last executing test programs: 11.835515036s ago: executing program 0 (id=167): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11.554059471s ago: executing program 4 (id=169): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000009400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a30000000001001038008000140000008"], 0x378}}, 0x0) 11.538531252s ago: executing program 0 (id=170): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, 0x2a) 11.223103139s ago: executing program 4 (id=172): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000140), 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000240), &(0x7f0000000280), 0x2}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x90000}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r4, &(0x7f0000000380)="07d92ad82ea49253f256775ca68bee717c62cfde9c22d0a5bc7ee0b17f38f9e474ea3023e50a4c5bbf9d2700d806fdc0d9311d57b234c0e109236661", &(0x7f00000003c0)=""/247, 0x4}, 0x1c) 10.623774951s ago: executing program 4 (id=174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10}) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 10.593604742s ago: executing program 0 (id=175): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, 0x0, 0x0, 0x40840) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 9.599340745s ago: executing program 4 (id=177): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) listen(0xffffffffffffffff, 0xfffffffd) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) syz_emit_ethernet(0x8a, &(0x7f0000006fc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x4, 0x0, @empty, @loopback, {[@srh={0x6c, 0x4, 0x4, 0x2, 0x1, 0x20, 0x800, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x5e}, @fragment={0x88, 0x0, 0x7f, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x500}}}}}}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) 9.431372945s ago: executing program 2 (id=178): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xff01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000005c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000001c0)={{r9, r8, 0x1, [0x0, 0xf7df]}, {r9, r10, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) r11 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) openat$ocfs2_control(0xffffff9c, 0x0, 0x210902, 0x0) getresgid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000400)={0x1, 0x0, 0x80, 0x2ff, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) 8.042416989s ago: executing program 0 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) 7.904990867s ago: executing program 3 (id=184): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000140), 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000240), &(0x7f0000000280), 0x2}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x90000}, 0xc) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 7.063829512s ago: executing program 2 (id=185): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, 0x2a) 7.028614533s ago: executing program 0 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 6.669364723s ago: executing program 4 (id=187): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r8) truncate(0x0, 0x0) 6.646355404s ago: executing program 0 (id=188): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.235838786s ago: executing program 2 (id=189): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0xfffffccf) 6.123146022s ago: executing program 4 (id=190): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0x1e, 0x7a00, 0x0, 0x0}, {0x7, 0xa001, 0x0, 0x0}], 0x2}) 5.896777544s ago: executing program 3 (id=191): r0 = syz_usb_connect(0x7, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="927aef1c0c60f57d70a6473e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) 5.40561708s ago: executing program 1 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 5.005536282s ago: executing program 2 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$drirender128(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000003c0)={0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x5, 0x8000) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x40, @SEQ_CONTROLLER=0xfe, 0x10, 0xb, 0x8b}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000240)=""/93) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000400)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r4, r5, r6, 0x0, 0x0], 0x5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) fsetxattr$security_ima(r7, &(0x7f0000000100), &(0x7f0000000340)=ANY=[@ANYBLOB="026c0d346b92fd747713fcffffff00082ea78c065c7a7293989faa36c2f906aa4cb7981e2307559bd9ee021a6d288af45078e9330e4527966d71b79100d3f814864ee45c750a1779d8a32f9633bc7bd5ad79"], 0x12, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESOCT=r7, @ANYRES8=r0, @ANYRES64=r2], 0x1ec}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x36}, 0x18) r10 = socket$inet6(0xa, 0xa, 0xe) sendmsg$inet6(r10, &(0x7f0000000700)={&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x91}, 0x7e}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000500)="8be234d6b8895cf478c042483a6c8df313319e8ee045c3bb144d2026102ea64b14", 0x21}], 0x1, &(0x7f0000000580)=[@dstopts={{0x1c, 0x29, 0x37, {0x4, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x3}}, @tclass={{0x10, 0x29, 0x43, 0x1f}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x6}}, @flowinfo={{0x10, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0xec, 0x29, 0x37, {0x8, 0x1a, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xa, 0x5, [0x2, 0x80000001]}}, @enc_lim={0x4, 0x1, 0x45}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x0, [0xff3, 0x62, 0xd3, 0x1ff]}}, @generic={0xc, 0x77, "d3e050194720990658281d19df66d06205a0d97716db8c29828976461aa0d256dffef66c8ac9ceac22868fb8e10f1ddc2935116c0ecf5ec0c6ea5429b9e4d47c0688d3bfee030b49f0609fa38429f5e92777fbd1d38eda0b2568f32209c8dcfea6b8486b12146d2dd2573b7151b59ab43fc30eae781ab0"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x710c}}], 0x174}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 4.772777534s ago: executing program 3 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}]}, 0x30}}, 0x0) 4.389221805s ago: executing program 3 (id=195): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r3, 0x0, 0x0, 0x40840) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 4.067861282s ago: executing program 1 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 3.498861863s ago: executing program 1 (id=197): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.119258853s ago: executing program 1 (id=198): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) listen(0xffffffffffffffff, 