last executing test programs: 15.210213544s ago: executing program 0 (id=1118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x4b, &(0x7f0000000100), 0x120) sendmsg$inet(r5, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0xe0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 12.558939375s ago: executing program 0 (id=1135): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='%\x00') mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902430001010000000902020000052406000005240000000d240f01000000000000000000042413000424130009058202000000000009050302aea600000000f209f0005b9e794d6cf13ad50a9e73e90c19be88530c62608c0c2d1abb032c0b42234c7ec541fb8d8e73b1e8a00e7a016eee236c98999da48eb4551da65436a0ad1fea5e44b50bade195d6247640de11d1be58650a8cb9e61a6f7f1299396d77ffa5c24697"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/l2tp_eth', 0x0, 0x180) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) pread64(r3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045005, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800e9780000000000004000020000000000000008000600fcffffff04000b"], 0x24}, 0x1, 0xff000000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) connect$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x2, @loopback, 0x4}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xffff0001}]}}}]}, 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r8, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000080)="00c3ff", 0x3}, {0x0}], 0x3) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1}, {0x8}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.847569045s ago: executing program 0 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, &(0x7f0000000100), 0x120) sendmsg$inet(r4, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r2, 0x856d}, {r3, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0xe0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 8.259042987s ago: executing program 0 (id=1155): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 8.059817899s ago: executing program 4 (id=1157): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='%\x00') mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902430001010000000902020000052406000005240000000d240f01000000000000000000042413000424130009058202000000000009050302aea600000000f209f0005b9e794d6cf13ad50a9e73e90c19be88530c62608c0c2d1abb032c0b42234c7ec541fb8d8e73b1e8a00e7a016eee236c98999da48eb4551da65436a0ad1fea5e44b50bade195d6247640de11d1be58650a8cb9e61a6f7f1299396d77ffa5c2469714604841002f66e0f5e39b361fbb8379b876aa775dd7cf99ab410dc0db29"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/l2tp_eth', 0x0, 0x180) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) pread64(r3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045005, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800e9780000000000004000020000000000000008000600fcffffff04000b"], 0x24}, 0x1, 0xff000000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) connect$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x2, @loopback, 0x4}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xffff0001}]}}}]}, 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r8, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000080)="00c3ff", 0x3}, {0x0}], 0x3) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1}, {0x8}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.849543823s ago: executing program 0 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, @address_reply}}}}, 0x0) 7.397105009s ago: executing program 0 (id=1160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, r1, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6}]}]}, 0x28}}, 0x44040) 6.548212266s ago: executing program 2 (id=1167): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffd}, 0x54) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.278319578s ago: executing program 2 (id=1169): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x371802, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = dup(r0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) unlink(&(0x7f0000000140)='./cgroup\x00') mmap(&(0x7f0000b20000/0x3000)=nil, 0x3000, 0x1000004, 0x50, r2, 0x682fa000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x47, 0x0, r4, &(0x7f0000000580), &(0x7f0000000300)='./file0\x00', 0x10, 0x400}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000540)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.073703228s ago: executing program 4 (id=1172): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "f43395", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x10, 0x8}]}}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x1) 5.913943913s ago: executing program 4 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x400}], 0xb0, 0x0, &(0x7f0000000680)="4bb16fc96dcf8279654e577f670dac13efbd760cd34255de3bf80391ae67bfe4e67705ee02def5e1ad9dbca3d451ee56d2e90000a7994c1dd3f896d05087d47bc9f80d4ed247a336a7a931473c12ce53831705230c9f023aba4af898da0a1648338defdab1653a0f3b90d8654091d004bc9614fc95d7b0a49cbb5a84b8392ea16965d89b533cc5576148542d2f591a6533663c053b8b668b4f972d39ccd9bb365f59f02514e28343ddfd0d86051b1ea3"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x7c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0xbcd0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, @in={0x2, 0x4e22, @remote}}}, 0x118) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64=r7, @ANYRESDEC=r2, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 5.289761105s ago: executing program 2 (id=1174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, &(0x7f0000000100), 0x120) sendmsg$inet(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x856d}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0xe0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.445105911s ago: executing program 3 (id=1175): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4.318710106s ago: executing program 1 (id=1177): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7faa7fe4"}]}]}}}}}}}, 0x0) 4.190680165s ago: executing program 3 (id=1178): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DRM_IOCTL_GET_STATS(r0, 0x807c6406, &(0x7f0000010d00)=""/245) 3.74498584s ago: executing program 1 (id=1179): syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80206433, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d888e", 0xe, 0x0, &(0x7f0000000140)={0x11, 0xf6, r2}, 0x14) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x4c000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x1, 0x0, 0x6, 0xfffffffffffffffe}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) 3.744600008s ago: executing program 3 (id=1180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x400}], 0xb0, 0x0, &(0x7f0000000680)="4bb16fc96dcf8279654e577f670dac13efbd760cd34255de3bf80391ae67bfe4e67705ee02def5e1ad9dbca3d451ee56d2e90000a7994c1dd3f896d05087d47bc9f80d4ed247a336a7a931473c12ce53831705230c9f023aba4af898da0a1648338defdab1653a0f3b90d8654091d004bc9614fc95d7b0a49cbb5a84b8392ea16965d89b533cc5576148542d2f591a6533663c053b8b668b4f972d39ccd9bb365f59f02514e28343ddfd0d86051b1ea3"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r4], 0x7c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0xbcd0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, @in={0x2, 0x4e22, @remote}}}, 0x118) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64=r8, @ANYRESDEC=r2, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 3.566508296s ago: executing program 2 (id=1181): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b003dd108000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000300050800800030008ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002"], 0x58}}, 0x0) 2.124888044s ago: executing program 4 (id=1182): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='%\x00') mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902430001010000000902020000052406000005240000000d240f01000000000000000000042413000424130009058202000000000009050302aea600000000f209f0005b9e794d6cf13ad50a9e73e90c19be88530c62608c0c2d1abb032c0b42234c7ec541fb8d8e73b1e8a00e7a016eee236c98999da48eb4551da65436a0ad1fea5e44b50bade195d6247640de11d1be58650a8cb9e61a6f7f1299396d77ffa5c2469714604841002f66e0f5e39b361fbb8379b876aa775dd7cf99ab410dc0db29"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000400)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/l2tp_eth', 0x0, 0x180) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) pread64(r3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045005, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800e9780000000000004000020000000000000008000600fcffffff04000b"], 0x24}, 0x1, 0xff000000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) connect$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x2, @loopback, 0x4}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xffff0001}]}}}]}, 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r8, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000080)="00c3ff", 0x3}, {0x0}], 0x3) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1}, {0x8}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.259646492s ago: executing program 2 (id=1183): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x371802, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = dup(r0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x47, 0x0, r5, &(0x7f0000000580), &(0x7f0000000300)='./file0\x00', 0x10, 0x400}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000540)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 941.441917ms ago: executing program 1 (id=1184): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2) r0 = syz_io_uring_setup(0x7667, &(0x7f00000002c0)={0x0, 0x0, 0x13580}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 601.627942ms ago: executing program 1 (id=1185): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0xba12, 0x27}, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 566.571407ms ago: executing program 3 (id=1186): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.size\x00') 383.890128ms ago: executing program 4 (id=1187): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000080)) 348.368971ms ago: executing program 3 (id=1188): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace(0x4207, r0) 207.781687ms ago: executing program 2 (id=1189): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/58, 0x3a}, {0x0}], 0x2) 157.067286ms ago: executing program 1 (id=1190): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)) 80.27188ms ago: executing program 3 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x400}], 0xb0, 0x0, &(0x7f0000000680)="4bb16fc96dcf8279654e577f670dac13efbd760cd34255de3bf80391ae67bfe4e67705ee02def5e1ad9dbca3d451ee56d2e90000a7994c1dd3f896d05087d47bc9f80d4ed247a336a7a931473c12ce53831705230c9f023aba4af898da0a1648338defdab1653a0f3b90d8654091d004bc9614fc95d7b0a49cbb5a84b8392ea16965d89b533cc5576148542d2f591a6533663c053b8b668b4f972d39ccd9bb365f59f02514e28343ddfd0d86051b1ea3"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x7c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0xbcd0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, @in={0x2, 0x4e22, @remote}}}, 0x118) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64=r7, @ANYRESDEC=r2, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 60.225512ms ago: executing program 4 (id=1192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, &(0x7f0000000100), 0x120) sendmsg$inet(r4, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r2, 0x856d}, {r3, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0xe0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 1 (id=1193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, &(0x7f0000000100), 0x120) sendmsg$inet(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x856d}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0xe0}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): ][ T5308] hid-generic 0003:0463:C537.0007: unknown main item tag 0x0 [ 222.908395][ T5308] hid-generic 0003:0463:C537.0007: unknown main item tag 0x0 [ 222.947904][ T5308] hid-generic 0003:0463:C537.0007: unknown main item tag 0x0 [ 222.988952][ T5308] hid-generic 0003:0463:C537.0007: unknown main item tag 0x0 [ 223.005893][ T5308] hid-generic 0003:0463:C537.0007: unknown main item tag 0x0 [ 223.037775][ T5308] hid-generic 0003:0463:C537.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 223.084440][ T5308] usb 1-1: USB disconnect, device number 23 [ 223.550690][ T5365] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.568347][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 223.576665][ T5308] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 223.662976][ T7896] netlink: 56 bytes leftover after parsing attributes in process `syz.0.596'. [ 223.709793][ T5365] usb 4-1: Using ep0 maxpacket: 8 [ 223.723247][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.740116][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 223.750633][ T5308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.761912][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.775332][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.787318][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.799018][ T5365] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 223.808529][ T25] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 223.817951][ T7898] vivid-000: disconnect [ 223.822537][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.832810][ T5365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.841073][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.845217][ T7897] vivid-000: reconnect [ 223.849667][ T5308] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.869121][ T5365] usb 4-1: config 0 descriptor?? [ 223.879784][ T5308] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.892503][ T25] usb 5-1: config 0 descriptor?? [ 223.903031][ T5308] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.917623][ T5308] usb 2-1: Manufacturer: syz [ 223.933515][ T5308] usb 2-1: config 0 descriptor?? [ 224.106655][ T29] audit: type=1326 audit(1729039527.966:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.0.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972697dff9 code=0x0 [ 224.218492][ T5308] rc_core: IR keymap rc-hauppauge not found [ 224.224981][ T5308] Registered IR keymap rc-empty [ 224.232251][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.261930][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.289595][ T5365] uclogic 0003:28BD:0078.0008: interface is invalid, ignoring [ 224.303379][ T5308] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 224.340999][ T25] nintendo 0003:057E:200E.0009: unknown main item tag 0x0 [ 224.352896][ T25] nintendo 0003:057E:200E.0009: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 224.365463][ T5308] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 224.398681][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.419624][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.443182][ T25] nintendo 0003:057E:200E.0009: Failed charging grip handshake [ 224.451906][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.460631][ T25] nintendo 0003:057E:200E.0009: Failed to initialize controller; ret=-110 [ 224.494251][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.505866][ T5365] usb 4-1: USB disconnect, device number 15 [ 224.522970][ T25] nintendo 0003:057E:200E.0009: probe - fail = -110 [ 224.544322][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.564489][ T25] nintendo 0003:057E:200E.0009: probe with driver nintendo failed with error -110 [ 224.592117][ T25] usb 5-1: USB disconnect, device number 16 [ 224.598527][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.628478][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.648370][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.698414][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.719865][ T5308] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.740650][ T5308] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 224.749895][ T5308] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 224.763341][ T5308] usb 2-1: USB disconnect, device number 17 [ 225.203316][ T29] audit: type=1326 audit(1729039529.066:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.3.