.845814][T13237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.854191][T13237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.861254][T13237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.910974][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 351.127325][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 351.127341][ T43] audit: type=1326 audit(1791381682.672:18927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.127403][ T43] audit: type=1326 audit(1791381682.672:18928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.128978][ T43] audit: type=1326 audit(1791381682.672:18929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.129073][ T43] audit: type=1326 audit(1791381682.672:18930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.129815][ T43] audit: type=1326 audit(1791381682.672:18931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.129854][ T43] audit: type=1326 audit(1791381682.672:18932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.129889][ T43] audit: type=1326 audit(1791381682.672:18933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.129918][ T43] audit: type=1326 audit(1791381682.672:18934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.130113][ T43] audit: type=1326 audit(1791381682.672:18935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.130196][ T43] audit: type=1326 audit(1791381682.672:18936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.0.2324" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf739efec code=0x7ffc0000 [ 351.141507][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2325'. [ 351.142078][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 351.171963][T13256] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2326'. [ 351.225524][T13259] input: syz1 as /devices/virtual/input/input55 [ 351.527143][ T5739] Bluetooth: hci4: command tx timeout [ 351.744173][T13234] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.744308][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.744398][T13234] bridge_slave_0: entered allmulticast mode [ 351.745719][T13234] bridge_slave_0: entered promiscuous mode [ 351.747675][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.747715][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.747856][T13234] bridge_slave_1: entered allmulticast mode [ 351.748552][T13234] bridge_slave_1: entered promiscuous mode [ 351.769005][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.771179][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.791641][T13234] team0: Port device team_slave_0 added [ 351.793696][T13234] team0: Port device team_slave_1 added [ 351.815168][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.815185][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.815205][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.816489][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.816500][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.816521][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.864412][T13234] hsr_slave_0: entered promiscuous mode [ 351.864839][T13234] hsr_slave_1: entered promiscuous mode [ 351.865425][T13234] debugfs: 'hsr0' already exists in 'hsr' [ 351.865438][T13234] Cannot create hsr debugfs directory [ 352.238498][T13272] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 352.238511][T13272] netlink: 'syz.0.2329': attribute type 268 has an invalid length. [ 352.238519][T13272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2329'. [ 352.307388][T13274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2331'. [ 352.326775][T13234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.330633][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.331318][T13234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.336291][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.336872][T13234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.341358][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.342172][T13234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.346958][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.408288][T13234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.414385][T13234] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.460072][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.460199][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.462773][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.462854][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.715363][T13234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.754490][T13234] veth0_vlan: entered promiscuous mode [ 352.762659][T13234] veth1_vlan: entered promiscuous mode [ 352.782788][T13234] veth0_macvtap: entered promiscuous mode [ 352.786327][T13234] veth1_macvtap: entered promiscuous mode [ 352.796525][T13234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.803252][T13234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.914323][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.914337][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.933590][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.933604][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.948912][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.948950][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.948980][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.949011][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.965273][T13237] Bluetooth: hci1: command tx timeout [ 353.605529][T13237] Bluetooth: hci4: command tx timeout [ 353.986215][T13301] 8021q: VLANs not supported on ip_vti0 [ 353.990514][T13301] ip_vti0: Master is either lo or non-ether device [ 354.225147][ T58] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 354.380461][ T58] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 354.381482][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.381520][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.389524][ T58] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 354.389724][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 354.389783][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 354.394168][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 354.394237][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 354.396545][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 354.400443][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 354.400504][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 354.403738][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 354.885944][ T3268] usb 5-1: USB disconnect, device number 39 [ 355.045157][T13237] Bluetooth: hci1: command tx timeout [ 355.072399][T13325] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 355.072418][T13325] netlink: 'syz.2.2339': attribute type 268 has an invalid length. [ 355.411248][ T3268] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 355.431883][ T3268] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 355.433275][ T3268] keyspan 5-1:1.0: device disconnected [ 355.746017][T13338] input: syz1 as /devices/virtual/input/input56 [ 355.807493][T13340] __nla_validate_parse: 5 callbacks suppressed [ 355.807512][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 355.808415][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 355.838560][T13340] ipvlan2: entered allmulticast mode [ 355.838581][T13340] team0: entered allmulticast mode [ 355.838594][T13340] team_slave_0: entered allmulticast mode [ 355.838611][T13340] team_slave_1: entered allmulticast mode [ 355.838827][T13340] team0: Device ipvlan2 is already an upper device of the team interface [ 356.185222][T13138] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 356.338092][T13138] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 356.338915][T13138] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.338931][T13138] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 356.338942][T13138] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 356.338954][T13138] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 356.338972][T13138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.340662][T13342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.340713][T13342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.340797][T13342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.340845][T13342] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.346826][T13138] cxacru_cm: 471 callbacks suppressed [ 356.346838][T13138] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 356.395252][ T58] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 356.546046][ T58] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 356.547414][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.547455][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.554381][ T58] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 356.554556][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 356.554613][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 356.556055][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 356.556120][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 356.558063][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 356.561365][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 356.561431][ T58] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 356.563528][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 357.003314][ T30] usb 5-1: USB disconnect, device number 40 [ 357.049799][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 357.053559][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 357.053883][ T30] keyspan 5-1:1.0: device disconnected [ 357.080102][T13355] netlink: 'syz.0.2349': attribute type 1 has an invalid length. [ 357.080115][T13355] netlink: 'syz.0.2349': attribute type 268 has an invalid length. [ 357.080124][T13355] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2349'. [ 357.125229][T13237] Bluetooth: hci1: command tx timeout [ 357.548559][T13138] usb 7-1: USB disconnect, device number 42 [ 358.205299][T13368] 9pnet_virtio: no channels available for device syz [ 358.445792][ T30] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 358.609033][ T30] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 