last executing test programs: 38.603720727s ago: executing program 4 (id=3127): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec000000000a01020000000000000000050000020900010073797a300000000008000240000000023c0006e808cf7384552f120183af56c4b2b79056586784bdcd8587885c60e5aa03d08d86c3f3fb99dac62aecd67dae229b4fb1f5e5cc1fdb5a5790010c00044000000000000000027300060019b59eb8f88251e50df3a7832fa66219e3adfb6f7f9e540e5d75f5287b5e577d484288d63bf01771d1421e03c82f09584c5fccf3c638eda875b512ced355af6eac1595e41486cd23fbd7165585760593db53e7aaf06ae70b4224d1c9d423d0daa28bf927198015adbbcc6fd9c1e56000080002400000000314000000110001000000"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0x9c}}, 0x200000d4) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 37.955384581s ago: executing program 4 (id=3128): unshare(0x68040200) 13.825667361s ago: executing program 3 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(r4, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000800) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40001043, r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r8, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x7cf7, 0x7, 0x6, 0x0, 0x5, 0x8, 0x8}}}, 0x60) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 12.634442197s ago: executing program 3 (id=3192): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) msgctl$IPC_RMID(0x0, 0x0) r1 = msgget(0x1, 0x240) msgctl$IPC_RMID(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r5) 12.600651781s ago: executing program 2 (id=3194): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 11.777923676s ago: executing program 2 (id=3195): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 10.606531559s ago: executing program 0 (id=3196): epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x48, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) syz_usb_connect(0x2, 0x24, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 10.176198427s ago: executing program 1 (id=3197): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, 0x0, 0xc8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in=@broadcast}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x400, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x4, 0x0, {0xffffffffffffffff}, {0xee00}, 0x3, 0x9}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000005cc0)) 9.801824691s ago: executing program 3 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) 8.639693042s ago: executing program 2 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000900010073797a300000000048000000030a010200000000002bad3d51537769a80073797a30000000000900030073797a3100000000080007006e61740014000480d6e79ab64f9373ac4c4102400000000014000000020a010800000021000000540000001100010000000000000000000000000a0000000000000000c61a27d71396452fe7b9b844aeee67325cbc1d57398bfaaed00af3"], 0xa4}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) 7.622917847s ago: executing program 2 (id=3200): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) unshare(0x68040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) msgctl$IPC_RMID(0x0, 0x0) r2 = msgget(0x1, 0x240) msgctl$IPC_RMID(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r6) 7.524214478s ago: executing program 0 (id=3201): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x50, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x50}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 6.338517131s ago: executing program 1 (id=3202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) syz_io_uring_setup(0xd2, 0x0, &(0x7f00000002c0), &(0x7f0000000640)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x64, 0x2, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) accept$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x0, @initdev}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) 6.299700492s ago: executing program 3 (id=3203): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 6.245372032s ago: executing program 2 (id=3204): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x68040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) msgctl$IPC_RMID(0x0, 0x0) r1 = msgget(0x1, 0x240) msgctl$IPC_RMID(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r5) 5.328790664s ago: executing program 3 (id=3205): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20004011) setfsuid(0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mprotect(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.944070926s ago: executing program 0 (id=3206): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.958573563s ago: executing program 0 (id=3207): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) 3.656176776s ago: executing program 1 (id=3208): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r3) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0xfffffffffffffffe, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000240)={0xa0, 0x0, r2, {{0x2, 0x2, 0x5bc, 0xfffffffffffffffe, 0x8, 0x81, {0x4, 0x5, 0x952, 0x6, 0x2, 0x7, 0x4945d687, 0x5, 0xd, 0x8000, 0x6, r4, 0xee00, 0x4, 0x2cd}}, {0x0, 0x2}}}, 0xa0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r5, @ANYRES16, @ANYRES32=r7], 0x2c}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.614585395s ago: executing program 0 (id=3209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.545604628s ago: executing program 2 (id=3210): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x50, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x50}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.411109875s ago: executing program 0 (id=3211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.828623265s ago: executing program 4 (id=3141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40048094) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffac}], 0x3c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) 2.250686521s ago: executing program 4 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x4000800) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40001043, r7, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x7cf7, 0x7, 0x6, 0x0, 0x5, 0x8, 0x8}}}, 0x60) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2.226513606s ago: executing program 1 (id=3213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) 1.224063581s ago: executing program 4 (id=3214): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 1.12871434s ago: executing program 1 (id=3215): r0 = openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x1e, 0x3, 0x26000000}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r4, 0xb97eb000) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffbd) 468.133306ms ago: executing program 4 (id=3216): unshare(0x2c020000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a34000000000000", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb", 0x9e}], 0x1) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, &(0x7f0000000480)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) keyctl$read(0xb, r4, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000e80)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1f, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="69cdae1cc462d5b2140000001000010000000000000000000500000a20000000030a01030000000000000000010000090a000700726f757465003d8401ac0000090a010100000000000000000700000408000a400000000308000440000000120c0010400000000000000001080008400000000120000000030a01080000000000000000030000010c0002400000000000000003140000001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 435.920521ms ago: executing program 3 (id=3217): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x75, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) creat(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x8000, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, &(0x7f0000000100)={[{@usrquota}]}) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f0000000440), 0x5a, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close_range(r3, r2, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) 0s ago: executing program 1 (id=3218): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, 0x0) kernel console output (not intermixed with test programs): 44][ T48] usb 4-1: config index 0 descriptor too short (expected 274, got 18) [ 590.359031][T13105] vivid-000: Enable Capture Composing: true grabbed [ 590.368597][ T48] usb 4-1: config 4 interface 0 has no altsetting 0 [ 590.389012][T13105] vivid-000: Enable Capture Scaler: true grabbed [ 590.418676][ T48] usb 4-1: string descriptor 0 read error: -22 [ 590.447726][ T48] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.528653][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.555698][T13105] vivid-000: Timestamp Source: End of Frame [ 590.555960][ T48] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 590.898317][ T48] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.916820][ T48] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 590.932181][ T48] usb 4-1: media controller created [ 590.939749][T13105] vivid-000: Colorspace: sRGB [ 590.944458][T13105] vivid-000: Transfer Function: Default [ 590.966744][T13103] tipc: Resetting bearer [ 590.984720][T13105] vivid-000: Y'CbCr Encoding: Default [ 590.990228][T13105] vivid-000: HSV Encoding: Hue 0-179 [ 590.995522][T13105] vivid-000: Quantization: Default [ 590.997101][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.044198][T13103] tipc: Disabling bearer [ 591.065219][T13105] vivid-000: Apply Alpha To Red Only: false [ 591.097307][T13105] vivid-000: Standard Aspect Ratio: 4x3 [ 591.148971][T13105] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 591.233467][T13105] vivid-000: DV Timings: 640x480p59 inactive [ 591.273566][T13105] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 591.357882][T13105] vivid-000: Maximum EDID Blocks: 2 [ 591.373540][T13105] vivid-000: Limited RGB Range (16-235): false [ 591.396486][T13105] vivid-000: Rx RGB Quantization Range: Automatic [ 591.429356][T13105] vivid-000: Power Present: 0x00000001 [ 591.685391][T13105] tpg source WxH: 1920x1080 (Y'CbCr) [ 591.802132][T13105] tpg field: 1 [ 591.806119][T13105] tpg crop: (0,0)/1920x1080 [ 591.827688][T13105] tpg compose: (0,0)/1920x1080 [ 591.860595][T13105] tpg colorspace: 8 [ 591.884493][T13105] tpg transfer function: 0/2 [ 591.889095][T13105] tpg Y'CbCr encoding: 0/1 [ 591.903914][T13105] tpg quantization: 0/2 [ 591.908076][T13105] tpg RGB range: 0/2 [ 591.924102][T13105] vivid-000: ================== END STATUS ================== [ 592.161359][ T48] zl10353_read_register: readreg error (reg=127, ret==0) [ 592.761910][ T48] usb 4-1: USB disconnect, device number 42 [ 593.427064][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2253'. [ 594.754763][T13165] tipc: Enabled bearer , priority 0 [ 594.763873][T13165] syzkaller0: entered promiscuous mode [ 594.769402][T13165] syzkaller0: entered allmulticast mode [ 595.225788][T13154] tipc: Resetting bearer [ 595.302726][T13154] tipc: Disabling bearer [ 595.408606][ T5900] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 595.569769][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 595.659900][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.694099][T13181] lo speed is unknown, defaulting to 1000 [ 596.105267][ T5900] usb 4-1: config index 0 descriptor too short (expected 274, got 18) [ 596.138223][ T5900] usb 4-1: config 4 interface 0 has no altsetting 0 [ 596.192936][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 596.398721][ T5900] usb 4-1: string descriptor 0 read error: -22 [ 596.443323][ T5900] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 596.810242][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.921399][ T5900] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 597.074026][ T5900] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.120254][T13176] usb 4-1: dvb_usb_au6610: wlen=132, aborting [ 597.127347][ T5900] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 597.140169][ T5900] usb 4-1: media controller created [ 597.224213][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.873002][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'. [ 598.253745][ T5900] zl10353_read_register: readreg error (reg=127, ret==0) [ 598.301472][T13218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2275'. [ 598.668547][ T5900] usb 4-1: USB disconnect, device number 43 [ 598.828193][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 599.842442][T13242] Failed to get privilege flags for destination (handle=0x2:0xd) [ 600.173301][T13236] lo speed is unknown, defaulting to 1000 [ 601.880124][ T5900] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 602.092459][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 602.138371][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.153129][ T5900] usb 3-1: config index 0 descriptor too short (expected 274, got 18) [ 602.166336][ T5900] usb 3-1: config 4 interface 0 has no altsetting 0 [ 602.193078][ T5900] usb 3-1: string descriptor 0 read error: -22 [ 602.199482][ T5900] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 602.214213][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.229456][ T5900] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 602.265341][ T5900] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 602.290559][ T5900] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 602.297717][ T5900] usb 3-1: media controller created [ 602.344640][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.369437][ T30] audit: type=1400 audit(1752329621.465:1168): avc: denied { read } for pid=13269 comm="syz.1.2293" path="socket:[33173]" dev="sockfs" ino=33173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 602.586830][T13278] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2295'. [ 602.598790][T13278] Set syz0 is full, maxelem 0 reached [ 603.423548][ T5900] zl10353_read_register: readreg error (reg=127, ret==0) [ 603.769844][T13263] usb 3-1: dvb_usb_au6610: wlen=132, aborting [ 603.827270][ T5900] usb 3-1: USB disconnect, device number 43 [ 605.605551][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.612840][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.908217][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.958027][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.287307][T13306] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.299647][T13306] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.325643][T13306] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.340151][T13306] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.694412][T13306] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.703436][T13306] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.712710][T13306] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.722095][T13306] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.765100][T13314] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 606.774570][T13314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 606.784399][T13314] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 606.786403][ T30] audit: type=1400 audit(1752329625.885:1169): avc: denied { firmware_load } for pid=13310 comm="syz.4.2306" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 606.983313][T13331] lo speed is unknown, defaulting to 1000 [ 608.064957][T13338] lo speed is unknown, defaulting to 1000 [ 609.456938][T13359] lo speed is unknown, defaulting to 1000 [ 611.901556][T13391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.914392][T13391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 613.259753][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 613.469983][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.502452][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 613.547749][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 613.569816][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 613.619338][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 613.671605][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 613.689747][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 613.707995][ T10] usb 4-1: Product: syz [ 613.712388][ T10] usb 4-1: Manufacturer: syz [ 613.751725][ T10] usb 4-1: SerialNumber: syz [ 613.841370][ T10] usb 4-1: config 0 descriptor?? [ 613.859017][T13426] SET target dimension over the limit! [ 614.231214][ T10] radio-si470x 4-1:0.0: DeviceID=0xf403 ChipID=0x336e [ 615.073150][ T10] radio-si470x 4-1:0.0: software version 244, hardware version 3 [ 615.120268][ T10] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 615.178220][T13438] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2340'. [ 615.245811][T13438] Set syz0 is full, maxelem 0 reached [ 615.326641][ T10] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 615.370113][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'. [ 