0xfffffffd) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) syz_emit_ethernet(0x8a, &(0x7f0000006fc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x4, 0x0, @empty, @loopback, {[@srh={0x6c, 0x4, 0x4, 0x2, 0x1, 0x20, 0x800, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x5e}, @fragment={0x88, 0x0, 0x7f, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x500}}}}}}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) 2.439665939s ago: executing program 2 (id=199): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x124, 0x17, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d1}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010104}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x5, 0x0, 0x2000000}, {0x8000000000000001}, 0x4, 0x6e6bbf, 0x0, 0x0, 0x0, 0x1}, 0xfffffffe}}, 0x124}}, 0x20004040) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/236, 0xec) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.504951369s ago: executing program 3 (id=200): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) 1.30766345s ago: executing program 3 (id=201): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000140), 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000500), &(0x7f0000000240), &(0x7f0000000280), 0x2}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x90000}, 0xc) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 889.943622ms ago: executing program 1 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in=@private=0xa010102}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x9, 0x1c, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x0, 0x80, 0xfffffffc, 0xc}}) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, 0x0, 0x37b, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0xfb396f7cefe7849e) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x10001, 0xfffffffe, 0x0, 0x0, 0x40], [0x0, 0x2, 0x0, 0x2], [0xffffffff, 0x3, 0x0, 0x1, 0x3, 0x1]], '\x00', [{0x0, 0xc278}, {0x7, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x0, 0x80000}, {}, {0x0, 0x4000}, {0x0, 0x400}, {0x0, 0x9}, {}, {0xfffffffd}], '\x00', 0x6ad}) listen(r0, 0x7c2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) readv(r11, &(0x7f0000000380)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x7000001) syz_emit_ethernet(0x36, &(0x7f0000002280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aa3a080045a00028400000001d06907800000000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5019000090780000"], 0x0) 571.975419ms ago: executing program 1 (id=203): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0xfffffccf) 0s ago: executing program 2 (id=204): syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285629, &(0x7f0000000680)={0x3, 0x0, 0x2, '\x00', &(0x7f0000000640)}) r1 = getpid() syz_pidfd_open(r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xff03, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) alarm(0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000844) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000104010100c81a000000000001b5d6000100"/34], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) shutdown(r2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'bond_slave_1\x00', 0x4}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ng 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 87.352388][ T4315] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 87.395936][ T4315] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 87.433300][ T4315] usb 5-1: Manufacturer: syz [ 87.486318][ T4315] usb 5-1: config 0 descriptor?? [ 87.540339][ T4421] netlink: 'syz.1.17': attribute type 25 has an invalid length. [ 87.541670][ T4315] smsusb:smsusb_probe: board id=9, interface number 0 [ 87.579541][ T4421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17'. [ 87.598716][ T4315] smsusb:smsusb_probe: Device initialized with return code -19 [ 88.158639][ T4315] usb 5-1: USB disconnect, device number 2 [ 88.553902][ T4431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.561531][ T4431] IPv6: NLM_F_CREATE should be set when creating new route [ 88.568834][ T4431] IPv6: NLM_F_CREATE should be set when creating new route [ 88.896546][ T4313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.120440][ T4313] usb 3-1: Using ep0 maxpacket: 32 [ 89.128110][ T4313] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 89.179868][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.260919][ T4313] usb 3-1: config 0 descriptor?? [ 89.478967][ T4313] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 89.557320][ T4313] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 89.606284][ T4313] dib0700: firmware download failed at 7 with -22 [ 89.638573][ T4313] usb 3-1: USB disconnect, device number 2 [ 89.722885][ T26] kauditd_printk_skb: 695 callbacks suppressed [ 89.722900][ T26] audit: type=1326 audit(1777056371.498:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.756145][ T26] audit: type=1326 audit(1777056371.528:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.789834][ T26] audit: type=1326 audit(1777056371.528:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.822781][ T26] audit: type=1326 audit(1777056371.528:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.855743][ T4444] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 89.859654][ T26] audit: type=1326 audit(1777056371.528:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.905158][ T26] audit: type=1326 audit(1777056371.528:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 89.951910][ T26] audit: type=1326 audit(1777056371.528:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76cf9cdd9 code=0x7ffc0000 [ 89.980249][ T26] audit: type=1326 audit(1777056371.538:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 90.054405][ T26] audit: type=1326 audit(1777056371.538:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb76cf3e159 code=0x7ffc0000 [ 90.116576][ T26] audit: type=1326 audit(1777056371.538:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76cf9cdd9 code=0x7ffc0000 [ 90.708189][ T4460] Zero length message leads to an empty skb [ 91.046707][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.306537][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 91.324030][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.337002][ T4467] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 91.402261][ T4316] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 91.418284][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.442592][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.504347][ T4316] usb 2-1: Product: syz [ 91.516792][ T4316] usb 2-1: Manufacturer: syz [ 91.552170][ T4316] usb 2-1: SerialNumber: syz [ 