358.615443][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.615919][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.714535][ T30] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 358.718690][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 358.719544][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 358.749159][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 358.758953][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 358.783420][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 358.813803][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 358.813876][ T30] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 358.854187][ T30] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 359.098660][T13371] input: syz1 as /devices/virtual/input/input57 [ 359.205680][T13237] Bluetooth: hci1: command tx timeout [ 359.310863][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 359.311585][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'. [ 359.341603][T13376] ipvlan2: entered allmulticast mode [ 359.341626][T13376] veth1_to_team: entered allmulticast mode [ 359.799100][T13327] usb 5-1: USB disconnect, device number 41 [ 359.806747][T13327] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 359.813898][T13327] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 359.814672][T13327] keyspan 5-1:1.0: device disconnected [ 359.928861][T13384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 359.928878][T13384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 359.928888][T13384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 361.251449][T13394] input: syz1 as /devices/virtual/input/input58 [ 361.495162][ T5819] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 361.665157][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 361.665984][ T5819] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 361.668784][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.668798][ T5819] usb 5-1: Product: syz [ 361.668806][ T5819] usb 5-1: Manufacturer: syz [ 361.668813][ T5819] usb 5-1: SerialNumber: syz [ 361.670110][ T5819] usb 5-1: config 0 descriptor?? [ 362.078459][ T5819] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 362.080281][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.081203][ T5819] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 362.081228][ T5819] usb 5-1: media controller created [ 362.086618][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.134062][T13396] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 362.134123][T13396] netlink: 'syz.2.2363': attribute type 268 has an invalid length. [ 362.134133][T13396] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2363'. [ 362.274228][T13401] input: syz1 as /devices/virtual/input/input59 [ 362.297772][T13392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.299217][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 362.299248][ T5819] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 362.299255][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 362.302284][ T5819] usb 5-1: USB disconnect, device number 42 [ 362.325858][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 363.210194][T13408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2368'. [ 363.210224][T13408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2368'. [ 363.210238][T13408] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2368'. [ 363.358925][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. [ 363.359745][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 363.394941][T13412] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 363.472351][T13413] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2370'. [ 365.374533][T13433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2378'. [ 365.374549][T13433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2378'. [ 365.374558][T13433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2378'. [ 365.389130][T13429] FAULT_INJECTION: forcing a failure. [ 365.389130][T13429] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.389150][T13429] CPU: 2 UID: 0 PID: 13429 Comm: syz.0.2384 Not tainted syzkaller #0 PREEMPT(full) [ 365.389164][T13429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.389173][T13429] Call Trace: [ 365.389178][T13429] [ 365.389183][T13429] dump_stack_lvl+0x100/0x190 [ 365.389204][T13429] should_fail_ex.cold+0x5/0xa [ 365.389220][T13429] get_futex_key+0x1d0/0x14f0 [ 365.389234][T13429] ? __pfx_get_futex_key+0x10/0x10 [ 365.389248][T13429] ? ___sys_sendmsg+0x127/0x1e0 [ 365.389267][T13429] futex_wake+0xf4/0x5e0 [ 365.389281][T13429] ? futex_wait+0x11e/0x370 [ 365.389298][T13429] ? __pfx_futex_wake+0x10/0x10 [ 365.389316][T13429] ? find_held_lock+0x2b/0x80 [ 365.389333][T13429] do_futex+0x2b2/0x440 [ 365.389346][T13429] ? __pfx_do_futex+0x10/0x10 [ 365.389361][T13429] ? fput+0x7c/0x100 [ 365.389379][T13429] __ia32_sys_futex_time32+0x2f4/0x470 [ 365.389396][T13429] ? xfd_validate_state+0x129/0x190 [ 365.389414][T13429] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 365.389435][T13429] __do_fast_syscall_32+0x13a/0x8b0 [ 365.389451][T13429] ? lockdep_hardirqs_on+0x7d/0x110 [ 365.389467][T13429] do_fast_syscall_32+0x32/0x70 [ 365.389484][T13429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.389515][T13429] RIP: 0023:0xf739efec [ 365.389529][T13429] Code: Unable to access opcode bytes at 0xf739efc2. [ 365.389535][T13429] RSP: 002b:00000000f53b65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 365.389547][T13429] RAX: ffffffffffffffda RBX: 00000000f73c4f8c RCX: 0000000000000081 [ 365.389556][T13429] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 365.389564][T13429] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 365.389584][T13429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 365.389592][T13429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.389608][T13429] [ 365.420975][T13436] team_slave_1: Device is already in use. [ 366.527798][T13445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 367.406998][T13450] input: syz1 as /devices/virtual/input/input60 [ 367.876655][T13345] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 367.876691][T12802] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 367.883552][T12433] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 367.996854][T13462] __nla_validate_parse: 3 callbacks suppressed [ 367.996873][T13462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2389'. [ 367.996901][T13462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2389'. [ 367.996917][T13462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2389'. [ 368.258308][ T25] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 368.319990][ T5826] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 368.326409][T13138] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 368.465202][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 368.485259][ T25] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 368.557370][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.557387][ T25] usb 6-1: Product: syz [ 368.557394][ T25] usb 6-1: Manufacturer: syz [ 368.557402][ T25] usb 6-1: SerialNumber: syz [ 368.722662][ T5826] usb 8-1: device descriptor read/all, error -71 [ 368.785575][ T25] usb 6-1: config 0 descriptor?? [ 368.813244][T13474] 9pnet_virtio: no channels available for device syz [ 368.816162][T13138] usb 7-1: device not accepting address 43, error -71 [ 369.215902][ T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 369.217253][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.217962][ T25] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 369.217985][ T25] usb 6-1: media controller created [ 369.224280][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.235633][T13138] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 369.387684][T13138] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 369.388586][T13138] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.388610][T13138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.393373][T13138] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 369.393512][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 369.393576][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 369.400464][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 369.400500][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 369.403502][T13138] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 369.404419][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 369.404489][T13138] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 369.411249][T13138] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 369.756645][ T25] zl10353_read_register: readreg error (reg=127, ret==0) [ 369.756883][ T25] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 369.757056][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 370.151824][ T105] IPVS: starting estimator thread 0... [ 370.251719][T13449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.253289][ T5887] usb 6-1: USB disconnect, device number 27 [ 370.275884][T13481] IPVS: using max 26 ests per chain, 62400 per kthread [ 370.280657][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 371.332044][T13487] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2397'. [ 371.520325][T13327] usb 7-1: USB disconnect, device number 44 [ 371.524630][T13327] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 371.527261][T13327] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 371.527599][T13327] keyspan 7-1:1.0: device disconnected [ 371.554499][T13494] syzkaller0: entered promiscuous mode [ 371.554521][T13494] syzkaller0: entered allmulticast mode [ 372.423424][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 372.432363][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 372.567219][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2413'. [ 372.569122][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 372.585187][T13508] ipvlan2: entered allmulticast mode [ 372.585200][T13508] hsr0: entered allmulticast mode [ 372.585207][T13508] hsr_slave_0: entered allmulticast mode [ 372.585218][T13508] hsr_slave_1: entered allmulticast mode [ 372.591415][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 