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 225.388455][ T5293] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 225.550003][ T5293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.564286][ T5293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.574236][ T5292] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.593048][ T5293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 225.611494][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.621595][ T5293] usb 1-1: SerialNumber: syz [ 225.646738][ T5293] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 225.658124][ T5293] usb-storage 1-1:1.0: USB Mass Storage device detected [ 225.679116][ T5293] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 225.687845][ T5293] scsi host1: usb-storage 1-1:1.0 [ 225.728415][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 225.736185][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.757616][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.767541][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.796999][ T5292] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.814228][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.826344][ T5292] usb 2-1: config 0 descriptor?? [ 226.263056][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.288709][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.305585][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.317602][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.346465][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.368340][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.380359][ T29] audit: type=1326 audit(1729039530.246:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.4.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f217397dff9 code=0x0 [ 226.392499][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.411267][ T7940] netlink: 87 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.443304][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.462971][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.481351][ T5292] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 226.530856][ T5292] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input27 [ 226.586502][ T7944] netlink: 'syz.3.613': attribute type 29 has an invalid length. [ 226.649074][ T7944] netlink: 'syz.3.613': attribute type 29 has an invalid length. [ 226.672157][ T5292] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 226.702389][ T5292] usb 2-1: USB disconnect, device number 18 [ 226.944431][ T5293] usb 1-1: USB disconnect, device number 24 [ 227.061746][ T7953] fuse: Bad value for 'fd' [ 227.301841][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 227.428499][ T5292] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.580569][ T5292] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.604295][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.631768][ T5292] usb 2-1: config 0 descriptor?? [ 227.657902][ T5292] cp210x 2-1:0.0: cp210x converter detected [ 227.675274][ T7973] kernel read not supported for file /eth0 (pid: 7973 comm: syz.4.624) [ 227.686422][ T29] audit: type=1800 audit(1729039531.546:155): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.624" name="eth0" dev="mqueue" ino=21004 res=0 errno=0 [ 228.148802][ T5308] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 228.300708][ T5292] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 228.309069][ T5292] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 228.322017][ T5308] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.333507][ T5308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.355028][ T5292] usb 2-1: cp210x converter now attached to ttyUSB0 [ 228.362249][ T5308] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 228.392499][ T5292] usb 2-1: USB disconnect, device number 19 [ 228.407699][ T5308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.442994][ T5292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.461778][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.477947][ T5292] cp210x 2-1:0.0: device disconnected [ 228.485397][ T5308] usb 3-1: SerialNumber: syz [ 228.733113][ T7979] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 228.763687][ T7979] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 228.902833][ T5308] usb 3-1: USB disconnect, device number 26 [ 229.317118][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 229.818450][ T5365] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.999217][ T5365] usb 2-1: Using ep0 maxpacket: 8 [ 230.043687][ T5365] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 230.053859][ T5365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.064447][ T5365] usb 2-1: Product: syz [ 230.069168][ T5365] usb 2-1: Manufacturer: syz [ 230.074026][ T5365] usb 2-1: SerialNumber: syz [ 230.086956][ T5365] usb 2-1: config 0 descriptor?? [ 230.096176][ T5365] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 230.165945][ T5365] dvb-usb: bulk message failed: -22 (2/0) [ 230.183718][ T5365] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.208892][ T5365] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 230.226308][ T5365] usb 2-1: media controller created [ 230.247039][ T5365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.310084][ T5365] dvb-usb: bulk message failed: -22 (1/0) [ 230.326429][ T5365] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 230.359454][ T5365] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 230.448607][ T5365] dvb-usb: schedule remote query interval to 50 msecs. [ 230.478282][ T5365] dvb-usb: bulk message failed: -22 (2/0) [ 230.484104][ T5365] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 230.540062][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 230.546319][ T25] dvb-usb: error while querying for an remote control event. [ 230.581103][ T5365] usb 2-1: USB disconnect, device number 20 [ 230.684319][ T5365] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 230.720013][ T6783] udevd[6783]: setting mode of /dev/bus/usb/002/020 to 020664 failed: No such file or directory [ 230.771730][ T6783] udevd[6783]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 230.858305][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 231.005995][ T8041] macsec1: entered promiscuous mode [ 231.013940][ T8041] macvlan0: entered promiscuous mode [ 231.029968][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 231.045635][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.070151][ T8041] macvlan0: left promiscuous mode [ 231.085667][ T8] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 231.122166][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.154073][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.183570][ T8] usb 1-1: SerialNumber: syz [ 231.235103][ T8047] bridge0: port 3(veth0_to_bridge) entered blocking state [ 231.268454][ T8047] bridge0: port 3(veth0_to_bridge) entered disabled state [ 231.300145][ T8047] veth0_to_bridge: entered allmulticast mode [ 231.337647][ T8047] veth0_to_bridge: entered promiscuous mode [ 231.362478][ T8047] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.384537][ T8047] bridge0: port 3(veth0_to_bridge) entered blocking state [ 231.393521][ T8047] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 231.423010][ T8023] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 231.439067][ T8023] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 231.571745][ T5293] usb 1-1: USB disconnect, device number 25 [ 231.628474][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 231.800209][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.808857][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 231.821290][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.835177][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 231.855918][ T8] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 231.873137][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.892497][ T8] usb 2-1: config 0 descriptor?? [ 232.093124][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 232.340596][ T8082] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 232.358944][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.373033][ T8082] netlink: 181292 bytes leftover after parsing attributes in process `syz.3.671'. [ 232.382742][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.406294][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.415043][ T8082] openvswitch: netlink: Message has 4 unknown bytes. [ 232.421754][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.421795][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.421826][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.421855][ T8] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0 [ 232.436327][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 232.465705][ T8] petalynx 0003:18B1:0037.000B: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 232.673433][ T8] usb 2-1: USB disconnect, device number 21 [ 232.730264][ T8095] sctp: [Deprecated]: syz.4.674 (pid 8095) Use of int in maxseg socket option. [ 232.730264][ T8095] Use struct sctp_assoc_value instead [ 233.298689][ T5308] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 233.480022][ T5308] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 233.499409][ T5308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.550988][ T5308] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 233.588293][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 233.606913][ T5308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.644012][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.665448][ T5308] usb 5-1: SerialNumber: syz [ 233.959560][ T25] usb 4-1: config 0 has no interfaces? [ 233.999052][ T8109] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 234.025282][ T25] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 234.048920][ T8109] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 234.078424][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.110494][ T25] usb 4-1: Product: syz [ 234.129231][ T25] usb 4-1: Manufacturer: syz [ 234.144283][ T25] usb 4-1: SerialNumber: syz [ 234.179370][ T25] usb 4-1: config 0 descriptor?? [ 234.201522][ T5365] usb 5-1: USB disconnect, device number 17 [ 234.546374][ T8118] fuse: Unknown parameter 'fd0x000000000000000900000000000000000000' [ 234.580490][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 234.838934][ T8150] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 234.866351][ T8150] netlink: 'syz.0.694': attribute type 2 has an invalid length. [ 235.337054][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 235.521589][ T5292] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.696284][ T5292] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.709273][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.748616][ T5292] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 235.768116][ T5292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.777785][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.796230][ T5292] usb 3-1: SerialNumber: syz [ 236.107937][ T8163] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 236.146967][ T8163] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 236.286163][ T5290] usb 3-1: USB disconnect, device number 27 [ 236.358273][ T5292] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 236.408326][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 236.524521][ T5292] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 236.538328][ T5292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.558416][ T5292] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 236.558603][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 236.570192][ T5292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.589365][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.599897][ T5292] usb 5-1: SerialNumber: syz [ 236.609811][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.668234][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.694298][ T5292] usb 4-1: USB disconnect, device number 16 [ 236.722352][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.773950][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.808316][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.835224][ T25] usb 2-1: config 0 descriptor?? [ 236.888947][ T8183] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 236.989685][ T8183] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 237.136308][ T5308] usb 5-1: USB disconnect, device number 18 [ 237.311333][ T25] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 237.391311][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input29 [ 237.426396][ T25] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 237.768339][ T5292] usb 2-1: USB disconnect, device number 22 [ 237.889620][ T5365] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.933916][ T8205] tun0: tun_chr_ioctl cmd 1074025677 [ 237.948846][ T8205] tun0: linktype set to 769 [ 238.108540][ T5365] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.117434][ T5365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.142652][ T5365] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 238.211613][ T5365] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.221480][ T5365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.230688][ T5365] usb 3-1: SerialNumber: syz [ 238.385075][ T8219] fuse: Bad value for 'fd' [ 238.559410][ T8200] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 238.578629][ T8200] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 238.690288][ T8] usb 3-1: USB disconnect, device number 28 [ 238.732948][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 238.842638][ T8239] fuse: Bad value for 'fd' [ 238.898457][ T5365] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.915586][ T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.933892][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.958223][ T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 238.981352][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.998452][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.016237][ T25] usb 2-1: SerialNumber: syz [ 239.098408][ T5365] usb 5-1: Using ep0 maxpacket: 8 [ 239.111266][ T5365] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.160079][ T5365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.188222][ T5365] usb 5-1: Product: syz [ 239.195756][ T5365] usb 5-1: Manufacturer: syz [ 239.207108][ T5365] usb 5-1: SerialNumber: syz [ 239.214615][ T5365] usb 5-1: config 0 descriptor?? [ 239.255844][ T8226] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 239.292023][ T8226] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 239.402754][ T5308] usb 2-1: USB disconnect, device number 23 [ 239.435770][ T5365] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 239.898364][ T5308] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 240.088498][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.111419][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.134341][ T5308] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 240.148308][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.180481][ T5308] usb 3-1: config 0 descriptor?? [ 240.528291][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.655738][ T5308] wacom 0003:056A:00B8.000D: unknown main item tag 0x0 [ 240.688293][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 240.695743][ T5308] wacom 0003:056A:00B8.000D: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 240.697247][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.721771][ T5308] wacom 0003:056A:00B8.