615.468385][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 615.500517][ T10] usb 4-1: USB disconnect, device number 44 [ 617.510862][T13482] SET target dimension over the limit! [ 619.599535][T13505] lo speed is unknown, defaulting to 1000 [ 621.059847][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 621.345823][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.356676][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 621.373378][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 621.463166][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 621.481077][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 621.491409][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 621.499542][ T10] usb 3-1: Product: syz [ 621.504189][ T10] usb 3-1: Manufacturer: syz [ 621.508894][ T10] usb 3-1: SerialNumber: syz [ 621.528099][ T10] usb 3-1: config 0 descriptor?? [ 621.543331][ T10] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 621.551752][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 621.562529][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 622.259772][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 622.413053][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 622.426296][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 622.437640][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.448683][ T10] usb 2-1: config 0 descriptor?? [ 622.461625][T13539] lo speed is unknown, defaulting to 1000 [ 623.037714][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 623.077782][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 623.099402][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 623.112889][ T10] usb 2-1: media controller created [ 623.175250][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.201748][T13545] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2368'. [ 623.283861][ T1204] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 623.588319][ T1204] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.634886][ T1204] usb 3-1: USB disconnect, device number 44 [ 623.661348][ T10] az6027: usb out operation failed. (-71) [ 623.676654][ T10] az6027: usb out operation failed. (-71) [ 623.683533][ T10] stb0899_attach: Driver disabled by Kconfig [ 623.689567][ T10] az6027: no front-end attached [ 623.689567][ T10] [ 623.733681][ T10] az6027: usb out operation failed. (-71) [ 623.782281][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 623.811364][T13550] fido_id[13550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 623.828121][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 623.830061][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.846301][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 623.860561][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 623.864163][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.894340][ T10] usb 2-1: USB disconnect, device number 37 [ 623.961259][T13560] openvswitch: netlink: Flow actions attr not present in new flow. [ 624.011409][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 626.079771][ T5900] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 626.229792][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 626.236483][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.245294][ T5900] usb 4-1: config index 0 descriptor too short (expected 274, got 18) [ 626.253599][ T5900] usb 4-1: config 4 interface 0 has no altsetting 0 [ 626.262693][ T5900] usb 4-1: string descriptor 0 read error: -22 [ 626.268901][ T5900] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 626.277954][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.292011][ T5900] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 626.304183][ T5900] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 626.314689][ T5900] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 626.322121][ T5900] usb 4-1: media controller created [ 626.340984][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.410090][T13592] usb 4-1: dvb_usb_au6610: wlen=132, aborting [ 627.416240][ T5900] zl10353_read_register: readreg error (reg=127, ret==0) [ 627.442527][ T5900] usb 4-1: USB disconnect, device number 45 [ 628.576657][ T5900] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 628.819898][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 628.854835][ T5900] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 628.922614][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.046651][ T5900] usb 4-1: config 0 descriptor?? [ 629.416030][ T5900] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 629.715479][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.854974][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 629.892319][ T5900] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 630.104382][ T5900] usb 4-1: media controller created [ 630.138941][ T24] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 630.185579][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.209794][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 630.381623][ T10] usb 3-1: device descriptor read/64, error -71 [ 630.545998][ T5900] az6027: usb out operation failed. (-71) [ 630.556071][ T5900] az6027: usb out operation failed. (-71) [ 630.562646][ T5900] stb0899_attach: Driver disabled by Kconfig [ 630.579737][ T5900] az6027: no front-end attached [ 630.579737][ T5900] [ 630.589811][ T5900] az6027: usb out operation failed. (-71) [ 630.604273][ T5900] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 630.645180][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 630.659966][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 630.687360][ T5900] dvb-usb: schedule remote query interval to 400 msecs. [ 630.713772][ T5900] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 630.740261][ T5900] usb 4-1: USB disconnect, device number 46 [ 630.811518][ T10] usb 3-1: device descriptor read/64, error -71 [ 630.832785][ T5900] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 630.930166][ T10] usb usb3-port1: attempt power cycle [ 631.973438][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 632.020743][ T10] usb 3-1: device descriptor read/8, error -71 [ 632.269762][ T5900] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 632.269809][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 632.310246][ T10] usb 3-1: device descriptor read/8, error -71 [ 632.420422][ T10] usb usb3-port1: unable to enumerate USB device [ 632.431031][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.443262][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.453247][ T48] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 632.462490][ T5900] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 632.472034][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.484285][ T5900] usb 2-1: config 0 descriptor?? [ 632.631683][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.641923][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 632.653458][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 632.664538][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 632.674303][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.689539][ T48] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 632.698722][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 632.716545][ T48] usb 4-1: Product: syz [ 632.724408][ T48] usb 4-1: Manufacturer: syz [ 632.732407][ T48] usb 4-1: SerialNumber: syz [ 632.743371][ T48] usb 4-1: config 0 descriptor?? [ 632.816343][T13650] mkiss: ax0: crc mode is auto. [ 632.934154][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 632.943971][T13659] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2402'. [ 632.961798][ T48] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 632.974240][ T48] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 633.046489][ T48] usb 4-1: USB disconnect, device number 47 [ 633.383304][T13670] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 633.393008][T13670] SELinux: failed to load policy [ 633.408342][ T5900] bigben 0003:146B:0902.0015: unexpected rdesc, please submit for review [ 633.708036][ T5900] bigben 0003:146B:0902.0015: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 633.760184][ T5900] bigben 0003:146B:0902.0015: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 633.769240][ T5900] bigben 0003:146B:0902.0015: no output report found [ 633.794234][ T5900] usb 2-1: USB disconnect, device number 38 [ 633.827975][T13671] fido_id[13671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 634.078829][T13675] tmpfs: Bad value for 'mpol' [ 634.804049][T13682] lo speed is unknown, defaulting to 1000 [ 635.438250][T13699] Failed to get privilege flags for destination (handle=0x2:0xd) [ 636.310050][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2415'. [ 637.637839][T13721] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 637.647632][T13721] SELinux: failed to load policy [ 638.784223][T13740] Failed to get privilege flags for destination (handle=0x2:0xd) [ 639.058949][T13739] syzkaller1: entered promiscuous mode [ 639.067566][T13739] syzkaller1: entered allmulticast mode [ 639.444847][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'. [ 639.810652][T13765] lo speed is unknown, defaulting to 1000 [ 640.994655][T13779] syzkaller1: entered promiscuous mode [ 641.000144][T13779] syzkaller1: entered allmulticast mode [ 643.457838][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 644.691928][T13828] SET target dimension over the limit! [ 645.079893][ T5900] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 645.342220][ T5900] usb 4-1: config 0 has no interfaces? [ 645.354259][ T5900] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 645.372225][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 645.384397][ T5900] usb 4-1: Product: syz [ 645.477410][ T5900] usb 4-1: Manufacturer: syz [ 645.482496][ T5900] usb 4-1: SerialNumber: syz [ 645.676091][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 645.685120][T13855] netlink: 'syz.1.2461': attribute type 15 has an invalid length. [ 646.320130][ T5900] usb 4-1: config 0 descriptor?? [ 646.421805][T13853] lo speed is unknown, defaulting to 1000 [ 647.120846][T13870] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2464'. [ 647.872302][T13877] SET target dimension over the limit! [ 648.286010][ T1204] usb 4-1: USB disconnect, device number 48 [ 648.529508][T13892] SET target dimension over the limit! [ 648.856688][T13898] SET target dimension over the limit! [ 650.540674][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 652.125208][T13954] lo speed is unknown, defaulting to 1000 [ 652.229741][ T1204] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 652.445637][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 652.453438][ T1204] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 652.547547][T13964] lo speed is unknown, defaulting to 1000 [ 652.744118][ T1204] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 652.762933][ T1204] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 652.902066][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 652.936624][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 652.946910][T13966] lo speed is unknown, defaulting to 1000 [ 652.954058][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 652.977635][ T1204] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 652.995603][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.340378][ T1204] usb 2-1: config 0 descriptor?? [ 653.583858][ T1204] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 653.621928][ T1204] usb 2-1: USB disconnect, device number 39 [ 653.645429][ T1204] usblp0: removed [ 654.141080][ T1204] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 654.329798][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 654.349607][ T1204] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 654.369368][ T1204] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 654.378266][ T1204] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 654.392198][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 654.403038][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 654.414318][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 654.429251][ T1204] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 654.451973][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.487248][ T1204] usb 2-1: config 0 descriptor?? [ 654.704003][ T1204] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 654.940895][ T1204] usb 2-1: USB disconnect, device number 40 [ 654.978365][ T1204] usblp0: removed [ 655.113535][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2504'. [ 655.230107][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 655.620241][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 655.638432][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 655.666196][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 655.677866][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 655.687221][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 655.704301][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 655.735252][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 655.774677][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 655.798613][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.830389][ T10] usb 3-1: config 0 descriptor?? [ 655.897555][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 655.924690][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 655.937052][T14003] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2506'. [ 656.070582][T14008] Failed to get privilege flags for destination (handle=0x2:0xd) [ 656.270269][T14008] syzkaller1: entered promiscuous mode [ 656.275870][T14008] syzkaller1: entered allmulticast mode [ 656.358300][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 656.371469][ T10] usb 3-1: USB disconnect, device number 49 [ 656.380065][ T10] usblp0: removed [ 657.091138][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 657.309078][T14034] lo speed is unknown, defaulting to 1000 [ 657.708905][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 657.731800][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 657.740250][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 657.748860][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 657.757897][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.767595][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.778368][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 657.819713][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 657.828822][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.839042][ T10] usb 3-1: config 0 descriptor?? [ 658.018890][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 658.075501][ T10] usb 3-1: USB disconnect, device number 50 [ 658.091023][ T10] usblp0: removed [ 658.596751][T14053] lo speed is unknown, defaulting to 1000 [ 658.609573][T14055] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 658.723971][T14055] openvswitch: netlink: Flow actions attr not present in new flow. [ 659.102408][T14060] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 659.112221][T14060] SELinux: failed to load policy [ 659.966761][T14068] SET target dimension over the limit! [ 661.044022][T14078] overlayfs: missing 'lowerdir' [ 661.249455][T14076] lo speed is unknown, defaulting to 1000 [ 661.787221][T14091] SET target dimension over the limit! [ 662.219750][ T48] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 662.422406][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.495282][ T48] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 662.513957][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 662.649759][ T48] usb 4-1: Product: syz [ 662.658324][ T48] usb 4-1: Manufacturer: syz [ 662.679842][ T48] usb 4-1: SerialNumber: syz [ 663.205063][ T48] usb 4-1: config 0 descriptor?? [ 664.036017][T14114] openvswitch: netlink: Flow actions attr not present in new flow. [ 664.777402][T14133] tmpfs: Bad value for 'mpol' [ 665.325735][ T10] usb 4-1: USB disconnect, device number 49 [ 666.309809][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 666.597497][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 666.606613][T14157] netlink: 'syz.2.2548': attribute type 15 has an invalid length. [ 666.919740][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 666.930850][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 666.971149][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.340516][ T10] usb 2-1: config 0 descriptor?? [ 667.590411][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 667.610617][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 667.699598][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 667.759763][ T10] usb 2-1: media controller