372.626127][T13509] 9pnet_virtio: no channels available for device syz [ 372.628075][T13504] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2403'. [ 372.718837][T13512] input: syz1 as /devices/virtual/input/input61 [ 372.950177][T13519] FAULT_INJECTION: forcing a failure. [ 372.950177][T13519] name fail_futex, interval 1, probability 0, space 0, times 0 [ 372.950198][T13519] CPU: 2 UID: 0 PID: 13519 Comm: syz.3.2408 Not tainted syzkaller #0 PREEMPT(full) [ 372.950211][T13519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.950233][T13519] Call Trace: [ 372.950237][T13519] [ 372.950242][T13519] dump_stack_lvl+0x100/0x190 [ 372.950262][T13519] should_fail_ex.cold+0x5/0xa [ 372.950278][T13519] get_futex_key+0x1d0/0x14f0 [ 372.950293][T13519] ? __pfx_get_futex_key+0x10/0x10 [ 372.950307][T13519] ? ___sys_sendmsg+0x127/0x1e0 [ 372.950325][T13519] futex_wake+0xf4/0x5e0 [ 372.950339][T13519] ? futex_wait+0x11e/0x370 [ 372.950356][T13519] ? __pfx_futex_wake+0x10/0x10 [ 372.950373][T13519] ? find_held_lock+0x2b/0x80 [ 372.950390][T13519] do_futex+0x2b2/0x440 [ 372.950404][T13519] ? __pfx_do_futex+0x10/0x10 [ 372.950418][T13519] ? fput+0x7c/0x100 [ 372.950437][T13519] __ia32_sys_futex_time32+0x2f4/0x470 [ 372.950455][T13519] ? xfd_validate_state+0x129/0x190 [ 372.950472][T13519] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 372.950493][T13519] __do_fast_syscall_32+0x13a/0x8b0 [ 372.950510][T13519] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.950526][T13519] do_fast_syscall_32+0x32/0x70 [ 372.950541][T13519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.950561][T13519] RIP: 0023:0xf740efec [ 372.950580][T13519] Code: Unable to access opcode bytes at 0xf740efc2. [ 372.950586][T13519] RSP: 002b:00000000f54265cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 372.950599][T13519] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 372.950608][T13519] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 372.950616][T13519] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 372.950624][T13519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 372.950631][T13519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.950646][T13519] [ 372.966776][ T5826] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 373.125115][ T5826] usb 7-1: Using ep0 maxpacket: 16 [ 373.125572][ T5826] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 373.337141][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.337158][ T5826] usb 7-1: Product: syz [ 373.337166][ T5826] usb 7-1: Manufacturer: syz [ 373.337173][ T5826] usb 7-1: SerialNumber: syz [ 373.441330][T13529] syzkaller0: entered promiscuous mode [ 373.441344][T13529] syzkaller0: entered allmulticast mode [ 373.539612][T13532] __nla_validate_parse: 1 callbacks suppressed [ 373.539625][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 373.541032][T13532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2414'. [ 373.541046][T13532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2414'. [ 373.541054][T13532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2414'. [ 374.525714][ T5826] usb 7-1: config 0 descriptor?? [ 375.230750][T13538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2417'. [ 375.231782][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 375.257701][T13539] netlink: 'syz.3.2416': attribute type 21 has an invalid length. [ 375.331075][T13546] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2418'. [ 375.585175][ T5826] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 375.672607][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.773780][ T5826] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 375.773826][ T5826] usb 7-1: media controller created [ 375.984295][T13510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.159749][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.208478][T13558] syzkaller0: entered promiscuous mode [ 376.208493][T13558] syzkaller0: entered allmulticast mode [ 376.225457][ T5826] zl10353_read_register: readreg error (reg=127, ret==0) [ 376.225502][ T5826] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 376.225513][ T5826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 376.227878][ T5826] usb 7-1: USB disconnect, device number 45 [ 376.251440][ T5826] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 376.565908][ T5819] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 376.729275][ T5819] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 376.733694][ T5819] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.733723][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.794922][ T5819] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 376.798183][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 376.798633][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 376.835128][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 376.837023][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 376.894728][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 376.976416][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 376.977229][ T5819] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 377.123957][ T5819] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 378.163114][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.163172][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.196266][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2427'. [ 378.197024][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 378.785155][ T854] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 379.073551][ T854] usb 6-1: device descriptor read/64, error -71 [ 379.359748][T13327] usb 8-1: USB disconnect, device number 32 [ 379.362269][T13327] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 379.364888][T13327] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 379.365459][T13327] keyspan 8-1:1.0: device disconnected [ 379.465172][ T854] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 379.501320][T13591] syzkaller0: entered promiscuous mode [ 379.501341][T13591] syzkaller0: entered allmulticast mode [ 379.577963][T13594] 9pnet_virtio: no channels available for device syz [ 379.705119][ T854] usb 6-1: device descriptor read/64, error -71 [ 379.815244][ T854] usb usb6-port1: attempt power cycle [ 380.155162][ T854] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 380.175918][ T854] usb 6-1: device descriptor read/8, error -71 [ 380.415700][ T854] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 380.436968][ T854] usb 6-1: device descriptor read/8, error -71 [ 380.534539][T13599] input: syz1 as /devices/virtual/input/input62 [ 380.549659][ T854] usb usb6-port1: unable to enumerate USB device [ 381.095110][ T5887] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 381.180634][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 381.198468][T13606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.210214][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 381.257058][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 381.257917][ T5887] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 381.260143][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.260155][ T5887] usb 7-1: Product: syz [ 381.260163][ T5887] usb 7-1: Manufacturer: syz [ 381.260173][ T5887] usb 7-1: SerialNumber: syz [ 381.266360][ T5887] usb 7-1: config 0 descriptor?? [ 381.541351][T13608] ipvlan4: entered allmulticast mode [ 381.541364][T13608] bond7: entered allmulticast mode [ 381.541567][T13608] bond7: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.541634][T13608] bond7: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 381.546536][T13608] bond7: (slave ipvlan4): Error -95 calling set_mac_address [ 381.670965][ T5887] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 381.675934][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.677065][ T5887] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 381.677088][ T5887] usb 7-1: media controller created [ 381.690790][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.013801][T13598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.023155][ T5887] zl10353_read_register: readreg error (reg=127, ret==0) [ 382.023184][ T5887] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 382.023191][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 382.104687][ T5887] usb 7-1: USB disconnect, device number 46 [ 382.405164][ T5826] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 382.586777][ T5826] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 382.588149][ T5826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.588178][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.595575][ T5826] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 382.595667][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 382.595695][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 382.596238][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 382.596272][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 382.599322][ T5826] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 382.600142][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 382.600176][ T5826] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 382.603079][ T5826] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 382.728765][ T5887] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 382.730143][ T5745] udevd[5745]: setting owner of /dev/bus/usb/007/046 to uid=0, gid=0 failed: No such file or directory [ 382.877573][T13635] Cache volume key already in use (9p,syz,) [ 384.750676][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 384.761521][T13663] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.766423][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 384.788047][T13663] ipvlan3: entered allmulticast mode [ 384.788067][T13663] bond9: entered allmulticast mode [ 384.788309][T13663] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.788328][T13663] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 384.790764][T13663] bond9: (slave ipvlan3): Error -95 calling set_mac_address [ 384.923660][T13670] input: syz1 as /devices/virtual/input/input63 [ 384.965639][ T43] audit: type=1326 audit(1791381716.512:19408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.965693][ T43] audit: type=1326 audit(1791381716.512:19409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.967482][ T43] audit: type=1326 audit(1791381716.512:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.967524][ T43] audit: type=1326 audit(1791381716.512:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.967663][ T43] audit: type=1326 audit(1791381716.512:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.968070][ T43] audit: type=1326 audit(1791381716.512:19413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.968206][ T43] audit: type=1326 audit(1791381716.512:19414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.968496][ T43] audit: type=1326 audit(1791381716.512:19415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.968745][ T43] audit: type=1326 audit(1791381716.512:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf740efec code=0x7ffc0000 [ 384.969155][ T43] audit: type=1326 audit(1791381716.512:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.3.2455" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf740efec code=0x7ffc0000 [ 385.132079][ T30] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 385.175384][ T854] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 385.184946][T13327] usb 5-1: USB disconnect, device number 43 [ 385.190590][T13327] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 385.193888][T13327] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 385.194151][T13327] keyspan 5-1:1.0: device disconnected [ 385.296589][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 385.298624][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.298720][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.325209][ T854] usb 7-1: Using ep0 maxpacket: 16 [ 385.326007][ T30] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 385.326028][ T854] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 385.327394][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 385.327821][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 385.329682][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.329700][ T854] usb 7-1: Product: syz [ 385.329710][ T854] usb 7-1: Manufacturer: syz [ 385.329723][ T854] usb 7-1: SerialNumber: syz [ 385.337053][ T854] usb 7-1: config 0 descriptor?? [ 385.340905][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 385.343719][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 385.370553][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 385.386436][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 385.386924][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 385.406066][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 385.756598][ T854] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 385.759802][ T854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.760503][ T854] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 385.760583][ T854] usb 7-1: media controller created [ 385.787034][ T854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.836674][ T38] IPVS: starting estimator thread 0... [ 385.925527][T13677] IPVS: using max 43 ests per chain, 103200 per kthread [ 385.969601][T13669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.970210][ T854] zl10353_read_register: readreg error (reg=127, ret==0) [ 385.970236][ T854] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 385.970242][ T854] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 385.974943][ T854] usb 7-1: USB disconnect, device number 47 [ 385.993364][ T854] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 386.083984][T13684] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2457'. [ 386.315200][ T30] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 386.499417][ T30] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 386.504745][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.513202][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.840567][ T30] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 386.842336][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 386.842726][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 386.860220][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 386.861231][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 386.900223][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 386.925751][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 386.927401][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 386.957995][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 387.755911][ T5834] usb 8-1: USB disconnect, device number 33 [ 387.758737][ T5834] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 387.910623][ T5834] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 387.910898][ T5834] keyspan 8-1:1.0: device disconnected [ 387.952045][ T30] usb 6-1: USB disconnect, device number 32 [ 387.956734][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 387.975528][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 387.980345][ T30] keyspan 6-1:1.0: device disconnected [ 388.200783][T13710] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2466'. [ 388.226943][T13712] input: syz1 as /devices/virtual/input/input64 [ 388.515107][ T25] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 388.685435][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 388.686759][ T25] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 388.690999][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.691020][ T25] usb 7-1: Product: syz [ 388.691033][ T25] usb 7-1: Manufacturer: syz [ 388.691045][ T25] usb 7-1: SerialNumber: syz [ 388.694823][ T25] usb 7-1: config 0 descriptor?? [ 389.101404][ T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 389.102637][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.103355][ T25] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 389.103378][ T25] usb 7-1: media controller created [ 389.110022][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.135200][ T5826] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 389.306386][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 389.307367][ T5826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.309753][ T5826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 389.309775][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 389.309791][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.309806][ T5826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.309891][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.362441][T13711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.366082][ T25] zl10353_read_register: readreg error (reg=127, ret==0) [ 389.366173][ T25] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 389.366186][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 389.389786][ T25] usb 7-1: USB disconnect, device number 48 [ 389.488533][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 389.637356][ T5826] usb 6-1: usb_control_msg returned -71 [ 389.637397][ T5826] usbtmc 6-1:16.0: can't read capabilities [ 389.659888][ T5826] usb 6-1: USB disconnect, device number 33 [ 389.672700][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.679156][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.680559][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.681410][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.684340][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.934001][T13743] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2476'. [ 390.156080][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.158010][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.158107][T13728] bridge_slave_0: entered allmulticast mode [ 390.160509][T13728] bridge_slave_0: entered promiscuous mode [ 390.162548][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.162660][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.162744][T13728] bridge_slave_1: entered allmulticast mode [ 390.163898][T13728] bridge_slave_1: entered promiscuous mode [ 390.184287][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.186771][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.208103][T13728] team0: Port device team_slave_0 added [ 390.210148][T13728] team0: Port device team_slave_1 added [ 390.228094][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.228104][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.228126][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.229449][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.229459][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.229477][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.261907][T13728] hsr_slave_0: entered promiscuous mode [ 390.262591][T13728] hsr_slave_1: entered promiscuous mode [ 390.263071][T13728] debugfs: 'hsr0' already exists in 'hsr' [ 390.263090][T13728] Cannot create hsr debugfs directory [ 390.369956][T13728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.441096][T13728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.508880][T13728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.582996][T13728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.738834][T13728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.743014][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.743835][T13728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.747306][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.748138][T13728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 390.759121][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.759954][T13728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 390.768138][T13728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.872639][T13728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.953707][T13728] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.042575][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.042657][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.096691][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.096773][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.666824][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.765320][T13237] Bluetooth: hci3: command tx timeout [ 391.781872][T13728] veth0_vlan: entered promiscuous mode [ 