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 240.739010][ T5308] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.000D/input/input30 [ 240.769788][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.823049][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.867781][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.890427][ T5308] usb 3-1: USB disconnect, device number 29 [ 240.921101][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.975932][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.158712][ T5365] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 241.266554][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 241.279440][ T8] usbtmc 2-1:16.0: can't read capabilities [ 241.502727][ T5365] usb 2-1: USB disconnect, device number 24 [ 241.976029][ T8272] fuse: Bad value for 'fd' [ 242.204864][ T5295] usb 5-1: USB disconnect, device number 19 [ 242.326042][ T8283] fuse: Bad value for 'fd' [ 242.398386][ T5365] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 242.578453][ T5365] usb 1-1: Using ep0 maxpacket: 8 [ 242.618347][ T5365] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 242.627599][ T5365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 242.646593][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.661953][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.702292][ T5365] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 242.715529][ T5365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.730376][ T5365] usb 1-1: config 0 descriptor?? [ 243.191882][ T5365] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 243.210735][ T5365] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 243.242900][ T5365] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 243.251415][ T5365] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 243.260068][ T5365] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 243.358984][ T5365] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found [ 243.375620][ T5365] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found [ 243.450637][ T5365] usb 1-1: USB disconnect, device number 26 [ 243.653866][ T8306] fuse: Bad value for 'fd' [ 244.038256][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 244.154816][ T8311] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 244.233685][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.264718][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.325309][ T8] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 244.349256][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.368224][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 244.387166][ T8] usb 5-1: SerialNumber: syz [ 244.616311][ T8309] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 244.662679][ T8309] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 244.790800][ T8] usb 5-1: USB disconnect, device number 20 [ 244.833354][ T8322] fuse: Bad value for 'fd' [ 245.935061][ T8342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 246.368381][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 246.586023][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.597295][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.616701][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.639884][ T8] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 246.659449][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.688928][ T8] usb 1-1: config 0 descriptor?? [ 246.695383][ T8364] fuse: Bad value for 'fd' [ 246.748380][ T5365] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 246.878526][ T5365] usb 2-1: device descriptor read/64, error -71 [ 247.133178][ T8] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 247.145469][ T8] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 247.152065][ T5365] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 247.161194][ T8] zydacron 0003:13EC:0006.000F: unexpected long global item [ 247.170848][ T8] zydacron 0003:13EC:0006.000F: parse failed [ 247.178295][ T8] zydacron 0003:13EC:0006.000F: probe with driver zydacron failed with error -22 [ 247.349794][ T5365] usb 2-1: device descriptor read/64, error -71 [ 247.356979][ T8] usb 1-1: USB disconnect, device number 27 [ 247.458939][ T5365] usb usb2-port1: attempt power cycle [ 247.511409][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 247.838326][ T5365] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 247.915849][ T5365] usb 2-1: device descriptor read/8, error -71 [ 248.188330][ T5365] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 248.242690][ T5365] usb 2-1: device descriptor read/8, error -71 [ 248.366370][ T5365] usb usb2-port1: unable to enumerate USB device [ 248.604081][ T8397] fuse: Bad value for 'fd' [ 248.646441][ T8398] fuse: Bad value for 'fd' [ 248.835776][ T8406] fuse: Bad value for 'fd' [ 249.109383][ T29] audit: type=1326 audit(1729039552.976:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972697dff9 code=0x0 [ 250.974698][ T8445] sctp: [Deprecated]: syz.3.803 (pid 8445) Use of int in maxseg socket option. [ 250.974698][ T8445] Use struct sctp_assoc_value instead [ 251.771155][ T8458] random: crng reseeded on system resumption [ 251.846070][ T29] audit: type=1326 audit(1729039555.676:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f217397dff9 code=0x0 [ 251.871258][ T8463] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 251.893386][ T8463] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 252.520590][ T8474] fuse: Bad value for 'fd' [ 252.838951][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 253.291167][ T5295] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 253.426650][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.460472][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 253.485156][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.512762][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.605786][ T5295] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 253.621634][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.647328][ T5295] usb 4-1: config 0 descriptor?? [ 253.788921][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.804695][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.814613][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.823735][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.832501][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.847717][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 253.864772][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.885079][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.927380][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.946922][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.961421][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.971332][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 253.981755][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.074679][ T5295] hid-generic 0003:05AC:4262.0010: unbalanced delimiter at end of report description [ 254.088082][ T5295] hid-generic 0003:05AC:4262.0010: probe with driver hid-generic failed with error -22 [ 254.145191][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.318095][ T8] usb 4-1: USB disconnect, device number 17 [ 254.366287][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.766127][ T29] audit: type=1326 audit(1729039558.626:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 254.768024][ T63] bridge_slave_1: left allmulticast mode [ 254.787873][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.801218][ T63] bridge_slave_1: left promiscuous mode [ 254.808363][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.896732][ T63] bridge_slave_0: left allmulticast mode [ 254.903323][ T63] bridge_slave_0: left promiscuous mode [ 254.909887][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.070907][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075792][ T5244] Bluetooth: hci1: command tx timeout [ 256.077290][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.894253][ T8560] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 256.971831][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.005588][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.066403][ T63] bond0 (unregistering): Released all slaves [ 257.098800][ T63] bond1 (unregistering): Released all slaves [ 257.136902][ T63] bond2 (unregistering): Released all slaves [ 257.171818][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 257.186897][ T8534] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 257.205427][ T8534] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 257.271273][ T63] tipc: Left network mode [ 257.758397][ T8572] fuse: Bad value for 'fd' [ 258.063652][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.088088][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.099688][ T8496] bridge_slave_0: entered allmulticast mode [ 258.116479][ T8496] bridge_slave_0: entered promiscuous mode [ 258.158976][ T5244] Bluetooth: hci1: command tx timeout [ 258.273145][ T8587] Option ' ' to dns_resolver key: bad/missing value [ 258.287235][ T63] hsr_slave_0: left promiscuous mode [ 258.306665][ T63] hsr_slave_1: left promiscuous mode [ 258.330074][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.348469][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.370787][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.388566][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.467199][ T63] veth1_macvtap: left promiscuous mode [ 258.487186][ T63] veth0_macvtap: left promiscuous mode [ 258.502859][ T63] veth1_vlan: left promiscuous mode [ 258.517577][ T63] veth0_vlan: left promiscuous mode [ 259.244934][ T63] team0 (unregistering): Port device team_slave_1 removed [ 259.299952][ T63] team0 (unregistering): Port device team_slave_0 removed [ 259.828535][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.836031][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.843835][ T8496] bridge_slave_1: entered allmulticast mode [ 259.853550][ T8496] bridge_slave_1: entered promiscuous mode [ 259.898082][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 259.982799][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.112293][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.232703][ T5244] Bluetooth: hci1: command tx timeout [ 260.333570][ T8496] team0: Port device team_slave_0 added [ 260.364573][ T8496] team0: Port device team_slave_1 added [ 260.490558][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.518240][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.645272][ T8609] ebt_among: dst integrity fail: 101 [ 260.656176][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.693087][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.716057][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.844232][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.928536][ T5292] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 261.041337][ T8496] hsr_slave_0: entered promiscuous mode [ 261.090365][ T8496] hsr_slave_1: entered promiscuous mode [ 261.255695][ T5292] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 261.303522][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.327564][ T5292] usb 2-1: Product: syz [ 261.351291][ T5292] usb 2-1: Manufacturer: syz [ 261.373824][ T5292] usb 2-1: SerialNumber: syz [ 261.419697][ T5292] usb 2-1: config 0 descriptor?? [ 261.658475][ T5292] usb 2-1: USB disconnect, device number 29 [ 262.066123][ T29] audit: type=1326 audit(1729039565.916:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.2.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 262.313224][ T5244] Bluetooth: hci1: command tx timeout [ 263.198182][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 263.372487][ T8675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.570081][ T8496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.589967][ T8677] fuse: Bad value for 'fd' [ 263.599837][ T8496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.629455][ T8496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.648349][ T8496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.722797][ T8688] fuse: Bad value for 'fd' [ 263.886446][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.967375][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.012834][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.021420][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.096068][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.103322][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.313642][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.426881][ T8496] veth0_vlan: entered promiscuous mode [ 264.464547][ T8496] veth1_vlan: entered promiscuous mode [ 264.655126][ T8496] veth0_macvtap: entered promiscuous mode [ 264.695144][ T8496] veth1_macvtap: entered promiscuous mode [ 264.776708][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.883296][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.962016][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.994423][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.023873][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.049539][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.078625][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.109830][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.126384][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.182097][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.216267][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.242662][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.283800][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.307013][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.355534][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.390709][ T8496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.423125][ T8496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.457572][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.506258][ T8496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.533656][ T8496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.549933][ T29] audit: type=1326 audit(1729039569.416:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972697dff9 code=0x0 [ 265.578678][ T8496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.593016][ T8496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.802511][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.857487][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.937015][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.950736][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.149587][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 269.805317][ T8836] fuse: Bad value for 'fd' [ 270.268514][ T8851] vlan2: entered allmulticast mode [ 270.552767][ T8860] sctp: [Deprecated]: syz.3.893 (pid 8860) Use of int in maxseg socket option. [ 270.552767][ T8860] Use struct sctp_assoc_value instead [ 271.878647][ T5365] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.918278][ T5295] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.059359][ T5295] usb 4-1: device descriptor read/64, error -71 [ 272.067624][ T5365] usb 5-1: Using ep0 maxpacket: 8 [ 272.086874][ T5365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.107333][ T5365] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 272.126593][ T5365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.165348][ T5365] usb 5-1: config 0 descriptor?? [ 272.298353][ T5295] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 272.414516][ T5365] usb 5-1: USB disconnect, device number 21 [ 272.438425][ T5295] usb 4-1: device descriptor read/64, error -71 [ 272.578640][ T5295] usb usb4-port1: attempt power cycle [ 272.949373][ T5295] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 272.989176][ T5295] usb 4-1: device descriptor read/8, error -71 [ 273.238437][ T5295] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 273.294323][ T5295] usb 4-1: device descriptor read/8, error -71 [ 273.430000][ T5295] usb usb4-port1: unable to enumerate USB device [ 273.550093][ T8917] syz.2.906 uses obsolete (PF_INET,SOCK_PACKET) [ 275.139487][ T5292] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 