last executing test programs: 1m43.45098189s ago: executing program 1 (id=3379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206010300000000fffff000000000000500010006000000050005000a0000000900020073797a32000000000500040000000000140007800800064000000000080013400000004011000300686173683a6970"], 0x68}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xe) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) madvise(&(0x7f000055d000/0x3000)=nil, 0x3000, 0xa) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x1e45, &(0x7f0000000780), &(0x7f0000000040), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10003, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) 1m42.279227899s ago: executing program 1 (id=3383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0xe, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x8000000000002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5d, 0x0, 0x0) 1m41.960261744s ago: executing program 1 (id=3387): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000001e40)="f2e07b2ea4bf5c58f73d4bf02305583244f7ec157cc596aa650ed307e4ca2cd7a99262d7f36030151b6930715d46628cc5fe90b36661c10b711eefa15cccd68e8106e277064c8736356163f996978e47e8fdd2f8b09341f9c4ec35bddb410c5f51525568ef485cbda579cfc74288cbb2e67f63512aca7386259fcd6250736c8e6c16d2be4c676f26eef9b85203ceb5b32d9e34dbea55cd43b08943a3858c1c566aab3acf5f94fa33b7667c31ed31e03999723cd86acdb542e943f2b91eed534ace0be6a21aaa57329dfeb38036e7390fe06ce23ba3a8879396d678659ffa03d749fe908922fb910875cff4b603b0e098a355e31909fe3725af411dd43fcf1af5b4e05adf9b71b977fd6d3a8c231ba341d148b1ee0f7f73c127b232a09e05506c264f363d8d8cf537d85174a87c1822dc2b2864a46d037aebd5dd7738211205af267516938a2283db70f93df35afafa483418cb0948c4d6b9b19ad29f00e5fb535601fc162237ea70087045ac458cba12cc63a58c4706f6757082fbf01cbdc2902d6d27d6bec354d2bf619b78f1949f94c400c249335ac8b11914c4980b4826a448260f81322423367944e8b4dbbaffc158c4126801574cb616e5e27e0e1017287413b11e8d37306bf7e71d33053489d74ee5a73ed0aa7fcaaf0db408386cbbf0735c0f7b8acbbfd70964f859727e1ae3b0e04fff544c972162c50c20cd63eab75cb6f5e67e3c2b9b09c49f83485a595605e55d340ca9f7455d2e0a1d1e2096f5ebc754b19ec10d1bf065a84f9bcef7df83f999075d34edf5bd40a0b3d29adb05048022d012cc0df4392d26b262b42cc2db5117ff19a916b88a53a55c4fcfa9ed28b04670c8a41ccef6fd8bf5a559183f4b431778dbb8e24f7fdb772a77716464a42e3b99ec771c12dfa1f358367f4a878ebe218d3880cfc6f1af03f845c823209aa677c996ba91fd127c0d5a2f99900fa21b1fc015741ee823af01c4f5e8195013ae2c01b05e14f230e5ac2406dac2fda8d865dce801bd560ac44a6da671c3f5ee21a3f3a540d16ec36760b8d6ee20e98ea737f9d1570f70604d087ee58fd5858eebafae934f804f88dff7f951ae9d8329998e60b3337e15dffb7dbd719ca52861eb8778df64dc954410af4105572f7662cd03f7592554a3f268cb474a9ea641dd1382bb03ef3c63c5b2f7a464b3327e5be8992bcf4af2bd35570165817ca9e1a23531b370d3211426c5dfc877f2117b35d99e55ef3c654480299e29faf6c63e8f8280a405d0efbaa0f383f4439a4d908d08d3a89c6763f2ef56d9156a3b2e70fda451abb0bb5b3fbf2ea25ef23f10583866afbf8e6c734398e51c0e402bede7119e3141f8ffe42658685c4750affae5b4b83a7408a7d485742bd5c9e1c96aef6bd0af239f3dd47db7a63c3c02450687f6b16bd64e6df1ea8288ff6b00fd9269109e296a1ef48e89b44901e338e5512e49a153b105e00696346a5d050969d61296dab81c97e49e76fcfc2e83f2fa73f40d092a58225f2f8ba3f819e8aec048a2d371498ec319fc5e08ebc23ec6658156212d12d7089b109f28d1d2c5084e6a8f3551ce1768fbe6fb81d5da4ac0dbd2aec7006a3d5c68197e4230e2fde80de7fc428a8b3d17fc5856aa297839f8f2d549372989ded9f2c6adfb41a7568e1fa05210afd9e674aa5b9c1f16093cc997fe0ac115a36b55c674e692648af22d9b2c39087fd67864ab3b6a4023dac267586a382a28160df9da4e6301d093d3b8b4139f14ef5227ec24b9b42768830b482c51f8ad8c5de7a36e03c52cbb9e82042666a02e6d7b0191df6b04678fe32f05910c34842f5f3ede3cdcb138b50df6cb523564dc76a304101ad2367be08e64dfcb677eeafcb6a01d553aa93b476ad5f5b6f06215b0fccf98f4cdf3f303b0efd6cea9d64a0a6a1ae5d2895dab1069a7cd9bea1042d1dba62689ea997e1fcb2473a6d29328c3b1824be710c5f7ff934ce66504349a4e7849a139fd5d8ff172e854178349ca4581e5626c9f4abf7571c3d89e34b35cbae58dce15558b5ff2e50b09c19efc3ba9dba931676791f3217b8ab87279a13ff2c8143e77db9aab722d02e43e166213a7d5c5b5caefbc93df4dd5b82d97fabaaacc1bdee994ef5785c4d66e0645a0a8e797ee8e4f16a90b017dee47779c4e9dff380ea3ffaec2f4cf1a91c1157e9e06de2d096e042304e9839d235af2781dd3b670573dc262351a95fd5ea6c638ea1d16eaababe5a0476151aa702d4abbd24e9a1f56def1d2f25077836c1bfb3de61380874a3d89de4f7bf36eb1ed6837b9757374880f745b3da6acf3a28c1eca34b29582e1872d1f1e03dc25d48d4ab8696ee0df4866ea5d0dc1268386475a59113dc4a69ba8d1c4a156a8da20a89cba56ba13d344fe5fcaa83681b338285af555e06f92ee28dfb57d5d32b8ee5a7450d34d09c143a51762e967ce6c3c668b2140a2a930257d58f61dcb8e6f150fcc3a59ec9ee4ecc10d209ae50c1946c78d76ce234489a50ea5968f31fedb53f50e59555082ce0c99eaec36bf143d468546815e64416a8ed517e541277fc2472dee4e861edc5691b5a96f6327c345057cc52ba246e9c46a318c266405ad68b613ba654cda6f3ed6d06499c8afe55df29c7e43695fac81c2c5e1b7ffaeeffa8793819c6c548f81182aa88e45df5f227443f99dbce9d4b252c5ec2694f3b4a3bff4c283a6aa559a93fb5a639bff924005a0f5c9a3652481fd9ea19398542bfb793c38bc6ec239933f8f76c4b7a40798b0ee52730461252eb91787bd75b89f2981d4126a3727bb15b9771278349d28562b942c077996fe8c0c2ab5dc59e8fa1b52a16abfbb8e1af3d25e7bb6850f3d76c42d9316049f6e8446586158e00f57cff1e5fb41d38909d257bb6330f682170ae514930a94ff2b2bff73007ce0583b9ef6b9fee7c1512c56a906b0b291b35481a6864450622df3a20c5ba46503437498fd3213bfe64d1205a254c57c7ee9ca84d6bd585b0e34725ecd26e70ea4c92cd3a46a38cde06898bb25c273a4accfc880bb9d1120a24a8198f01d4dac77c97d827d67bb1770725a2bf01528214029f0124a852daca1bd940145789ca1c5eca9026e4f5cc7183d847b60ef7193e410d89816757a1ed0ef4984d1c96ec640aa13b98519260be978d6ae3d2e73c56422ac42b5a09e461dcdaa9d9ce696317c10c3fde4754d95765a7647f2f688c39d7f6c8062adfa7cfc8035b69ca3231c0c2ee95d1e61e8ead11873b382a6220a8e61c38ff74bda5121421bf7fb3670e18e283a0564596566579ec06ed016d6e9e3afc4770581db3e896b8152d301fccd7d1f236a9173c19d3d0111e064197c3f4b0f5cba608ba8e2e32ad6b81347eb54ad7dc51d79e516adab90027ff7b7131dcdb8077359eaeb973122d227903ca7b5cc2b910faeaaeb973e7fa1134d998db1d43a0f82fe42925e5d5a36c55d7c3c8c27ee92a62604eb798710fb6bd1aa116450aa4a9c9eec92c527c4bf474041a77041d30a602b9711e673607162af7957b3a59fcd87fc7fb6e2f5bd2a2973295407b918c66c37772444f072673d98f64931310e51c89ed93ff0fa9bdb73e5938a2017c97be5bc9a6a693e361374461268dac014c6994c70d4ec4bf6462dca0a6398c22e8b44640ab61279dd58d56e0dafa57fb77f66999061defd552acd9986f22fd2deca1718704096cda45e53b04fb782ddba95e8982489c63dab855839c6725c4ea2de4ea05ccc7c6cecfd2e737778e2d6c487aa320defabacd6bc01f3f733f4760957fe2d58d2ace85e787b2d40ef396820ad3896f2fb4ec53221ad6ef2fe90f449d30db5120178ab7060d91922f9ba76f17269", 0xaab, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m40.960942997s ago: executing program 1 (id=3393): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)='!', 0x1}], 0x1}}], 0x1, 0x8800) 1m36.578373617s ago: executing program 2 (id=3395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}, {&(0x7f0000000240)="5d75b0c5be4775a773a93d7a5f257ac0ce", 0x11}], 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 14.988302806s ago: executing program 2 (id=3402): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='M', 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 12.987008947s ago: executing program 2 (id=3426): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326"], 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x14) write$evdev(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 11.552168709s ago: executing program 2 (id=3429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x80000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r4) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 10.353783858s ago: executing program 2 (id=3430): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010102}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xda, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.17605048s ago: executing program 3 (id=3432): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@broadcast}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x6aec43739a1e6a2e, {0x5000, 0xdddd0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) 8.902891544s ago: executing program 0 (id=3434): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000340), &(0x7f00000000c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 8.758260677s ago: executing program 3 (id=3435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000200)=""/115, 0x73}], 0x1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) 8.651465612s ago: executing program 0 (id=3437): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100000009040100"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x9c, &(0x7f0000000600)=""/156, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc27}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000100), 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e700001beda61e3bde7da0870fa87fc1b42be4d052fb3427a95a3b16a61d23356fd828a04d581b622462b5d9fb00"/56, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$binfmt_elf64(r6, 0x0, 0x10f) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{0x0}, {&(0x7f0000001dc0)="bb", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="fd3a771cd79dce5b1e46e80811b5e6c7dddd577ab52e7348b18d804a2a4586f99ac78ed621090812fae5513729e029157873e49d5ff9d5fcf6b6f63f554ec4ede6846a3a2632e4628c", 0x49}], 0x1}}], 0x3, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="9c0f00000000000002005477e74e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000f600"], 0x90) 7.271197007s ago: executing program 2 (id=3439): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) socket(0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}]}) setsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) 6.457232005s ago: executing program 4 (id=3440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="460f06640f320f01df450f01ca66430f383a97315e00006565f30fb879f166b89c008ed866b8a3008ed8c401d055fb66bad004b835a868c2ef", 0x39}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000007"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') 6.002794915s ago: executing program 1 (id=3398): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000c42ac2d290e75655033764ce74b9ab0206030000000000000000000000000005000100070000000900020073797a30000000"], 0x5c}}, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 5.914985468s ago: executing program 4 (id=3441): madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000040000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r4 = syz_pidfd_open(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5501, &(0x7f00000000c0)={{}, "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"}) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)=0x7, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCSTI(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 5.889874112s ago: executing program 1 (id=3442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.577421246s ago: executing program 3 (id=3443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 4.582843906s ago: executing program 3 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000380)={[{@gid}]}) 4.58223059s ago: executing program 4 (id=3445): r0 = syz_open_dev$vim2m(0x0, 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000480)='xfs\x00', 0x0, 0x0) 4.511082762s ago: executing program 0 (id=3446): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.053365867s ago: executing program 0 (id=3447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000050603060000000000000000000000000900030073797a310000000005"], 0x34}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.357768375s ago: executing program 4 (id=3448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='%(,\xe3\x81\xcf\xb3\xb2g+n\xf5\xfa\xb67\xf6\xe8\xef\x9eF\xf4\xb6\x05\xcf\xbf\xd31\xce!\x18Q.\xa4\xf0{^\xbe\xd1\x82B\xb4H\x9aUi\xc4\xa9\xe5\xdb\x00\x02v\xee\xa6\x12\xde\xc9l\xe7e\xf9Ec\xb3\xa7\x96(\x9dk\xe0mh\xa0\xe4[o\x8c6\x900\xa6\r\x1a\x93\xd6\x8c\x9b+)\xde\xbaN\x05`\xbei\x9d-\xdd\a^Wz\'0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1}, 0x0, 0x0) 1.601838646s ago: executing program 0 (id=3450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setresuid(0x0, 0x0, 0xee01) mount$9p_fd(0x0, 0x0, 0x0, 0x40080, 0x0) brk(0xffffffff) 1.465321062s ago: executing program 4 (id=3451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000098f848d6f35e271e04000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 995.812997ms ago: executing program 0 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000680)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x110}) io_uring_enter(r4, 0x45a5, 0x0, 0x0, 0x0, 0x0) 195.854557ms ago: executing program 4 (id=3453): rmdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0x4, 0x182, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac", 0xb4, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=3454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0xfffffffe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): s [ 2120.106755][T18355] snd_usb_pod 5-1:1.1: invalid control EP [ 2120.119984][T18355] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2120.132732][T18355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2120.140436][T18355] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2120.268521][T20430] Bluetooth: MGMT ver 1.23 [ 2121.318374][T20444] tipc: Started in network mode [ 2121.364274][T20444] tipc: Node identity ac1414aa, cluster identity 4711 [ 2121.444227][T20444] tipc: Enabled bearer , priority 10 [ 2122.548113][T18355] usb 5-1: USB disconnect, device number 65 [ 2122.552115][T18350] tipc: Node number set to 2886997162 [ 2122.772297][ T29] audit: type=1800 audit(1728492461.835:1861): pid=20459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2942" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2123.012664][T20463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2944'. [ 2123.246935][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 2124.547369][ T29] audit: type=1800 audit(1728492463.625:1862): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2955" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2125.235772][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 2125.273825][ T29] audit: type=1800 audit(1728492464.355:1863): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2966" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2126.472091][ T5274] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2126.644026][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.659658][ T5274] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2126.844342][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.245825][ T5274] usb 2-1: config 0 descriptor?? [ 2127.496136][T20542] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 2127.554671][T20542] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 2127.588847][T20542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2974'. [ 2127.598373][T20542] NCSI netlink: No device for ifindex 0 [ 2127.672097][T19207] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2127.746027][ T5274] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 2127.757127][ T5274] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0050/input/input39 [ 2127.832058][ T5272] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2127.848292][T19207] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2127.859429][T19207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2127.875056][ T5274] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2127.886080][T19207] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2127.905765][T19207] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2127.919824][T19207] usb 5-1: Manufacturer: syz [ 2127.933474][T19207] usb 5-1: config 0 descriptor?? [ 2127.972623][ T5304] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2128.002194][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 2128.011524][ T5272] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 2128.028194][ T5272] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.037277][ T5272] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2128.046569][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.054775][T19207] rc_core: IR keymap rc-hauppauge not found [ 2128.060687][T19207] Registered IR keymap rc-empty [ 2128.068298][ T5272] usb 4-1: config 0 descriptor?? [ 2128.073769][T19207] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2128.087687][T19207] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 2128.132185][ T5304] usb 3-1: Using ep0 maxpacket: 8 [ 2128.153682][ T5304] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2128.161769][ T5304] usb 3-1: config 0 has no interface number 0 [ 2128.186140][T19207] usb 2-1: USB disconnect, device number 64 [ 2128.201498][ T5304] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2128.225787][ T5304] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2128.268892][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.290470][T20542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.295664][ T5304] usb 3-1: config 0 descriptor?? [ 2128.312099][T20542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.349374][ T5304] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2128.566239][T20542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.592671][T20542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.613723][ T5272] usb 4-1: string descriptor 0 read error: -71 [ 2128.652284][ T5272] usb 4-1: USB disconnect, device number 56 [ 2128.688283][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 2128.688796][ T5308] usb 5-1: USB disconnect, device number 66 [ 2129.534559][T18355] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2129.696985][ T937] usb 3-1: USB disconnect, device number 66 [ 2129.756981][ T937] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 2129.763829][T18355] usb 2-1: Using ep0 maxpacket: 16 [ 2129.775707][T18355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.828332][T18355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.883542][T18355] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2129.935010][T18355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.967059][T18355] usb 2-1: config 0 descriptor?? [ 2130.250422][T18355] usbhid 2-1:0.0: can't add hid device: -71 [ 2130.257104][T18355] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2130.269563][T18355] usb 2-1: USB disconnect, device number 65 [ 2130.692060][T20578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2988'. [ 2131.049347][T20590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2991'. [ 2131.059520][T20590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2991'. [ 2131.272075][ T5274] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2131.272075][T18355] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2131.442552][T18355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.456550][T18355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2131.461019][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 2131.467048][T18355] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 2131.481035][T18355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.481811][ T5274] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2131.500898][T18355] usb 2-1: config 0 descriptor?? [ 2131.509281][ T5274] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2131.518408][T18355] HFC-S_USB 2-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 2131.532032][ T5274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.542529][ T5274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2131.551514][ T5274] usb 3-1: config 1 has no interface number 0 [ 2131.557709][ T5274] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2131.566834][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.591210][ T5274] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2131.712917][T18355] usbhid 2-1:0.0: can't add hid device: -71 [ 2131.739506][T18355] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2131.761324][T18355] usb 2-1: USB disconnect, device number 66 [ 2132.041727][ T5274] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 2132.050350][ T5274] snd_usb_pod 3-1:1.1: invalid control EP [ 2132.087088][ T5274] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 2132.870074][ T5274] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2132.880839][ T5274] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2132.954640][T20627] syz.0.3000: attempt to access beyond end of device [ 2132.954640][T20627] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2132.967846][T20627] (syz.0.3000,20627,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 2132.975602][T20627] (syz.0.3000,20627,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 2132.983167][T20627] (syz.0.3000,20627,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 2132.991993][T20627] (syz.0.3000,20627,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 2133.701503][T20634] netlink: 'syz.0.3004': attribute type 11 has an invalid length. [ 2134.438994][ T29] audit: type=1326 audit(1728492473.515:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20645 comm="syz.3.3007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385177dff9 code=0x0 [ 2135.286783][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3010'. [ 2135.398179][T18355] usb 3-1: USB disconnect, device number 67 [ 2136.683874][ T29] audit: type=1800 audit(1728492475.765:1865): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3023" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2136.706222][T20688] binder: 20686:20688 ioctl 400c620e 20000140 returned -22 [ 2136.744311][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'. [ 2137.023009][ T29] audit: type=1326 audit(1728492476.095:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20690 comm="syz.1.3024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f3f7dff9 code=0x0 [ 2137.044810][T18355] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2137.344822][T18355] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00 [ 2137.370394][T18355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.420096][T18355] usb 4-1: Product: syz [ 2137.476530][T18355] usb 4-1: Manufacturer: syz [ 2137.507206][T18355] usb 4-1: SerialNumber: syz [ 2137.556591][T18355] usb 4-1: config 0 descriptor?? [ 2137.589522][T18355] ch341 4-1:0.0: ch341-uart converter detected [ 2137.790246][T18355] usb 4-1: failed to receive control message: -121 [ 2137.810528][T18355] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2138.135684][T20719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3032'. [ 2139.088840][T20733] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 2139.107102][T20733] netlink: 'syz.4.3035': attribute type 3 has an invalid length. [ 2139.118994][T20733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3035'. [ 2139.121433][T20735] syzkaller1: entered promiscuous mode [ 2139.142318][T20733] NCSI netlink: No device for ifindex 0 [ 2139.146148][T20735] syzkaller1: entered allmulticast mode [ 2139.380653][T20745] netlink: 'syz.2.3041': attribute type 1 has an invalid length. [ 2139.388608][T20745] netlink: 'syz.2.3041': attribute type 3 has an invalid length. [ 2139.397572][T20745] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3041'. [ 2139.402210][T18355] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2139.406852][T20745] NCSI netlink: No device for ifindex 0 [ 2139.582102][T18355] usb 5-1: Using ep0 maxpacket: 16 [ 2139.589322][T18355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2139.600591][T18355] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2139.609701][T18355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.622493][T18355] usb 5-1: config 0 descriptor?? [ 2139.663283][ T5274] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2139.691536][ T5272] usb 4-1: USB disconnect, device number 57 [ 2139.713650][ T5272] ch341 4-1:0.0: device disconnected [ 2139.748108][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 2139.932051][ T5274] usb 3-1: Using ep0 maxpacket: 16 [ 2139.950149][ T5274] usb 3-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 2139.971747][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2140.050128][ T29] audit: type=1326 audit(1728492479.125:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20747 comm="syz.3.3042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385177dff9 code=0x0 [ 2140.122744][T20729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.170303][ T5274] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2140.230662][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.258168][T20729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.349823][ T5274] usb 3-1: config 0 descriptor?? [ 2140.370227][T20753] input: syz0 as /devices/virtual/input/input41 [ 2140.433431][ T5274] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2140.908466][T18355] hid (null): invalid report_size 17387 [ 2140.915048][T18355] hid (null): report_id 2176741362 is invalid [ 2140.921216][T18355] hid (null): unknown global tag 0xc [ 2140.927421][T18355] hid (null): unknown global tag 0xd [ 2140.936057][T18355] hid-generic 0003:0158:0100.0051: unknown main item tag 0x1 [ 2140.943551][T18355] hid-generic 0003:0158:0100.0051: unexpected long global item [ 2140.951621][T18355] hid-generic 0003:0158:0100.0051: probe with driver hid-generic failed with error -22 [ 2140.964118][T18355] usb 5-1: USB disconnect, device number 67 [ 2140.982875][T20764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.987828][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3047'. [ 2141.000974][T20764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.168405][ T29] audit: type=1800 audit(1728492480.245:1868): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3049" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2141.365424][T20779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.381717][T20779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.502072][T18355] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2141.652173][T18355] usb 2-1: Using ep0 maxpacket: 32 [ 2141.666379][T18355] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2141.675254][T18355] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2141.685598][T18355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.697498][T18355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2141.706671][T18355] usb 2-1: config 1 has no interface number 0 [ 2141.712835][T18355] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2141.722067][T18355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.846734][T18355] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2142.041322][T18355] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2142.078905][T18355] snd_usb_pod 2-1:1.1: invalid control EP [ 2142.105716][T18355] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2142.131592][T18355] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2142.154757][T18355] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2142.436535][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 2145.485486][ T5304] usb 3-1: USB disconnect, device number 68 [ 2145.908755][T18355] usb 2-1: USB disconnect, device number 67 [ 2145.964160][ T29] audit: type=1326 audit(1728492484.855:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20792 comm="syz.4.3057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98837dff9 code=0x0 [ 2146.573589][T20801] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 2146.581371][T20801] netlink: 'syz.3.3059': attribute type 3 has an invalid length. [ 2146.600845][T20801] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3059'. [ 2146.620805][T20801] NCSI netlink: No device for ifindex 0 [ 2146.640502][ T29] audit: type=1800 audit(1728492485.715:1870): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3062" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2146.793314][T20815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3065'. [ 2146.822698][T20814] sp0: Synchronizing with TNC [ 2146.862516][ T5304] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2147.024761][ T5304] usb 4-1: Using ep0 maxpacket: 16 [ 2147.052839][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2147.072137][ T5304] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2147.090779][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.101367][ T5304] usb 4-1: config 0 descriptor?? [ 2147.531600][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.543047][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.554945][ T5304] hid (null): invalid report_size 17387 [ 2147.561675][ T5304] hid (null): report_id 2176741362 is invalid [ 2147.591106][ T5304] hid (null): unknown global tag 0xc [ 2147.602997][ T5304] hid (null): unknown global tag 0xd [ 2147.621174][ T5304] hid-generic 0003:0158:0100.0052: unknown main item tag 0x1 [ 2147.636922][ T5304] hid-generic 0003:0158:0100.0052: unexpected long global item [ 2147.649798][ T5304] hid-generic 0003:0158:0100.0052: probe with driver hid-generic failed with error -22 [ 2147.764031][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.780622][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.790343][ T5304] usb 4-1: USB disconnect, device number 58 [ 2147.892197][T18355] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2148.042135][T18355] usb 5-1: Using ep0 maxpacket: 32 [ 2148.052903][T18355] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2148.061283][T18355] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2148.082848][T18355] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.094272][T18355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2148.105891][T18355] usb 5-1: config 1 has no interface number 0 [ 2148.112357][T18355] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2148.121579][T18355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.135626][T18355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2148.341415][T18355] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2148.353953][T18355] snd_usb_pod 5-1:1.1: invalid control EP [ 2148.359793][T18355] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2148.369993][T18355] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2148.379733][T18355] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2148.412310][ T5304] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2148.449742][T20851] netlink: 'syz.3.3080': attribute type 21 has an invalid length. [ 2148.458341][T20851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2148.472047][T20851] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 2148.479818][T20851] netlink: 'syz.3.3080': attribute type 3 has an invalid length. [ 2148.492036][T20851] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2148.506416][T20851] netlink: 'syz.3.3080': attribute type 21 has an invalid length. [ 2148.514650][T20851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2148.524046][T20851] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 2148.531788][T20851] netlink: 'syz.3.3080': attribute type 5 has an invalid length. [ 2148.539656][T20851] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2148.692060][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 2148.699668][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2148.711120][ T5304] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2148.720598][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.734459][ T5304] usb 2-1: config 0 descriptor?? [ 2148.750313][T20852] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2148.807515][T20852] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.815052][T20852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.080779][ T5304] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2149.342857][ T5304] usb 2-1: USB disconnect, device number 68 [ 2149.398209][ T5304] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 2150.651803][T20859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 2150.714949][ T5269] usb 5-1: USB disconnect, device number 68 [ 2150.806768][ T5272] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2150.982046][ T5272] usb 3-1: Using ep0 maxpacket: 32 [ 2150.989240][ T5272] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2150.997841][ T5272] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2151.006631][ T5272] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.016975][ T5272] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2151.026116][ T5272] usb 3-1: config 1 has no interface number 0 [ 2151.032417][ T5272] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2151.041476][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.060985][ T5272] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2151.259445][ T5272] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 2151.274011][ T5272] snd_usb_pod 3-1:1.1: invalid control EP [ 2151.280010][ T5272] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 2151.292939][ T5272] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2151.300667][ T5272] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2153.768843][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 2153.813493][ T5304] usb 3-1: USB disconnect, device number 69 [ 2154.152088][ T5308] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2154.322110][ T5308] usb 5-1: Using ep0 maxpacket: 8 [ 2154.347453][ T5308] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2154.366594][ T5308] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2154.388917][T16148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2154.401609][ T5308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2154.411581][ T5308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2154.421658][ T5308] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2154.435448][ T5308] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2154.445254][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.452304][T16148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2154.464217][T16148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2154.480972][T16148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2154.488871][T16148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2154.533233][T16148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2154.677058][ T5308] usb 5-1: usb_control_msg returned -32 [ 2154.683248][ T5308] usbtmc 5-1:16.0: can't read capabilities [ 2155.055399][T20915] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2155.069119][ T5274] usb 5-1: USB disconnect, device number 69 [ 2155.174046][ T5308] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2155.190345][T16706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.270164][T16706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.332220][ T5308] usb 3-1: Using ep0 maxpacket: 32 [ 2155.369733][ T5308] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2155.384777][T20893] chnl_net:caif_netlink_parms(): no params data found [ 2155.400681][ T5308] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2155.439016][ T5308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.484371][ T5308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2155.514605][ T5308] usb 3-1: config 1 has no interface number 0 [ 2155.537419][ T5308] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2155.552738][T16706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.584972][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.686752][ T5308] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2155.755006][T16706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.846428][T20893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.860602][ T5308] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 2155.873969][ T5308] snd_usb_pod 3-1:1.1: invalid control EP [ 2155.879967][ T5308] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 2155.880981][T20893] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.886904][ T5308] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2155.901233][ T5308] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2155.925878][T20893] bridge_slave_0: entered allmulticast mode [ 2155.943853][T20893] bridge_slave_0: entered promiscuous mode [ 2155.960760][T20893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.979149][T20893] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.988393][T20893] bridge_slave_1: entered allmulticast mode [ 2156.000454][T20893] bridge_slave_1: entered promiscuous mode [ 2156.013024][T20930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'. [ 2156.076512][T20893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2156.220275][T20893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2156.703375][T16148] Bluetooth: hci1: command tx timeout [ 2156.748562][T20893] team0: Port device team_slave_0 added [ 2157.280793][T20893] team0: Port device team_slave_1 added [ 2157.502108][T16148] Bluetooth: hci4: command 0x0406 tx timeout [ 2158.049558][ T5269] usb 3-1: USB disconnect, device number 70 [ 2158.146907][T16706] bridge_slave_1: left allmulticast mode [ 2158.170691][T16706] bridge_slave_1: left promiscuous mode [ 2158.222304][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.230172][T20944] netlink: 'syz.2.3113': attribute type 1 has an invalid length. [ 2158.239452][T20944] netlink: 'syz.2.3113': attribute type 3 has an invalid length. [ 2158.248974][T20944] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3113'. [ 2158.279119][T16706] bridge_slave_0: left allmulticast mode [ 2158.285924][T16706] bridge_slave_0: left promiscuous mode [ 2158.290465][T20944] NCSI netlink: No device for ifindex 0 [ 2158.291637][T16706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.535419][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 2158.673794][ T5269] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2158.819212][ T29] audit: type=1326 audit(1728492497.895:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20953 comm="syz.3.3115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385177dff9 code=0x0 [ 2158.862649][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 2158.874666][ T5269] usb 