391.804950][T13728] veth1_vlan: entered promiscuous mode [ 391.849932][T13728] veth0_macvtap: entered promiscuous mode [ 391.856483][T13728] veth1_macvtap: entered promiscuous mode [ 391.864570][T13728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.874624][T13728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.918011][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.918047][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.918071][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.918096][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.967385][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.967400][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.972220][T13804] syzkaller0: entered promiscuous mode [ 391.972237][T13804] syzkaller0: entered allmulticast mode [ 391.985354][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.985367][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.715405][ T5834] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 392.878061][ T5834] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 392.881620][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.881685][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.003916][ T5834] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 393.012213][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 393.013623][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 393.051980][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 393.052312][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 393.067785][ T5834] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 393.102074][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 393.102387][ T5834] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 393.152690][ T5834] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 393.845112][T13237] Bluetooth: hci3: command tx timeout [ 393.852001][ T5834] usb 6-1: USB disconnect, device number 34 [ 393.897805][ T5834] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 393.945898][ T5834] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 393.946185][ T5834] keyspan 6-1:1.0: device disconnected [ 394.076183][ T43] kauditd_printk_skb: 325 callbacks suppressed [ 394.076203][ T43] audit: type=1326 audit(1791381725.622:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.076293][ T43] audit: type=1326 audit(1791381725.622:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.080988][ T43] audit: type=1326 audit(1791381725.622:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.081037][ T43] audit: type=1326 audit(1791381725.622:19746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.081075][ T43] audit: type=1326 audit(1791381725.622:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.083876][ T43] audit: type=1326 audit(1791381725.622:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.083921][ T43] audit: type=1326 audit(1791381725.622:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.083958][ T43] audit: type=1326 audit(1791381725.622:19750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.084782][ T43] audit: type=1326 audit(1791381725.622:19751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.084823][ T43] audit: type=1326 audit(1791381725.622:19752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.2.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73defec code=0x7ffc0000 [ 394.420319][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.432249][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.435367][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.439673][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.440269][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.925359][T13237] Bluetooth: hci3: command tx timeout [ 395.959871][T13866] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.959994][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.960094][T13866] bridge_slave_0: entered allmulticast mode [ 395.961152][T13866] bridge_slave_0: entered promiscuous mode [ 395.962953][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.963049][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.963129][T13866] bridge_slave_1: entered allmulticast mode [ 395.964134][T13866] bridge_slave_1: entered promiscuous mode [ 395.980187][T13866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.982414][T13866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.995273][T13866] team0: Port device team_slave_0 added [ 395.996453][T13866] team0: Port device team_slave_1 added [ 396.007377][T13866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.007390][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.007404][T13866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.008188][T13866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.008195][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.008209][T13866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.031839][T13866] hsr_slave_0: entered promiscuous mode [ 396.033534][T13866] hsr_slave_1: entered promiscuous mode [ 396.034044][T13866] debugfs: 'hsr0' already exists in 'hsr' [ 396.034061][T13866] Cannot create hsr debugfs directory [ 396.332562][T13866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.440803][T13866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.485247][T13237] Bluetooth: hci0: command tx timeout [ 396.501218][T13866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.564842][T13866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.682144][T13866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.751214][T13866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.751666][T13866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.762175][T13866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.764548][T13866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.768922][T13866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.772013][T13866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.783618][T13866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.903125][T13866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.913092][T13866] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.928385][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.928477][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.932592][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.932669][ T6824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.131138][T13866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.571443][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.610934][T13866] veth0_vlan: entered promiscuous mode [ 397.618574][T13866] veth1_vlan: entered promiscuous mode [ 397.636051][T13866] veth0_macvtap: entered promiscuous mode [ 397.638360][T13866] veth1_macvtap: entered promiscuous mode [ 397.649672][T13866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.698892][T13866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.758759][ T7342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.758800][ T7342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.775887][ T7342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.775950][ T7342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.885907][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.885930][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.891235][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.891256][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.966753][T13941] input: syz1 as /devices/virtual/input/input65 [ 398.015468][T13237] Bluetooth: hci3: command tx timeout [ 398.077791][ T854] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 398.218368][ T5819] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 398.241727][ T854] usb 5-1: Using ep0 maxpacket: 8 [ 398.250236][ T854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.271275][ T854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 398.271399][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 398.271421][ T854] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.271581][ T854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.271618][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.387622][ T5819] usb 8-1: Using ep0 maxpacket: 16 [ 398.394543][ T5819] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 398.493574][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.493662][ T5819] usb 8-1: Product: syz [ 398.494232][ T5819] usb 8-1: Manufacturer: syz [ 398.494241][ T5819] usb 8-1: SerialNumber: syz [ 398.565939][T13237] Bluetooth: hci0: command tx timeout [ 398.574231][ T5819] usb 8-1: config 0 descriptor?? [ 398.918163][ T854] usb 5-1: GET_CAPABILITIES returned 0 [ 398.918338][ T854] usbtmc 5-1:16.0: can't read capabilities [ 399.026501][ T5819] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 399.036591][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.038740][ T5819] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 399.038937][ T5819] usb 8-1: media controller created [ 399.070868][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.398898][T13940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.403938][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 399.403964][ T5819] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 399.403971][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 399.408459][ T5819] usb 8-1: USB disconnect, device number 34 [ 399.425896][T13953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'. [ 399.425914][T13953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'. [ 399.425923][T13953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'. [ 399.466347][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 400.395843][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 400.422813][T13963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.440089][T13963] ipvlan2: entered allmulticast mode [ 400.440102][T13963] bond1: entered allmulticast mode [ 400.440261][T13963] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.440272][T13963] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 400.440729][T13963] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 400.645226][T13237] Bluetooth: hci0: command tx timeout [ 400.846322][ T5834] usb 