created [ 667.817709][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.973448][ T10] az6027: usb out operation failed. (-71) [ 667.983394][ T10] az6027: usb out operation failed. (-71) [ 668.004709][ T10] stb0899_attach: Driver disabled by Kconfig [ 668.085345][ T10] az6027: no front-end attached [ 668.085345][ T10] [ 668.174539][T14177] mkiss: ax0: crc mode is auto. [ 668.273930][ T10] az6027: usb out operation failed. (-71) [ 668.363580][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 669.152503][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 669.195408][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 669.315032][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 669.627459][T14186] SET target dimension over the limit! [ 670.071362][ T10] usb 2-1: USB disconnect, device number 41 [ 670.124280][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 670.236676][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 670.391670][T14195] openvswitch: netlink: Flow actions attr not present in new flow. [ 671.312543][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 671.399784][ T5836] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 671.484161][T14223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.552826][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.712177][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 671.723994][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 671.738416][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 671.759713][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 671.777034][ T5836] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 671.838167][T14229] SET target dimension over the limit! [ 672.389402][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 672.397845][ T5836] usb 4-1: Product: syz [ 672.402039][ T5836] usb 4-1: Manufacturer: syz [ 672.407228][ T5836] usb 4-1: SerialNumber: syz [ 672.413964][ T5836] usb 4-1: config 0 descriptor?? [ 672.505741][T14234] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 672.529784][T14234] SELinux: failed to load policy [ 672.921182][T14238] mkiss: ax0: crc mode is auto. [ 673.371404][ T5836] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 673.983594][ T5836] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 674.002663][ T5836] usb 4-1: USB disconnect, device number 50 [ 674.277930][T14249] openvswitch: netlink: Flow actions attr not present in new flow. [ 675.062500][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 675.727093][T14288] openvswitch: netlink: Flow actions attr not present in new flow. [ 675.842091][T14289] lo speed is unknown, defaulting to 1000 [ 676.939915][ T5836] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 677.113852][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.125583][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 677.242686][T14304] lo speed is unknown, defaulting to 1000 [ 677.289902][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 677.383450][T14310] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2591'. [ 677.398587][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 677.619909][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 677.713752][ T5836] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 677.723027][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 677.731258][ T5836] usb 2-1: Product: syz [ 677.737339][ T5836] usb 2-1: Manufacturer: syz [ 677.751032][ T5836] usb 2-1: SerialNumber: syz [ 677.771776][ T5836] usb 2-1: config 0 descriptor?? [ 678.132624][ T5836] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 678.141374][ T5836] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 678.160097][ T5836] usb 2-1: USB disconnect, device number 42 [ 679.395245][T14335] tipc: Started in network mode [ 679.400272][T14335] tipc: Node identity 6ea995eb9f14, cluster identity 4711 [ 679.407659][T14335] tipc: Enabled bearer , priority 0 [ 679.417939][T14335] syzkaller0: entered promiscuous mode [ 679.423593][T14335] syzkaller0: entered allmulticast mode [ 680.520480][ T24] tipc: Node number set to 4055733739 [ 680.803330][T14327] tipc: Resetting bearer [ 680.862807][T14327] tipc: Disabling bearer [ 681.117150][T14356] SET target dimension over the limit! [ 682.701806][T14374] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 683.209716][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 683.379721][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 683.416303][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 683.471035][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.876450][ T24] usb 2-1: config 0 descriptor?? [ 684.114507][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 684.149611][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 684.201675][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 684.226747][ T24] usb 2-1: media controller created [ 684.237140][T14393] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 684.246526][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.462890][T14401] lo speed is unknown, defaulting to 1000 [ 684.499484][T14404] tipc: Enabled bearer , priority 0 [ 684.507269][T14404] syzkaller0: entered promiscuous mode [ 684.512861][T14404] syzkaller0: entered allmulticast mode [ 685.138767][ T24] az6027: usb out operation failed. (-71) [ 685.145035][ T24] az6027: usb out operation failed. (-71) [ 685.155302][ T24] stb0899_attach: Driver disabled by Kconfig [ 685.176570][ T24] az6027: no front-end attached [ 685.176570][ T24] [ 685.209992][ T24] az6027: usb out operation failed. (-71) [ 685.264611][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.272447][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.285746][T14398] tipc: Resetting bearer [ 685.295550][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 685.331361][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 685.361815][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 685.433759][T14414] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2620'. [ 685.472560][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 685.668789][ T24] usb 2-1: USB disconnect, device number 43 [ 686.108969][T14398] tipc: Disabling bearer [ 686.126782][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 687.733597][T14432] netlink: 'syz.2.2624': attribute type 10 has an invalid length. [ 689.669327][T14470] tipc: Enabled bearer , priority 0 [ 689.680165][T14470] syzkaller0: entered promiscuous mode [ 689.685672][T14470] syzkaller0: entered allmulticast mode [ 690.644889][T14466] tipc: Resetting bearer [ 690.739551][T14466] tipc: Disabling bearer [ 693.699738][ T24] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 694.052903][T14539] lo speed is unknown, defaulting to 1000 [ 694.545181][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.556349][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 694.579329][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 694.639324][ T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 694.819945][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 694.852094][ T24] usb 2-1: Product: syz [ 694.857561][ T24] usb 2-1: Manufacturer: syz [ 694.862449][ T24] usb 2-1: SerialNumber: syz [ 694.922426][ T24] usb 2-1: config 0 descriptor?? [ 694.940838][ T24] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 694.969726][ T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 695.018395][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 695.325940][T14552] tmpfs: Bad value for 'mpol' [ 697.134744][ T10] usb 2-1: USB disconnect, device number 44 [ 698.072405][T14575] Failed to get privilege flags for destination (handle=0x2:0xd) [ 698.121155][T14575] syzkaller1: entered promiscuous mode [ 698.159738][T14575] syzkaller1: entered allmulticast mode [ 698.771913][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 699.049707][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 699.115406][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.131857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 699.143064][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 699.154196][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 699.177563][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.225761][ T10] usb 4-1: config 0 descriptor?? [ 699.252342][T14589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 699.261133][ T10] hub 4-1:0.0: USB hub found [ 699.490358][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 699.510018][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 699.516085][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 699.551735][ T10] usb 4-1: USB disconnect, device number 51 [ 699.626457][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 699.837411][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.942442][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.952687][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.964125][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.981983][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.993061][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.009675][ T24] usb 2-1: Product: syz [ 700.016567][ T24] usb 2-1: Manufacturer: syz [ 700.038040][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 700.047005][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 700.576001][ T24] usb 2-1: USB disconnect, device number 45 [ 701.099806][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 701.251275][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.278704][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.289170][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.298632][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 701.314661][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 701.324926][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 701.333220][ T24] usb 2-1: Product: syz [ 701.337522][ T24] usb 2-1: Manufacturer: syz [ 701.345659][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 701.351203][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 703.624946][ T24] usb 2-1: USB disconnect, device number 46 [ 703.724127][T14661] lo speed is unknown, defaulting to 1000 [ 705.739775][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'. [ 705.966360][T14682] SET target dimension over the limit! [ 706.391892][T14683] SET target dimension over the limit! [ 707.829608][T14709] overlayfs: failed to resolve './file1': -2 [ 707.891247][T14710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.158155][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'. [ 708.290462][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 708.489812][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 708.515662][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 708.618050][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 708.632697][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 708.649721][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 708.659844][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 708.669608][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 708.685416][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 708.695864][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.720436][ T10] usb 2-1: config 0 descriptor?? [ 708.751890][T14725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.760026][T14725] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 708.767809][T14725] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 709.004896][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 709.113900][ T10] usb 2-1: USB disconnect, device number 47 [ 709.201334][ T10] usblp0: removed [ 709.408523][T14739] lo speed is unknown, defaulting to 1000 [ 709.609828][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 709.829865][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 710.059611][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 710.068016][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 710.125062][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 710.162665][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 710.212284][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 710.239546][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 710.269687][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 710.293312][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.343425][ T10] usb 2-1: config 0 descriptor?? [ 710.650032][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 710.968929][ T10] usb 2-1: USB disconnect, device number 48 [ 711.265171][T14764] SET target dimension over the limit! [ 711.789684][ T10] usblp0: removed [ 712.259837][T14772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.378888][T14806] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2727'. [ 714.416189][T14808] overlayfs: failed to resolve './file0': -2 [ 714.470059][ T5836] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 714.639682][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 714.646364][ T5836] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 714.655638][ T5836] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 714.669866][ T5836] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 714.710338][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 714.729817][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 714.739676][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 714.824408][ T5836] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 714.840413][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.860090][ T5836] usb 4-1: config 0 descriptor?? [ 715.273978][ T5836] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 715.307491][ T5836] usb 4-1: USB disconnect, device number 52 [ 715.346031][ T5836] usblp0: removed [ 715.769828][ T5836] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 715.886226][T14833] lo speed is unknown, defaulting to 1000 [ 716.871446][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 716.891462][ T5836] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 717.377783][ T5836] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 717.388206][ T5836] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 717.397405][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.407278][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 717.417527][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 717.430708][ T5836] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 717.439914][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.450573][ T5836] usb 4-1: config 0 descriptor?? [ 717.497691][ T5836] usb 4-1: can't set config #0, error -71 [ 717.525536][ T5836] usb 4-1: USB disconnect, device number 53 [ 717.870340][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 718.418609][T14854] lo speed is unknown, defaulting to 1000 [ 718.419955][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 718.438991][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 718.457587][ T10] usb 3-1: config index 0 descriptor too short (expected 274, got 18) [ 718.471895][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 718.497999][T14862] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2746'. [ 718.502038][ T10] usb 3-1: string descriptor 0 read error: -22 [ 718.522352][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 718.531700][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.558797][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 718.581594][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 718.617745][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 718.625265][ T10] usb 3-1: media controller created [ 718.668922][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.677463][ T5836] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 718.849835][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 718.865621][ T5836] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 718.914071][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.957984][ T5836] usb 4-1: config 0 descriptor?? [ 719.201880][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 719.211205][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.243255][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 719.271716][ T5836] usb 4-1: media controller created [ 719.364927][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.411322][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 719.486966][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 719.729912][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 719.737053][T14846] usb 3-1: dvb_usb_au6610: wlen=132, aborting [ 719.882778][ T10] usb 3-1: USB disconnect, device number 51 [ 719.949872][ T1204] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 719.978491][ T5836] az6027: usb out operation failed. (-71) [ 719.986079][ T5836] az6027: usb out operation failed. (-71) [ 719.994622][ T5836] stb0899_attach: Driver disabled by Kconfig [ 720.000915][ T5836] az6027: no front-end attached [ 720.000915][ T5836] [ 720.012487][ T5836] az6027: usb out operation failed. (-71) [ 720.018215][ T5836] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 720.035616][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 720.052655][T14874] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2749'. [ 720.062347][ T5836] dvb-usb: schedule remote query interval to 400 msecs. [ 720.069300][ T5836] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 720.089319][T14874] Set syz0 is full, maxelem 0 reached [ 720.103708][ T5836] usb 4-1: USB disconnect, device number 54 [ 720.114025][ T1204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.129337][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 720.169504][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 720.181554][ T5836] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 720.190320][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 720.212968][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 720.227660][ T1204] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 720.236891][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 720.246640][ T1204] usb 2-1: Product: syz [ 720.251005][ T1204] usb 2-1: Manufacturer: syz [ 720.255612][ T1204] usb 2-1: SerialNumber: syz [ 720.265544][ T1204] usb 2-1: config 0 descriptor?? [ 720.644770][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 720.653780][T14880] netlink: 'syz.2.2750': attribute type 15 has an invalid length. [ 720.996609][ T1204] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 721.005279][ T1204] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 722.627718][T14913] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2759'. [ 723.115716][ T1204] usb 2-1: USB disconnect, device number 49 [ 724.050633][ T1204] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 725.199682][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 725.208161][ T1204] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 725.218488][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.461567][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 725.470573][T14937] netlink: 'syz.0.2766': attribute type 15 has an invalid length. [ 725.777986][ T1204] usb 2-1: config 0 descriptor?? [ 726.029788][ T1204] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 726.049566][T14949] tipc: Enabled bearer , priority 0 [ 726.058474][T14949] syzkaller0: entered promiscuous mode [ 726.064063][T14949] syzkaller0: entered allmulticast mode [ 726.079945][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 726.090189][ T1204] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 726.099871][ T1204] usb 2-1: media controller created [ 726.124526][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 726.253702][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 726.366504][ T24] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 726.549389][T14961] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2773'. [ 726.829095][ T1204] az6027: usb out operation failed. (-71) [ 726.840374][ T1204] az6027: usb out operation failed. (-71) [ 726.941561][ T1204] stb0899_attach: Driver disabled by Kconfig [ 726.947839][T14943] tipc: Resetting bearer [ 726.953610][ T1204] az6027: no front-end attached [ 726.953610][ T1204] [ 726.953914][ T1204] az6027: usb out operation failed. (-71) [ 726.977937][ T1204] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 727.007519][T14943] tipc: Disabling bearer [ 727.324297][T14967] lo speed is unknown, defaulting to 1000 [ 727.336853][ T1204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 727.398745][ T1204] dvb-usb: schedule remote query interval to 400 msecs. [ 727.470777][ T1204] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 728.092963][ T1204] usb 2-1: USB disconnect, device number 50 [ 728.136651][ T1204] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 730.069865][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 730.558259][T15010] Cache volume key already in use (9p,(null),) [ 730.759795][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 730.771236][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.792164][ T24] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 730.805806][ T24] usb 2-1: config 4 interface 0 has no altsetting 0 [ 731.241075][ T24] usb 2-1: string descriptor 0 read error: -22 [ 731.247543][ T24] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 731.259149][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.282681][ T24] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 731.307001][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 731.322009][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 731.334119][ T24] usb 2-1: media controller created [ 731.357248][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.478215][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 732.490351][T15004] usb 2-1: dvb_usb_au6610: wlen=132, aborting [ 733.173246][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 733.182277][T15045] netlink: 'syz.3.2795': attribute type 15 has an invalid length. [ 734.088816][ T24] usb 2-1: USB disconnect, device number 51 [ 734.656956][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 734.666003][T15060] netlink: 'syz.0.2798': attribute type 15 has an invalid length. [ 734.982523][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.991623][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.999135][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.007054][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.015681][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.027999][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.038345][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.046023][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.053784][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 735.061481][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.077492][ T30] audit: type=1400 audit(1752329754.175:1170): avc: denied { mounton } for pid=15062 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 735.260721][T15062] lo speed is unknown, defaulting to 1000 [ 736.841037][ T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 736.874832][ T24] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 736.988985][T15062] chnl_net:caif_netlink_parms(): no params data found [ 737.090188][ T50] Bluetooth: hci5: command tx timeout [ 737.157894][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.165905][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.174732][T15062] bridge_slave_0: entered allmulticast mode [ 737.182098][T15062] bridge_slave_0: entered promiscuous mode [ 737.188884][ T6564] bridge_slave_1: left allmulticast mode [ 737.203474][ T6564] bridge_slave_1: left promiscuous mode [ 737.211216][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.222016][ T6564] bridge_slave_0: left allmulticast mode [ 737.227634][ T6564] bridge_slave_0: left promiscuous mode [ 737.233930][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.063569][ T6564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.073973][ T6564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.084170][ T6564] bond0 (unregistering): (slave team0): Releasing backup interface [ 738.093139][ T6564] bond0 (unregistering): Released all slaves [ 738.107236][ T6564] bond1 (unregistering): Released all slaves [ 738.124649][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.135903][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.143967][T15062] bridge_slave_1: entered allmulticast mode [ 738.158625][T15062] bridge_slave_1: entered promiscuous mode [ 738.287245][ T6564] tipc: Left network mode [ 738.297814][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.318028][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.355602][T15117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 738.369328][T15117] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 738.379380][ T24] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 738.428852][T15062] team0: Port device team_slave_0 added [ 738.444629][T15062] team0: Port device team_slave_1 added [ 738.521435][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.544754][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 738.554265][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.580404][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.595592][ T24] usb 2-1: config 0 descriptor?? [ 738.637464][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.693623][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.702675][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.734198][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.784347][T15129] tmpfs: Bad value for 'mpol' [ 738.842021][ T24] usb 2-1: USB disconnect, device number 52 [ 738.917545][T15062] hsr_slave_0: entered promiscuous mode [ 738.934089][T15062] hsr_slave_1: entered promiscuous mode [ 738.946964][T15062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.964041][T15062] Cannot create hsr debugfs directory [ 739.172254][ T50] Bluetooth: hci5: command tx timeout [ 741.118590][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.132422][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.269873][ T50] Bluetooth: hci5: command tx timeout [ 741.329760][T15134] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 741.865148][ T6564] team0 (unregistering): Port device team_slave_1 removed [ 741.907563][ T6564] team0 (unregistering): Port device team_slave_0 removed [ 742.261568][T15157] lo speed is unknown, defaulting to 1000 [ 742.319289][T15164] SET target dimension over the limit! [ 743.084018][T15173] Failed to get privilege flags for destination (handle=0x2:0xd) [ 743.329720][ T50] Bluetooth: hci5: command tx timeout [ 743.861569][T15176] lo speed is unknown, defaulting to 1000 [ 744.142875][ T30] audit: type=1400 audit(1752329763.235:1171): avc: denied { firmware_load } for pid=15186 comm="syz.4.2826" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 744.491779][T15062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 744.522126][T15062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 744.608301][T15062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 744.640112][T15062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.354359][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.375713][T15218] lo speed is unknown, defaulting to 1000 [ 745.386461][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.564119][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.571269][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.643715][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.650890][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.359669][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 746.522107][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 746.543555][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.565148][ T24] usb 3-1: config 0 descriptor?? [ 746.652394][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.694166][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.700576][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.755304][T15062] veth0_vlan: entered promiscuous mode [ 746.776621][T15062] veth1_vlan: entered promiscuous mode [ 746.804920][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 746.862885][T15062] veth0_macvtap: entered promiscuous mode [ 746.904249][T15062] veth1_macvtap: entered promiscuous mode [ 746.928246][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.951475][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.973655][T15062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.985215][T15062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.994920][T15062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.007330][T15062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.042713][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 747.063941][ T24] [drm] Initialized udl on minor 2 [ 747.144900][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.173310][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.215043][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 747.232386][ T6721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.233814][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 747.256681][ T6721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.298428][ T30] audit: type=1400 audit(1752329766.395:1172): avc: denied { mount } for pid=15062 comm="syz-executor" name="/" dev="gadgetfs" ino=6454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 747.406051][ T30] audit: type=1400 audit(1752329766.395:1173): avc: denied { mounton } for pid=15062 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 747.450988][ T48] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 747.451708][ T5913] usb 3-1: USB disconnect, device number 52 [ 747.483744][ T48] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 747.496890][T15274] loop6: detected capacity change from 0 to 7 [ 747.505324][T15274] Dev loop6: unable to read RDB block 7 [ 747.516045][T15274] loop6: unable to read partition table [ 747.529460][T15274] loop6: partition table beyond EOD, truncated [ 747.543050][T15274] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 747.640109][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 747.799794][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 747.809053][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 747.819220][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 747.831463][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 747.842229][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 747.853277][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 747.865020][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 747.879461][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 747.890017][T15231] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 747.890652][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.912576][ T10] usb 4-1: config 0 descriptor?? [ 748.129302][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 748.153688][ T10] usb 4-1: USB disconnect, device number 55 [ 748.173100][ T10] usblp0: removed [ 748.277070][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'. [ 748.684131][T15312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.490859][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 749.678893][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 749.680837][T15326] lo speed is unknown, defaulting to 1000 [ 749.712778][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 749.786523][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 749.799665][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 750.005015][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.276099][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 750.291539][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 750.308723][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 750.320480][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.363771][ T10] usb 4-1: config 0 descriptor?? [ 750.434242][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 750.623939][ T10] usb 4-1: USB disconnect, device number 56 [ 750.757833][T15341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2846'. [ 751.014972][ T10] usblp0: removed [ 751.603408][T15333] lo speed is unknown, defaulting to 1000 [ 751.898063][T15343] lo speed is unknown, defaulting to 1000 [ 754.068258][T15386] SET target dimension over the limit! [ 754.278818][T15362] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 754.487349][T15387] tipc: Enabled bearer , priority 0 [ 754.500927][T15387] syzkaller0: entered promiscuous mode [ 754.518743][T15387] syzkaller0: entered allmulticast mode [ 754.541249][ T5913] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 754.809785][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 754.894709][ T5913] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 754.914959][ T5913] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 754.948800][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'. [ 754.957836][T15394] netlink: 'syz.0.2857': attribute type 15 has an invalid length. [ 755.214540][T15381] tipc: Resetting bearer [ 755.221890][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 755.243250][T15381] tipc: Disabling bearer [ 755.288524][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 755.298668][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 755.349985][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 755.447590][ T5913] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 