275.361200][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 275.375819][ T5292] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 275.398541][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.408945][ T5292] usb 2-1: Product: syz [ 275.415221][ T5292] usb 2-1: Manufacturer: syz [ 275.423113][ T5292] usb 2-1: SerialNumber: syz [ 275.442469][ T5292] usb 2-1: config 0 descriptor?? [ 275.758687][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 276.290466][ T5292] usb_8dev 2-1:0.0 can0: sending command message failed [ 276.360141][ T5292] usb_8dev 2-1:0.0 can0: can't get firmware version [ 276.529119][ T5292] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 276.560002][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 276.585979][ T8982] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 276.605813][ T5292] usb 2-1: USB disconnect, device number 30 [ 277.001113][ T8990] sctp: [Deprecated]: syz.1.931 (pid 8990) Use of int in maxseg socket option. [ 277.001113][ T8990] Use struct sctp_assoc_value instead [ 277.098647][ T5292] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 277.290404][ T5292] usb 1-1: device descriptor read/64, error -71 [ 277.533248][ T5292] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 277.536984][ T4650] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.558942][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 277.678579][ T5292] usb 1-1: device descriptor read/64, error -71 [ 277.719840][ T4650] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 277.737894][ T4650] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.758330][ T4650] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 277.781185][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.793502][ T5292] usb usb1-port1: attempt power cycle [ 277.797911][ T4650] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.810087][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.829937][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 277.838315][ T4650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.847356][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.873388][ T4650] usb 5-1: SerialNumber: syz [ 277.877199][ T8] usb 2-1: config 0 descriptor?? [ 278.113080][ T8996] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 278.138477][ T8996] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 278.158605][ T5292] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 278.189225][ T5292] usb 1-1: device descriptor read/8, error -71 [ 278.310705][ T8] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 278.425838][ T4650] usb 5-1: USB disconnect, device number 22 [ 278.498312][ T5292] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 278.552603][ T5292] usb 1-1: device descriptor read/8, error -71 [ 278.675148][ T5292] usb usb1-port1: unable to enumerate USB device [ 278.722214][ T5292] usb 2-1: USB disconnect, device number 31 [ 278.889826][ T5293] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 279.078726][ T5293] usb 3-1: Using ep0 maxpacket: 8 [ 279.239332][ T5293] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.248651][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.256824][ T5293] usb 3-1: Product: syz [ 279.261500][ T5293] usb 3-1: Manufacturer: syz [ 279.266144][ T5293] usb 3-1: SerialNumber: syz [ 279.295476][ T9022] sctp: [Deprecated]: syz.4.943 (pid 9022) Use of int in maxseg socket option. [ 279.295476][ T9022] Use struct sctp_assoc_value instead [ 279.299495][ T5293] usb 3-1: config 0 descriptor?? [ 279.526707][ T5293] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.628661][ T9030] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 279.636816][ T5292] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 279.677111][ T9031] sctp: [Deprecated]: syz.3.946 (pid 9031) Use of int in maxseg socket option. [ 279.677111][ T9031] Use struct sctp_assoc_value instead [ 279.803428][ T5292] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 279.819721][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.841589][ T5292] usb 2-1: Product: syz [ 279.847159][ T5292] usb 2-1: Manufacturer: syz [ 279.865121][ T5292] usb 2-1: SerialNumber: syz [ 279.911932][ T5292] usb 2-1: config 0 descriptor?? [ 280.140211][ T1166] usb 2-1: USB disconnect, device number 32 [ 281.018420][ T29] audit: type=1326 audit(1729039584.876:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.0.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972697dff9 code=0x0 [ 281.163710][ T5292] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 281.361897][ T5292] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 281.371278][ T5292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.402622][ T5292] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 281.530723][ T5292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.558277][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.569091][ T5292] usb 2-1: SerialNumber: syz [ 281.685387][ T5293] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 281.758545][ T5293] usb 3-1: USB disconnect, device number 30 [ 281.877105][ T9054] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 281.908224][ T9054] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 282.013211][ T5295] usb 2-1: USB disconnect, device number 33 [ 282.500458][ T9071] sctp: [Deprecated]: syz.4.959 (pid 9071) Use of int in maxseg socket option. [ 282.500458][ T9071] Use struct sctp_assoc_value instead [ 282.533230][ T9067] sctp: [Deprecated]: syz.3.958 (pid 9067) Use of int in maxseg socket option. [ 282.533230][ T9067] Use struct sctp_assoc_value instead [ 282.788525][ T5308] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.887306][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.931925][ T5308] usb 3-1: device descriptor read/64, error -71 [ 283.075775][ T29] audit: type=1326 audit(1729039586.936:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.4.966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c1f7dff9 code=0x0 [ 283.099939][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.111941][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.188380][ T5308] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 283.209982][ T9085] fuse: Bad value for 'fd' [ 283.283659][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.338467][ T5308] usb 3-1: device descriptor read/64, error -71 [ 283.459194][ T5308] usb usb3-port1: attempt power cycle [ 283.507692][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.522977][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.542396][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.551627][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.564267][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.579460][ T4650] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 283.688297][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.695849][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.768438][ T4650] usb 2-1: Using ep0 maxpacket: 16 [ 283.784518][ T4650] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.799327][ T4650] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.814103][ T4650] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.823788][ T4650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.833625][ T4650] usb 2-1: Product: syz [ 283.848090][ T4650] usb 2-1: Manufacturer: syz [ 283.853757][ T4650] usb 2-1: SerialNumber: syz [ 283.859239][ T5308] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 283.906498][ T1036] bridge_slave_1: left allmulticast mode [ 283.912950][ T1036] bridge_slave_1: left promiscuous mode [ 283.929645][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.959219][ T5308] usb 3-1: device descriptor read/8, error -71 [ 284.136982][ T1036] bridge_slave_0: left allmulticast mode [ 284.143378][ T1036] bridge_slave_0: left promiscuous mode [ 284.154426][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.238249][ T5308] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 284.289146][ T5308] usb 3-1: device descriptor read/8, error -71 [ 284.398706][ T5308] usb usb3-port1: unable to enumerate USB device [ 284.481952][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 284.700803][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 284.752093][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.822401][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.846398][ T8] usb 5-1: Product: syz [ 284.868647][ T8] usb 5-1: Manufacturer: syz [ 284.877752][ T8] usb 5-1: SerialNumber: syz [ 284.912863][ T8] usb 5-1: config 0 descriptor?? [ 285.187630][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.073867][ T5249] Bluetooth: hci0: command tx timeout [ 286.185375][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.196676][ T4650] usb 2-1: 0:2 : does not exist [ 286.256852][ T4650] usb 2-1: USB disconnect, device number 34 [ 286.344297][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.375883][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.424930][ T1036] bond0 (unregistering): Released all slaves [ 286.652160][ T1036] tipc: Left network mode [ 287.271548][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 287.343710][ T8] usb 5-1: USB disconnect, device number 23 [ 287.410948][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 288.139042][ T1036] hsr_slave_0: left promiscuous mode [ 288.152911][ T5249] Bluetooth: hci0: command tx timeout [ 288.165708][ T1036] hsr_slave_1: left promiscuous mode [ 288.187150][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.197283][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.254111][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.262825][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.287620][ T9144] netlink: 72 bytes leftover after parsing attributes in process `syz.1.972'. [ 288.313777][ T1036] veth1_macvtap: left promiscuous mode [ 288.331517][ T1036] veth0_macvtap: left promiscuous mode [ 288.346976][ T1036] veth1_vlan: left promiscuous mode [ 288.362837][ T1036] veth0_vlan: left promiscuous mode [ 288.430853][ T5365] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.620231][ T5365] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 288.656137][ T5365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.702513][ T5365] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 288.729254][ T5365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.762141][ T5365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.776465][ T5365] usb 5-1: SerialNumber: syz [ 289.134671][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 289.185505][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 289.774481][ T9147] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 289.798274][ T9147] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 289.948722][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.979520][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.004213][ T9159] sctp: [Deprecated]: syz.1.974 (pid 9159) Use of int in maxseg socket option. [ 290.004213][ T9159] Use struct sctp_assoc_value instead [ 290.008799][ T9091] bridge_slave_0: entered allmulticast mode [ 290.026740][ T9091] bridge_slave_0: entered promiscuous mode [ 290.051758][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.060407][ T4650] usb 5-1: USB disconnect, device number 24 [ 290.107959][ T29] audit: type=1326 audit(1729039593.946:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.3.976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 290.122446][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.158713][ T9091] bridge_slave_1: entered allmulticast mode [ 290.177911][ T9091] bridge_slave_1: entered promiscuous mode [ 290.228768][ T5249] Bluetooth: hci0: command tx timeout [ 290.374028][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.443673][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.596349][ T1036] IPVS: stop unused estimator thread 0... [ 290.605426][ T9091] team0: Port device team_slave_0 added [ 290.639138][ T9091] team0: Port device team_slave_1 added [ 290.747807][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.756826][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.795462][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.858060][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.899413][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.955362][ T9182] fuse: Bad value for 'fd' [ 291.007166][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.464155][ T9091] hsr_slave_0: entered promiscuous mode [ 291.524537][ T9091] hsr_slave_1: entered promiscuous mode [ 291.579732][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.663995][ T9091] Cannot create hsr debugfs directory [ 292.349499][ T5249] Bluetooth: hci0: command tx timeout [ 293.758272][ T9231] netlink: 'syz.2.987': attribute type 14 has an invalid length. [ 294.432597][ T9233] sctp: [Deprecated]: syz.2.988 (pid 9233) Use of int in maxseg socket option. [ 294.432597][ T9233] Use struct sctp_assoc_value instead [ 294.855560][ T9091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.877181][ T9091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.894434][ T9091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.907042][ T9091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.151070][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.254215][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.368819][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 295.377407][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.384616][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.502789][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.509991][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.550470][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 295.564902][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.575853][ T8] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 295.594215][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.610515][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.639147][ T8] usb 2-1: SerialNumber: syz [ 295.862319][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.924520][ T9255] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 295.962008][ T9255] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 296.169223][ T8] usb 2-1: USB disconnect, device number 35 [ 296.252306][ T9091] veth0_vlan: entered promiscuous mode [ 296.276668][ T29] audit: type=1326 audit(1729039600.136:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.4.