5-1: USB disconnect, device number 44 [ 401.078493][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 401.081283][ T43] kauditd_printk_skb: 322 callbacks suppressed [ 401.081299][ T43] audit: type=1326 audit(1791381732.622:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.081339][ T43] audit: type=1326 audit(1791381732.622:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.083295][ T43] audit: type=1326 audit(1791381732.622:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.083337][ T43] audit: type=1326 audit(1791381732.622:20078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.083446][T13980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2534'. [ 401.083460][T13980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2534'. [ 401.083469][T13980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2534'. [ 401.083518][ T43] audit: type=1326 audit(1791381732.622:20079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.086677][ T43] audit: type=1326 audit(1791381732.622:20080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.086717][ T43] audit: type=1326 audit(1791381732.622:20081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.086750][ T43] audit: type=1326 audit(1791381732.622:20082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.086784][ T43] audit: type=1326 audit(1791381732.622:20083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.086816][ T43] audit: type=1326 audit(1791381732.622:20084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f12fec code=0x7ffc0000 [ 401.952188][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 401.996581][T13994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.012890][T13994] ipvlan2: entered allmulticast mode [ 402.012904][T13994] bond1: entered allmulticast mode [ 402.013044][T13994] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.013055][T13994] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 402.013468][T13994] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 402.126398][T14003] syzkaller0: entered promiscuous mode [ 402.126415][T14003] syzkaller0: entered allmulticast mode [ 402.315193][ T854] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 402.465204][ T854] usb 7-1: Using ep0 maxpacket: 8 [ 402.465812][ T854] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.467014][ T854] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 402.467038][ T854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 402.467086][ T854] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.467105][ T854] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.467166][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.725302][T13237] Bluetooth: hci0: command tx timeout [ 402.796617][ T854] usb 7-1: GET_CAPABILITIES returned 0 [ 402.796641][ T854] usbtmc 7-1:16.0: can't read capabilities [ 404.149026][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 405.091630][T14030] __nla_validate_parse: 3 callbacks suppressed [ 405.091644][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2550'. [ 405.110949][T14030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.121158][T14030] ipvlan2: entered allmulticast mode [ 405.121171][T14030] bond2: entered allmulticast mode [ 405.121306][T14030] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 405.121316][T14030] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 405.121714][T14030] bond2: (slave ipvlan2): Error -95 calling set_mac_address [ 405.390928][ T854] usb 7-1: USB disconnect, device number 49 [ 405.489180][T14042] syzkaller0: entered promiscuous mode [ 405.489199][T14042] syzkaller0: entered allmulticast mode [ 406.091012][ T43] kauditd_printk_skb: 830 callbacks suppressed [ 406.091050][ T43] audit: type=1326 audit(1791381737.632:20915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f76017 code=0x7ffc0000 [ 406.128941][ T43] audit: type=1326 audit(1791381737.672:20916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.129158][ T43] audit: type=1326 audit(1791381737.672:20917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f76017 code=0x7ffc0000 [ 406.129416][ T43] audit: type=1326 audit(1791381737.672:20918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.129612][ T43] audit: type=1326 audit(1791381737.672:20919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f76017 code=0x7ffc0000 [ 406.129727][ T43] audit: type=1326 audit(1791381737.672:20920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.161684][ T43] audit: type=1326 audit(1791381737.682:20921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.162871][ T43] audit: type=1326 audit(1791381737.682:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f76017 code=0x7ffc0000 [ 406.163201][ T43] audit: type=1326 audit(1791381737.682:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.163340][ T43] audit: type=1326 audit(1791381737.692:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.1.2553" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 406.505100][ T5887] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 406.555868][T14053] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 406.613260][T14054] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2558'. [ 406.645084][ T5887] usb 5-1: device descriptor read/64, error -71 [ 406.885124][ T5887] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 407.025097][ T5887] usb 5-1: device descriptor read/64, error -71 [ 407.135209][ T5887] usb usb5-port1: attempt power cycle [ 407.585122][ T5887] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 407.616558][ T5887] usb 5-1: device descriptor read/8, error -71 [ 407.826517][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 407.829557][T14065] wg1: Master is either lo or non-ether device [ 407.876335][ T5887] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 407.899356][ T5887] usb 5-1: device descriptor read/8, error -71 [ 408.008331][ T5887] usb usb5-port1: unable to enumerate USB device [ 408.535156][ T5887] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 409.215646][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 409.216131][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.216934][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 409.216949][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 409.216962][ T5887] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.216973][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.216992][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.339524][T14081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 409.380799][T14082] syzkaller0: entered promiscuous mode [ 409.380817][T14082] syzkaller0: entered allmulticast mode [ 409.397096][T14083] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2568'. [ 409.618001][ T5887] usb 6-1: GET_CAPABILITIES returned 0 [ 409.618166][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 411.144547][ T43] kauditd_printk_skb: 362 callbacks suppressed [ 411.144599][ T43] audit: type=1326 audit(1791381742.682:21287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.147934][ T43] audit: type=1326 audit(1791381742.682:21288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f85017 code=0x7ffc0000 [ 411.155731][ T43] audit: type=1326 audit(1791381742.682:21289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.155783][ T43] audit: type=1326 audit(1791381742.692:21290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.155888][ T43] audit: type=1326 audit(1791381742.692:21291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f85017 code=0x7ffc0000 [ 411.155938][ T43] audit: type=1326 audit(1791381742.692:21292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.155986][ T43] audit: type=1326 audit(1791381742.702:21293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.156098][ T43] audit: type=1326 audit(1791381742.702:21294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f85017 code=0x7ffc0000 [ 411.173495][ T43] audit: type=1326 audit(1791381742.702:21295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 411.180042][ T43] audit: type=1326 audit(1791381742.712:21296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f84fec code=0x7ffc0000 [ 412.268156][T14106] input: syz1 as /devices/virtual/input/input66 [ 412.340071][ T854] usb 6-1: USB disconnect, device number 35 [ 412.379419][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 412.400815][T14110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.409195][T14110] ipvlan2: entered allmulticast mode [ 412.409207][T14110] bond3: entered allmulticast mode [ 412.409327][T14110] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.409338][T14110] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 412.411197][T14110] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 412.517545][ T5819] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 412.837233][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 412.845136][ T5819] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 412.885144][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.885161][ T5819] usb 5-1: Product: syz [ 412.885169][ T5819] usb 5-1: Manufacturer: syz [ 412.885176][ T5819] usb 5-1: SerialNumber: syz [ 412.935489][ T5819] usb 5-1: config 0 descriptor?? [ 413.342504][ T5819] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 413.465172][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.465616][ T5819] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 413.465641][ T5819] usb 5-1: media controller created [ 413.470165][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.543374][T14124] FAULT_INJECTION: forcing a failure. [ 413.543374][T14124] name fail_futex, interval 1, probability 0, space 0, times 0 [ 413.543395][T14124] CPU: 2 UID: 0 PID: 14124 Comm: syz.1.2582 Not tainted syzkaller #0 PREEMPT(full) [ 413.543411][T14124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.543421][T14124] Call Trace: [ 413.543428][T14124] [ 413.543436][T14124] dump_stack_lvl+0x100/0x190 [ 413.543483][T14124] should_fail_ex.cold+0x5/0xa [ 413.543512][T14124] get_futex_key+0x1d0/0x14f0 [ 413.543539][T14124] ? __pfx_get_futex_key+0x10/0x10 [ 413.543557][T14124] ? ___sys_sendmsg+0x127/0x1e0 [ 413.543576][T14124] futex_wake+0xf4/0x5e0 [ 413.543590][T14124] ? futex_wait+0x11e/0x370 [ 413.543606][T14124] ? __pfx_futex_wake+0x10/0x10 [ 413.543624][T14124] ? find_held_lock+0x2b/0x80 [ 413.543640][T14124] do_futex+0x2b2/0x440 [ 413.543654][T14124] ? __pfx_do_futex+0x10/0x10 [ 413.543667][T14124] ? __seccomp_filter+0x896/0x1130 [ 413.543686][T14124] __ia32_sys_futex_time32+0x2f4/0x470 [ 413.543703][T14124] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 413.543724][T14124] __do_fast_syscall_32+0x13a/0x8b0 [ 413.543740][T14124] ? lockdep_hardirqs_on+0x7d/0x110 [ 413.543756][T14124] do_fast_syscall_32+0x32/0x70 [ 413.543771][T14124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 413.543786][T14124] RIP: 0023:0xf7f75fec [ 413.543800][T14124] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 413.543805][T14124] RSP: 002b:00000000f54265cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 413.543818][T14124] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 413.543826][T14124] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 413.543833][T14124] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 413.543840][T14124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 413.543847][T14124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 413.543862][T14124] [ 413.582198][T14104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.582800][ T5819] zl10353_read_register: readreg error (reg=127, ret==0) [ 413.582839][ T5819] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 413.582849][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 413.977026][ T5819] usb 5-1: USB disconnect, device number 49 [ 414.408217][ T5819] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 414.695762][ T5819] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 415.795131][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 415.795629][ T5819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.796926][ T5819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.796944][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.796956][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.796967][ T5819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.796987][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.949343][T14152] FAULT_INJECTION: forcing a failure. [ 415.949343][T14152] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.949373][T14152] CPU: 2 UID: 0 PID: 14152 Comm: syz.2.2593 Not tainted syzkaller #0 PREEMPT(full) [ 415.949393][T14152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.949404][T14152] Call Trace: [ 415.949410][T14152] [ 415.949417][T14152] dump_stack_lvl+0x100/0x190 [ 415.949445][T14152] should_fail_ex.cold+0x5/0xa [ 415.949471][T14152] get_futex_key+0x1d0/0x14f0 [ 415.949493][T14152] ? __pfx_get_futex_key+0x10/0x10 [ 415.949514][T14152] ? ___sys_sendmsg+0x127/0x1e0 [ 415.949542][T14152] futex_wake+0xf4/0x5e0 [ 415.949565][T14152] ? futex_wait+0x11e/0x370 [ 415.949593][T14152] ? __pfx_futex_wake+0x10/0x10 [ 415.949623][T14152] ? find_held_lock+0x2b/0x80 [ 415.949651][T14152] do_futex+0x2b2/0x440 [ 415.949673][T14152] ? __pfx_do_futex+0x10/0x10 [ 415.949691][T14152] ? __seccomp_filter+0x896/0x1130 [ 415.949716][T14152] __ia32_sys_futex_time32+0x2f4/0x470 [ 415.949741][T14152] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 415.949773][T14152] __do_fast_syscall_32+0x13a/0x8b0 [ 415.949800][T14152] ? lockdep_hardirqs_on+0x7d/0x110 [ 415.949825][T14152] do_fast_syscall_32+0x32/0x70 [ 415.949850][T14152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.949873][T14152] RIP: 0023:0xf73defec [ 415.949892][T14152] Code: Unable to access opcode bytes at 0xf73defc2. [ 415.949900][T14152] RSP: 002b:00000000f53f65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 415.949919][T14152] RAX: ffffffffffffffda RBX: 00000000f7404f8c RCX: 0000000000000081 [ 415.949932][T14152] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 415.949944][T14152] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 415.949955][T14152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 415.949965][T14152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.949986][T14152] [ 415.980593][T14155] input: syz1 as /devices/virtual/input/input67 [ 416.022918][ T5819] usb 5-1: GET_CAPABILITIES returned 0 [ 416.022942][ T5819] usbtmc 5-1:16.0: can't read capabilities [ 416.240289][T13327] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 416.287193][T13190] usb 5-1: USB disconnect, device number 50 [ 416.545143][T13327] usb 6-1: Using ep0 maxpacket: 16 [ 416.546900][T13327] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 416.670914][T13327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.670932][T13327] usb 6-1: Product: syz [ 416.670939][T13327] usb 6-1: Manufacturer: syz [ 416.670947][T13327] usb 6-1: SerialNumber: syz [ 416.958535][T13327] usb 6-1: config 0 descriptor?? [ 417.425384][T13327] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 417.463203][T13327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.472571][T13327] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 417.473866][T13327] usb 6-1: media controller created [ 417.738236][T13327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.838673][T14154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.955748][T13327] zl10353_read_register: readreg error (reg=127, ret==0) [ 417.955777][T13327] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 417.955784][T13327] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 417.962578][T13327] usb 6-1: USB disconnect, device number 36 [ 417.986944][T13327] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 418.060879][T13237] [ 418.061686][T13237] ====================================================== [ 418.062322][T14181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2603'. [ 418.062336][T14181] openvswitch: netlink: Flow actions attr not present in new flow. [ 418.069128][T13237] WARNING: possible circular locking dependency detected [ 418.071317][T13237] syzkaller #0 Not tainted [ 418.072877][T13237] ------------------------------------------------------ [ 418.075029][T13237] kworker/u34:0/13237 is trying to acquire lock: [ 418.077021][T13237] ffffffff90f86fe0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x3f/0x4b0 [ 418.079870][T13237] [ 418.079870][T13237] but task is already holding lock: [ 418.082170][T13237] ffffffff90f5a200 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 418.085579][T13237] [ 418.085579][T13237] which lock already depends on the new lock. [ 418.085579][T13237] [ 418.088836][T13237] [ 418.088836][T13237] the existing dependency chain (in reverse order) is: [ 418.091559][T13237] [ 418.091559][T13237] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 418.093970][T13237] lock_acquire+0x1d1/0x380 [ 418.095561][T13237] __mutex_lock+0x1a4/0x1bd0 [ 418.097201][T13237] hci_remote_features_evt+0x485/0x9b0 [ 418.099098][T13237] hci_event_packet+0x8e9/0xcd0 [ 418.100776][T13237] hci_rx_work+0x451/0xfc0 [ 418.102372][T13237] process_one_work+0xac7/0x1b10 [ 418.104078][T13237] worker_thread+0x5ef/0xe50 [ 418.105709][T13237] kthread+0x373/0x450 [ 418.107161][T13237] ret_from_fork+0x730/0xd60 [ 418.108765][T13237] ret_from_fork_asm+0x1a/0x30 [ 418.110432][T13237] [ 418.110432][T13237] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 418.112685][T13237] lock_acquire+0x1d1/0x380 [ 418.114303][T13237] __mutex_lock+0x1a4/0x1bd0 [ 418.115910][T13237] l2cap_chan_connect+0xac/0x2110 [ 418.117671][T13237] l2cap_sock_connect+0x37a/0x770 [ 418.119410][T13237] kernel_connect+0x107/0x160 [ 418.121070][T13237] rfcomm_dlc_open+0x838/0xac0 [ 418.122727][T13237] rfcomm_sock_connect+0x42c/0x690 [ 418.124437][T13237] __sys_connect_file+0x146/0x1a0 [ 418.126192][T13237] __sys_connect+0x141/0x170 [ 418.127812][T13237] __ia32_sys_connect+0x71/0xb0 [ 418.129518][T13237] __do_fast_syscall_32+0x13a/0x8b0 [ 418.131301][T13237] do_fast_syscall_32+0x32/0x70 [ 418.133020][T13237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.135144][T13237] [ 418.135144][T13237] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 418.137483][T13237] check_prev_add+0xeb/0xe60 [ 418.139114][T13237] __lock_acquire+0x1528/0x1f40 [ 418.140817][T13237] lock_acquire+0x1d1/0x380 [ 418.142408][T13237] __mutex_lock+0x1a4/0x1bd0 [ 418.144018][T13237] rfcomm_security_cfm+0x3f/0x4b0 [ 418.145770][T13237] hci_auth_complete_evt+0x811/0x1180 [ 418.147625][T13237] hci_event_packet+0x8e9/0xcd0 [ 418.149331][T13237] hci_rx_work+0x451/0xfc0 [ 418.150898][T13237] process_one_work+0xac7/0x1b10 [ 418.152607][T13237] worker_thread+0x5ef/0xe50 [ 418.154233][T13237] kthread+0x373/0x450 [ 418.155692][T13237] ret_from_fork+0x730/0xd60 [ 418.157330][T13237] ret_from_fork_asm+0x1a/0x30 [ 418.158996][T13237] [ 418.158996][T13237] other info that might help us debug this: [ 418.158996][T13237] [ 418.162151][T13237] Chain exists of: [ 418.162151][T13237] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 418.162151][T13237] [ 418.165907][T13237] Possible unsafe locking scenario: [ 418.165907][T13237] [ 418.168229][T13237] CPU0 CPU1 [ 418.169910][T13237] ---- ---- [ 418.171700][T13237] lock(hci_cb_list_lock); [ 418.173532][T13237] lock(&hdev->lock); [ 418.176115][T13237] lock(hci_cb_list_lock); [ 418.178472][T13237] lock(rfcomm_mutex); [ 418.179782][T13237] [ 418.179782][T13237] *** DEADLOCK *** [ 418.179782][T13237] [ 418.182327][T13237] locks held by kworker/u34:0/13237: 4, last CPU#2: [ 418.184369][T13237] #0: ffff88806b5a3940 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 418.187632][T13237] #1: ffffc90004f5fd08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 418.191146][T13237] #2: ffff8880722780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x99/0x1180 [ 418.194231][T13237] #3: ffffffff90f5a200 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x77c/0x1180 [ 418.197483][T13237] [ 418.197483][T13237] stack backtrace: [ 418.199328][T13237] CPU: 2 UID: 0 PID: 13237 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 418.202278][T13237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.205422][T13237] Workqueue: hci3 hci_rx_work [ 418.206913][T13237] Call Trace: [ 418.207991][T13237] [ 418.208958][T13237] dump_stack_lvl+0x100/0x190 [ 418.210452][T13237] print_circular_bug.cold+0x178/0x1be [ 418.212171][T13237] check_noncircular+0x146/0x160 [ 418.213765][T13237] ? mgmt_send_event_skb+0x2f4/0x460 [ 418.215422][T13237] ? lock_acquire+0x1d1/0x380 [ 418.216951][T13237] check_prev_add+0xeb/0xe60 [ 418.218436][T13237] __lock_acquire+0x1528/0x1f40 [ 418.219936][T13237] ? l2cap_security_cfm+0x90b/0x1240 [ 418.221566][T13237] lock_acquire+0x1d1/0x380 [ 418.222958][T13237] ? rfcomm_security_cfm+0x3f/0x4b0 [ 418.224529][T13237] ? __pfx___might_resched+0x10/0x10 [ 418.226152][T13237] __mutex_lock+0x1a4/0x1bd0 [ 418.227585][T13237] ? rfcomm_security_cfm+0x3f/0x4b0 [ 418.229272][T13237] ? rfcomm_security_cfm+0x3f/0x4b0 [ 418.230833][T13237] ? __pfx___mutex_lock+0x10/0x10 [ 418.232358][T13237] ? __pfx___mutex_lock+0x10/0x10 [ 418.233926][T13237] ? mgmt_send_event+0x13b/0x180 [ 418.235439][T13237] ? rfcomm_security_cfm+0x3f/0x4b0 [ 418.237057][T13237] rfcomm_security_cfm+0x3f/0x4b0 [ 418.238656][T13237] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 418.240385][T13237] hci_auth_complete_evt+0x811/0x1180 [ 418.242060][T13237] ? __asan_memcpy+0x2/0x60 [ 418.243471][T13237] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 418.245270][T13237] ? __skb_clone+0x570/0x760 [ 418.246689][T13237] ? skb_pull_data+0x15f/0x1e0 [ 418.248296][T13237] hci_event_packet+0x8e9/0xcd0 [ 418.250173][T13237] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 418.252320][T13237] ? __pfx_hci_event_packet+0x10/0x10 [ 418.254194][T13237] ? lockdep_hardirqs_on+0x7d/0x110 [ 418.256015][T13237] hci_rx_work+0x451/0xfc0 [ 418.257502][T13237] process_one_work+0xac7/0x1b10 [ 418.259065][T13237] ? __pfx_process_one_work+0x10/0x10 [ 418.260700][T13237] ? lock_acquire+0x1d1/0x380 [ 418.262183][T13237] ? __pfx_hci_rx_work+0x10/0x10 [ 418.263680][T13237] worker_thread+0x5ef/0xe50 [ 418.265137][T13237] ? __pfx_worker_thread+0x10/0x10 [ 418.265449][ T5819] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 418.268979][T13237] ? kthread+0x13a/0x450 [ 418.270288][T13237] ? __pfx_worker_thread+0x10/0x10 [ 418.271854][T13237] kthread+0x373/0x450 [ 418.273160][T13237] ? __pfx_kthread+0x10/0x10 [ 418.274567][T13237] ret_from_fork+0x730/0xd60 [ 418.275973][T13237] ? __pfx_ret_from_fork+0x10/0x10 [ 418.277576][T13237] ? __switch_to+0x800/0x10f0 [ 418.279061][T13237] ? __pfx_kthread+0x10/0x10 [ 418.280491][T13237] ret_from_fork_asm+0x1a/0x30 [ 418.281989][T13237] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.669308][ T5812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.687013][ T5819] usb 8-1: device descriptor read/all, error -71 [ 418.718182][ T5812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.778815][ T5812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.828241][ T5812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.879819][ T5812] bridge_slave_1: left allmulticast mode [ 418.879834][ T5812] bridge_slave_1: left promiscuous mode [ 418.879908][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.880873][ T5812] bridge_slave_0: left allmulticast mode [ 418.880886][ T5812] bridge_slave_0: left promiscuous mode [ 418.880966][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.912657][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.913763][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.914309][ T5812] bond0 (unregistering): Released all slaves [ 418.917107][ T5812] bond1 (unregistering): Released all slaves [ 418.919008][ T5812] bond2 (unregistering): Released all slaves [ 418.920872][ T5812] bond3 (unregistering): Released all slaves [ 419.021264][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 419.081879][ T5812] hsr_slave_0: left promiscuous mode [ 419.082537][ T5812] hsr_slave_1: left promiscuous mode [ 419.082783][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.082794][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.083106][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.083115][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.085917][ T5812] veth1_macvtap: left promiscuous mode [ 419.085939][ T5812] veth0_macvtap: left promiscuous mode [ 419.085985][ T5812] veth1_vlan: left promiscuous mode [ 419.086009][ T5812] veth0_vlan: left promiscuous mode [ 419.143327][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 419.148575][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 419.193383][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 419.302928][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 419.390024][ T5812] IPVS: stop unused estimator thread 0... [ 419.402045][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 419.431169][ T5812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.470100][ T5812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.509820][ T5812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.528643][ T5812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.594315][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.639079][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.679155][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.688394][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 419.721830][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.782938][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 419.811338][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.850147][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.902931][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 419.919623][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.960941][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.013297][ T5812] bridge_slave_1: left allmulticast mode [ 420.013313][ T5812] bridge_slave_1: left promiscuous mode [ 420.013403][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.014246][ T5812] bridge_slave_0: left allmulticast mode [ 420.014257][ T5812] bridge_slave_0: left promiscuous mode [ 420.014332][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.025674][ T5812] bridge_slave_1: left allmulticast mode [ 420.025688][ T5812] bridge_slave_1: left promiscuous mode [ 420.025759][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.030354][ T5812] bridge_slave_0: left allmulticast mode [ 420.030372][ T5812] bridge_slave_0: left promiscuous mode [ 420.030432][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.040015][ T5812] bridge_slave_1: left allmulticast mode [ 420.040029][ T5812] bridge_slave_1: left promiscuous mode [ 420.040107][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.040871][ T5812] bridge_slave_0: left allmulticast mode [ 420.040882][ T5812] bridge_slave_0: left promiscuous mode [ 420.040936][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.099848][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.101408][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.102297][ T5812] bond0 (unregistering): Released all slaves [ 420.127758][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.128676][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.129236][ T5812] bond0 (unregistering): Released all slaves [ 420.130487][ T5812] bond1 (unregistering): Released all slaves [ 420.159086][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.161024][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.161599][ T5812] bond0 (unregistering): Released all slaves [ 420.163107][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 420.276613][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 420.404053][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 420.500621][ T5812] hsr_slave_0: left promiscuous mode [ 420.500884][ T5812] hsr_slave_1: left promiscuous mode [ 420.501106][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.501116][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.501411][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.501419][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.503628][ T5812] hsr_slave_0: left promiscuous mode [ 420.503893][ T5812] hsr_slave_1: left promiscuous mode [ 420.504121][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.504130][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.504445][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.504453][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.509582][ T5812] hsr_slave_0: left promiscuous mode [ 420.512424][ T5812] hsr_slave_1: left promiscuous mode [ 420.512874][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.512887][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.515739][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.515748][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.530381][ T5812] veth1_macvtap: left promiscuous mode [ 420.530426][ T5812] veth0_macvtap: left promiscuous mode [ 420.530513][ T5812] veth1_vlan: left promiscuous mode [ 420.530571][ T5812] veth0_vlan: left promiscuous mode [ 420.539407][ T5812] veth1_macvtap: left promiscuous mode [ 420.539432][ T5812] veth0_macvtap: left promiscuous mode [ 420.539481][ T5812] veth1_vlan: left promiscuous mode [ 420.539523][ T5812] veth0_vlan: left promiscuous mode [ 420.548692][ T5812] veth1_macvtap: left promiscuous mode [ 420.548731][ T5812] veth0_macvtap: left promiscuous mode [ 420.548835][ T5812] veth1_vlan: left promiscuous mode [ 420.548890][ T5812] veth0_vlan: left promiscuous mode [ 420.670506][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 420.674334][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 420.746078][ T5812] team_slave_1 (unregistering): left allmulticast mode [ 420.746458][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 420.749340][ T5812] team_slave_0 (unregistering): left allmulticast mode [ 420.749719][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 420.850617][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 420.853066][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 420.881357][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 421.025350][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 421.159267][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 421.293689][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 421.354071][ T5812] IPVS: stop unused estimator thread 0... [ 421.418056][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 421.573292][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17