755.516336][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.828609][ T5913] usb 3-1: config 0 descriptor?? [ 755.902743][T15396] lo speed is unknown, defaulting to 1000 [ 756.111462][ T5913] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 756.155311][ T5913] usb 3-1: USB disconnect, device number 53 [ 756.442446][ T5913] usblp0: removed [ 756.702182][T15416] SET target dimension over the limit! [ 757.335371][ T5913] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 757.661066][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 757.705974][ T5913] usb 3-1: device descriptor read/all, error -71 [ 757.906027][T15419] lo speed is unknown, defaulting to 1000 [ 758.179016][T15423] lo speed is unknown, defaulting to 1000 [ 758.239751][T15262] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 758.399714][T15262] usb 4-1: Using ep0 maxpacket: 32 [ 758.414317][T15262] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 758.426240][T15262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.457449][T15262] usb 4-1: config 0 descriptor?? [ 758.673299][T15262] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 758.708398][T15262] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 758.718517][T15262] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 758.796179][ T5913] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 758.818882][ T5913] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 758.955164][T15440] fido_id[15440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 759.646010][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 759.655166][T15451] netlink: 'syz.4.2870': attribute type 15 has an invalid length. [ 759.930914][ T5913] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 760.180931][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 760.194126][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.204327][ T5913] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 760.213662][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.225335][ T5913] usb 2-1: config 0 descriptor?? [ 760.551310][T15465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.559367][T15465] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 760.567315][T15465] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 760.937089][T15468] mkiss: ax0: crc mode is auto. [ 761.814519][T15458] tipc: Started in network mode [ 761.826291][T15458] tipc: Node identity e6f79ae5b38c, cluster identity 4711 [ 761.866703][ T5913] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review [ 761.933252][ T5913] bigben 0003:146B:0902.001A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 761.946769][T15458] tipc: Enabled bearer , priority 0 [ 761.986963][T15462] lo speed is unknown, defaulting to 1000 [ 762.001250][T15469] syzkaller0: entered promiscuous mode [ 762.039529][ T5913] bigben 0003:146B:0902.001A: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 762.080708][ T5913] bigben 0003:146B:0902.001A: no output report found [ 762.089041][T15469] syzkaller0: entered allmulticast mode [ 762.186493][ T5913] usb 2-1: USB disconnect, device number 53 [ 762.207148][T15454] tipc: Resetting bearer [ 762.222195][T15454] tipc: Disabling bearer [ 763.421789][T15491] lo speed is unknown, defaulting to 1000 [ 763.669691][ T48] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 763.819739][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 763.826263][ T48] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 763.835533][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.846639][ T48] usb 3-1: config 0 descriptor?? [ 764.086345][T15499] lo speed is unknown, defaulting to 1000 [ 764.157745][ T48] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 764.305055][ T24] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 764.340314][ T24] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.805892][T15508] overlayfs: missing 'lowerdir' [ 765.159690][ T1204] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 765.386185][ T1204] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 765.593635][ T1204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.610859][ T1204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.621212][ T1204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.635888][ T1204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.648661][ T1204] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.659397][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.670667][ T1204] usb 2-1: Product: syz [ 765.674927][ T1204] usb 2-1: Manufacturer: syz [ 765.948589][ T1204] cdc_wdm 2-1:1.0: skipping garbage [ 765.958564][ T1204] cdc_wdm 2-1:1.0: skipping garbage [ 765.979776][ T1204] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 766.001205][ T1204] cdc_wdm 2-1:1.0: Unknown control protocol [ 766.151871][ T24] usb 2-1: USB disconnect, device number 54 [ 766.295987][T15530] tipc: Enabled bearer , priority 0 [ 766.304168][T15530] syzkaller0: entered promiscuous mode [ 766.309932][T15530] syzkaller0: entered allmulticast mode [ 767.014363][T15525] tipc: Resetting bearer [ 767.043479][T15525] tipc: Disabling bearer [ 767.083636][T15536] lo speed is unknown, defaulting to 1000 [ 767.259686][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 767.796773][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 767.952688][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.127028][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.171644][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.204498][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.252889][ T24] usb 2-1: string descriptor 0 read error: -71 [ 768.259229][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 768.308996][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.459124][ T24] usb 2-1: can't set config #1, error -71 [ 768.556145][ T24] usb 2-1: USB disconnect, device number 55 [ 769.411299][T15564] overlayfs: missing 'lowerdir' [ 770.928081][T15579] loop6: detected capacity change from 0 to 7 [ 770.936076][T14729] Dev loop6: unable to read RDB block 7 [ 770.942562][T14729] loop6: unable to read partition table [ 770.948421][T14729] loop6: partition table beyond EOD, truncated [ 770.980996][T15579] Dev loop6: unable to read RDB block 7 [ 770.991072][T15579] loop6: unable to read partition table [ 771.003463][T15579] loop6: partition table beyond EOD, truncated [ 771.020075][T15579] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.606455][T15587] lo speed is unknown, defaulting to 1000 [ 771.892191][T15595] tipc: Enabled bearer , priority 0 [ 771.899911][T15595] syzkaller0: entered promiscuous mode [ 771.905351][T15595] syzkaller0: entered allmulticast mode [ 772.667255][T15590] tipc: Resetting bearer [ 772.702496][T15590] tipc: Disabling bearer [ 773.194037][T15611] lo speed is unknown, defaulting to 1000 [ 773.925801][T15618] lo speed is unknown, defaulting to 1000 [ 774.299662][T15601] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 775.133613][T15628] overlayfs: missing 'lowerdir' [ 776.144618][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 776.153551][T15643] netlink: 'syz.4.2922': attribute type 15 has an invalid length. [ 776.588736][T15647] overlayfs: missing 'lowerdir' [ 777.707704][T15657] tipc: Enabled bearer , priority 0 [ 777.721972][T15671] overlayfs: missing 'lowerdir' [ 778.037178][T15669] lo speed is unknown, defaulting to 1000 [ 779.114690][T15657] syzkaller0: entered promiscuous mode [ 779.159750][T15683] Failed to get privilege flags for destination (handle=0x2:0xd) [ 779.312656][T15657] syzkaller0: entered allmulticast mode [ 780.558079][T15705] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2940'. [ 781.422330][T15720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.509889][T15720] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 781.522205][T15720] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 781.941297][T15726] tipc: Enabled bearer , priority 0 [ 781.948615][T15726] syzkaller0: entered promiscuous mode [ 781.954224][T15726] syzkaller0: entered allmulticast mode [ 782.694463][T15733] tipc: Resetting bearer [ 782.716355][T15733] tipc: Resetting bearer [ 782.738656][T15724] tipc: Resetting bearer [ 782.820916][T15724] tipc: Disabling bearer [ 783.013076][T15740] syzkaller0: left promiscuous mode [ 783.018312][T15740] syzkaller0: left allmulticast mode [ 783.207249][T15741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2952'. [ 783.721035][T15749] lo speed is unknown, defaulting to 1000 [ 784.440223][T15752] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 784.449528][T15752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 784.459441][T15752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 784.510737][T15746] lo speed is unknown, defaulting to 1000 [ 784.850275][T15764] SET target dimension over the limit! [ 785.232404][T15753] lo speed is unknown, defaulting to 1000 [ 786.175812][T15776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 786.235496][T15776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 786.585736][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.595935][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.802085][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.834838][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.844218][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.136784][T15781] lo speed is unknown, defaulting to 1000 [ 788.135568][T15804] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 788.167042][T15804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 788.716374][T15781] chnl_net:caif_netlink_parms(): no params data found [ 788.734261][T15815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 788.778645][T15815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 788.787493][T15784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 788.940592][ T5848] Bluetooth: hci1: command tx timeout [ 789.255428][T15781] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.267171][T15781] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.275201][T15781] bridge_slave_0: entered allmulticast mode [ 789.283049][T15781] bridge_slave_0: entered promiscuous mode [ 789.327476][T15781] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.337384][T15781] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.348843][T15781] bridge_slave_1: entered allmulticast mode [ 789.365048][T15781] bridge_slave_1: entered promiscuous mode [ 789.392823][T15836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.412504][T15836] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 789.433933][T15836] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 789.956904][T15835] tipc: Enabling of bearer rejected, already enabled [ 790.390028][T15838] syzkaller0: entered promiscuous mode [ 790.409665][T15838] syzkaller0: entered allmulticast mode [ 790.555308][T15781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.679756][T15851] Failed to get privilege flags for destination (handle=0x2:0xd) [ 790.739083][T15851] syzkaller1: entered promiscuous mode [ 790.744702][T15851] syzkaller1: entered allmulticast mode [ 790.957474][T15781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.010104][ T5848] Bluetooth: hci1: command tx timeout [ 791.706810][T15781] team0: Port device team_slave_0 added [ 791.774219][T15861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 791.833291][T15781] team0: Port device team_slave_1 added [ 791.881129][T15852] lo speed is unknown, defaulting to 1000 [ 791.956594][T15781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.966197][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.994177][T15781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.125989][T15870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.134004][T15870] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 792.141919][T15870] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 792.964771][T15781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.010747][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.070865][T15781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.089770][ T5848] Bluetooth: hci1: command tx timeout [ 793.439190][T15865] lo speed is unknown, defaulting to 1000 [ 793.456815][T15781] hsr_slave_0: entered promiscuous mode [ 793.482133][T15781] hsr_slave_1: entered promiscuous mode [ 793.525617][T15316] bridge_slave_1: left allmulticast mode [ 793.563096][T15316] bridge_slave_1: left promiscuous mode [ 793.577270][T15316] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.618215][T15316] bridge_slave_0: left allmulticast mode [ 793.650018][T15316] bridge_slave_0: left promiscuous mode [ 793.683534][T15316] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.729245][T15316] tipc: Disabling bearer [ 794.238013][T15316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.251259][T15316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.268434][T15316] bond0 (unregistering): (slave team0): Releasing backup interface [ 794.279183][T15316] bond0 (unregistering): Released all slaves [ 794.328580][T15903] tipc: Enabling of bearer rejected, already enabled [ 794.430884][T15316] tipc: Left network mode [ 795.259645][ T5848] Bluetooth: hci1: command tx timeout [ 795.719502][T15906] lo speed is unknown, defaulting to 1000 [ 796.562382][T15929] Failed to get privilege flags for destination (handle=0x2:0xd) [ 796.674194][T15931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 796.972713][T15316] hsr_slave_0: left promiscuous mode [ 796.989797][T15316] hsr_slave_1: left promiscuous mode [ 796.995139][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'. [ 797.004997][T15316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.021063][T15316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.265857][T15316] team0 (unregistering): Port device team_slave_1 removed [ 797.301337][T15316] team0 (unregistering): Port device team_slave_0 removed [ 797.687706][T15932] syzkaller1: entered promiscuous mode [ 797.694756][T15932] syzkaller1: entered allmulticast mode [ 798.061578][T15781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 798.433289][T15781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 798.493742][T15781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 798.641607][T15781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 798.809243][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'. [ 798.875963][T15781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.991592][T15973] netlink: 'syz.0.3001': attribute type 15 has an invalid length. [ 799.472325][T15781] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.505255][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.512352][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.566027][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.573200][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.358789][T15781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.543467][T15781] veth0_vlan: entered promiscuous mode [ 800.576939][T15781] veth1_vlan: entered promiscuous mode [ 800.705980][T15781] veth0_macvtap: entered promiscuous mode [ 800.747152][T15781] veth1_macvtap: entered promiscuous mode [ 800.882336][T15781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.952496][T15781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.005574][T15781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.017851][T15781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.039169][T15781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.074760][T15781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.255481][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.301159][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.712869][T15316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.804704][T16023] Failed to get privilege flags for destination (handle=0x2:0xd) [ 801.973042][T15316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.988787][T16026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.027953][T16026] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 802.153327][T16026] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 802.730164][T16036] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.764909][T16036] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.590107][T16039] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.597181][T16039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.605613][T16039] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.612667][T16039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.700984][T16042] overlayfs: missing 'lowerdir' [ 805.487861][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 805.538409][T16076] netlink: 'syz.4.3016': attribute type 15 has an invalid length. [ 