3-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 2158.885604][T18446] Bluetooth: hci1: command tx timeout [ 2158.893023][ T5269] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2158.907012][ T5269] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2158.916727][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.062994][ T5269] usb 3-1: config 0 descriptor?? [ 2159.092625][ T5269] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2159.652711][T20948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.675087][T20948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.069710][T20967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.117614][T20967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.171036][T16706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.188760][T16706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2160.200681][T16706] bond0 (unregistering): Released all slaves [ 2160.216790][T20893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2160.229745][T20893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2160.262319][T20893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.377279][T20893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.391345][T20893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2160.417714][T20893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2160.464739][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.471683][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.580780][T20893] hsr_slave_0: entered promiscuous mode [ 2160.594651][T20893] hsr_slave_1: entered promiscuous mode [ 2160.608336][T20893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2160.618878][T20893] Cannot create hsr debugfs directory [ 2160.715122][T20976] binder: 20975:20976 ioctl 400c620e 20000140 returned -22 [ 2160.918483][T16706] hsr_slave_0: left promiscuous mode [ 2160.945716][T16706] hsr_slave_1: left promiscuous mode [ 2160.962508][T18446] Bluetooth: hci1: command tx timeout [ 2160.968904][T16706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2160.977680][T16706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2160.991466][T16706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2160.999563][T16706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2161.037509][T16706] veth1_macvtap: left promiscuous mode [ 2161.068175][T16706] veth0_macvtap: left promiscuous mode [ 2161.074033][ T5274] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2161.101626][T20984] input: syz1 as /devices/virtual/input/input42 [ 2161.142283][T16706] veth1_vlan: left promiscuous mode [ 2161.199537][T16706] veth0_vlan: left promiscuous mode [ 2161.572383][T20984] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2161.681741][T18350] usb 3-1: USB disconnect, device number 71 [ 2161.925928][ T5274] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00 [ 2161.943992][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.960071][ T5274] usb 5-1: Product: syz [ 2161.967033][ T5274] usb 5-1: Manufacturer: syz [ 2161.979335][ T5274] usb 5-1: SerialNumber: syz [ 2161.991761][ T5274] usb 5-1: config 0 descriptor?? [ 2162.096305][ T5274] ch341 5-1:0.0: ch341-uart converter detected [ 2162.232140][ T5274] usb 5-1: failed to receive control message: -121 [ 2162.238757][ T5274] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2163.072254][T18446] Bluetooth: hci1: command tx timeout [ 2163.389084][T16706] team0 (unregistering): Port device team_slave_1 removed [ 2163.504918][T16706] team0 (unregistering): Port device team_slave_0 removed [ 2164.431310][T20986] bond_slave_0: entered promiscuous mode [ 2164.441369][T20988] bond_slave_0: entered allmulticast mode [ 2164.447313][T20988] bond_slave_0: left allmulticast mode [ 2164.454529][T20988] bond_slave_0: left promiscuous mode [ 2164.545554][T21007] pim6reg1: entered promiscuous mode [ 2164.550897][T21007] pim6reg1: entered allmulticast mode [ 2164.600538][T21029] netlink: 'syz.0.3132': attribute type 21 has an invalid length. [ 2164.608827][T21029] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3132'. [ 2164.618237][T21029] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 2164.626391][T21029] netlink: 'syz.0.3132': attribute type 3 has an invalid length. [ 2164.630510][ T5304] usb 5-1: USB disconnect, device number 70 [ 2164.634921][T21029] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3132'. [ 2164.645119][ T5304] ch341 5-1:0.0: device disconnected [ 2164.655545][T21030] netlink: 'syz.0.3132': attribute type 21 has an invalid length. [ 2164.674272][T21030] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3132'. [ 2164.683555][T21030] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 2164.691313][T21030] netlink: 'syz.0.3132': attribute type 5 has an invalid length. [ 2164.699432][T21030] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3132'. [ 2164.715832][T21033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3132'. [ 2164.746378][T21033] bridge0: left promiscuous mode [ 2164.908725][T21037] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 2164.928377][T21037] netlink: 'syz.4.3134': attribute type 3 has an invalid length. [ 2164.942584][T21037] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3134'. [ 2164.951679][T21037] NCSI netlink: No device for ifindex 0 [ 2165.048109][T21047] loop2: detected capacity change from 0 to 7 [ 2165.090270][T21047] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 2165.103539][T21047] loop2: partition table partially beyond EOD, truncated [ 2165.119477][T21047] loop2: p1 size 6333 extends beyond EOD, truncated [ 2165.220575][ T5269] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2165.433290][ T5269] usb 5-1: Using ep0 maxpacket: 16 [ 2165.449748][ T5269] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 2165.465097][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2165.504032][ T5269] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2165.523654][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.547667][ T5269] usb 5-1: config 0 descriptor?? [ 2165.574620][ T5269] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2165.884266][T20893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2165.915053][T20893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2165.930688][T20893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2165.955530][T20893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2166.118848][T21044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.160216][T20893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2166.173893][T21044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.226722][T20893] 8021q: adding VLAN 0 to HW filter on device team0 [ 2166.266090][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.273338][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.348800][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.356113][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.550181][T21082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.565018][T21080] tipc: Started in network mode [ 2166.572922][T21082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.599536][T21080] tipc: Node identity f7, cluster identity 4711 [ 2166.632363][T21080] tipc: Node number set to 247 [ 2166.879745][T21096] binder: 21092:21096 ioctl 400c620e 20000140 returned -22 [ 2167.038395][T20893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2167.188996][T20893] veth0_vlan: entered promiscuous mode [ 2167.212089][T20893] veth1_vlan: entered promiscuous mode [ 2167.305264][T20893] veth0_macvtap: entered promiscuous mode [ 2167.318056][T20893] veth1_macvtap: entered promiscuous mode [ 2167.375070][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.399492][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.421155][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.449921][ T29] audit: type=1800 audit(1728492506.525:1872): pid=21113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3147" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2167.451494][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.496836][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.518755][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.544028][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.568331][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.595373][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.609222][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.630828][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.653743][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.671128][T20893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2167.673928][T16148] Bluetooth: hci5: command 0x0406 tx timeout [ 2167.733957][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.759801][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.778180][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.790393][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.803760][ T5274] usb 5-1: USB disconnect, device number 71 [ 2167.817759][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.850304][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.864353][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.881287][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.892154][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.937946][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.958692][T20893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.969367][T20893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.993773][T20893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2168.043847][T20893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.083460][T20893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.135276][T20893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.177026][T20893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.372949][T19209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.397716][T19209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.476465][ T8328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.497170][ T8328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.692216][ T5308] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2168.880083][ T5308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2168.947979][ T5308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.996886][ T5308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2169.052250][ T5308] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2169.057172][ T29] audit: type=1800 audit(1728492508.135:1873): pid=21168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3158" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2169.104674][ T5308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2169.152488][ T5308] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2169.187652][ T5308] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2169.207774][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.227469][ T5308] usb 4-1: Product: syz [ 2169.257233][ T5308] usb 4-1: Manufacturer: syz [ 2169.274945][ T5308] usb 4-1: SerialNumber: syz [ 2169.384188][T21178] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 2169.401349][T21178] netlink: 'syz.1.3160': attribute type 3 has an invalid length. [ 2169.409787][T21178] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3160'. [ 2169.474679][T21178] NCSI netlink: No device for ifindex 0 [ 2169.532266][ T5272] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2169.712154][T18355] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2169.719970][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 2169.735413][ T5272] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2169.745352][ T5272] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2169.764558][ T5272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.785046][ T5272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2169.805361][ T5272] usb 5-1: config 1 has no interface number 0 [ 2169.811609][ T5272] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2169.841115][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.864278][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2169.882506][T18355] usb 2-1: Using ep0 maxpacket: 16 [ 2169.893863][T18355] usb 2-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 2169.933909][T18355] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2169.962045][T18355] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2169.981501][T18355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.023612][T18355] usb 2-1: config 0 descriptor?? [ 2170.034821][T18355] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2170.065965][ T5272] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2170.074667][ T5272] snd_usb_pod 5-1:1.1: invalid control EP [ 2170.080993][ T5272] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2170.100168][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2170.108358][ T5272] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2170.472171][ T5308] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 2170.516450][ T5308] cdc_ncm 4-1:1.0: bind() failure [ 2170.608700][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.831776][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.952556][T19209] wlan0: Trigger new scan to find an IBSS to join [ 2171.249706][T21204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.337309][T21204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.442646][ T5308] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2171.491652][ T5308] cdc_ncm 4-1:1.1: bind() failure [ 2171.562288][ T5308] usb 4-1: USB disconnect, device number 59 [ 2171.945412][T21215] loop2: detected capacity change from 0 to 7 [ 2172.345278][T21215] Dev loop2: unable to read RDB block 7 [ 2172.351902][T21215] loop2: unable to read partition table [ 2172.357791][T21215] loop2: partition table beyond EOD, truncated [ 2172.364005][T21215] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 2172.414370][ T5308] usb 5-1: USB disconnect, device number 72 [ 2172.445322][ T4673] Dev loop2: unable to read RDB block 7 [ 2172.457768][ T4673] loop2: unable to read partition table [ 2172.487187][ T4673] loop2: partition table beyond EOD, truncated [ 2172.572649][ T29] audit: type=1800 audit(1728492511.645:1874): pid=21218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3169" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2172.598599][T18355] usb 2-1: USB disconnect, device number 69 [ 2172.639025][ T4673] Dev loop2: unable to read RDB block 7 [ 2172.656776][ T4673] loop2: unable to read partition table [ 2172.684643][ T4673] loop2: partition table beyond EOD, truncated [ 2172.755838][T21226] binder: 21225:21226 ioctl 400c620e 20000140 returned -22 [ 2172.850549][ T4673] Dev loop2: unable to read RDB block 7 [ 2172.854793][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 2172.865280][ T4673] loop2: unable to read partition table [ 2172.865466][ T4673] loop2: partition table beyond EOD, truncated [ 2173.143216][T18355] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2173.262237][ T29] audit: type=1326 audit(1728492512.315:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21231 comm="syz.3.3174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385177dff9 code=0x0 [ 2173.763257][ T4673] Dev loop2: unable to read RDB block 7 [ 2173.768903][ T4673] loop2: unable to read partition table [ 2173.823232][ T4673] loop2: partition table beyond EOD, truncated [ 2173.831324][T18355] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00 [ 2173.850799][T18355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.890596][T18355] usb 2-1: Product: syz [ 2173.919286][T18355] usb 2-1: Manufacturer: syz [ 2173.949067][T18355] usb 2-1: SerialNumber: syz [ 2173.998833][T18355] usb 2-1: config 0 descriptor?? [ 2174.027050][T18355] ch341 2-1:0.0: ch341-uart converter detected [ 2174.153138][ T4673] Dev loop2: unable to read RDB block 7 [ 2174.158828][ T4673] loop2: unable to read partition table [ 2174.176893][ T4673] loop2: partition table beyond EOD, truncated [ 2174.227950][T18355] usb 2-1: failed to receive control message: -121 [ 2174.252291][T18355] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2174.520722][ T5304] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2174.634709][ T29] audit: type=1800 audit(1728492513.715:1876): pid=21260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3183" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2174.656459][T21257] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 2174.682196][ T5304] usb 4-1: Using ep0 maxpacket: 32 [ 2174.691292][ T5304] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2174.702272][T21257] netlink: 'syz.4.3182': attribute type 3 has an invalid length. [ 2174.702971][ T5304] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2174.720654][ T5304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.731707][ T5304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2174.732128][T21257] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3182'. [ 2174.741755][ T5304] usb 4-1: config 1 has no interface number 0 [ 2174.762971][ T5304] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2174.764336][T21257] NCSI netlink: No device for ifindex 0 [ 2174.811495][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.836117][ T5304] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2174.848166][T21265] program syz.0.3185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2174.942856][T16706] wlan0: Trigger new scan to find an IBSS to join [ 2175.022382][T18355] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2175.036311][ T5304] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 2175.049514][ T5304] snd_usb_pod 4-1:1.1: invalid control EP [ 2175.064880][ T5304] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 2175.079260][ T5304] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2175.087015][ T5304] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2175.184388][T18355] usb 5-1: Using ep0 maxpacket: 16 [ 2175.201360][T18355] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 2175.222637][T18355] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2175.239098][T18355] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2175.271575][T18355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.403211][ T29] audit: type=1800 audit(1728492514.485:1877): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3189" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 2175.418929][T18355] usb 5-1: config 0 descriptor?? [ 2175.441813][T18355] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2175.821551][T21281] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2176.987988][ T5274] usb 2-1: USB disconnect, device number 70 [ 2177.353904][T16699] wlan0: Creating new IBSS network, BSSID e6:d8:85:1f:92:88 [ 2177.363014][T16706] bridge_slave_1: left allmulticast mode [ 2177.398513][T16706] bridge_slave_1: left promiscuous mode [ 2177.423953][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2177.472337][ T29] audit: type=1800 audit(1728492516.515:1878): pid=21285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3194" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2177.528470][T21263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.592962][T21263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.609109][ T5304] usb 4-1: USB disconnect, device number 60 [ 2177.623948][ T5274] ch341 2-1:0.0: device disconnected [ 2177.661039][T16706] bridge_slave_0: left allmulticast mode [ 2177.670287][ T5272] usb 5-1: USB disconnect, device number 73 [ 2177.689166][T16706] bridge_slave_0: left promiscuous mode [ 2177.762599][T16706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.738483][T21306] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2180.766784][ T29] audit: type=1800 audit(1728492519.775:1879): pid=21304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3201" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 2180.923480][T21312] ptrace attach of "./syz-executor exec"[19384] was attempted by ""[21312] [ 2180.992039][ T29] audit: type=1800 audit(1728492520.015:1880): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3206" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2182.033254][ T5274] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2182.212194][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 2182.644767][ T5274] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2182.664631][ T5274] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2182.685450][ T5274] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.702343][ T5274] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2182.758569][ T5274] usb 2-1: config 1 has no interface number 0 [ 2182.786490][ T5274] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2182.799131][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.815746][ T5274] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2182.820870][T21335] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2182.876214][ T29] audit: type=1800 audit(1728492521.955:1881): pid=21337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3214" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 2183.016631][ T5274] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2183.027420][T16706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2183.037312][ T5274] snd_usb_pod 2-1:1.1: invalid control EP [ 2183.044581][ T5274] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2183.053145][ T5274] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2183.063674][ T5274] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2183.083995][T16706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2183.097446][T16706] bond0 (unregistering): Released all slaves [ 2183.174359][ T29] audit: type=1800 audit(1728492522.255:1882): pid=21345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3217" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2185.519492][ T5274] usb 2-1: USB disconnect, device number 71 [ 2185.715808][T19207] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2185.750516][T21369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3225'. [ 2186.716945][ T29] audit: type=1800 audit(1728492525.725:1883): pid=21378 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3227" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2186.782377][T19207] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2186.793325][T19207] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2186.815477][T19207] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2186.829297][T19207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.953247][T16706] hsr_slave_0: left promiscuous mode [ 2186.976476][T16706] hsr_slave_1: left promiscuous mode [ 2187.017708][T16706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2187.025594][T16706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2187.034974][T16706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2187.044335][T16706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.067046][T19207] usb 3-1: usb_control_msg returned -32 [ 2187.076112][T16706] veth1_macvtap: left promiscuous mode [ 2187.077835][T19207] usbtmc 3-1:16.0: can't read capabilities [ 2187.081652][T16706] veth0_macvtap: left promiscuous mode [ 2187.100167][T16706] veth1_vlan: left promiscuous mode [ 2187.111030][T16706] veth0_vlan: left promiscuous mode [ 2187.455994][ T29] audit: type=1800 audit(1728492526.535:1884): pid=21391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3231" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2188.086644][ T5308] usb 3-1: USB disconnect, device number 72 [ 2188.472079][T18350] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2188.645744][T18350] usb 5-1: Using ep0 maxpacket: 32 [ 2188.665856][T18350] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2188.702480][T18350] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2188.711127][T18350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.730163][T18350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2188.752904][T18350] usb 5-1: config 1 has no interface number 0 [ 2188.759071][T18350] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2188.777555][T18350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.814956][T18350] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2188.866923][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 2188.998896][ T29] audit: type=1800 audit(1728492528.075:1885): pid=21420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3242" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 2189.029459][T18350] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2189.057570][T18350] snd_usb_pod 5-1:1.1: invalid control EP [ 2189.064059][T18350] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2189.070774][T18350] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2189.089906][T18350] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2189.919248][T16706] team0 (unregistering): Port device team_slave_1 removed [ 2190.179908][T16706] team0 (unregistering): Port device team_slave_0 removed [ 2191.693887][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'. [ 2191.977537][ T29] audit: type=1326 audit(1728492531.055:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21455 comm="syz.1.3253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ecf17dff9 code=0x0 [ 2192.223172][ T5272] usb 5-1: USB disconnect, device number 74 [ 2192.752965][T21469] syz.0.3257[21469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2192.753089][T21469] syz.0.3257[21469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2192.791101][T21469] syz.0.3257[21469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.193067][T18350] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2193.342282][ T5308] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2193.415354][T19207] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2193.541739][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'. [ 2193.582779][T19207] usb 5-1: Using ep0 maxpacket: 32 [ 2193.625319][T19207] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2193.625896][T18350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2193.641619][T19207] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2193.644845][ T5308] usb 3-1: Using ep0 maxpacket: 32 [ 2193.662759][ T5308] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2193.671275][T18350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2193.676652][T19207] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.680724][T18350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.699038][ T5308] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2193.708200][ T5308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.719009][T18350] usb 2-1: Product: syz [ 2193.723880][ T5308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2193.854072][T18350] usb 2-1: Manufacturer: syz [ 2193.859153][T18350] usb 2-1: SerialNumber: syz [ 2193.864509][ T5308] usb 3-1: config 1 has no interface number 0 [ 2193.893509][ T5308] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2194.226290][T19207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2194.235386][T19207] usb 5-1: config 1 has no interface number 0 [ 2194.242134][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.242216][T19207] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2194.260210][T19207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.302544][T19207] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2194.390109][ T5308] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2194.510773][T19207] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2194.519813][T19207] snd_usb_pod 5-1:1.1: invalid control EP [ 2194.526081][T19207] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2194.533171][T19207] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2194.540649][T19207] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2194.605978][ T5308] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 2194.614334][ T5308] snd_usb_pod 3-1:1.1: invalid control EP [ 2194.620065][ T5308] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 2194.643142][ T5308] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2194.661213][ T5308] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2198.108769][ T5304] usb 5-1: USB disconnect, device number 75 [ 2198.130715][T18350] cdc_ncm 2-1:1.0: failed to get mac address [ 2198.198295][T18350] cdc_ncm 2-1:1.0: bind() failure [ 2198.200563][ T5269] usb 3-1: USB disconnect, device number 73 [ 2198.233430][T18350] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2198.264932][T18350] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2198.359366][T18350] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2198.411178][T18350] usb 2-1: USB disconnect, device number 72 [ 2198.413909][T21524] netlink: 'syz.2.3278': attribute type 21 has an invalid length. [ 2198.461159][T21524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3278'. [ 2198.506985][T21524] netlink: 'syz.2.3278': attribute type 4 has an invalid length. [ 2198.515344][T21524] netlink: 'syz.2.3278': attribute type 3 has an invalid length. [ 2198.529745][T21524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3278'. [ 2198.539272][T21527] IPVS: Scheduler module ip_vs_ not found [ 2198.552990][T21524] netlink: 'syz.2.3278': attribute type 21 has an invalid length. [ 2198.561776][T21524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3278'. [ 2198.603429][T21524] netlink: 'syz.2.3278': attribute type 4 has an invalid length. [ 2198.611212][T21524] netlink: 'syz.2.3278': attribute type 5 has an invalid length. [ 2198.650987][T21524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3278'. [ 2198.661716][T21537] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3281'. [ 2198.720721][T21543] netlink: 'syz.3.3283': attribute type 21 has an invalid length. [ 2198.730047][T21543] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3283'. [ 2198.739922][T21543] netlink: 'syz.3.3283': attribute type 4 has an invalid length. [ 2198.748776][T21543] netlink: 'syz.3.3283': attribute type 3 has an invalid length. [ 2198.756602][T21543] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3283'. [ 2198.765868][T21534] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3278'. [ 2198.779990][T21543] netlink: 'syz.3.3283': attribute type 21 has an invalid length. [ 2198.832395][T21543] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3283'. [ 2198.845930][T21543] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3283'. [ 2200.062196][T19207] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2200.153730][ T5272] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2200.222340][T19207] usb 2-1: Using ep0 maxpacket: 32 [ 2200.229377][T19207] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2200.238539][T19207] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2200.250764][T19207] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.260987][T19207] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2200.270201][T19207] usb 2-1: config 1 has no interface number 0 [ 2200.276424][T19207] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2200.285704][T19207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.305391][T19207] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2200.322067][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 2200.328961][ T5272] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2200.337820][ T5272] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2200.346775][ T5272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.357002][ T5272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2200.366215][ T5272] usb 5-1: config 1 has no interface number 0 [ 2200.372471][ T5272] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2200.381772][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.404324][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2200.499135][T19207] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2200.507793][T19207] snd_usb_pod 2-1:1.1: invalid control EP [ 2200.516031][T19207] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2200.523377][T19207] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2200.530864][T19207] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2200.603926][ T5272] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2200.613671][ T5272] snd_usb_pod 5-1:1.1: invalid control EP [ 2200.619452][ T5272] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2200.626558][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2200.634278][ T5272] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2205.045010][ T5304] usb 2-1: USB disconnect, device number 73 [ 2205.169062][T19207] usb 5-1: USB disconnect, device number 76 [ 2205.676217][T21590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2206.880186][T21604] validate_nla: 2 callbacks suppressed [ 2206.880208][T21604] netlink: 'syz.1.3303': attribute type 21 has an invalid length. [ 2206.920974][T21604] __nla_validate_parse: 1 callbacks suppressed [ 2206.920996][T21604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3303'. [ 2206.961325][T21604] netlink: 'syz.1.3303': attribute type 4 has an invalid length. [ 2206.972637][T21604] netlink: 'syz.1.3303': attribute type 3 has an invalid length. [ 2207.000835][T21604] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3303'. [ 2207.033479][T21608] netlink: 'syz.1.3303': attribute type 21 has an invalid length. [ 2207.041573][T21608] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3303'. [ 2207.069564][T21608] netlink: 'syz.1.3303': attribute type 4 has an invalid length. [ 2207.100723][T21608] netlink: 'syz.1.3303': attribute type 5 has an invalid length. [ 2207.121833][T21608] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3303'. [ 2207.198951][T21608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3303'. [ 2207.208134][T19207] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2207.225507][T21608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.232140][ T5304] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2207.233075][T21608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.372297][T19207] usb 3-1: Using ep0 maxpacket: 32 [ 2207.381599][T19207] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2207.382203][ T5304] usb 4-1: Using ep0 maxpacket: 32 [ 2207.391329][T19207] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2207.419608][T19207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.423965][ T5304] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2207.451113][T19207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2207.470436][ T5304] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2207.474413][T19207] usb 3-1: config 1 has no interface number 0 [ 2207.494007][T19207] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2207.500538][ T5304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.503548][T19207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.517105][ T5304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2207.555093][T19207] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2207.571403][ T5304] usb 4-1: config 1 has no interface number 0 [ 2207.593065][ T5304] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2207.604917][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.624574][ T5308] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 2207.644634][ T5304] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2207.662303][ T5308] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 2207.693665][ T5308] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2207.748933][T19207] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 2207.772254][T19207] snd_usb_pod 3-1:1.1: invalid control EP [ 2207.792022][T19207] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 2207.798763][T19207] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2207.811894][T19207] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2207.851083][ T5304] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 2207.859716][ T5304] snd_usb_pod 4-1:1.1: invalid control EP [ 2207.872805][ T5304] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 2207.879565][ T5304] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2207.909198][ T5304] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2208.085413][T21630] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 2211.230700][T18446] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2211.239677][T18446] Bluetooth: hci2: Injecting HCI hardware error event [ 2211.250018][T18446] Bluetooth: hci2: hardware error 0x00 [ 2211.394409][T19207] usb 3-1: USB disconnect, device number 74 [ 2211.477992][T19209] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2212.719601][ T5304] usb 4-1: USB disconnect, device number 61 [ 2213.196769][T21656] netlink: 'syz.4.3320': attribute type 21 has an invalid length. [ 2213.209853][T21656] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3320'. [ 2213.225176][T21656] netlink: 'syz.4.3320': attribute type 4 has an invalid length. [ 2213.256784][T21662] netlink: 'syz.2.3322': attribute type 4 has an invalid length. [ 2213.274313][T21656] netlink: 'syz.4.3320': attribute type 3 has an invalid length. [ 2213.293836][T21662] netlink: 'syz.2.3322': attribute type 4 has an invalid length. [ 2213.315576][T21662] netlink: 204124 bytes leftover after parsing attributes in process `syz.2.3322'. [ 2213.345462][T21656] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3320'. [ 2213.384175][T21663] netlink: 'syz.4.3320': attribute type 21 has an invalid length. [ 2213.425684][T21663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3320'. [ 2213.443958][T21663] netlink: 'syz.4.3320': attribute type 4 has an invalid length. [ 2213.451736][T21663] netlink: 'syz.4.3320': attribute type 5 has an invalid length. [ 2213.470422][T21663] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3320'. [ 2213.536001][T21663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3320'. [ 