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c1f7dff9 code=0x0 [ 296.315538][ T9091] veth1_vlan: entered promiscuous mode [ 296.335986][ T9290] sctp: [Deprecated]: syz.3.999 (pid 9290) Use of int in maxseg socket option. [ 296.335986][ T9290] Use struct sctp_assoc_value instead [ 296.358537][ T9292] sctp: [Deprecated]: syz.2.1000 (pid 9292) Use of int in maxseg socket option. [ 296.358537][ T9292] Use struct sctp_assoc_value instead [ 296.475391][ T9091] veth0_macvtap: entered promiscuous mode [ 296.536841][ T9091] veth1_macvtap: entered promiscuous mode [ 296.612804][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.638900][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.652408][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.664922][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.680074][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.691379][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.723109][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.771866][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.809836][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.831683][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.855162][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.874341][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.891888][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.979005][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.004283][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.025222][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.060021][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.106969][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.180225][ T9091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.272453][ T9091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.318169][ T9091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.344448][ T9091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.525763][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.577487][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.707962][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.744281][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.267461][ T9363] fuse: Bad value for 'fd' [ 299.631995][ T9377] sctp: [Deprecated]: syz.3.1012 (pid 9377) Use of int in maxseg socket option. [ 299.631995][ T9377] Use struct sctp_assoc_value instead [ 299.991112][ T9386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1015'. [ 300.048385][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 300.209097][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 300.220651][ T5292] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 300.242666][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.276629][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.333116][ T8] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 300.346398][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.354641][ T8] usb 1-1: Product: syz [ 300.375096][ T8] usb 1-1: Manufacturer: syz [ 300.390875][ T8] usb 1-1: SerialNumber: syz [ 300.419728][ T5292] usb 4-1: Using ep0 maxpacket: 16 [ 300.452011][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 300.495478][ T5292] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 300.513335][ T5292] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 300.526533][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.546283][ T5292] usb 4-1: Product: syz [ 300.554851][ T5292] usb 4-1: Manufacturer: syz [ 300.564840][ T5292] usb 4-1: SerialNumber: syz [ 300.581658][ T5292] usb 4-1: config 0 descriptor?? [ 300.591073][ T9385] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 300.611306][ T5292] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 300.665002][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 300.756868][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 301.004540][ T5365] usb 4-1: USB disconnect, device number 22 [ 301.010730][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 301.046892][ T8] hid (null): report_id 2668810406 is invalid [ 301.064857][ T8] asus 0003:0B05:19B6.0012: report_id 2668810406 is invalid [ 301.097507][ T8] asus 0003:0B05:19B6.0012: item 0 4 1 8 parsing failed [ 301.115771][ T8] asus 0003:0B05:19B6.0012: Asus hid parse failed: -22 [ 301.150116][ T8] asus 0003:0B05:19B6.0012: probe with driver asus failed with error -22 [ 301.264323][ T8] usb 1-1: USB disconnect, device number 32 [ 302.806667][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 303.965036][ T5365] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 304.029168][ T9473] netlink: 'syz.1.1033': attribute type 5 has an invalid length. [ 304.052539][ T9473] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 304.087680][ T9473] netlink: 'syz.1.1033': attribute type 5 has an invalid length. [ 304.107434][ T9473] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 304.149000][ T9473] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 304.186880][ T5365] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 304.210862][ T5365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.231364][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.289458][ T5365] usb 3-1: Product: syz [ 304.308340][ T5365] usb 3-1: Manufacturer: syz [ 304.313087][ T5365] usb 3-1: SerialNumber: syz [ 304.335508][ T5365] usb 3-1: config 0 descriptor?? [ 304.355646][ T5365] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 304.991123][ T5365] i2c i2c-1: failure reading functionality [ 305.012615][ T5365] i2c i2c-1: connected i2c-tiny-usb device [ 305.039961][ T5365] usb 3-1: USB disconnect, device number 35 [ 305.519901][ T4650] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 305.680938][ T29] audit: type=1326 audit(1729039609.546:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.2.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 305.719045][ T4650] usb 1-1: Using ep0 maxpacket: 32 [ 305.732042][ T4650] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 305.752590][ T4650] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.773552][ T4650] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.795170][ T4650] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.815214][ T4650] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.844737][ T4650] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.860951][ T4650] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.887939][ T4650] usb 1-1: Product: syz [ 305.916293][ T4650] usb 1-1: Manufacturer: syz [ 305.928639][ T4650] usb 1-1: SerialNumber: syz [ 305.950757][ T4650] usb 1-1: config 0 descriptor?? [ 306.000653][ T9500] fuse: Bad value for 'fd' [ 306.012649][ T4650] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 306.136779][ T4650] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 306.367248][ T9505] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1044'. [ 306.391679][ T5293] usb 1-1: USB disconnect, device number 33 [ 306.391710][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 306.443262][ T5293] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 306.788512][ T9510] bond0: Unable to set down delay as MII monitoring is disabled [ 307.066578][ T9514] fuse: Bad value for 'fd' [ 307.213322][ T9524] tun0: tun_chr_ioctl cmd 1074025677 [ 307.236771][ T9524] tun0: linktype set to 825 [ 307.904164][ T9541] sctp: [Deprecated]: syz.0.1053 (pid 9541) Use of int in maxseg socket option. [ 307.904164][ T9541] Use struct sctp_assoc_value instead [ 309.322233][ T29] audit: type=1326 audit(1729039613.186:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9549 comm="syz.0.1057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602cb7dff9 code=0x0 [ 310.388568][ T9559] sg_read: process 40 (syz.0.1060) changed security contexts after opening file descriptor, this is not allowed. [ 310.945413][ T9575] sctp: [Deprecated]: syz.4.1067 (pid 9575) Use of int in maxseg socket option. [ 310.945413][ T9575] Use struct sctp_assoc_value instead [ 310.988831][ T5292] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 311.189400][ T5292] usb 1-1: Using ep0 maxpacket: 32 [ 311.196240][ T5292] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 311.206724][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.230013][ T5292] usb 1-1: config 0 descriptor?? [ 311.243189][ T5292] gspca_main: sunplus-2.14.0 probing 041e:400b [ 311.501680][ T9597] sctp: [Deprecated]: syz.2.1075 (pid 9597) Use of int in maxseg socket option. [ 311.501680][ T9597] Use struct sctp_assoc_value instead [ 312.071738][ T5292] gspca_sunplus: reg_w_riv err -71 [ 312.080247][ T5292] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 312.102819][ T5292] usb 1-1: USB disconnect, device number 34 [ 312.425572][ T29] audit: type=1326 audit(1729039616.286:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.3.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 313.187026][ T9621] sctp: [Deprecated]: syz.0.1082 (pid 9621) Use of int in maxseg socket option. [ 313.187026][ T9621] Use struct sctp_assoc_value instead [ 313.228589][ T5292] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 313.407756][ T5292] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.423796][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.465245][ T5292] usb 3-1: Product: syz [ 313.483560][ T5292] usb 3-1: Manufacturer: syz [ 313.521995][ T5292] usb 3-1: SerialNumber: syz [ 313.553020][ T5292] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.709321][ T5293] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.799264][ T5293] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 314.806897][ T5293] ath9k_htc: Failed to initialize the device [ 314.887331][ T29] audit: type=1326 audit(1729039618.746:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9644 comm="syz.3.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 314.961660][ T5293] usb 3-1: ath9k_htc: USB layer deinitialized [ 316.226945][ T5292] usb 3-1: USB disconnect, device number 36 [ 316.336872][ T9690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1109'. [ 316.538299][ T29] audit: type=1326 audit(1729039620.386:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9696 comm="syz.3.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 316.876933][ T9707] fuse: Bad value for 'fd' [ 317.512199][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.522974][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.580904][ T9715] dvmrp0: entered allmulticast mode [ 318.338993][ T5365] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 318.586274][ T5365] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 318.597479][ T5365] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.623190][ T5365] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 318.655793][ T5365] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.673456][ T5365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.691406][ T5365] usb 3-1: SerialNumber: syz [ 318.819093][ T29] audit: type=1326 audit(1729039622.646:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 318.931394][ T9738] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 318.946034][ T9738] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 319.026173][ T9746] sctp: [Deprecated]: syz.4.1124 (pid 9746) Use of int in maxseg socket option. [ 319.026173][ T9746] Use struct sctp_assoc_value instead [ 319.142600][ T5292] usb 3-1: USB disconnect, device number 37 [ 320.271482][ T9765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 320.414505][ T9774] fuse: Bad value for 'fd' [ 320.493598][ T9781] sctp: [Deprecated]: syz.2.1136 (pid 9781) Use of int in maxseg socket option. [ 320.493598][ T9781] Use struct sctp_assoc_value instead [ 320.648657][ T29] audit: type=1326 audit(1729039624.506:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.2.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 320.678438][ T5365] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 320.727674][ T9787] fuse: Bad value for 'fd' [ 320.877920][ T5365] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 320.887081][ T5365] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.898365][ T5365] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 320.909341][ T5365] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.918495][ T5365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 320.938581][ T5365] usb 1-1: SerialNumber: syz [ 321.184777][ T9779] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 321.268664][ T9779] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 321.443877][ T5365] usb 1-1: USB disconnect, device number 35 [ 321.840139][ T9809] fuse: Bad value for 'fd' [ 323.430050][ T9843] binder: BINDER_SET_CONTEXT_MGR already set [ 323.438329][ T9843] binder: 9841:9843 ioctl 4018620d 20000040 returned -16 [ 323.530187][ T9843] fuse: Bad value for 'fd' [ 324.350734][ T29] audit: type=1326 audit(1729039628.196:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.3.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c457dff9 code=0x0 [ 324.433202][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'. [ 324.758868][ T9856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.378350][ T5292] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 325.531473][ T5292] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.558044][ T5292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.589490][ T5292] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 325.609443][ T5292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.628720][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 325.653683][ T5292] usb 5-1: SerialNumber: syz [ 325.661293][ T2922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.863297][ T2922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.909016][ T9860] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 325.938358][ T9860] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 325.981594][ T9871] fuse: Bad value for 'fd' [ 326.042940][ T2922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.162158][ T8] usb 5-1: USB disconnect, device number 25 [ 326.170810][ T2922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.198939][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 326.215922][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 326.226088][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.258261][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.268822][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.309121][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.321103][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.329476][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.590585][ T2922] bridge_slave_1: left allmulticast mode [ 326.601015][ T2922] bridge_slave_1: left promiscuous mode [ 326.623655][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.700631][ T29] audit: type=1326 audit(1729039630.566:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 326.702153][ T2922] bridge_slave_0: left allmulticast mode [ 326.750486][ T2922] bridge_slave_0: left promiscuous mode [ 326.756409][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.173333][ T9906] fuse: Bad value for 'fd' [ 327.536783][ T2922] dvmrp0 (unregistering): left allmulticast mode [ 328.243433][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.273308][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.290849][ T2922] bond0 (unregistering): Released all slaves [ 328.389195][ T5244] Bluetooth: hci0: command tx timeout [ 329.262788][ T9932] binder: BINDER_SET_CONTEXT_MGR already set [ 329.308736][ T9932] binder: 9929:9932 ioctl 4018620d 20000040 returned -16 [ 329.387419][ T9932] fuse: Bad value for 'fd' [ 329.640809][ T2922] hsr_slave_0: left promiscuous mode [ 329.647553][ T2922] hsr_slave_1: left promiscuous mode [ 329.663162][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.677490][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.706219][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.717716][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.750385][ T2922] veth1_macvtap: left promiscuous mode [ 329.756182][ T2922] veth0_macvtap: left promiscuous mode [ 329.766943][ T2922] veth1_vlan: left promiscuous mode [ 329.772835][ T2922] veth0_vlan: left promiscuous mode [ 330.468847][ T5244] Bluetooth: hci0: command tx timeout [ 330.894404][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 330.946471][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 331.028321][ T5365] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 331.230166][ T5365] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 331.242963][ T5365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.254298][ T5365] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 331.269470][ T5365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.285537][ T5365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.294301][ T5365] usb 5-1: SerialNumber: syz [ 331.573038][ T9957] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709486081) [ 331.608838][ T9957] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 331.652730][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 331.685667][ T29] audit: type=1326 audit(1729039635.536:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.2.1183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68e3f7dff9 code=0x0 [ 331.812524][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.831021][ T4650] usb 5-1: USB disconnect, device number 26 [ 331.922937][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.941484][ T9879] bridge_slave_0: entered allmulticast mode [ 331.951494][ T9879] bridge_slave_0: entered promiscuous mode [ 331.961023][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.969662][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.977868][ T9879] bridge_slave_1: entered allmulticast mode [ 331.993793][ T9879] bridge_slave_1: entered promiscuous mode [ 332.213635][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.256804][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.413753][ T9879] team0: Port device team_slave_0 added [ 332.444511][ T9979] tipc: Started in network mode [ 332.455739][ T9979] tipc: Node identity ac1414aa, cluster identity 4711 [ 332.534879][ T9979] tipc: Enabled bearer , priority 10 [ 332.551027][ T5244] Bluetooth: hci0: command tx timeout [ 332.567488][ T9879] team0: Port device team_slave_1 added [ 332.859026][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.870218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.883030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.885056][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.895682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.921323][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.940053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.952726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.965303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 332.977498][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.977844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 333.000711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 333.013222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 333.014836][ T5292] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 333.025677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 333.201057][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.209591][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.308242][ T5292] usb 3-1: Using ep0 maxpacket: 32 [ 333.769197][ T4650] tipc: Node number set to 2886997162 [ 333.928458][ T5292] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 333.936778][ T5292] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 336.027228][ T5244] Bluetooth: hci0: command tx timeout [ 336.108664][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.878507][ C1] net_ratelimit: 22796 callbacks suppressed [ 337.878534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.905703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.918295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.930797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.943327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.955917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.968647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.981102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 337.993457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 338.005996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.888223][ C1] net_ratelimit: 23822 callbacks suppressed [ 342.888251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.906618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.918620][ C1] sched: DL replenish lagged too much [ 342.924379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.936746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.949100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.961469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.973798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.986115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 342.998524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 343.010860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 347.898270][ C1] net_ratelimit: 23617 callbacks suppressed [ 347.898301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.916748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 347.929129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.941448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 347.953764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.966083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 347.978817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.991106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 348.003372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.015836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 352.908266][ C1] net_ratelimit: 23955 callbacks suppressed [ 352.908293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 352.927269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.939703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 352.952369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.964893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 352.977330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.989843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 353.002701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.017539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 353.037586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.230981][ T5292] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 354.443145][ T5292] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 357.088304][ T5292] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.918192][ C1] net_ratelimit: 23065 callbacks suppressed [ 357.918221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.938064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 357.951354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.964105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 357.976593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.989210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 358.001655][ T5292] usb 3-1: string descriptor 0 read error: -71 [ 358.001708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.007934][ T5292] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 358.020301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 358.041747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.054361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 360.538650][ T5292] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 362.928345][ C1] net_ratelimit: 18102 callbacks suppressed [ 362.928374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.946925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 362.959262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.971690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 362.984136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.996633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 363.009231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.021703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 363.034081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.046460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 367.938155][ C1] net_ratelimit: 17266 callbacks suppressed [ 367.938183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.956641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 367.969060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.981497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 367.993866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.006217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 368.018596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.030946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 368.043470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.055904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 368.383031][ T5292] usb 3-1: config 0 descriptor?? [ 372.948203][ C1] net_ratelimit: 16198 callbacks suppressed [ 372.948230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.966777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 372.979186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.991603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 373.003934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.016325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 373.028698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.041101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 373.053444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.065830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 377.958220][ C1] net_ratelimit: 15803 callbacks suppressed [ 377.958247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 377.976640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.989041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 378.001400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.013786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 378.026158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.038608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 378.051012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.063467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 378.075819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.968479][ C1] net_ratelimit: 15826 callbacks suppressed [ 382.968507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 382.986909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.999290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 383.011642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.024206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 383.036648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.049062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 383.061407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.073968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 383.086395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.978168][ C1] net_ratelimit: 15932 callbacks suppressed [ 387.978195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 387.996481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.008934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 388.021379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.033767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 388.046179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.058571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 388.070895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.083544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 388.095932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.988391][ C1] net_ratelimit: 15804 callbacks suppressed [ 392.988418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 393.007088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.019537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 393.032128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.044554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 393.057507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.069964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 393.082349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.094991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 393.107469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.998254][ C0] net_ratelimit: 21349 callbacks suppressed [ 397.998282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.998298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 397.998554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.005344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.017771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 398.029955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.041809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.055247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.066204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 398.078304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.008285][ C1] net_ratelimit: 23595 callbacks suppressed [ 403.008313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.008764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.014665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 403.026652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.038544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.053437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.064722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 403.076927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.089127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.101792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.018331][ C1] net_ratelimit: 23369 callbacks suppressed [ 408.018358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.018789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.024748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 408.036689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.048510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.061720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.073173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 408.085235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.097060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.109987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.028284][ C1] net_ratelimit: 23344 callbacks suppressed [ 413.028312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.028373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.034645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 413.046706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.058572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.071337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.082717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 413.094649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.106681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.119429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.038179][ C1] net_ratelimit: 23213 callbacks suppressed [ 418.038207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 418.038547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.044531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.056771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.068634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 418.081174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.092469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.104644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.116547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 418.129227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.048152][ C1] net_ratelimit: 23141 callbacks suppressed [ 423.048178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 423.048841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.054422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.066569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.078497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 423.091214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.102417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.114539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.126472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 423.139042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.058282][ C1] net_ratelimit: 23354 callbacks suppressed [ 428.058308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.058785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.064728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 428.076633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.088480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.101207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.112617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 428.124572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.136536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.149316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.068293][ C1] net_ratelimit: 23562 callbacks suppressed [ 433.068318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 433.068391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.074564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.086711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.098718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 