805.655194][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.664420][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.675204][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.692620][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.709114][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.094772][T11043] tipc: Resetting bearer [ 806.142213][T11043] tipc: Disabling bearer [ 806.187419][T16083] lo speed is unknown, defaulting to 1000 [ 807.740606][ T5848] Bluetooth: hci3: command tx timeout [ 808.139910][ T6721] bridge_slave_1: left allmulticast mode [ 808.146021][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.154783][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.169703][ T6721] bridge_slave_1: left promiscuous mode [ 808.201612][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.263150][ T6721] bridge_slave_0: left allmulticast mode [ 808.282462][ T6721] bridge_slave_0: left promiscuous mode [ 808.299950][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.272015][ T6721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.284565][ T6721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.297844][ T6721] bond0 (unregistering): (slave team0): Releasing backup interface [ 809.307382][ T6721] bond0 (unregistering): Released all slaves [ 809.330063][T16083] chnl_net:caif_netlink_parms(): no params data found [ 809.399382][ T6721] tipc: Left network mode [ 809.541229][T16083] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.554183][T16083] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.561748][T16083] bridge_slave_0: entered allmulticast mode [ 809.569164][T16083] bridge_slave_0: entered promiscuous mode [ 809.587309][T16083] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.596211][T16083] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.605726][T16083] bridge_slave_1: entered allmulticast mode [ 809.619482][T16083] bridge_slave_1: entered promiscuous mode [ 809.809868][ T5848] Bluetooth: hci3: command tx timeout [ 810.074897][T16083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.123519][T16083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.266843][T16083] team0: Port device team_slave_0 added [ 810.326520][T16083] team0: Port device team_slave_1 added [ 810.507295][ T6721] hsr_slave_0: left promiscuous mode [ 810.521899][ T6721] hsr_slave_1: left promiscuous mode [ 810.536396][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.547898][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.776096][ T6721] team0 (unregistering): Port device team_slave_1 removed [ 810.806971][ T6721] team0 (unregistering): Port device team_slave_0 removed [ 811.121912][T16083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.129030][T16083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.154943][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.163113][T16083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.206811][T16083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.242516][T16083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.268404][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.295963][T16083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.481044][T16177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3034'. [ 811.499448][T16177] openvswitch: netlink: Flow key attr not present in new flow. [ 811.551382][T16083] hsr_slave_0: entered promiscuous mode [ 811.566221][T16083] hsr_slave_1: entered promiscuous mode [ 811.584132][T16083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 811.598089][T16083] Cannot create hsr debugfs directory [ 811.974482][ T5848] Bluetooth: hci3: command tx timeout [ 812.504086][T16188] syzkaller1: entered promiscuous mode [ 812.511161][T16188] syzkaller1: entered allmulticast mode [ 813.181656][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3038'. [ 813.795636][T16083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.869137][T16083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 813.922804][T16222] overlayfs: missing 'lowerdir' [ 814.077039][ T5848] Bluetooth: hci3: command tx timeout [ 814.090261][T16083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 814.173417][T16227] Cannot find del_set index 0 as target [ 814.195384][T16083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 815.469510][T16083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.522778][T16083] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.539134][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.546276][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.575771][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.582953][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.757286][T16083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 815.793380][T16083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 816.029313][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 816.038329][T16257] netlink: 'syz.4.3045': attribute type 15 has an invalid length. [ 816.787140][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 816.796101][T16262] netlink: 'syz.3.3047': attribute type 15 has an invalid length. [ 816.808205][T16262] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.817270][T16262] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.826010][T16262] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.840014][T16262] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.918943][T16262] vxlan0: entered promiscuous mode [ 818.117797][T16083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.466367][T16083] veth0_vlan: entered promiscuous mode [ 818.483070][T16290] overlayfs: missing 'workdir' [ 818.507648][T16083] veth1_vlan: entered promiscuous mode [ 819.107849][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3053'. [ 819.116840][T16298] netlink: 'syz.2.3053': attribute type 15 has an invalid length. [ 819.173345][T16298] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.182113][T16298] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.190831][T16298] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.199509][T16298] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.208593][T16298] vxlan0: entered promiscuous mode [ 819.306069][T16083] veth0_macvtap: entered promiscuous mode [ 819.315246][T16083] veth1_macvtap: entered promiscuous mode [ 819.333209][T16083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.362504][T16083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.769742][T16083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.778476][T16083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.794065][T16083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.837634][T16083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.185910][T16315] 9p: Unknown Cache mode or invalid value fscach [ 820.220960][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.228785][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.285935][ T6557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.305196][ T6557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.801041][T16343] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3064'. [ 823.035758][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 823.044716][T16344] netlink: 'syz.3.3065': attribute type 15 has an invalid length. [ 823.820606][T15262] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 823.835900][ T48] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 823.851829][T16349] lo speed is unknown, defaulting to 1000 [ 823.867510][ T48] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 823.885288][T15262] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 823.916532][T15262] usb 4-1: USB disconnect, device number 57 [ 824.092772][ T48] usb 3-1: USB disconnect, device number 56 [ 825.876037][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 825.884188][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 825.891802][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 825.899970][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 825.907966][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.020471][T16372] lo speed is unknown, defaulting to 1000 [ 826.189930][T15264] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 826.612799][T15264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.629515][T15264] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 826.668761][T15264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 826.681469][T15264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 826.725444][T15264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 827.063146][T15264] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 827.072532][T15264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 827.085438][T15264] usb 4-1: Product: syz [ 827.086302][T16379] lo speed is unknown, defaulting to 1000 [ 827.148082][T15264] usb 4-1: Manufacturer: syz [ 827.173873][T15264] usb 4-1: SerialNumber: syz [ 827.207305][T15264] usb 4-1: config 0 descriptor?? [ 827.423719][T15264] radio-si470x 4-1:0.0: DeviceID=0xf403 ChipID=0x336e [ 827.632287][T15264] radio-si470x 4-1:0.0: software version 244, hardware version 3 [ 827.844349][T15264] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 827.892409][T15264] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 827.902241][T16372] chnl_net:caif_netlink_parms(): no params data found [ 827.923169][T15264] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 827.945125][T15264] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 828.020534][ T5848] Bluetooth: hci4: command tx timeout [ 828.225429][T15264] usb 4-1: USB disconnect, device number 58 [ 828.316309][ T66] bridge_slave_1: left allmulticast mode [ 828.322637][ T66] bridge_slave_1: left promiscuous mode [ 828.329416][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.339395][ T66] bridge_slave_0: left allmulticast mode [ 828.345742][ T66] bridge_slave_0: left promiscuous mode [ 828.352394][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.698730][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 828.707720][T16406] netlink: 'syz.3.3079': attribute type 15 has an invalid length. [ 828.918672][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.944491][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.954027][ T66] bond0 (unregistering): (slave team0): Releasing backup interface [ 828.971922][ T66] bond0 (unregistering): Released all slaves [ 829.082044][ T66] : left promiscuous mode [ 829.214237][ T66] tipc: Left network mode [ 829.223291][T16372] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.247440][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.265057][T16372] bridge_slave_0: entered allmulticast mode [ 829.281437][T16372] bridge_slave_0: entered promiscuous mode [ 829.292515][T16372] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.299690][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.306807][T16372] bridge_slave_1: entered allmulticast mode [ 829.315007][T16372] bridge_slave_1: entered promiscuous mode [ 829.528645][T16372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.720113][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 829.729103][T16425] netlink: 'syz.1.3080': attribute type 15 has an invalid length. [ 830.037340][T16425] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.046109][T16425] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.049693][ T5848] Bluetooth: hci4: command tx timeout [ 830.054843][T16425] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.068877][T16425] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.077680][T16425] vxlan0: entered promiscuous mode [ 830.115446][T16372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.152077][T16372] team0: Port device team_slave_0 added [ 831.795089][T16372] team0: Port device team_slave_1 added [ 832.129921][ T5848] Bluetooth: hci4: command tx timeout [ 832.747629][ T66] hsr_slave_0: left promiscuous mode [ 832.791343][ T66] hsr_slave_1: left promiscuous mode [ 832.847763][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.865713][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.861506][ T5992] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 833.998241][ T66] team0 (unregistering): Port device team_slave_1 removed [ 834.034330][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.053724][ T5992] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 834.065901][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 834.079291][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 834.079819][ T66] team0 (unregistering): Port device team_slave_0 removed [ 834.089434][ T5992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 834.112865][ T5992] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 834.128281][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 834.136543][ T5992] usb 2-1: Product: syz [ 834.144639][ T5992] usb 2-1: Manufacturer: syz [ 834.155137][ T5992] usb 2-1: SerialNumber: syz [ 834.171759][ T5992] usb 2-1: config 0 descriptor?? [ 834.209934][ T5848] Bluetooth: hci4: command tx timeout [ 834.396156][ T5992] radio-si470x 2-1:0.0: DeviceID=0xf403 ChipID=0x336e [ 834.536695][T16372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.554153][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.591645][T16372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.711790][ T5992] radio-si470x 2-1:0.0: software version 244, hardware version 3 [ 834.714445][T16372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.752134][T16372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.978896][T16496] tmpfs: Bad value for 'mpol' [ 835.050685][ T5992] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 835.194076][T16372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.252462][ T5992] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 835.282146][ T5992] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 835.336651][T16372] hsr_slave_0: entered promiscuous mode [ 835.362075][ T5992] usb 2-1: USB disconnect, device number 56 [ 835.374045][T16372] hsr_slave_1: entered promiscuous mode [ 835.395153][T16372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.415134][T16372] Cannot create hsr debugfs directory [ 838.024440][T16542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.149332][T16542] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 838.520239][T16547] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 840.995163][T16579] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.008473][T16579] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.287378][T16579] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.294502][T16579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.313156][T16579] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.320284][T16579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.396402][T16579] vxlan0: left promiscuous mode [ 841.460722][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.470034][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.773676][T16593] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.780840][T16593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.789505][T16593] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.796643][T16593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.824699][T16593] vxlan0: left promiscuous mode [ 841.955481][T16594] lo speed is unknown, defaulting to 1000 [ 842.158548][T16372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.178274][T16372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.211214][T16372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.910881][T16372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.405496][T16372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.443409][T16372] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.484507][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.491619][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.724463][T16623] tmpfs: Bad value for 'mpol' [ 844.149830][T16624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3122'. [ 844.307403][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.314574][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.664773][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 846.088686][T16372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.223441][T16656] lo speed is unknown, defaulting to 1000 [ 846.542415][T16372] veth0_vlan: entered promiscuous mode [ 846.555434][T16372] veth1_vlan: entered promiscuous mode [ 847.002550][T16372] veth0_macvtap: entered promiscuous mode [ 847.083518][T16372] veth1_macvtap: entered promiscuous mode [ 847.148775][T16372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.206515][T16372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.245240][T16372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.275801][T16372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.304086][T16372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.323903][T16372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.346077][T16665] lo