2213.579774][T21672] input: syz1 as /devices/virtual/input/input44 [ 2213.842276][T18446] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2213.954233][T21675] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2214.286522][T21674] bond_slave_0: entered promiscuous mode [ 2214.292661][T21673] bond_slave_0: entered allmulticast mode [ 2214.298491][T21673] bond_slave_0: left allmulticast mode [ 2214.306065][T21673] bond_slave_0: left promiscuous mode [ 2214.912168][ T5308] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2215.072347][ T5308] usb 4-1: Using ep0 maxpacket: 32 [ 2215.087056][ T5308] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2215.103123][ T5308] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2215.126591][ T5308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.142931][ T5308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2215.159015][ T5308] usb 4-1: config 1 has no interface number 0 [ 2215.172211][ T5308] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2215.190455][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.234396][ T5308] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2215.302276][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 2215.512264][ T5308] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 2215.521291][ T5308] snd_usb_pod 4-1:1.1: invalid control EP [ 2215.527798][ T5308] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 2215.614325][ T29] audit: type=1326 audit(1728492554.695:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21705 comm="syz.0.3335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98217dff9 code=0x0 [ 2215.808013][ T5308] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2215.822255][ T5308] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2217.185623][ T29] audit: type=1800 audit(1728492556.175:1888): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3338" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2217.309152][ T29] audit: type=1800 audit(1728492556.345:1889): pid=21724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3341" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2217.456654][T21733] dvmrp0: entered allmulticast mode [ 2217.469414][T21733] dvmrp0: left allmulticast mode [ 2217.649367][T21741] binder: 21739:21741 ioctl 400c620e 20000140 returned -22 [ 2217.706303][ T5304] usb 4-1: USB disconnect, device number 62 [ 2218.054331][ T5272] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2218.244191][ T5272] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00 [ 2218.259296][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.267754][ T5272] usb 3-1: Product: syz [ 2218.286580][ T5272] usb 3-1: Manufacturer: syz [ 2218.291207][ T5272] usb 3-1: SerialNumber: syz [ 2218.312666][ T5272] usb 3-1: config 0 descriptor?? [ 2218.323771][ T5272] ch341 3-1:0.0: ch341-uart converter detected [ 2218.431898][ T5308] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2218.528950][ T5272] usb 3-1: failed to receive control message: -121 [ 2218.538239][ T5272] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2218.611244][ T5308] usb 2-1: Using ep0 maxpacket: 32 [ 2218.619961][ T5308] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2218.629353][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.638258][ T5308] usb 2-1: Product: syz [ 2218.644623][ T5308] usb 2-1: Manufacturer: syz [ 2218.649267][ T5308] usb 2-1: SerialNumber: syz [ 2218.667608][ T5308] usb 2-1: config 0 descriptor?? [ 2218.675896][ T5308] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2219.963811][ T5308] gspca_stk1135: reg_w 0xd err -71 [ 2219.978370][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.007828][ T5308] gspca_stk1135: Sensor write failed [ 2220.024876][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.031280][ T5308] gspca_stk1135: Sensor write failed [ 2220.060300][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.069782][ T5308] gspca_stk1135: Sensor read failed [ 2220.081689][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.101302][ T5308] gspca_stk1135: Sensor read failed [ 2220.106851][ T5308] gspca_stk1135: Detected sensor type unknown (0x0) [ 2220.117072][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.126719][ T5308] gspca_stk1135: Sensor read failed [ 2220.138445][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.151873][ T5308] gspca_stk1135: Sensor read failed [ 2220.159547][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.166334][ T5308] gspca_stk1135: Sensor write failed [ 2220.181545][ T5308] gspca_stk1135: serial bus timeout: status=0x00 [ 2220.188106][ T5308] gspca_stk1135: Sensor write failed [ 2220.193938][ T5308] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 2220.207075][ T5308] usb 2-1: USB disconnect, device number 74 [ 2220.834033][ T5308] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2221.014450][ T5308] usb 2-1: Using ep0 maxpacket: 32 [ 2221.032478][ T5308] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2221.040879][ T5308] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2221.049712][ T5308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.059941][ T5308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2221.069338][ T5308] usb 2-1: config 1 has no interface number 0 [ 2221.075670][ T5308] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2221.084854][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.113561][ T5308] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2221.325877][ T5308] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 2221.334280][ T5308] snd_usb_pod 2-1:1.1: invalid control EP [ 2221.340044][ T5308] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 2221.347525][ T5308] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2221.355449][ T5308] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2221.494909][ T5272] usb 3-1: USB disconnect, device number 75 [ 2221.514852][ T5272] ch341 3-1:0.0: device disconnected [ 2221.542036][ T29] audit: type=1800 audit(1728492560.615:1890): pid=21767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3353" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 2221.752295][ T29] audit: type=1326 audit(1728492560.825:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21768 comm="syz.2.3355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04c057dff9 code=0x0 [ 2221.928994][T21779] geneve2: entered promiscuous mode [ 2221.934539][T21779] geneve2: entered allmulticast mode [ 2221.949465][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.956058][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.525051][ T5308] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2223.793008][T18350] usb 2-1: USB disconnect, device number 75 [ 2223.800575][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 2223.814669][ T5308] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2223.832470][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.848847][ T5308] usb 5-1: config 0 descriptor?? [ 2223.939275][ T5308] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2223.988660][T21785] syz.2.3359 (21785): drop_caches: 2 [ 2224.508303][ T5272] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2224.522830][ T29] audit: type=1800 audit(1728492563.605:1892): pid=21803 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3366" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2224.712264][ T5272] usb 3-1: Using ep0 maxpacket: 16 [ 2224.737541][ T5272] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2224.745680][ T5272] usb 3-1: config 0 has no interface number 0 [ 2224.757941][ T5272] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2224.769124][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.778789][ T5272] usb 3-1: Product: syz [ 2224.785266][ T5272] usb 3-1: Manufacturer: syz [ 2224.790548][ T5272] usb 3-1: SerialNumber: syz [ 2224.807193][ T5272] usb 3-1: config 0 descriptor?? [ 2224.827510][ T5272] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2225.022111][ T5269] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2225.187577][ T5308] gspca_nw80x: reg_w err -71 [ 2225.192422][ T5308] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 2225.202041][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 2225.203994][ T5308] usb 5-1: USB disconnect, device number 77 [ 2225.209652][ T5269] usb 2-1: config 0 has no interfaces? [ 2225.241092][ T5269] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2225.263710][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.306093][ T5269] usb 2-1: config 0 descriptor?? [ 2225.905061][T21817] hub 6-0:1.0: USB hub found [ 2225.913775][T21817] hub 6-0:1.0: 1 port detected [ 2226.874981][ T5272] gspca_spca1528: reg_r err -71 [ 2226.880053][ T5272] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 2226.891427][ T5272] usb 3-1: USB disconnect, device number 76 [ 2227.057920][ T5308] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2227.212168][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 2227.221750][ T5308] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2227.238032][ T5308] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2227.247327][ T5308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.258096][ T5308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2227.270733][ T5308] usb 5-1: config 1 has no interface number 0 [ 2227.287188][ T5308] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2227.296583][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.311156][ T5308] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2227.510429][ T5308] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 2227.545457][ T5308] snd_usb_pod 5-1:1.1: invalid control EP [ 2227.551298][ T5308] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 2227.571332][ T5308] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2227.579039][ T5308] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 2228.982082][T18350] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2229.329109][T18350] usb 3-1: Using ep0 maxpacket: 8 [ 2229.337018][T18350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.348974][T18350] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2229.360869][T18350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2229.375491][T18350] usb 3-1: SerialNumber: syz [ 2229.393463][T18350] usb 3-1: config 0 descriptor?? [ 2229.406424][T18350] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 2229.413774][T18350] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 2229.436960][T18350] usb 3-1: Failed to create links for entity 255 [ 2229.455947][T18350] usb 3-1: Failed to register entities (-22). [ 2229.630083][T19207] usb 3-1: USB disconnect, device number 77 [ 2230.140748][T21810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3369'. [ 2230.197895][T19207] usb 2-1: USB disconnect, device number 76 [ 2230.339763][T21836] netlink: 'syz.1.3376': attribute type 1 has an invalid length. [ 2230.405534][T21836] bond1: (slave bridge1): Enslaving as a backup interface with a down link [ 2230.447151][ T29] audit: type=1800 audit(1728492569.525:1893): pid=21844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3378" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2230.468655][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 2231.058696][ T5308] usb 5-1: USB disconnect, device number 78 [ 2231.368667][T21850] bond_slave_0: entered promiscuous mode [ 2231.374970][T21850] bond_slave_1: entered promiscuous mode [ 2231.407951][T21850] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2231.503437][T21850] team0: Port device macvlan2 added [ 2231.558167][T21851] netlink: 'syz.3.3380': attribute type 4 has an invalid length. [ 2231.624003][T21851] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3380'. [ 2231.668533][T21851] bond_slave_0: left promiscuous mode [ 2231.682579][T21851] bond_slave_1: left promiscuous mode [ 2231.696555][T21853] @: renamed from vlan0 (while UP) [ 2232.092133][ T5308] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2232.257401][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.274346][ T5308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18188, setting to 1024 [ 2232.287414][ T5308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2232.301740][ T5308] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2232.312210][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.330166][ T5308] usb 3-1: config 0 descriptor?? [ 2232.353874][T21862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2232.801027][ T5308] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2232.832749][ T5308] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 2232.848027][T21880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3390'. [ 2232.886800][ T5308] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2233.013547][T21883] netlink: 'syz.0.3392': attribute type 10 has an invalid length. [ 2233.137073][T21883] syz_tun: entered promiscuous mode [ 2235.429059][ T5272] usb 3-1: USB disconnect, device number 78 [ 2244.342610][T18034] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2283.346391][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.353273][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.494634][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2285.502968][T16148] Bluetooth: hci1: command 0x0406 tx timeout [ 2296.782196][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2296.794760][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2296.827848][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2296.864152][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2296.929339][T21927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2296.937447][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2297.052215][T21934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2297.056800][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2297.086494][T21935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2297.121215][T21935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2297.143660][T21934] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2297.153512][T21939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2297.177817][T21934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2297.179539][T21939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2297.185903][T21934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2297.196347][T21935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2297.203328][T21934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2297.208060][T21935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2297.232961][T21935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2297.247090][T21935] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2297.254616][T21935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2297.289932][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2297.307701][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2297.317995][T16148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2297.766736][T19209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.913810][T19209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.020711][T21950] team0: entered promiscuous mode [ 2298.025897][T21950] team_slave_0: entered promiscuous mode [ 2298.031652][T21950] team_slave_1: entered promiscuous mode [ 2298.037621][T21950] macvlan2: entered promiscuous mode [ 2298.043062][T21950] bond0: entered promiscuous mode [ 2298.048323][T21950] bond_slave_0: entered promiscuous mode [ 2298.054207][T21950] bond_slave_1: entered promiscuous mode [ 2298.089392][T19209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.119871][T21950] team_slave_1: left promiscuous mode [ 2298.135232][T21950] team0: Port device team_slave_1 removed [ 2298.223866][T19209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.237320][T21948] team0: left promiscuous mode [ 2298.244686][T21948] team_slave_0: left promiscuous mode [ 2298.251014][T21948] macvlan2: left promiscuous mode [ 2298.256229][T21948] bond0: left promiscuous mode [ 2298.261004][T21948] bond_slave_0: left promiscuous mode [ 2298.266654][T21948] bond_slave_1: left promiscuous mode [ 2298.347055][T21931] chnl_net:caif_netlink_parms(): no params data found [ 2298.440337][T21922] chnl_net:caif_netlink_parms(): no params data found [ 2298.460410][T21923] chnl_net:caif_netlink_parms(): no params data found [ 2298.508159][T21936] chnl_net:caif_netlink_parms(): no params data found [ 2298.593820][T19209] bridge_slave_1: left allmulticast mode [ 2298.599532][T19209] bridge_slave_1: left promiscuous mode [ 2298.609174][T19209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.618122][T19209] bridge_slave_0: left allmulticast mode [ 2298.624258][T19209] bridge_slave_0: left promiscuous mode [ 2298.629960][T19209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.930770][T21966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2299.145969][T19209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2299.157568][T19209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2299.184942][T19209] bond0 (unregistering): Released all slaves [ 2299.352127][T18446] Bluetooth: hci6: command tx timeout [ 2299.352259][ T5228] Bluetooth: hci0: command tx timeout [ 2299.405290][T21931] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.419212][T21931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.422465][ T5228] Bluetooth: hci3: command tx timeout [ 2299.433925][T18446] Bluetooth: hci1: command tx timeout [ 2299.435599][T21931] bridge_slave_0: entered allmulticast mode [ 2299.454011][T21931] bridge_slave_0: entered promiscuous mode [ 2299.499470][T21931] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.507081][T21931] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.514375][T21931] bridge_slave_1: entered allmulticast mode [ 2299.521498][T21931] bridge_slave_1: entered promiscuous mode [ 2299.537584][T21936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.549413][T21936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.559928][T21936] bridge_slave_0: entered allmulticast mode [ 2299.572985][T21936] bridge_slave_0: entered promiscuous mode [ 2299.588688][T21936] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.604387][T21936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.614219][T21936] bridge_slave_1: entered allmulticast mode [ 2299.621433][T21936] bridge_slave_1: entered promiscuous mode [ 2299.701709][T21922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.709158][T21922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.717387][T21922] bridge_slave_0: entered allmulticast mode [ 2299.724925][T21922] bridge_slave_0: entered promiscuous mode [ 2299.734819][T21922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.746976][T21922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.756105][T21922] bridge_slave_1: entered allmulticast mode [ 2299.763807][T21922] bridge_slave_1: entered promiscuous mode [ 