433.111289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.122901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.135063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.147326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 433.159781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.307417][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.324089][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.078432][ C1] net_ratelimit: 23176 callbacks suppressed [ 438.078457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 438.078591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.084691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.097061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.108902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 438.121672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.132833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.145024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.156900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 438.169483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.389177][ T5292] usb 3-1: can't set config #0, error -71 [ 443.088142][ C1] net_ratelimit: 22874 callbacks suppressed [ 443.088169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 443.088821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.094663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.106894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.119018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 443.131798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.143054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.155185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.167092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 443.179948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.098382][ C1] net_ratelimit: 23100 callbacks suppressed [ 448.098407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 448.098927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.104755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.117047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.128891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 448.141577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.152826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.165056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.177022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 448.189693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.108153][ C1] net_ratelimit: 23466 callbacks suppressed [ 453.108180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.108450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.114721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 453.127281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.138636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.150760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.162786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 453.175601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.187282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.199334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.118273][ C1] net_ratelimit: 23413 callbacks suppressed [ 458.118298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.118563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.124740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 458.136625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.148478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.161202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.172629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 458.184637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.196425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.209149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.128278][ C0] net_ratelimit: 23516 callbacks suppressed [ 463.128313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.128382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 463.135334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.146740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.158926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.170820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 463.183555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.194903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.207218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.219192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 468.138358][ C1] net_ratelimit: 23131 callbacks suppressed [ 468.138389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 468.138898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.144633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.156804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.168987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 468.181598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.192892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.205018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.216907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 468.230066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.038068][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 469.045200][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9988/1:b..l P10013/1:b..l P10011/1:b..l P10015/1:b..l [ 469.057610][ C1] rcu: (detected by 1, t=10503 jiffies, g=51641, q=283 ncpus=2) [ 469.065380][ C1] task:syz-executor state:R running task stack:26448 pid:10015 tgid:10015 ppid:5232 flags:0x00004002 [ 469.078681][ C1] Call Trace: [ 469.082008][ C1] [ 469.084996][ C1] __schedule+0x1895/0x4b30 [ 469.089605][ C1] ? __pfx___schedule+0x10/0x10 [ 469.094530][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.100718][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 469.106293][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 469.111646][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 469.117681][ C1] irqentry_exit+0x5e/0x90 [ 469.122592][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.128644][ C1] RIP: 0010:page_ext_get+0x107/0x2a0 [ 469.134102][ C1] Code: ff ff ff 00 00 00 48 89 ef 48 89 de e8 72 83 89 ff 48 39 eb 0f 87 91 01 00 00 48 c7 c0 60 f8 42 9a 48 c1 e8 03 42 80 3c 38 00 <74> 0c 48 c7 c7 60 f8 42 9a e8 ab 31 f3 ff 48 8b 05 74 8f 37 18 48 [ 469.153786][ C1] RSP: 0018:ffffc900045379b8 EFLAGS: 00000246 [ 469.159969][ C1] RAX: 1ffffffff3485f0c RBX: 0000000001bb6640 RCX: ffff88801eb59e00 [ 469.168258][ C1] RDX: 0000000000000000 RSI: 0000000001bb6640 RDI: 000000ffffffffc0 [ 469.176467][ C1] RBP: 000000ffffffffc0 R08: ffffffff820b68be R09: 1ffffffff2859300 [ 469.184520][ C1] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 000000000006ed99 [ 469.192562][ C1] R13: ffffea0001bb6648 R14: ffffffff820b67f0 R15: dffffc0000000000 [ 469.200600][ C1] ? page_ext_get+0x20/0x2a0 [ 469.205259][ C1] ? page_ext_get+0xee/0x2a0 [ 469.209928][ C1] ? page_ext_get+0xee/0x2a0 [ 469.214585][ C1] __reset_page_owner+0x30/0x430 [ 469.219580][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 469.225539][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 469.230887][ C1] free_unref_page+0xcfb/0xf20 [ 469.235728][ C1] __put_partials+0xeb/0x130 [ 469.240422][ C1] put_cpu_partial+0x17c/0x250 [ 469.245238][ C1] ? put_cpu_partial+0x70/0x250 [ 469.250139][ C1] __slab_free+0x2ea/0x3d0 [ 469.254610][ C1] ? __phys_addr+0xba/0x170 [ 469.259174][ C1] qlist_free_all+0x9a/0x140 [ 469.263828][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 469.269341][ C1] __kasan_slab_alloc+0x23/0x80 [ 469.274271][ C1] ? mm_alloc+0x23/0xc0 [ 469.278487][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 469.284023][ C1] mm_alloc+0x23/0xc0 [ 469.288058][ C1] alloc_bprm+0x55b/0xe20 [ 469.292433][ C1] ? __pfx___might_resched+0x10/0x10 [ 469.297786][ C1] ? __might_fault+0xaa/0x120 [ 469.302523][ C1] ? __pfx_lock_release+0x10/0x10 [ 469.307609][ C1] ? __pfx_alloc_bprm+0x10/0x10 [ 469.312716][ C1] ? __might_fault+0xc6/0x120 [ 469.317445][ C1] do_execveat_common+0x18c/0x6f0 [ 469.322541][ C1] __x64_sys_execve+0x92/0xb0 [ 469.327272][ C1] do_syscall_64+0xf3/0x230 [ 469.331836][ C1] ? clear_bhb_loop+0x35/0x90 [ 469.336566][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.342560][ C1] RIP: 0033:0x7fbb891b0ef7 [ 469.347040][ C1] RSP: 002b:00007fbb89f58e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 469.355548][ C1] RAX: ffffffffffffffda RBX: 00007fbb89215a70 RCX: 00007fbb891b0ef7 [ 469.363576][ C1] RDX: 00007fff99032bc0 RSI: 00007fff99032e00 RDI: 00007fff99034ef2 [ 469.371600][ C1] RBP: 00007fff99032c30 R08: 00007fbb89f58f20 R09: 0000000000000000 [ 469.379750][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055556abc7250 [ 469.387797][ C1] R13: 0000000000000100 R14: 00007fff99032be0 R15: 00007fff99032990 [ 469.395841][ C1] [ 469.398904][ C1] task:syz-executor state:R running task stack:23072 pid:10011 tgid:10011 ppid:5232 flags:0x00004002 [ 469.410726][ C1] Call Trace: [ 469.414304][ C1] [ 469.417282][ C1] __schedule+0x1895/0x4b30 [ 469.421857][ C1] ? validate_chain+0x11e/0x5920 [ 469.426870][ C1] ? __pfx___schedule+0x10/0x10 [ 469.431844][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.437902][ C1] ? preempt_schedule+0xe1/0xf0 [ 469.442901][ C1] preempt_schedule_common+0x84/0xd0 [ 469.448261][ C1] preempt_schedule+0xe1/0xf0 [ 469.453000][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 469.458452][ C1] ? free_unref_page+0xcfb/0xf20 [ 469.463456][ C1] preempt_schedule_thunk+0x1a/0x30 [ 469.468805][ C1] unwind_next_frame+0x18f8/0x22d0 [ 469.473975][ C1] ? __reset_page_owner+0x76/0x430 [ 469.479140][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.485349][ C1] arch_stack_walk+0x11c/0x150 [ 469.490168][ C1] ? free_unref_page+0xcfb/0xf20 [ 469.495172][ C1] stack_trace_save+0x118/0x1d0 [ 469.500077][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 469.505516][ C1] save_stack+0xfb/0x1f0 [ 469.509808][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 469.514984][ C1] ? __pfx_save_stack+0x10/0x10 [ 469.519906][ C1] ? page_ext_get+0x20/0x2a0 [ 469.524567][ C1] __reset_page_owner+0x76/0x430 [ 469.529562][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 469.534832][ C1] free_unref_page+0xcfb/0xf20 [ 469.539667][ C1] __put_partials+0xeb/0x130 [ 469.544488][ C1] put_cpu_partial+0x17c/0x250 [ 469.549316][ C1] ? put_cpu_partial+0x70/0x250 [ 469.554229][ C1] __slab_free+0x2ea/0x3d0 [ 469.558710][ C1] ? __phys_addr+0xba/0x170 [ 469.563277][ C1] qlist_free_all+0x9a/0x140 [ 469.568017][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 469.573629][ C1] __kasan_slab_alloc+0x23/0x80 [ 469.578537][ C1] ? alloc_vmap_area+0x24f/0x2400 [ 469.583627][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 469.589587][ C1] alloc_vmap_area+0x24f/0x2400 [ 469.594522][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 469.599872][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 469.604686][ C1] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 469.610741][ C1] ? __get_vm_area_node+0x113/0x270 [ 469.616007][ C1] ? kcov_ioctl+0x56/0x640 [ 469.620479][ C1] __get_vm_area_node+0x1a9/0x270 [ 469.625569][ C1] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 469.631514][ C1] ? kcov_ioctl+0x56/0x640 [ 469.636010][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.642399][ C1] vmalloc_user_noprof+0x74/0x80 [ 469.647382][ C1] ? kcov_ioctl+0x56/0x640 [ 469.651852][ C1] kcov_ioctl+0x56/0x640 [ 469.656154][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 469.661083][ C1] __se_sys_ioctl+0xf9/0x170 [ 469.665753][ C1] do_syscall_64+0xf3/0x230 [ 469.670314][ C1] ? clear_bhb_loop+0x35/0x90 [ 469.675051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.681021][ C1] RIP: 0033:0x7f7b11d7dbfb [ 469.685490][ C1] RSP: 002b:00007ffc1b245c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.694244][ C1] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f7b11d7dbfb [ 469.702274][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000da [ 469.710302][ C1] RBP: 00007f7b11f361c8 R08: 00000000000000d9 R09: 0000000000000000 [ 469.718421][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.726461][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 469.734509][ C1] [ 469.737603][ C1] task:syz-executor state:R running task stack:24128 pid:10013 tgid:10013 ppid:5232 flags:0x00000000 [ 469.749428][ C1] Call Trace: [ 469.752788][ C1] [ 469.755830][ C1] __schedule+0x1895/0x4b30 [ 469.760423][ C1] ? validate_chain+0x11e/0x5920 [ 469.765423][ C1] ? __pfx___schedule+0x10/0x10 [ 469.770356][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.776401][ C1] ? __lock_acquire+0x1384/0x2050 [ 469.781513][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 469.786856][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 469.792020][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 469.797808][ C1] irqentry_exit+0x5e/0x90 [ 469.802271][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.808310][ C1] RIP: 0010:__rcu_read_unlock+0x7d/0x110 [ 469.814017][ C1] Code: 04 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 88 00 00 00 41 83 3f 00 75 29 42 0f b6 04 23 84 c0 75 62 41 8b 45 00 <3d> 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 469.833885][ C1] RSP: 0018:ffffc900035e7730 EFLAGS: 00000246 [ 469.840023][ C1] RAX: 0000000000000001 RBX: 1ffff11004849088 RCX: ffffc900035e7603 [ 469.848070][ C1] RDX: 0000000000000002 RSI: ffffffff8c0adc40 RDI: ffffffff8c6100e0 [ 469.856087][ C1] RBP: 0000000000000001 R08: ffffffff901cfdef R09: 1ffffffff2039fbd [ 469.864156][ C1] R10: dffffc0000000000 R11: fffffbfff2039fbe R12: dffffc0000000000 [ 469.872175][ C1] R13: ffff888024248444 R14: ffff888024248000 R15: 00007fcf1f77c837 [ 469.880209][ C1] is_bpf_text_address+0x285/0x2a0 [ 469.885343][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 469.890553][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.896750][ C1] kernel_text_address+0xa7/0xe0 [ 469.901708][ C1] __kernel_text_address+0xd/0x40 [ 469.907007][ C1] unwind_get_return_address+0x4d/0x90 [ 469.912518][ C1] arch_stack_walk+0xfd/0x150 [ 469.917312][ C1] stack_trace_save+0x118/0x1d0 [ 469.922185][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 469.927577][ C1] save_stack+0xfb/0x1f0 [ 469.931937][ C1] ? __pfx_save_stack+0x10/0x10 [ 469.936805][ C1] ? free_unref_page+0xcfb/0xf20 [ 469.941845][ C1] ? __put_partials+0xeb/0x130 [ 469.946624][ C1] ? put_cpu_partial+0x17c/0x250 [ 469.951851][ C1] ? __slab_free+0x2ea/0x3d0 [ 469.956447][ C1] ? qlist_free_all+0x9a/0x140 [ 469.961231][ C1] ? kasan_quarantine_reduce+0x14f/0x170 [ 469.966873][ C1] ? __kasan_slab_alloc+0x23/0x80 [ 469.971915][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 469.977588][ C1] ? getname_flags+0xb7/0x540 [ 469.982276][ C1] ? user_path_at+0x24/0x60 [ 469.986789][ C1] ? __x64_sys_chmod+0xd5/0x1a0 [ 469.991653][ C1] ? do_syscall_64+0xf3/0x230 [ 469.996347][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.002546][ C1] ? page_ext_get+0x20/0x2a0 [ 470.007188][ C1] __reset_page_owner+0x76/0x430 [ 470.013300][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 470.019218][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 470.024431][ C1] free_unref_page+0xcfb/0xf20 [ 470.029466][ C1] __put_partials+0xeb/0x130 [ 470.034206][ C1] put_cpu_partial+0x17c/0x250 [ 470.038986][ C1] ? put_cpu_partial+0x70/0x250 [ 470.043848][ C1] __slab_free+0x2ea/0x3d0 [ 470.048320][ C1] ? __phys_addr+0xba/0x170 [ 470.052845][ C1] qlist_free_all+0x9a/0x140 [ 470.057473][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 470.062964][ C1] __kasan_slab_alloc+0x23/0x80 [ 470.067830][ C1] ? getname_flags+0xb7/0x540 [ 470.072544][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 470.078068][ C1] getname_flags+0xb7/0x540 [ 470.082592][ C1] user_path_at+0x24/0x60 [ 470.086932][ C1] __x64_sys_chmod+0xd5/0x1a0 [ 470.091618][ C1] ? __pfx___x64_sys_chmod+0x10/0x10 [ 470.096912][ C1] ? do_syscall_64+0x100/0x230 [ 470.101701][ C1] ? do_syscall_64+0xb6/0x230 [ 470.106383][ C1] do_syscall_64+0xf3/0x230 [ 470.110912][ C1] ? clear_bhb_loop+0x35/0x90 [ 470.115600][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.121592][ C1] RIP: 0033:0x7fcf1f77c837 [ 470.126009][ C1] RSP: 002b:00007ffd6d8b0288 EFLAGS: 00000206 ORIG_RAX: 000000000000005a [ 470.134452][ C1] RAX: ffffffffffffffda RBX: 00007ffd6d8b02f0 RCX: 00007fcf1f77c837 [ 470.142449][ C1] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd6d8b02f0 [ 470.150427][ C1] RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000001 [ 470.158396][ C1] R10: 00007fcf206030b8 R11: 0000000000000206 R12: 00007ffd6d8b02f0 [ 470.166585][ C1] R13: 00007ffd6d8b02f8 R14: 0000000000000009 R15: 0000000000000000 [ 470.174669][ C1] [ 470.177699][ C1] task:syz.3.1188 state:R running task stack:26512 pid:9988 tgid:9988 ppid:6213 flags:0x00004004 [ 470.189483][ C1] Call Trace: [ 470.192774][ C1] [ 470.195721][ C1] __schedule+0x1895/0x4b30 [ 470.200294][ C1] ? __pfx___schedule+0x10/0x10 [ 470.205165][ C1] ? mark_lock+0x9a/0x360 [ 470.209514][ C1] ? preempt_schedule+0xe1/0xf0 [ 470.214379][ C1] preempt_schedule_common+0x84/0xd0 [ 470.219800][ C1] preempt_schedule+0xe1/0xf0 [ 470.224529][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 470.229930][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 470.235953][ C1] preempt_schedule_thunk+0x1a/0x30 [ 470.241274][ C1] _raw_spin_unlock+0x3e/0x50 [ 470.245999][ C1] unmap_page_range+0x36b1/0x40e0 [ 470.251255][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 470.256665][ C1] ? mas_next_slot+0xdc6/0xea0 [ 470.261468][ C1] ? uprobe_munmap+0x183/0x460 [ 470.266246][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 470.271372][ C1] unmap_vmas+0x3cc/0x5f0 [ 470.275724][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 470.280605][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 470.286073][ C1] exit_mmap+0x275/0xc40 [ 470.290336][ C1] ? __mutex_lock+0x2ef/0xd70 [ 470.295022][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 470.299808][ C1] ? __pfx_exit_aio+0x10/0x10 [ 470.304501][ C1] ? uprobe_clear_state+0x271/0x290 [ 470.309732][ C1] ? mm_update_next_owner+0xa4/0x810 [ 470.315028][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 470.320264][ C1] __mmput+0x115/0x390 [ 470.324408][ C1] exit_mm+0x220/0x310 [ 470.328509][ C1] ? __pfx_exit_mm+0x10/0x10 [ 470.333113][ C1] ? hrtimer_try_to_cancel+0x3d1/0x410 [ 470.338585][ C1] ? taskstats_exit+0x326/0xa60 [ 470.343453][ C1] do_exit+0x9b2/0x28e0 [ 470.347636][ C1] ? __pfx_do_exit+0x10/0x10 [ 470.352239][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.358265][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.364660][ C1] do_group_exit+0x207/0x2c0 [ 470.369282][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.374523][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 470.379784][ C1] get_signal+0x16a3/0x1740 [ 470.384447][ C1] ? __pfx_get_signal+0x10/0x10 [ 470.389320][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 470.395027][ C1] arch_do_signal_or_restart+0x96/0x860 [ 470.400632][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 470.406842][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.412886][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 470.418754][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 470.424375][ C1] do_syscall_64+0x100/0x230 [ 470.429019][ C1] ? clear_bhb_loop+0x35/0x90 [ 470.434176][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.440107][ C1] RIP: 0033:0x7fc3c45b00e5 [ 470.444708][ C1] RSP: 002b:00007fc3c53b4f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 470.453164][ C1] RAX: fffffffffffffdfc RBX: 00007fc3c4735f80 RCX: 00007fc3c45b00e5 [ 470.461196][ C1] RDX: 00007fc3c53b4fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.469262][ C1] RBP: 00007fc3c45f0296 R08: 0000000000000000 R09: 0000000000000000 [ 470.477869][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 470.486004][ C1] R13: 0000000000000001 R14: 00007fc3c4735f80 R15: 00007fc3c485fa28 [ 470.494006][ C1] [ 470.497067][ C1] rcu: rcu_preempt kthread starved for 10556 jiffies! g51641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 470.508399][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 470.518430][ C1] rcu: RCU grace-period kthread stack dump: [ 470.524365][ C1] task:rcu_preempt state:R running task stack:25328 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 470.536205][ C1] Call Trace: [ 470.539524][ C1] [ 470.542494][ C1] __schedule+0x1895/0x4b30 [ 470.547093][ C1] ? __pfx___schedule+0x10/0x10 [ 470.552010][ C1] ? __pfx_lock_release+0x10/0x10 [ 470.557119][ C1] ? __asan_memset+0x23/0x50 [ 470.561779][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 470.567647][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.574048][ C1] ? schedule+0x90/0x320 [ 470.578352][ C1] schedule+0x14b/0x320 [ 470.582568][ C1] schedule_timeout+0x1be/0x310 [ 470.587484][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 470.592912][ C1] ? __pfx_process_timeout+0x10/0x10 [ 470.598261][ C1] ? prepare_to_swait_event+0x330/0x350 [ 470.603869][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 470.608774][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 470.614021][ C1] ? rcu_gp_init+0x1256/0x1630 [ 470.618834][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 470.623819][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 470.630027][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 470.635457][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 470.641415][ C1] ? finish_swait+0xd4/0x1e0 [ 470.646072][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 470.650725][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.655973][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 470.662017][ C1] ? __kthread_parkme+0x169/0x1d0 [ 470.667112][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.672817][ C1] kthread+0x2f0/0x390 [ 470.676963][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.685658][ C1] ? __pfx_kthread+0x10/0x10 [ 470.692429][ C1] ret_from_fork+0x4b/0x80 [ 470.698667][ C1] ? __pfx_kthread+0x10/0x10 [ 470.704473][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.711176][ C1] [ 470.714342][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 470.721411][ C1] Sending NMI from CPU 1 to CPUs 0: [ 470.729205][ C0] NMI backtrace for cpu 0 [ 470.729235][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 470.729260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 470.729274][ C0] RIP: 0010:lockdep_rtnl_is_held+0xa/0x40 [ 470.729302][ C0] Code: 48 c7 c6 20 2b cd 8f 5b e9 a3 fa 23 fb 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 56 0a fc f7 <48> c7 c7 88 2b cd 8f be ff ff ff ff e8 e5 6c 2d 02 89 c3 31 ff 89 [ 470.729321][ C0] RSP: 0018:ffffc90000156110 EFLAGS: 00000246 [ 470.729342][ C0] RAX: ffffffff8998dcfa RBX: 0000000000000001 RCX: ffff88801ce8da00 [ 470.729371][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 470.729385][ C0] RBP: ffff888030f3a8b8 R08: ffffffff8a6c0d0f R09: ffffc90000156450 [ 470.729401][ C0] R10: ffffc90000156440 R11: fffff5200002ac56 R12: ffff888060401000 [ 470.729418][ C0] R13: ffff888030f3a8cf R14: 1ffff110061e7519 R15: 1ffff110061e7517 [ 470.729435][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 470.729453][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.729468][ C0] CR2: 0000000020103030 CR3: 000000000e734000 CR4: 00000000003526f0 [ 470.729486][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.729498][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 470.729512][ C0] Call Trace: [ 470.729520][ C0] [ 470.729529][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 470.729557][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 470.729591][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 470.729617][ C0] ? nmi_handle+0x2a/0x5a0 [ 470.729648][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 470.729677][ C0] ? nmi_handle+0x14f/0x5a0 [ 470.729699][ C0] ? nmi_handle+0x2a/0x5a0 [ 470.729722][ C0] ? lockdep_rtnl_is_held+0xa/0x40 [ 470.729742][ C0] ? default_do_nmi+0x63/0x160 [ 470.729770][ C0] ? exc_nmi+0x123/0x1f0 [ 470.729796][ C0] ? end_repeat_nmi+0xf/0x53 [ 470.729821][ C0] ? find_match+0xcf/0xc10 [ 470.729851][ C0] ? lockdep_rtnl_is_held+0xa/0x40 [ 470.729870][ C0] ? lockdep_rtnl_is_held+0xa/0x40 [ 470.729888][ C0] ? lockdep_rtnl_is_held+0xa/0x40 [ 470.729907][ C0] ? lockdep_rtnl_is_held+0xa/0x40 [ 470.729925][ C0] [ 470.729931][ C0] [ 470.729938][ C0] find_match+0xd8/0xc10 [ 470.729961][ C0] __find_rr_leaf+0x275/0x8e0 [ 470.729989][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 470.730009][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 470.730041][ C0] fib6_table_lookup+0x413/0xbb0 [ 470.730076][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 470.730107][ C0] ip6_pol_route+0x273/0x15d0 [ 470.730132][ C0] ? ip6_pol_route+0x198/0x15d0 [ 470.730157][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 470.730189][ C0] fib6_rule_lookup+0x58c/0x790 [ 470.730214][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 470.730233][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 470.730259][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 470.730286][ C0] ? __pfx_validate_chain+0x10/0x10 [ 470.730307][ C0] ? __pfx_lock_release+0x10/0x10 [ 470.730338][ C0] ip6_route_input+0x859/0xd90 [ 470.730369][ C0] ? mark_lock+0x9a/0x360 [ 470.730391][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 470.730428][ C0] ? ip6_rcv_finish_core+0x20f/0x410 [ 470.730450][ C0] ip6_rcv_finish+0x144/0x180 [ 470.730468][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 470.730487][ C0] ip_sabotage_in+0x203/0x290 [ 470.730509][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 470.730545][ C0] nf_hook_slow+0xc3/0x220 [ 470.730570][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 470.730588][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 470.730607][ C0] NF_HOOK+0x29e/0x450 [ 470.730625][ C0] ? skb_orphan+0xae/0xd0 [ 470.730646][ C0] ? NF_HOOK+0x9a/0x450 [ 470.730663][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 470.730683][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 470.730706][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 470.730725][ C0] __netif_receive_skb+0x1ea/0x650 [ 470.730751][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 470.730778][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 470.730809][ C0] ? netif_receive_skb+0x131/0x890 [ 470.730832][ C0] ? netif_receive_skb+0x131/0x890 [ 470.730856][ C0] netif_receive_skb+0x1e8/0x890 [ 470.730878][ C0] ? __pfx_lock_release+0x10/0x10 [ 470.730906][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 470.730932][ C0] ? br_netif_receive_skb+0x130/0x1a0 [ 470.730967][ C0] NF_HOOK+0x9e/0x400 [ 470.730987][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 470.731008][ C0] ? NF_HOOK+0xfc/0x400 [ 470.731028][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 470.731050][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 470.731074][ C0] ? br_pass_frame_up+0x297/0x430 [ 470.731097][ C0] br_handle_frame_finish+0x18ed/0x1fe0 [ 470.731127][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 470.731158][ C0] ? nf_hook_slow+0x175/0x220 [ 470.731182][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 470.731204][ C0] br_nf_hook_thresh+0x472/0x590 [ 470.731229][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 470.731250][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 470.731275][ C0] ? skb_push+0x97/0x100 [ 470.731299][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 470.731322][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 470.731350][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 470.731379][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 470.731401][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 470.731425][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 470.731448][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 470.731468][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 470.731490][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 470.731511][ C0] br_handle_frame+0x9fd/0x1530 [ 470.731536][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 470.731560][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 470.731582][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.731613][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 470.731636][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 470.731666][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 470.731688][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 470.731710][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 470.731737][ C0] ? mark_lock+0x9a/0x360 [ 470.731758][ C0] ? __lock_acquire+0x1384/0x2050 [ 470.731797][ C0] __netif_receive_skb+0x12f/0x650 [ 470.731823][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 470.731850][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 470.731872][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.731900][ C0] ? __pfx_lock_release+0x10/0x10 [ 470.731927][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 470.731961][ C0] process_backlog+0x662/0x15b0 [ 470.731989][ C0] ? process_backlog+0x33b/0x15b0 [ 470.732017][ C0] ? __pfx_process_backlog+0x10/0x10 [ 470.732042][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.732071][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.732100][ C0] __napi_poll+0xcb/0x490 [ 470.732124][ C0] net_rx_action+0x89b/0x1240 [ 470.732160][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 470.732185][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 470.732228][ C0] handle_softirqs+0x2c5/0x980 [ 470.732256][ C0] ? run_ksoftirqd+0xca/0x130 [ 470.732284][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 470.732307][ C0] ? preempt_schedule+0xe1/0xf0 [ 470.732339][ C0] run_ksoftirqd+0xca/0x130 [ 470.732370][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 470.732399][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 470.732425][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 470.732449][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 470.732473][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 470.732498][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 470.732523][ C0] smpboot_thread_fn+0x544/0xa30 [ 470.732549][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 470.732577][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 470.732618][ C0] kthread+0x2f0/0x390 [ 470.732636][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 470.732662][ C0] ? __pfx_kthread+0x10/0x10 [ 470.732679][ C0] ret_from_fork+0x4b/0x80 [ 470.732706][ C0] ? __pfx_kthread+0x10/0x10 [ 470.732724][ C0] ret_from_fork_asm+0x1a/0x30 [ 470.732758][ C0] [ 473.148175][ C0] net_ratelimit: 14642 callbacks suppressed [ 473.148214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.148349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 473.154569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.166377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.179519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.190938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 473.203459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.214809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.227666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.238957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 478.158336][ C1] net_ratelimit: 23882 callbacks suppressed [ 478.158364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 478.158715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.164612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.177616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.188898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 478.200989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.212721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.225492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.237002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:3a:2c:ab:66:ca, vlan:0) [ 478.249127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)