speed is unknown, defaulting to 1000 [ 847.953215][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.997671][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.025478][T16679] tmpfs: Bad value for 'mpol' [ 848.494694][ T6557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.533274][ T6557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.063798][T16693] 9p: Unknown Cache mode or invalid value fscach [ 849.648625][T16705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3137'. [ 850.466372][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 850.475340][T16715] netlink: 'syz.2.3138': attribute type 15 has an invalid length. [ 852.622017][T16742] syzkaller1: entered promiscuous mode [ 852.627623][T16742] syzkaller1: entered allmulticast mode [ 852.756235][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.768747][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.776808][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.785180][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.801766][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.853144][T16746] lo speed is unknown, defaulting to 1000 [ 852.962076][ T1204] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 853.349608][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 853.360734][ T1204] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 853.370911][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.413769][ T1204] usb 4-1: config 0 descriptor?? [ 853.492470][T16758] 9p: Unknown Cache mode or invalid value fscach [ 853.670688][ T1204] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 853.693162][T16753] lo speed is unknown, defaulting to 1000 [ 853.703390][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.767435][T16764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 854.194079][ T1204] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 854.238133][T15264] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 854.689614][ T1204] usb 4-1: media controller created [ 854.717303][T15264] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 854.840332][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.850100][ T5848] Bluetooth: hci0: command tx timeout [ 856.167193][ T1204] az6027: usb out operation failed. (-71) [ 856.223926][ T1204] az6027: usb out operation failed. (-71) [ 856.243815][ T1204] stb0899_attach: Driver disabled by Kconfig [ 856.256790][ T1204] az6027: no front-end attached [ 856.256790][ T1204] [ 856.271365][ T1204] az6027: usb out operation failed. (-71) [ 856.278516][ T1204] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 856.317365][ T1204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 856.341921][ T1204] dvb-usb: schedule remote query interval to 400 msecs. [ 856.348875][ T1204] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 856.429321][ T1204] usb 4-1: USB disconnect, device number 59 [ 856.948275][ T5848] Bluetooth: hci0: command tx timeout [ 856.987009][T16746] chnl_net:caif_netlink_parms(): no params data found [ 857.015260][ T1204] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 857.677454][ T6730] bridge_slave_1: left allmulticast mode [ 857.697281][ T6730] bridge_slave_1: left promiscuous mode [ 857.705923][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.727861][ T6730] bridge_slave_0: left allmulticast mode [ 857.743543][ T6730] bridge_slave_0: left promiscuous mode [ 857.759187][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.619231][ T6730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.633211][ T6730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.645177][ T6730] bond0 (unregistering): Released all slaves [ 858.666986][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.674223][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.684452][T16746] bridge_slave_0: entered allmulticast mode [ 858.698802][T16746] bridge_slave_0: entered promiscuous mode [ 858.721054][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.737885][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.757388][T16746] bridge_slave_1: entered allmulticast mode [ 858.793348][T16746] bridge_slave_1: entered promiscuous mode [ 858.975963][ T6730] tipc: Left network mode [ 859.035105][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.050446][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.082728][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 859.092117][T16860] netlink: 'syz.0.3158': attribute type 15 has an invalid length. [ 859.121338][T16860] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.130126][T16860] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.139030][T16860] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.147743][T16860] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.156473][T16860] vxlan0: entered promiscuous mode [ 859.373579][T16746] team0: Port device team_slave_0 added [ 859.401623][T16746] team0: Port device team_slave_1 added [ 859.649834][T16822] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 860.544653][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.552805][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.608178][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.839779][ T1204] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 860.854513][ T6730] hsr_slave_0: left promiscuous mode [ 860.935153][ T6730] hsr_slave_1: left promiscuous mode [ 860.944309][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.017884][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.032578][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 861.047248][ T1204] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 861.065547][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.097680][ T1204] usb 2-1: config 0 descriptor?? [ 861.412005][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 861.459956][ T1204] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 861.518289][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.568772][ T1204] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 861.598037][ T1204] usb 2-1: media controller created [ 861.661061][T15262] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 861.681663][T15262] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 861.685871][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.329925][ T6730] team0 (unregistering): Port device team_slave_1 removed [ 862.751183][ T6730] team0 (unregistering): Port device team_slave_0 removed [ 863.144037][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.151241][ T6552] smc: removing ib device sz1 [ 863.156877][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.302737][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.368632][ T1204] az6027: usb out operation failed. (-71) [ 863.459688][ T1204] az6027: usb out operation failed. (-71) [ 863.699849][ T1204] stb0899_attach: Driver disabled by Kconfig [ 863.710806][ T1204] az6027: no front-end attached [ 863.710806][ T1204] [ 863.760016][ T1204] az6027: usb out operation failed. (-71) [ 863.767691][ T1204] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 863.802098][ T1204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 863.988982][ T1204] dvb-usb: schedule remote query interval to 400 msecs. [ 864.004343][ T1204] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 864.306354][ T1204] usb 2-1: USB disconnect, device number 57 [ 864.474646][T16746] hsr_slave_0: entered promiscuous mode [ 864.494689][T16746] hsr_slave_1: entered promiscuous mode [ 864.501831][T16746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.509578][T16746] Cannot create hsr debugfs directory [ 864.628781][ T1204] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 864.717496][T16909] syzkaller1: entered promiscuous mode [ 864.723061][T16909] syzkaller1: entered allmulticast mode [ 866.235240][T16959] Cannot find del_set index 0 as target [ 867.182389][T16969] tmpfs: Bad value for 'mpol' [ 869.262042][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3187'. [ 869.679127][T17002] vxlan0: left promiscuous mode [ 869.946231][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.966585][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.947181][T16746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 871.272545][T16746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 871.356450][T16746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 871.419043][T16746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 871.695785][T17042] tmpfs: Bad value for 'mpol' [ 874.002142][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.238860][T16746] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.293456][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.300583][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.585375][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 874.594278][T17081] netlink: 'syz.3.3198': attribute type 15 has an invalid length. [ 874.788217][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.795341][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.799996][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 875.808968][T17097] netlink: 'syz.2.3199': attribute type 15 has an invalid length. [ 876.192303][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.696936][T17111] tipc: Started in network mode [ 876.701916][T17111] tipc: Node identity 8a3465c14379, cluster identity 4711 [ 876.709240][T17111] tipc: Enabled bearer , priority 0 [ 876.720488][T17111] syzkaller0: entered promiscuous mode [ 876.725998][T17111] syzkaller0: entered allmulticast mode [ 877.793793][T17106] tipc: Resetting bearer [ 877.944498][T15262] tipc: Node number set to 3377292737 [ 878.497271][T17106] tipc: Disabling bearer [ 878.527456][T17125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.545144][T17125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.591350][T17125] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 878.838624][T16746] veth0_vlan: entered promiscuous mode [ 879.105362][T16746] veth1_vlan: entered promiscuous mode [ 879.832113][T16746] veth0_macvtap: entered promiscuous mode [ 879.859099][T16746] veth1_macvtap: entered promiscuous mode [ 879.948913][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.047303][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.085006][T16746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.144777][T16746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.153527][T16746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.163590][T16746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.801834][ T6561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.826348][ T6561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.077054][T17154] tipc: Started in network mode [ 881.082095][T17154] tipc: Node identity 9ec9cf50c7c4, cluster identity 4711 [ 881.091201][T17154] tipc: Enabled bearer , priority 0 [ 881.105218][ T6561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.119710][ T6561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.134551][T17154] syzkaller0: entered promiscuous mode [ 881.140273][T17154] syzkaller0: entered allmulticast mode [ 881.995867][T17148] tipc: Resetting bearer [ 882.148314][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 882.157320][T17167] netlink: 'syz.1.3213': attribute type 15 has an invalid length. [ 882.219753][T15264] tipc: Node number set to 1494077264 [ 882.631653][T17148] tipc: Disabling bearer [ 883.302778][T17176] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 883.312586][T17176] SELinux: failed to load policy [ 884.106789][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3216'. [ 991.689448][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 991.696397][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17182/1:b..l P17153/1:b..l P6564/2:b..l P15316/1:b..l [ 991.708314][ C0] rcu: (detected by 0, t=10502 jiffies, g=75341, q=672 ncpus=2) [ 991.716003][ C0] task:kworker/u8:0 state:R running task stack:24648 pid:15316 tgid:15316 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 991.730090][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 991.736312][ C0] Call Trace: [ 991.739568][ C0] [ 991.742475][ C0] __schedule+0x116a/0x5de0 [ 991.746962][ C0] ? __pfx___schedule+0x10/0x10 [ 991.751790][ C0] ? irqentry_exit+0x3b/0x90 [ 991.756364][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 991.761536][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 991.767575][ C0] preempt_schedule_notrace+0x62/0xe0 [ 991.772922][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 991.778788][ C0] rcu_is_watching+0x8e/0xc0 [ 991.783352][ C0] unwind_next_frame+0xa92/0x20a0 [ 991.788345][ C0] ? __unwind_start+0x574/0x7f0 [ 991.793169][ C0] __unwind_start+0x45f/0x7f0 [ 991.797816][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 991.803945][ C0] arch_stack_walk+0x73/0x100 [ 991.808593][ C0] ? arch_stack_walk+0x73/0x100 [ 991.813415][ C0] stack_trace_save+0x8e/0xc0 [ 991.818067][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 991.823415][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 991.828326][ C0] kasan_save_stack+0x33/0x60 [ 991.832995][ C0] kasan_save_track+0x14/0x30 [ 991.837642][ C0] kasan_save_free_info+0x3b/0x60 [ 991.842638][ C0] __kasan_slab_free+0x51/0x70 [ 991.847373][ C0] kmem_cache_free+0x2d1/0x4d0 [ 991.852110][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 991.856760][ C0] kfree_skbmem+0x1a4/0x1f0 [ 991.861233][ C0] sk_skb_reason_drop+0x136/0x1a0 [ 991.866232][ C0] ieee80211_iface_work+0x434/0x1020 [ 991.871493][ C0] ? rcu_is_watching+0x12/0xc0 [ 991.876234][ C0] cfg80211_wiphy_work+0x3df/0x550 [ 991.881319][ C0] process_one_work+0x9cf/0x1b70 [ 991.886230][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 991.892355][ C0] ? __pfx_process_one_work+0x10/0x10 [ 991.897701][ C0] ? assign_work+0x1a0/0x250 [ 991.902274][ C0] worker_thread+0x6c8/0xf10 [ 991.906837][ C0] ? __kthread_parkme+0x19e/0x250 [ 991.911835][ C0] ? __pfx_worker_thread+0x10/0x10 [ 991.916916][ C0] kthread+0x3c5/0x780 [ 991.920959][ C0] ? __pfx_kthread+0x10/0x10 [ 991.925522][ C0] ? rcu_is_watching+0x12/0xc0 [ 991.930266][ C0] ? __pfx_kthread+0x10/0x10 [ 991.934825][ C0] ret_from_fork+0x5d7/0x6f0 [ 991.939392][ C0] ? __pfx_kthread+0x10/0x10 [ 991.943955][ C0] ret_from_fork_asm+0x1a/0x30 [ 991.948699][ C0] [ 991.951693][ C0] task:kworker/u8:22 state:R running task stack:23160 pid:6564 tgid:6564 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 991.965219][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 991.971952][ C0] Call Trace: [ 991.975203][ C0] [ 991.978106][ C0] __schedule+0x116a/0x5de0 [ 991.982589][ C0] ? __pfx___schedule+0x10/0x10 [ 991.987417][ C0] ? mark_held_locks+0x49/0x80 [ 991.992153][ C0] preempt_schedule_irq+0x51/0x90 [ 991.997154][ C0] irqentry_exit+0x36/0x90 [ 992.001557][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.007508][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 992.013547][ C0] Code: 48 89 df 5b e9 1d d6 5b 00 be 03 00 00 00 5b e9 22 78 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 34 24 65 48 8b 15 f8 d8 14 12 65 8b 05 09 d9 14 12 a9 00 01 [ 992.033125][ C0] RSP: 0018:ffffc9001bb17808 EFLAGS: 00000297 [ 992.039162][ C0] RAX: 0000000000000000 RBX: ffff8880637b509a RCX: ffffffff84dbc8d9 [ 992.047108][ C0] RDX: ffff888026b94880 RSI: 000000000000000c RDI: 0000000000000005 [ 992.055061][ C0] RBP: 0000000000000006 R08: 0000000000000005 R09: 000000000000000c [ 992.063009][ C0] R10: 0000000000000006 R11: 0000000000000001 R12: 0000000083bc909f [ 992.070952][ C0] R13: 00000000626a4f94 R14: 00000000626a4f94 R15: 00000000626a4f94 [ 992.078898][ C0] ? jhash+0x39/0x610 [ 992.082862][ C0] jhash+0x1cb/0x610 [ 992.086731][ C0] __rhashtable_lookup.isra.0+0x133/0x6c0 [ 992.092430][ C0] ? __pfx___rhashtable_lookup.isra.0+0x10/0x10 [ 992.098650][ C0] sta_info_get+0xa9/0x340 [ 992.103050][ C0] ieee80211_ibss_rx_queued_mgmt+0xffc/0x2fd0 [ 992.109096][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 992.115580][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 992.120676][ C0] ieee80211_iface_work+0xbf4/0x1020 [ 992.125947][ C0] ? rcu_is_watching+0x12/0xc0 [ 992.130690][ C0] cfg80211_wiphy_work+0x3df/0x550 [ 992.135775][ C0] process_one_work+0x9cf/0x1b70 [ 992.140691][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 992.146297][ C0] ? __pfx_process_one_work+0x10/0x10 [ 992.151643][ C0] ? assign_work+0x1a0/0x250 [ 992.156208][ C0] worker_thread+0x6c8/0xf10 [ 992.160776][ C0] ? __kthread_parkme+0x19e/0x250 [ 992.165786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 992.170871][ C0] kthread+0x3c5/0x780 [ 992.174913][ C0] ? __pfx_kthread+0x10/0x10 [ 992.179479][ C0] ? rcu_is_watching+0x12/0xc0 [ 992.184216][ C0] ? __pfx_kthread+0x10/0x10 [ 992.188778][ C0] ret_from_fork+0x5d7/0x6f0 [ 992.193343][ C0] ? __pfx_kthread+0x10/0x10 [ 992.197903][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.202646][ C0] [ 992.205638][ C0] task:syz.2.3210 state:R running task stack:26408 pid:17153 tgid:17148 ppid:15781 task_flags:0x40044c flags:0x00004002 [ 992.219081][ C0] Call Trace: [ 992.222332][ C0] [ 992.225240][ C0] __schedule+0x116a/0x5de0 [ 992.229723][ C0] ? __lock_acquire+0x5b1/0x1c90 [ 992.234645][ C0] ? __pfx___schedule+0x10/0x10 [ 992.239474][ C0] ? lock_acquire+0x179/0x350 [ 992.244156][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 992.249161][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 992.254511][ C0] preempt_schedule_common+0x44/0xc0 [ 992.259774][ C0] preempt_schedule_thunk+0x16/0x30 [ 992.264950][ C0] _raw_spin_unlock+0x3e/0x50 [ 992.269607][ C0] unmap_page_range+0x106b/0x4350 [ 992.275142][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 992.280490][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 992.285661][ C0] ? kernel_text_address+0x8d/0x100 [ 992.290835][ C0] ? uprobe_munmap+0x20/0x5c0 [ 992.295489][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 992.301363][ C0] unmap_vmas+0x218/0x470 [ 992.305668][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 992.310509][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 992.315446][ C0] exit_mmap+0x1b9/0xb90 [ 992.319682][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 992.324432][ C0] __mmput+0x12a/0x410 [ 992.328486][ C0] mmput+0x62/0x70 [ 992.332199][ C0] do_exit+0x7c4/0x2bd0 [ 992.336330][ C0] ? __pfx___might_resched+0x10/0x10 [ 992.341593][ C0] ? __pfx_do_exit+0x10/0x10 [ 992.346160][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 992.351157][ C0] ? find_held_lock+0x2b/0x80 [ 992.355818][ C0] do_group_exit+0xd3/0x2a0 [ 992.360297][ C0] get_signal+0x2673/0x26d0 [ 992.364776][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 992.369691][ C0] ? hash_ipmark4_head+0x7c8/0x1060 [ 992.374869][ C0] ? __pfx_get_signal+0x10/0x10 [ 992.379698][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 992.385219][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 992.391353][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 992.396887][ C0] exit_to_user_mode_loop+0x84/0x110 [ 992.402156][ C0] do_syscall_64+0x3f6/0x4c0 [ 992.406724][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.412592][ C0] RIP: 0033:0x7f9d7658e929 [ 992.416978][ C0] RSP: 002b:00007f9d77490038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 992.425366][ C0] RAX: 0000000000010106 RBX: 00007f9d767b6080 RCX: 00007f9d7658e929 [ 992.433314][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 992.441263][ C0] RBP: 00007f9d76610b39 R08: 0000000000000000 R09: 0000000000000000 [ 992.449206][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 992.457149][ C0] R13: 0000000000000001 R14: 00007f9d767b6080 R15: 00007ffc08ff9528 [ 992.465107][ C0] [ 992.468106][ C0] task:syz.3.3217 state:R running task stack:26744 pid:17182 tgid:17178 ppid:15062 task_flags:0x40054c flags:0x00004000 [ 992.481547][ C0] Call Trace: [ 992.484811][ C0] [ 992.487717][ C0] __schedule+0x116a/0x5de0 [ 992.492200][ C0] ? mark_held_locks+0x49/0x80 [ 992.496944][ C0] ? __pfx___schedule+0x10/0x10 [ 992.501768][ C0] ? lock_acquire+0x62/0x350 [ 992.506328][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 992.511338][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 992.516691][ C0] preempt_schedule_common+0x44/0xc0 [ 992.521950][ C0] preempt_schedule_thunk+0x16/0x30 [ 992.527124][ C0] _raw_spin_unlock+0x3e/0x50 [ 992.531774][ C0] unmap_page_range+0x106b/0x4350 [ 992.536789][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 992.542142][ C0] ? uprobe_munmap+0x20/0x5c0 [ 992.546795][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 992.552667][ C0] unmap_vmas+0x218/0x470 [ 992.556973][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 992.561801][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 992.566722][ C0] exit_mmap+0x1b9/0xb90 [ 992.570943][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 992.575698][ C0] __mmput+0x12a/0x410 [ 992.579743][ C0] mmput+0x62/0x70 [ 992.583438][ C0] do_exit+0x7c4/0x2bd0 [ 992.587602][ C0] ? __pfx_do_exit+0x10/0x10 [ 992.592169][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 992.597167][ C0] ? find_held_lock+0x2b/0x80 [ 992.601818][ C0] do_group_exit+0xd3/0x2a0 [ 992.606295][ C0] get_signal+0x2673/0x26d0 [ 992.610783][ C0] ? video_usercopy+0x7af/0x1720 [ 992.615698][ C0] ? __pfx_get_signal+0x10/0x10 [ 992.620525][ C0] ? do_futex+0x122/0x350 [ 992.624829][ C0] ? __pfx_do_futex+0x10/0x10 [ 992.629482][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 992.635014][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 992.641145][ C0] ? xfd_validate_state+0x61/0x180 [ 992.646234][ C0] exit_to_user_mode_loop+0x84/0x110 [ 992.651494][ C0] do_syscall_64+0x3f6/0x4c0 [ 992.656062][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.661925][ C0] RIP: 0033:0x7f9f4d58e929 [ 992.666311][ C0] RSP: 002b:00007f9f4b3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 992.674692][ C0] RAX: fffffffffffffe00 RBX: 00007f9f4d7b6168 RCX: 00007f9f4d58e929 [ 992.682634][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f4d7b6168 [ 992.690579][ C0] RBP: 00007f9f4d7b6160 R08: 0000000000000000 R09: 0000000000000000 [ 992.698519][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f4d7b616c [ 992.706459][ C0] R13: 0000000000000000 R14: 00007fff5d61a020 R15: 00007fff5d61a108 [ 992.714409][ C0] [ 992.717402][ C0] rcu: rcu_preempt kthread starved for 10514 jiffies! g75341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 992.728563][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 992.738515][ C0] rcu: RCU grace-period kthread stack dump: [ 992.744395][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 992.757845][ C0] Call Trace: [ 992.761100][ C0] [ 992.764009][ C0] __schedule+0x116a/0x5de0 [ 992.768499][ C0] ? __pfx___schedule+0x10/0x10 [ 992.773336][ C0] ? find_held_lock+0x2b/0x80 [ 992.777990][ C0] ? schedule+0x2d7/0x3a0 [ 992.782300][ C0] schedule+0xe7/0x3a0 [ 992.786343][ C0] schedule_timeout+0x123/0x290 [ 992.791192][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 992.796543][ C0] ? __pfx_process_timeout+0x10/0x10 [ 992.801808][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 992.807592][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 992.813030][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 992.817771][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 992.823033][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.828209][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 992.833119][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 992.837944][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 992.843728][ C0] rcu_gp_kthread+0x270/0x380 [ 992.848378][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 992.853551][ C0] ? rcu_is_watching+0x12/0xc0 [ 992.858292][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.863480][ C0] ? __kthread_parkme+0x19e/0x250 [ 992.868482][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 992.873652][ C0] kthread+0x3c5/0x780 [ 992.877695][ C0] ? __pfx_kthread+0x10/0x10 [ 992.882280][ C0] ? rcu_is_watching+0x12/0xc0 [ 992.887025][ C0] ? __pfx_kthread+0x10/0x10 [ 992.891604][ C0] ret_from_fork+0x5d7/0x6f0 [ 992.896187][ C0] ? __pfx_kthread+0x10/0x10 [ 992.900753][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.905514][ C0] [ 992.908513][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 992.914805][ C0] Sending NMI from CPU 0 to CPUs 1: [ 992.919997][ C1] NMI backtrace for cpu 1 [ 992.920007][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 992.920024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 992.920032][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 992.920053][ C1] Code: cb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 b9 21 00 fb f4 7c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 992.920065][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 992.920076][ C1] RAX: 00000000043a3f09 RBX: 0000000000000001 RCX: ffffffff8b885c79 [ 992.920084][ C1] RDX: 0000000000000000 RSI: ffffffff8de32ec7 RDI: ffffffff8c158fa0 [ 992.920093][ C1] RBP: ffffed1003c55488 R08: 0000000000000001 R09: ffffed10170a6645 [ 992.920102][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 992.920111][ C1] R13: ffff88801e2aa440 R14: ffffffff90a98950 R15: 0000000000000000 [ 992.920119][ C1] FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 992.920133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.920142][ C1] CR2: 0000200000404030 CR3: 000000005dfe2000 CR4: 00000000003526f0 [ 992.920151][ C1] Call Trace: [ 992.920157][ C1] [ 992.920162][ C1] default_idle+0x13/0x20 [ 992.920175][ C1] default_idle_call+0x6d/0xb0 [ 992.920187][ C1] do_idle+0x391/0x510 [ 992.920205][ C1] ? __pfx_do_idle+0x10/0x10 [ 992.920220][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 992.920239][ C1] ? do_idle+0x2e6/0x510 [ 992.920256][ C1] cpu_startup_entry+0x4f/0x60 [ 992.920272][ C1] start_secondary+0x21d/0x2b0 [ 992.920290][ C1] ? __pfx_start_secondary+0x10/0x10 [ 992.920309][ C1] common_startup_64+0x13e/0x148 [ 992.920327][ C1] [ 993.291732][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.304946][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.342913][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.374993][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=23280 sent=0 n=-1 (errno 32: Broken pipe) [ 995.492738][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 995.654297][T15063] Bluetooth: hci4: command 0x0406 tx timeout [ 995.660572][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 995.908763][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.031680][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.093576][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.165115][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.287259][ T13] bridge_slave_1: left allmulticast mode [ 996.293995][ T13] bridge_slave_1: left promiscuous mode [ 996.300317][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.309207][ T13] bridge_slave_0: left allmulticast mode [ 996.315484][ T13] bridge_slave_0: left promiscuous mode [ 996.321228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.565813][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.575827][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.585245][ T13] bond0 (unregistering): Released all slaves [ 996.854988][ T13] hsr_slave_0: left promiscuous mode [ 996.868319][ T13] hsr_slave_1: left promiscuous mode [ 996.874463][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.882987][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.891921][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.899305][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.921436][ T13] veth1_macvtap: left promiscuous mode [ 996.927529][ T13] veth0_macvtap: left promiscuous mode [ 996.933320][ T13] veth1_vlan: left promiscuous mode [ 996.939328][ T13] veth0_vlan: left promiscuous mode [ 997.204965][ T13] team0 (unregistering): Port device team_slave_1 removed [ 997.233215][ T13] team0 (unregistering): Port device team_slave_0 removed [ 997.801295][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.811955][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.898390][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.912008][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.002435][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.016919][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.105266][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.115744][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.288574][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.302543][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.355536][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.366768][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.456507][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.466836][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.557361][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.570071][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.759265][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.774122][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.895987][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.906458][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.969126][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.982313][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.045665][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.055982][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.186892][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.202754][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.254278][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.267192][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.359123][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.369776][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.426816][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.437158][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.584131][ T13] bridge_slave_1: left allmulticast mode [ 999.593568][ T13] bridge_slave_1: left promiscuous mode [ 999.601372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.612102][ T13] bridge_slave_0: left allmulticast mode [ 999.617745][ T13] bridge_slave_0: left promiscuous mode [ 999.623824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.634885][ T13] bridge_slave_1: left allmulticast mode [ 999.642717][ T13] bridge_slave_1: left promiscuous mode [ 999.648393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.659358][ T13] bridge_slave_0: left allmulticast mode [ 999.669748][ T13] bridge_slave_0: left promiscuous mode [ 999.675679][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.687103][ T13] bridge_slave_1: left allmulticast mode [ 999.693445][ T13] bridge_slave_1: left promiscuous mode [ 999.699114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.709148][ T13] bridge_slave_0: left allmulticast mode [ 999.715415][ T13] bridge_slave_0: left promiscuous mode [ 999.721863][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.732294][ T13] bridge_slave_1: left allmulticast mode [ 999.737906][ T13] bridge_slave_1: left promiscuous mode [ 999.743818][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.753170][ T13] bridge_slave_0: left allmulticast mode [ 999.758787][ T13] bridge_slave_0: left promiscuous mode [ 999.764618][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.053889][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.064106][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.073726][ T13] bond0 (unregistering): Released all slaves [ 1000.292704][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.302843][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.312322][ T13] bond0 (unregistering): Released all slaves [ 1000.521662][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.532109][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.541725][ T13] bond0 (unregistering): Released all slaves [ 1000.754910][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.764916][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.775205][ T13] bond0 (unregistering): Released all slaves [ 1000.871353][ T13] tipc: Left network mode [ 1000.876051][ T13] tipc: Left network mode [ 1000.893633][ T13] tipc: Left network mode [ 1001.556402][ T13] hsr_slave_0: left promiscuous mode [ 1001.564243][ T13] hsr_slave_1: left promiscuous mode [ 1001.570097][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.577472][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.585446][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.592857][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.603201][ T13] hsr_slave_0: left promiscuous mode [ 1001.608804][ T13] hsr_slave_1: left promiscuous mode [ 1001.616235][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.623684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.633485][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.641247][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.654406][ T13] hsr_slave_0: left promiscuous mode [ 1001.660111][ T13] hsr_slave_1: left promiscuous mode [ 1001.665659][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.673089][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.681161][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.688517][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.698260][ T13] hsr_slave_0: left promiscuous mode