2299.875998][T21931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2299.895178][T21931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2299.913884][T21923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.921840][T21923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.930087][T21923] bridge_slave_0: entered allmulticast mode [ 2299.937705][T21923] bridge_slave_0: entered promiscuous mode [ 2299.946942][T21923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.954820][T21923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.963277][T21923] bridge_slave_1: entered allmulticast mode [ 2299.970459][T21923] bridge_slave_1: entered promiscuous mode [ 2299.988208][T19209] hsr_slave_0: left promiscuous mode [ 2299.995194][T19209] hsr_slave_1: left promiscuous mode [ 2300.001198][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2300.009227][T19209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2300.017820][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2300.025941][T19209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2300.053494][T19209] veth1_macvtap: left promiscuous mode [ 2300.059057][T19209] veth0_macvtap: left promiscuous mode [ 2300.064995][T19209] veth1_vlan: left promiscuous mode [ 2300.070310][T19209] veth0_vlan: left promiscuous mode [ 2301.429174][ T5228] Bluetooth: hci6: command tx timeout [ 2301.434874][ T5228] Bluetooth: hci0: command tx timeout [ 2301.481206][T19209] team0 (unregistering): Port device team_slave_1 removed [ 2301.512087][T18446] Bluetooth: hci3: command tx timeout [ 2301.512133][ T5228] Bluetooth: hci1: command tx timeout [ 2301.593990][T19209] team0 (unregistering): Port device team_slave_0 removed [ 2302.737698][T21922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.829652][T21936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.940061][T21922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2303.074332][T21931] team0: Port device team_slave_0 added [ 2303.092328][T21936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2303.144139][T21922] team0: Port device team_slave_0 added [ 2303.157308][T21931] team0: Port device team_slave_1 added [ 2303.230498][T21923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2303.243448][T21922] team0: Port device team_slave_1 added [ 2303.333738][T21936] team0: Port device team_slave_0 added [ 2303.345508][T21923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2303.430600][T21931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2303.450434][T21931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.487126][T21931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2303.502455][ T5228] Bluetooth: hci0: command tx timeout [ 2303.507995][ T5228] Bluetooth: hci6: command tx timeout [ 2303.544664][T21931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2303.551654][T21931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.582498][T18446] Bluetooth: hci1: command tx timeout [ 2303.587967][T18446] Bluetooth: hci3: command tx timeout [ 2303.665497][T21931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2303.688955][T21936] team0: Port device team_slave_1 added [ 2303.731213][T21922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2303.749107][T21922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.780861][T21922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2303.818114][T21922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2303.897116][T21922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.935977][T21922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2303.978724][T21936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2303.992528][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.031849][T21936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.053024][T21923] team0: Port device team_slave_0 added [ 2304.075774][T21923] team0: Port device team_slave_1 added [ 2304.173539][T21936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.181094][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.212389][T21936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2304.309349][T21931] hsr_slave_0: entered promiscuous mode [ 2304.329591][T21931] hsr_slave_1: entered promiscuous mode [ 2304.403601][T21923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2304.410593][T21923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.482051][T21923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.522654][T21923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.529641][T21923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.565339][T21923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2304.595522][T21936] hsr_slave_0: entered promiscuous mode [ 2304.647475][T21936] hsr_slave_1: entered promiscuous mode [ 2304.655374][T21936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2304.692007][T21936] Cannot create hsr debugfs directory [ 2304.837067][T21922] hsr_slave_0: entered promiscuous mode [ 2304.865684][T21922] hsr_slave_1: entered promiscuous mode [ 2304.876463][T21922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2304.894070][T21922] Cannot create hsr debugfs directory [ 2305.563353][T19209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.582102][T18446] Bluetooth: hci0: command tx timeout [ 2305.592963][T18446] Bluetooth: hci6: command tx timeout [ 2305.634481][T21923] hsr_slave_0: entered promiscuous mode [ 2305.640933][T21923] hsr_slave_1: entered promiscuous mode [ 2305.660399][T21923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2305.668581][T21923] Cannot create hsr debugfs directory [ 2305.672383][T18446] Bluetooth: hci1: command tx timeout [ 2305.674913][ T5228] Bluetooth: hci3: command tx timeout [ 2305.745166][T19209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.866352][T19209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2306.014655][T19209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2306.457891][T19209] bridge_slave_1: left allmulticast mode [ 2306.472529][T19209] bridge_slave_1: left promiscuous mode [ 2306.481137][T19209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.505322][T19209] bridge_slave_0: left allmulticast mode [ 2306.511044][T19209] bridge_slave_0: left promiscuous mode [ 2306.522183][T19209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.815286][T19209] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2307.021334][T19209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2307.038620][T19209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2307.049054][T19209] bond0 (unregistering): Released all slaves [ 2307.065241][T19209] bond1 (unregistering): Released all slaves [ 2307.283840][T21936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.308130][T21931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2307.330945][T21931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2307.397410][T21931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2307.446731][T21936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.468465][T21931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2307.520527][T19209] hsr_slave_0: left promiscuous mode [ 2307.529239][T19209] hsr_slave_1: left promiscuous mode [ 2307.540962][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2307.548800][T19209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2307.557028][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2307.566091][T19209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2307.594839][T19209] veth1_macvtap: left promiscuous mode [ 2307.600497][T19209] veth0_macvtap: left promiscuous mode [ 2307.606501][T19209] veth1_vlan: left promiscuous mode [ 2307.612472][T19209] veth0_vlan: left promiscuous mode [ 2308.535641][T19209] team0 (unregistering): Port device team_slave_1 removed [ 2308.600153][T19209] team0 (unregistering): Port device team_slave_0 removed [ 2309.474656][T21936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.637747][T21936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.699130][T21931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2309.765803][T21931] 8021q: adding VLAN 0 to HW filter on device team0 [ 2309.784902][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.792065][T21905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2309.848022][T18034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.855180][T18034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2309.961176][T21931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2309.982506][T21931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2310.112776][T21936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2310.130153][T21936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2310.238387][T21922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.258274][T21936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2310.288227][T21936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2310.333892][T21922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.389308][T21931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2310.451910][T21922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.565607][T21922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.650772][T21936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2310.708454][T21936] 8021q: adding VLAN 0 to HW filter on device team0 [ 2310.773948][T18034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.781094][T18034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2311.008333][T18034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2311.015509][T18034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2311.867530][T21922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2311.898202][T21922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2311.990233][T21922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2312.008703][T21922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2312.087465][T21922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.104055][T21922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2312.136873][T21922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2312.147584][T21922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2312.172934][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 2312.180062][T21905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2312.193644][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2312.200792][T21905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2312.289754][T21931] veth0_vlan: entered promiscuous mode [ 2312.472489][T21931] veth1_vlan: entered promiscuous mode [ 2312.485733][T21936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.511275][T21922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.735204][T21931] veth0_macvtap: entered promiscuous mode [ 2312.759984][T21922] veth0_vlan: entered promiscuous mode [ 2312.806838][T21931] veth1_macvtap: entered promiscuous mode [ 2312.845948][T21936] veth0_vlan: entered promiscuous mode [ 2312.871782][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2312.899478][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2312.909397][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2312.920579][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2312.930984][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2312.946039][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2312.972116][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2312.989331][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.011218][T21931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2313.037649][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2313.050748][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.061664][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2313.073843][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.084114][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2313.095301][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.105905][T21931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2313.116531][T21931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.128814][T21931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2313.164086][T21922] veth1_vlan: entered promiscuous mode [ 2313.181668][T21931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.191524][T21931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.201045][T21931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.209801][T21931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.230311][T21936] veth1_vlan: entered promiscuous mode [ 2313.241076][T22177] syzkaller0: entered allmulticast mode [ 2313.284493][T21923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2313.295606][T21923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2313.304821][T21923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2313.346047][T21923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2313.379515][T21922] veth0_macvtap: entered promiscuous mode [ 2313.431093][T21922] veth1_macvtap: entered promiscuous mode [ 2313.486051][T21936] veth0_macvtap: entered promiscuous mode [ 2313.506025][T10691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.532144][T10691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.540186][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2313.550730][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.561496][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2313.572097][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.584176][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2313.595046][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.607554][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2313.620946][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.648049][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2313.664083][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2313.680982][T21922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2314.088727][T21936] veth1_macvtap: entered promiscuous mode [ 2314.224742][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.252061][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.274384][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.288244][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.300586][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.317044][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.327643][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.342068][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.351893][T21922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.402242][T21922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.414370][T21922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2314.424578][T21922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.433797][T21922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.442673][T21922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.451466][T21922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.471256][T19209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2314.491426][T19209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.231274][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.244482][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.254590][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.291062][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.303030][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.318393][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.328549][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.350855][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.361113][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.371698][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.382011][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.392729][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.405024][T21936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2315.438218][T16702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.456212][T16702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.557134][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.578153][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.597732][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.620572][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.631105][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.652936][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.673444][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.686940][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.704854][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.716885][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.727004][T21936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.737625][T21936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.750737][T21936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2315.771166][T21936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.802198][T21936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.820239][T21936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.829562][T21936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.932733][T16702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.940600][T16702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.917579][T21923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2318.997983][T21923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2319.015812][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.022949][T10691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2319.039759][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.046874][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2320.332893][ T29] audit: type=1326 audit(1728492658.565:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22241 comm="syz.3.3423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f385177dff9 code=0x0 [ 2321.097922][ T29] audit: type=1326 audit(1728492660.165:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.119865][ T29] audit: type=1326 audit(1728492660.165:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.142247][ T29] audit: type=1326 audit(1728492660.175:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.173499][ T29] audit: type=1326 audit(1728492660.175:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.202038][ T29] audit: type=1326 audit(1728492660.175:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.228870][ T29] audit: type=1326 audit(1728492660.175:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.425147][T18034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.466979][T18034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.629748][ T29] audit: type=1326 audit(1728492660.175:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.655483][ T29] audit: type=1326 audit(1728492660.175:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.701990][ T29] audit: type=1326 audit(1728492660.175:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.4.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6daa37dff9 code=0x7ffc0000 [ 2321.711849][T10691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.731612][T10691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.914592][T22262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3428'. [ 2322.486663][T21923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2323.516707][T16706] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2324.362248][ T5228] Bluetooth: hci3: command tx timeout [ 2324.826563][T21923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2324.964615][T21923] veth0_vlan: entered promiscuous mode [ 2325.000882][T21923] veth1_vlan: entered promiscuous mode [ 2325.105720][T21923] veth0_macvtap: entered promiscuous mode [ 2325.155242][T21923] veth1_macvtap: entered promiscuous mode [ 2325.186747][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.225954][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.259402][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.282094][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.300565][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.322278][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.332479][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.356752][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.407340][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.469749][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.522048][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.553495][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.735824][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.993337][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.165849][T21923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2326.271389][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.312211][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.342634][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.363108][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.380867][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.421376][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.431608][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.442458][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.462987][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.482352][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.500959][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.542722][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2326.592053][T21923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2326.642271][T21923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2327.029176][T21923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2327.414713][T21923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.452344][T21923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.490881][T21923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.528412][T21923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2327.542282][T22299] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2327.729358][T12101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.751187][T12101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.787641][T17754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.817284][T17754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2328.067857][T22325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3441'. [ 2330.902549][T22336] syz.4.3445: attempt to access beyond end of device [ 2330.902549][T22336] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 2330.916736][T22336] XFS (nbd4): SB validate failed with error -5. [ 2333.750511][T22374] xt_hashlimit: size too large, truncated to 1048576 [ 2335.219932][T22377] [ 2335.222278][T22377] ===================================================== [ 2335.229206][T22377] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2335.236644][T22377] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted [ 2335.243748][T22377] ----------------------------------------------------- [ 2335.250657][T22377] syz.4.3453/22377 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2335.258353][T22377] ffff8880253d0ba0 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 2335.266963][T22377] [ 2335.266963][T22377] and this task is already holding: [ 2335.274323][T22377] ffff88802577c360 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 2335.283006][T22377] which would create a new lock dependency: [ 2335.288870][T22377] (&new->fa_lock){....}-{2:2} -> (&f_owner->lock){....}-{2:2} [ 2335.296426][T22377] [ 2335.296426][T22377] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2335.305852][T22377] (&dev->event_lock#2){..-.}-{2:2} [ 2335.305876][T22377] [ 2335.305876][T22377] ... which became SOFTIRQ-irq-safe at: [ 2335.318733][T22377] lock_acquire+0x1ed/0x550 [ 2335.323317][T22377] _raw_spin_lock_irqsave+0xd5/0x120 [ 2335.328673][T22377] input_inject_event+0xc5/0x340 [ 2335.333684][T22377] led_trigger_event+0x138/0x210 [ 2335.338686][T22377] kbd_bh+0x1b5/0x290 [ 2335.342734][T22377] tasklet_action_common+0x321/0x4d0 [ 2335.348087][T22377] handle_softirqs+0x2c5/0x980 [ 2335.352925][T22377] __irq_exit_rcu+0xf4/0x1c0 [ 2335.357584][T22377] irq_exit_rcu+0x9/0x30 [ 2335.361898][T22377] sysvec_call_function_single+0xa3/0xc0 [ 2335.367612][T22377] asm_sysvec_call_function_single+0x1a/0x20 [ 2335.373672][T22377] _raw_spin_unlock_irq+0x29/0x50 [ 2335.378772][T22377] n_tty_ioctl_helper+0x2a1/0x360 [ 2335.383866][T22377] tty_ioctl+0x998/0xdc0 [ 2335.388176][T22377] __se_sys_ioctl+0xf9/0x170 [ 2335.392833][T22377] do_syscall_64+0xf3/0x230 [ 2335.397400][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.403383][T22377] [ 2335.403383][T22377] to a SOFTIRQ-irq-unsafe lock: [ 2335.410378][T22377] (tasklist_lock){.+.+}-{2:2} [ 2335.410397][T22377] [ 2335.410397][T22377] ... which became SOFTIRQ-irq-unsafe at: [ 2335.422991][T22377] ... [ 2335.422997][T22377] lock_acquire+0x1ed/0x550 [ 2335.430147][T22377] _raw_read_lock+0x36/0x50 [ 2335.434742][T22377] __do_wait+0x12d/0x850 [ 2335.439054][T22377] do_wait+0x1e9/0x560 [ 2335.443188][T22377] kernel_wait+0xe9/0x240 [ 2335.447588][T22377] call_usermodehelper_exec_work+0xbd/0x230 [ 2335.453553][T22377] process_scheduled_works+0xa63/0x1850 [ 2335.459169][T22377] worker_thread+0x870/0xd30 [ 2335.463829][T22377] kthread+0x2f0/0x390 [ 2335.467961][T22377] ret_from_fork+0x4b/0x80 [ 2335.472461][T22377] ret_from_fork_asm+0x1a/0x30 [ 2335.477320][T22377] [ 2335.477320][T22377] other info that might help us debug this: [ 2335.477320][T22377] [ 2335.487530][T22377] Chain exists of: [ 2335.487530][T22377] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 2335.487530][T22377] [ 2335.500458][T22377] Possible interrupt unsafe locking scenario: [ 2335.500458][T22377] [ 2335.508756][T22377] CPU0 CPU1 [ 2335.514100][T22377] ---- ---- [ 2335.519441][T22377] lock(tasklist_lock); [ 2335.523665][T22377] local_irq_disable(); [ 2335.530395][T22377] lock(&dev->event_lock#2); [ 2335.537577][T22377] lock(&new->fa_lock); [ 2335.544318][T22377] [ 2335.547752][T22377] lock(&dev->event_lock#2); [ 2335.552589][T22377] [ 2335.552589][T22377] *** DEADLOCK *** [ 2335.552589][T22377] [ 2335.560710][T22377] 4 locks held by syz.4.3453/22377: [ 2335.565885][T22377] #0: ffff888063ad1d58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 2335.575099][T22377] #1: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: sock_def_readable+0xd7/0x5b0 [ 2335.584651][T22377] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 2335.593685][T22377] #3: ffff88802577c360 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 2335.602796][T22377] [ 2335.602796][T22377] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2335.613178][T22377] -> (&dev->event_lock#2){..-.}-{2:2} { [ 2335.618903][T22377] IN-SOFTIRQ-W at: [ 2335.623037][T22377] lock_acquire+0x1ed/0x550 [ 2335.629524][T22377] _raw_spin_lock_irqsave+0xd5/0x120 [ 2335.636791][T22377] input_inject_event+0xc5/0x340 [ 2335.643708][T22377] led_trigger_event+0x138/0x210 [ 2335.650625][T22377] kbd_bh+0x1b5/0x290 [ 2335.656584][T22377] tasklet_action_common+0x321/0x4d0 [ 2335.663862][T22377] handle_softirqs+0x2c5/0x980 [ 2335.670646][T22377] __irq_exit_rcu+0xf4/0x1c0 [ 2335.677250][T22377] irq_exit_rcu+0x9/0x30 [ 2335.683508][T22377] sysvec_call_function_single+0xa3/0xc0 [ 2335.691154][T22377] asm_sysvec_call_function_single+0x1a/0x20 [ 2335.699154][T22377] _raw_spin_unlock_irq+0x29/0x50 [ 2335.706195][T22377] n_tty_ioctl_helper+0x2a1/0x360 [ 2335.713228][T22377] tty_ioctl+0x998/0xdc0 [ 2335.719481][T22377] __se_sys_ioctl+0xf9/0x170 [ 2335.726078][T22377] do_syscall_64+0xf3/0x230 [ 2335.732588][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.740509][T22377] INITIAL USE at: [ 2335.744587][T22377] lock_acquire+0x1ed/0x550 [ 2335.751027][T22377] _raw_spin_lock_irqsave+0xd5/0x120 [ 2335.758247][T22377] input_inject_event+0xc5/0x340 [ 2335.765116][T22377] kbd_led_trigger_activate+0xb8/0x100 [ 2335.772497][T22377] led_trigger_set+0x582/0x9c0 [ 2335.779182][T22377] led_trigger_set_default+0x229/0x260 [ 2335.786573][T22377] led_classdev_register_ext+0x6e6/0x8a0 [ 2335.794132][T22377] input_leds_connect+0x489/0x630 [ 2335.801087][T22377] input_register_device+0xd3b/0x1110 [ 2335.808387][T22377] atkbd_connect+0x752/0xa00 [ 2335.814899][T22377] serio_driver_probe+0x7f/0xa0 [ 2335.821680][T22377] really_probe+0x2b8/0xad0 [ 2335.828100][T22377] __driver_probe_device+0x1a2/0x390 [ 2335.835303][T22377] driver_probe_device+0x50/0x430 [ 2335.842248][T22377] __driver_attach+0x45f/0x710 [ 2335.848931][T22377] bus_for_each_dev+0x239/0x2b0 [ 2335.855706][T22377] serio_handle_event+0x1c7/0x920 [ 2335.862655][T22377] process_scheduled_works+0xa63/0x1850 [ 2335.870132][T22377] worker_thread+0x870/0xd30 [ 2335.876651][T22377] kthread+0x2f0/0x390 [ 2335.882644][T22377] ret_from_fork+0x4b/0x80 [ 2335.888993][T22377] ret_from_fork_asm+0x1a/0x30 [ 2335.895688][T22377] } [ 2335.898360][T22377] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2335.907565][T22377] -> (&client->buffer_lock){....}-{2:2} { [ 2335.913411][T22377] INITIAL USE at: [ 2335.917404][T22377] lock_acquire+0x1ed/0x550 [ 2335.923666][T22377] _raw_spin_lock+0x2e/0x40 [ 2335.929926][T22377] evdev_pass_values+0xf2/0xad0 [ 2335.936527][T22377] evdev_events+0x1c2/0x300 [ 2335.942751][T22377] input_pass_values+0x286/0x860 [ 2335.949407][T22377] input_event_dispose+0x30f/0x600 [ 2335.956242][T22377] input_handle_event+0xa71/0xbe0 [ 2335.963000][T22377] input_inject_event+0x22f/0x340 [ 2335.969771][T22377] evdev_write+0x5fd/0x790 [ 2335.975925][T22377] vfs_write+0x29c/0xc90 [ 2335.981922][T22377] ksys_write+0x183/0x2b0 [ 2335.988008][T22377] do_syscall_64+0xf3/0x230 [ 2335.994255][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.001877][T22377] } [ 2336.004445][T22377] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 2336.012677][T22377] ... acquired at: [ 2336.016573][T22377] lock_acquire+0x1ed/0x550 [ 2336.021275][T22377] _raw_spin_lock+0x2e/0x40 [ 2336.025970][T22377] evdev_pass_values+0xf2/0xad0 [ 2336.031009][T22377] evdev_events+0x1c2/0x300 [ 2336.035702][T22377] input_pass_values+0x286/0x860 [ 2336.040829][T22377] input_event_dispose+0x30f/0x600 [ 2336.045969][T22382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2336.046113][T22377] input_handle_event+0xa71/0xbe0 [ 2336.056805][T22382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2336.058341][T22377] input_inject_event+0x22f/0x340 [ 2336.070669][T22377] evdev_write+0x5fd/0x790 [ 2336.075274][T22377] vfs_write+0x29c/0xc90 [ 2336.079706][T22377] ksys_write+0x183/0x2b0 [ 2336.084229][T22377] do_syscall_64+0xf3/0x230 [ 2336.088919][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.095008][T22377] [ 2336.097338][T22377] -> (&new->fa_lock){....}-{2:2} { [ 2336.102497][T22377] INITIAL USE at: [ 2336.106405][T22377] lock_acquire+0x1ed/0x550 [ 2336.107162][ T937] kernel write not supported for file [eventfd] (pid: 937 comm: kworker/1:2) [ 2336.112476][T22377] _raw_write_lock_irq+0xd3/0x120 [ 2336.112506][T22377] fasync_remove_entry+0xff/0x1d0 [ 2336.112526][T22377] sock_fasync+0x87/0x100 [ 2336.112548][T22377] __fput+0x71b/0x880 [ 2336.112565][T22377] task_work_run+0x24f/0x310 [ 2336.112582][T22377] syscall_exit_to_user_mode+0x168/0x370 [ 2336.112606][T22377] do_syscall_64+0x100/0x230 [ 2336.112624][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.128964][T22385] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2336.134493][T22377] INITIAL READ USE at: [ 2336.134511][T22377] lock_acquire+0x1ed/0x550 [ 2336.134537][T22377] _raw_read_lock_irqsave+0xdd/0x130 [ 2336.134562][T22377] kill_fasync+0x199/0x4f0 [ 2336.204510][T22377] sock_wake_async+0x147/0x170 [ 2336.211298][T22377] af_alg_wmem_wakeup+0x3c1/0x440 [ 2336.218347][T22377] aead_recvmsg+0x1951/0x19f0 [ 2336.225035][T22377] sock_recvmsg+0x22f/0x280 [ 2336.231548][T22377] ____sys_recvmsg+0x1c6/0x480 [ 2336.238325][T22377] __sys_recvmsg+0x2e6/0x3d0 [ 2336.244921][T22377] do_syscall_64+0xf3/0x230 [ 2336.251425][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.259325][T22377] } [ 2336.261825][T22377] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2336.270522][T22377] ... acquired at: [ 2336.274323][T22377] lock_acquire+0x1ed/0x550 [ 2336.279014][T22377] _raw_read_lock_irqsave+0xdd/0x130 [ 2336.284481][T22377] kill_fasync+0x199/0x4f0 [ 2336.289077][T22377] evdev_pass_values+0x58a/0xad0 [ 2336.294195][T22377] evdev_events+0x1c2/0x300 [ 2336.298879][T22377] input_pass_values+0x286/0x860 [ 2336.303994][T22377] input_event_dispose+0x30f/0x600 [ 2336.309287][T22377] input_handle_event+0xa71/0xbe0 [ 2336.314500][T22377] input_inject_event+0x22f/0x340 [ 2336.319708][T22377] evdev_write+0x5fd/0x790 [ 2336.324302][T22377] vfs_write+0x29c/0xc90 [ 2336.328726][T22377] ksys_write+0x183/0x2b0 [ 2336.333236][T22377] do_syscall_64+0xf3/0x230 [ 2336.337916][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.343992][T22377] [ 2336.346318][T22377] [ 2336.346318][T22377] the dependencies between the lock to be acquired [ 2336.346331][T22377] and SOFTIRQ-irq-unsafe lock: [ 2336.359844][T22377] -> (tasklist_lock){.+.+}-{2:2} { [ 2336.365084][T22377] HARDIRQ-ON-R at: [ 2336.369162][T22377] lock_acquire+0x1ed/0x550 [ 2336.375503][T22377] _raw_read_lock+0x36/0x50 [ 2336.381838][T22377] __do_wait+0x12d/0x850 [ 2336.387915][T22377] do_wait+0x1e9/0x560 [ 2336.393810][T22377] kernel_wait+0xe9/0x240 [ 2336.399972][T22377] call_usermodehelper_exec_work+0xbd/0x230 [ 2336.407698][T22377] process_scheduled_works+0xa63/0x1850 [ 2336.415081][T22377] worker_thread+0x870/0xd30 [ 2336.421517][T22377] kthread+0x2f0/0x390 [ 2336.427426][T22377] ret_from_fork+0x4b/0x80 [ 2336.433677][T22377] ret_from_fork_asm+0x1a/0x30 [ 2336.440276][T22377] SOFTIRQ-ON-R at: [ 2336.444348][T22377] lock_acquire+0x1ed/0x550 [ 2336.450686][T22377] _raw_read_lock+0x36/0x50 [ 2336.457024][T22377] __do_wait+0x12d/0x850 [ 2336.463102][T22377] do_wait+0x1e9/0x560 [ 2336.469009][T22377] kernel_wait+0xe9/0x240 [ 2336.475168][T22377] call_usermodehelper_exec_work+0xbd/0x230 [ 2336.482895][T22377] process_scheduled_works+0xa63/0x1850 [ 2336.490272][T22377] worker_thread+0x870/0xd30 [ 2336.496699][T22377] kthread+0x2f0/0x390 [ 2336.502600][T22377] ret_from_fork+0x4b/0x80 [ 2336.508853][T22377] ret_from_fork_asm+0x1a/0x30 [ 2336.515461][T22377] INITIAL USE at: [ 2336.519452][T22377] lock_acquire+0x1ed/0x550 [ 2336.525709][T22377] _raw_write_lock_irq+0xd3/0x120 [ 2336.532481][T22377] copy_process+0x2267/0x3d50 [ 2336.538903][T22377] kernel_clone+0x223/0x880 [ 2336.545151][T22377] user_mode_thread+0x132/0x1a0 [ 2336.551749][T22377] rest_init+0x23/0x300 [ 2336.557648][T22377] start_kernel+0x47f/0x500 [ 2336.563903][T22377] x86_64_start_reservations+0x2a/0x30 [ 2336.571111][T22377] x86_64_start_kernel+0x9f/0xa0 [ 2336.577790][T22377] common_startup_64+0x13e/0x147 [ 2336.584483][T22377] INITIAL READ USE at: [ 2336.588916][T22377] lock_acquire+0x1ed/0x550 [ 2336.595612][T22377] _raw_read_lock+0x36/0x50 [ 2336.602311][T22377] __do_wait+0x12d/0x850 [ 2336.608736][T22377] do_wait+0x1e9/0x560 [ 2336.614987][T22377] kernel_wait+0xe9/0x240 [ 2336.621505][T22377] call_usermodehelper_exec_work+0xbd/0x230 [ 2336.629583][T22377] process_scheduled_works+0xa63/0x1850 [ 2336.637316][T22377] worker_thread+0x870/0xd30 [ 2336.644087][T22377] kthread+0x2f0/0x390 [ 2336.650332][T22377] ret_from_fork+0x4b/0x80 [ 2336.656935][T22377] ret_from_fork_asm+0x1a/0x30 [ 2336.663886][T22377] } [ 2336.666476][T22377] ... key at: [] tasklist_lock+0x18/0x40 [ 2336.674360][T22377] ... acquired at: [ 2336.678249][T22377] lock_acquire+0x1ed/0x550 [ 2336.682939][T22377] _raw_read_lock+0x36/0x50 [ 2336.687627][T22377] send_sigurg+0x144/0x430 [ 2336.692219][T22377] sk_send_sigurg+0x6e/0x2f0 [ 2336.696990][T22377] tcp_check_urg+0x207/0x740 [ 2336.701762][T22377] tcp_urg+0x15c/0x450 [ 2336.706012][T22377] tcp_rcv_established+0xfaf/0x2020 [ 2336.711398][T22377] tcp_v6_do_rcv+0x5c8/0x13a0 [ 2336.716269][T22377] __release_sock+0x1c8/0x350 [ 2336.721130][T22377] release_sock+0x61/0x1f0 [ 2336.725731][T22377] tcp_sendmsg+0x3a/0x50 [ 2336.730154][T22377] __sock_sendmsg+0xef/0x270 [ 2336.734931][T22377] __sys_sendto+0x39b/0x4f0 [ 2336.739617][T22377] __x64_sys_sendto+0xde/0x100 [ 2336.744562][T22377] do_syscall_64+0xf3/0x230 [ 2336.749245][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.755303][T22377] [ 2336.757618][T22377] -> (&f_owner->lock){....}-{2:2} { [ 2336.762856][T22377] INITIAL USE at: [ 2336.766763][T22377] lock_acquire+0x1ed/0x550 [ 2336.772841][T22377] _raw_write_lock_irq+0xd3/0x120 [ 2336.779423][T22377] __f_setown+0x6b/0x380 [ 2336.785218][T22377] f_setown+0x243/0x310 [ 2336.790921][T22377] do_fcntl+0x115/0x1a60 [ 2336.796714][T22377] __se_sys_fcntl+0xd2/0x1e0 [ 2336.802864][T22377] do_syscall_64+0xf3/0x230 [ 2336.808936][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.816394][T22377] INITIAL READ USE at: [ 2336.820727][T22377] lock_acquire+0x1ed/0x550 [ 2336.827232][T22377] _raw_read_lock_irq+0xda/0x120 [ 2336.834172][T22377] do_fcntl+0x85f/0x1a60 [ 2336.840494][T22377] __se_sys_fcntl+0xd2/0x1e0 [ 2336.847079][T22377] do_syscall_64+0xf3/0x230 [ 2336.853570][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.861456][T22377] } [ 2336.863955][T22377] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2336.872817][T22377] ... acquired at: [ 2336.876603][T22377] lock_acquire+0x1ed/0x550 [ 2336.881275][T22377] _raw_read_lock_irqsave+0xdd/0x130 [ 2336.886721][T22377] send_sigio+0x37/0x390 [ 2336.891123][T22377] kill_fasync+0x256/0x4f0 [ 2336.895700][T22377] sock_wake_async+0x147/0x170 [ 2336.900631][T22377] sock_def_readable+0x3df/0x5b0 [ 2336.905742][T22377] tcp_urg+0x2fa/0x450 [ 2336.909993][T22377] tcp_rcv_established+0xfaf/0x2020 [ 2336.915380][T22377] tcp_v6_do_rcv+0x5c8/0x13a0 [ 2336.920238][T22377] __release_sock+0x1c8/0x350 [ 2336.925095][T22377] release_sock+0x61/0x1f0 [ 2336.929708][T22377] tcp_sendmsg+0x3a/0x50 [ 2336.934138][T22377] __sock_sendmsg+0xef/0x270 [ 2336.938917][T22377] __sys_sendto+0x39b/0x4f0 [ 2336.943609][T22377] __x64_sys_sendto+0xde/0x100 [ 2336.948563][T22377] do_syscall_64+0xf3/0x230 [ 2336.953256][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.959346][T22377] [ 2336.961678][T22377] [ 2336.961678][T22377] stack backtrace: [ 2336.967573][T22377] CPU: 0 UID: 0 PID: 22377 Comm: syz.4.3453 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 2336.978355][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2336.988430][T22377] Call Trace: [ 2336.991717][T22377] [ 2336.994653][T22377] dump_stack_lvl+0x241/0x360 [ 2336.999348][T22377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2337.004564][T22377] ? __pfx__printk+0x10/0x10 [ 2337.009175][T22377] ? print_shortest_lock_dependencies+0xf2/0x160 [ 2337.015530][T22377] validate_chain+0x4ebd/0x5920 [ 2337.020413][T22377] ? __pfx_validate_chain+0x10/0x10 [ 2337.025632][T22377] ? __pfx_validate_chain+0x10/0x10 [ 2337.030847][T22377] ? __pfx_validate_chain+0x10/0x10 [ 2337.036061][T22377] ? __pfx_validate_chain+0x10/0x10 [ 2337.041269][T22377] ? mark_lock+0x9a/0x360 [ 2337.045617][T22377] __lock_acquire+0x1384/0x2050 [ 2337.050498][T22377] lock_acquire+0x1ed/0x550 [ 2337.055024][T22377] ? send_sigio+0x37/0x390 [ 2337.059460][T22377] ? __pfx_lock_acquire+0x10/0x10 [ 2337.064523][T22377] ? __pfx_lock_acquire+0x10/0x10 [ 2337.069566][T22377] _raw_read_lock_irqsave+0xdd/0x130 [ 2337.070040][T18446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2337.074838][T22377] ? send_sigio+0x37/0x390 [ 2337.074863][T22377] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2337.082876][T18446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2337.086175][T22377] ? _raw_read_lock_irqsave+0xe9/0x130 [ 2337.096940][T18446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2337.098955][T22377] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2337.105161][T18446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2337.111300][T22377] send_sigio+0x37/0x390 [ 2337.111327][T22377] kill_fasync+0x256/0x4f0 [ 2337.111347][T22377] ? kill_fasync+0x54/0x4f0 [ 2337.111366][T22377] sock_wake_async+0x147/0x170 [ 2337.111392][T22377] ? sock_def_readable+0xd7/0x5b0 [ 2337.111414][T22377] sock_def_readable+0x3df/0x5b0 [ 2337.111437][T22377] ? sock_def_readable+0xd7/0x5b0 [ 2337.111461][T22377] tcp_urg+0x2fa/0x450 [ 2337.111482][T22377] ? __pfx_tcp_urg+0x10/0x10 [ 2337.111508][T22377] ? ktime_get+0x9b/0xb0 [ 2337.111530][T22377] tcp_rcv_established+0xfaf/0x2020 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2337.111548][T22377] ? ip6_dst_check+0xe7/0x7e0 [ 2337.111577][T22377] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2337.111597][T22377] ? ip6_dst_check+0xe7/0x7e0 [ 2337.111619][T22377] ? ip6_dst_check+0xe7/0x7e0 [ 2337.111641][T22377] ? ip6_dst_check+0x5d9/0x7e0 [ 2337.111666][T22377] tcp_v6_do_rcv+0x5c8/0x13a0 [ 2337.111691][T22377] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 2337.111710][T22377] __release_sock+0x1c8/0x350 [ 2337.111736][T22377] release_sock+0x61/0x1f0 [ 2337.111763][T22377] tcp_sendmsg+0x3a/0x50 [ 2337.111783][T22377] __sock_sendmsg+0xef/0x270 [ 2337.111808][T22377] __sys_sendto+0x39b/0x4f0 [ 2337.111828][T22377] ? __pfx___sys_sendto+0x10/0x10 [ 2337.111846][T22377] ? do_futex+0x33b/0x560 [ 2337.111875][T22377] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2337.111903][T22377] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2337.111930][T22377] __x64_sys_sendto+0xde/0x100 [ 2337.111948][T22377] do_syscall_64+0xf3/0x230 [ 2337.111966][T22377] ? clear_bhb_loop+0x35/0x90 [ 2337.111985][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.112012][T22377] RIP: 0033:0x7f6daa37dff9 [ 2337.112039][T22377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2337.112061][T22377] RSP: 002b:00007f6dab1c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2337.112083][T22377] RAX: ffffffffffffffda RBX: 00007f6daa536058 RCX: 00007f6daa37dff9 [ 2337.112099][T22377] RDX: 00000000000000b4 RSI: 0000000020000080 RDI: 0000000000000003 [ 2337.112113][T22377] RBP: 00007f6daa3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2337.112127][T22377] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 2337.112138][T22377] R13: 0000000000000000 R14: 00007f6daa536058 R15: 00007ffd8768d178 [ 2337.132323][T18446] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2337.133553][T22377] [ 2337.138317][T18446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2337.853831][T22405] chnl_net:caif_netlink_parms(): no params data found [ 2337.921376][ T8993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.972731][T22405] bridge0: port 1(bridge_slave_0) entered blocking state [ 2337.980117][T22405] bridge0: port 1(bridge_slave_0) entered disabled state [ 2337.988113][T22405] bridge_slave_0: entered allmulticast mode [ 2337.995434][T22405] bridge_slave_0: entered promiscuous mode [ 2338.026433][ T8993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.043424][T22405] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.050888][T22405] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.059414][T22405] bridge_slave_1: entered allmulticast mode [ 2338.066090][T22405] bridge_slave_1: entered promiscuous mode [ 2338.086709][ T8993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.109072][T22405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2338.124813][T22405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2338.138348][ T8993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.159287][T22405] team0: Port device team_slave_0 added [ 2338.166793][T22405] team0: Port device team_slave_1 added [ 2338.265458][T22405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2338.317158][T22405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2338.347588][T22405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2338.372572][ T8993] bridge_slave_1: left allmulticast mode [ 2338.378205][ T8993] bridge_slave_1: left promiscuous mode [ 2338.410800][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.435001][ T8993] bridge_slave_0: left allmulticast mode [ 2338.440673][ T8993] bridge_slave_0: left promiscuous mode [ 2338.466088][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.613701][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2338.648361][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2338.668188][ T8993] bond0 (unregistering): Released all slaves [ 2338.676728][T22405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2338.683795][T22405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2338.710177][T22405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2338.767760][T22405] hsr_slave_0: entered promiscuous mode [ 2338.774212][T22405] hsr_slave_1: entered promiscuous mode [ 2338.780102][T22405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2338.788879][T22405] Cannot create hsr debugfs directory [ 2338.869946][T22405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.961540][T22405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.005839][ T8993] hsr_slave_0: left promiscuous mode [ 2339.013820][ T8993] hsr_slave_1: left promiscuous mode [ 2339.019593][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2339.031724][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2339.041477][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2339.049010][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2339.059730][ T8993] veth1_macvtap: left promiscuous mode [ 2339.065389][ T8993] veth0_macvtap: left promiscuous mode [ 2339.072819][ T8993] veth1_vlan: left promiscuous mode [ 2339.078117][ T8993] veth0_vlan: left promiscuous mode [ 2339.182459][ T8993] team0 (unregistering): Port device team_slave_1 removed [ 2339.194951][ T8993] team0 (unregistering): Port device team_slave_0 removed [ 2339.304064][T22405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.380417][T22405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.461509][T22405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2339.487044][T22405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2339.505820][T22405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2339.526094][T22405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2339.591856][T22405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2339.624807][T22405] 8021q: adding VLAN 0 to HW filter on device team0 [ 2339.644687][T22389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.651777][T22389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2339.663770][T18446] Bluetooth: hci4: command tx timeout [ 2339.680275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.687402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2339.737403][ T8993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.793804][ T8993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.838118][ T8993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.869174][T22405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2339.906721][T22405] veth0_vlan: entered promiscuous mode [ 2339.916889][T22405] veth1_vlan: entered promiscuous mode [ 2339.929699][ T8993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.958500][T22405] veth0_macvtap: entered promiscuous mode [ 2339.967014][T22405] veth1_macvtap: entered promiscuous mode [ 2339.990192][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.003354][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.013366][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.023898][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.034132][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.044736][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.054758][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.065549][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.075456][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.086485][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.096382][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.106879][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.116913][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2340.127605][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.138314][T22405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2340.176998][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.189909][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.200258][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.210897][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.220775][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.231257][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.241155][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.251609][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.261630][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.272381][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.282608][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.294515][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.306219][T22405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.316799][T22405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.327479][T22405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.342948][ T8993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.357802][T22405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.366731][T22405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.376801][T22405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.385694][T22405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.406459][ T8993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.431552][T22405] ieee80211 phy178: Selected rate control algorithm 'minstrel_ht' [ 2340.450688][ T8993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.478645][T22401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.479932][T22405] ieee80211 phy179: Selected rate control algorithm 'minstrel_ht' [ 2340.498523][T22401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.515508][T22401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.523894][T22401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.545048][ T8993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.658561][ T8993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.737009][ T8993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.820119][ T8993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.896054][ T8993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.974261][ T8993] bridge_slave_1: left allmulticast mode [ 2340.979942][ T8993] bridge_slave_1: left promiscuous mode [ 2340.995728][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.015292][ T8993] bridge_slave_0: left allmulticast mode [ 2341.020962][ T8993] bridge_slave_0: left promiscuous mode [ 2341.027650][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.041622][ T8993] bridge_slave_1: left allmulticast mode [ 2341.047558][ T8993] bridge_slave_1: left promiscuous mode [ 2341.053526][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.061449][ T8993] bridge_slave_0: left allmulticast mode [ 2341.067344][ T8993] bridge_slave_0: left promiscuous mode [ 2341.073401][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.081610][ T8993] bridge_slave_1: left allmulticast mode [ 2341.088007][ T8993] bridge_slave_1: left promiscuous mode [ 2341.093889][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.101788][ T8993] bridge_slave_0: left allmulticast mode [ 2341.109286][ T8993] bridge_slave_0: left promiscuous mode [ 2341.115016][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.123983][ T8993] bridge_slave_1: left allmulticast mode [ 2341.129631][ T8993] bridge_slave_1: left promiscuous mode [ 2341.135352][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.143532][ T8993] bridge_slave_0: left allmulticast mode [ 2341.149199][ T8993] bridge_slave_0: left promiscuous mode [ 2341.154863][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.567208][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.578626][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.588765][ T8993] bond0 (unregistering): Released all slaves [ 2341.600427][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.610572][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.623610][ T8993] bond0 (unregistering): Released all slaves [ 2341.635441][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.645611][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.656339][ T8993] bond0 (unregistering): Released all slaves [ 2341.804475][ T8993] team0: Port device macvlan2 removed [ 2341.811807][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.823817][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2341.834314][ T8993] bond0 (unregistering): Released all slaves [ 2342.496015][ T8993] hsr_slave_0: left promiscuous mode [ 2342.501805][ T8993] hsr_slave_1: left promiscuous mode [ 2342.508455][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2342.518895][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2342.526735][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2342.535452][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2342.545712][ T8993] hsr_slave_0: left promiscuous mode [ 2342.551434][ T8993] hsr_slave_1: left promiscuous mode [ 2342.557694][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2342.565421][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2342.575485][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2342.584128][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2342.596721][ T8993] hsr_slave_0: left promiscuous mode [ 2342.602595][ T8993] hsr_slave_1: left promiscuous mode [ 2342.608417][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2342.619369][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2342.627246][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2342.640370][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2342.650839][ T8993] hsr_slave_0: left promiscuous mode [ 2342.656753][ T8993] hsr_slave_1: left promiscuous mode [ 2342.662973][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2342.670353][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2342.678086][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2342.685522][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2342.697519][ T8993] veth1_macvtap: left promiscuous mode [ 2342.703192][ T8993] veth0_macvtap: left promiscuous mode [ 2342.708694][ T8993] veth1_vlan: left promiscuous mode [ 2342.714142][ T8993] veth0_vlan: left promiscuous mode [ 2342.719915][ T8993] veth1_macvtap: left promiscuous mode [ 2342.725655][ T8993] veth0_macvtap: left promiscuous mode [ 2342.731171][ T8993] veth1_vlan: left promiscuous mode [ 2342.737862][ T8993] veth0_vlan: left promiscuous mode [ 2342.744269][ T8993] veth1_macvtap: left promiscuous mode [ 2342.749743][ T8993] veth0_macvtap: left promiscuous mode [ 2342.757548][ T8993] veth1_vlan: left promiscuous mode [ 2342.762820][ T8993] veth0_vlan: left promiscuous mode [ 2342.768555][ T8993] veth1_macvtap: left promiscuous mode [ 2342.774125][ T8993] veth0_macvtap: left promiscuous mode [ 2342.779635][ T8993] veth1_vlan: left promiscuous mode [ 2342.785066][ T8993] veth0_vlan: left promiscuous mode [ 2342.998772][ T8993] team0 (unregistering): Port device team_slave_1 removed [ 2343.027089][ T8993] team0 (unregistering): Port device team_slave_0 removed [ 2343.200158][ T8993] team0 (unregistering): Port device team_slave_1 removed [ 2343.231845][ T8993] team0 (unregistering): Port device team_slave_0 removed [ 2343.404658][ T8993] team0 (unregistering): Port device team_slave_1 removed [ 2343.436500][ T8993] team0 (unregistering): Port device team_slave_0 removed [ 2343.659860][ T8993] team0 (unregistering): Port device team_slave_0 removed [ 2344.611808][ T8993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.678234][ T8993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.757600][ T8993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.783883][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.790767][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.807261][ T8993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.883499][ T8993] bridge_slave_1: left allmulticast mode [ 2344.889187][ T8993] bridge_slave_1: left promiscuous mode [ 2344.897313][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2344.905792][ T8993] bridge_slave_0: left allmulticast mode [ 2344.911465][ T8993] bridge_slave_0: left promiscuous mode [ 2344.917459][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.997847][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.008526][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.019165][ T8993] bond0 (unregistering): Released all slaves [ 2345.204019][ T8993] hsr_slave_0: left promiscuous mode [ 2345.209693][ T8993] hsr_slave_1: left promiscuous mode [ 2345.215648][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2345.223530][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2345.230995][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2345.238478][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2345.247542][ T8993] veth1_macvtap: left promiscuous mode