91.568756][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.617854][ T4316] usb 2-1: config 0 descriptor?? [ 91.655310][ T4316] hub 2-1:0.0: bad descriptor, ignoring hub [ 91.684394][ T4316] hub: probe of 2-1:0.0 failed with error -5 [ 91.724191][ T4441] delete_channel: no stack [ 91.727285][ T4316] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 91.743452][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.930274][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.977843][ T4316] usb 2-1: USB disconnect, device number 3 [ 92.382110][ T4440] delete_channel: no stack [ 93.096426][ T4489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.103751][ T4489] IPv6: NLM_F_CREATE should be set when creating new route [ 93.111003][ T4489] IPv6: NLM_F_CREATE should be set when creating new route [ 93.331477][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.347012][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.364891][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.391171][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.422416][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.429929][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.514589][ T4497] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 93.536539][ T4315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.736923][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 93.744618][ T4315] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 93.767123][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.811007][ T4315] usb 5-1: config 0 descriptor?? [ 94.226564][ T126] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.277834][ T4316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.418545][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.436624][ T126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.445940][ T126] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 94.455727][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.466965][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 94.483866][ T126] usb 3-1: config 0 descriptor?? [ 94.495342][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.506715][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.516603][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 94.526778][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 94.539330][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.558599][ T4316] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 94.568279][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 94.577171][ T4316] usb 2-1: Product: syz [ 94.581655][ T4316] usb 2-1: Manufacturer: syz [ 94.586371][ T4316] usb 2-1: SerialNumber: syz [ 94.594209][ T4316] usb 2-1: config 0 descriptor?? [ 94.609220][ T4316] usb 2-1: no audio or video endpoints found [ 95.055391][ T11] device hsr_slave_0 left promiscuous mode [ 95.123070][ T11] device hsr_slave_1 left promiscuous mode [ 95.141481][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.152321][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.162760][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.171699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.194658][ T11] device bridge_slave_1 left promiscuous mode [ 95.206327][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.237702][ T11] device bridge_slave_0 left promiscuous mode [ 95.263414][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.345807][ T11] device veth1_macvtap left promiscuous mode [ 95.365227][ T11] device veth0_macvtap left promiscuous mode [ 95.384931][ T11] device veth1_vlan left promiscuous mode [ 95.407623][ T11] device veth0_vlan left promiscuous mode [ 95.466725][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 95.951586][ T4315] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 95.983712][ T4315] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 96.033924][ T4315] dib0700: firmware download failed at 7 with -22 [ 96.138218][ T4315] usb 5-1: USB disconnect, device number 3 [ 96.826870][ T4358] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.040766][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 97.060830][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.102192][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 97.114967][ T14] usb 3-1: USB disconnect, device number 3 [ 97.220384][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 97.285645][ T4358] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 97.306599][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.316685][ T4358] usb 5-1: Product: syz [ 97.321012][ T4358] usb 5-1: Manufacturer: syz [ 97.325653][ T4358] usb 5-1: SerialNumber: syz [ 97.415607][ T4358] usb 5-1: config 0 descriptor?? [ 97.547017][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 97.649822][ T11] team0 (unregistering): Port device team_slave_1 removed [ 97.702107][ T4358] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 97.875917][ T11] team0 (unregistering): Port device team_slave_0 removed [ 97.950430][ T4316] usb 2-1: USB disconnect, device number 4 [ 97.997308][ T4312] usb 5-1: USB disconnect, device number 4 [ 98.114270][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.161697][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.481910][ T4542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 98.670392][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.794045][ T11] bond0 (unregistering): Released all slaves [ 98.856659][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 98.865359][ T4316] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 98.882806][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.890962][ T4316] usb 2-1: Product: syz [ 98.902767][ T4316] usb 2-1: Manufacturer: syz [ 98.907553][ T4316] usb 2-1: SerialNumber: syz [ 98.921202][ T4316] usb 2-1: config 0 descriptor?? [ 98.936498][ T4316] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 98.946691][ T4316] dvb-usb: bulk message failed: -22 (2/0) [ 98.972070][ T4316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.997784][ T4316] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 99.014338][ T4316] usb 2-1: media controller created [ 99.046707][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.107805][ T4316] usb 2-1: selecting invalid altsetting 7 [ 99.118468][ T4316] cxusb: set interface failed [ 99.123240][ T4316] dvb-usb: bulk message failed: -22 (1/0) [ 99.144384][ T4540] cxusb: i2c wr: len=79 is too big! [ 99.144384][ T4540] [ 99.233870][ T4544] netlink: 'syz.4.49': attribute type 13 has an invalid length. [ 99.252269][ T4544] netlink: 'syz.4.49': attribute type 17 has an invalid length. [ 99.275437][ T4316] DVB: Unable to find symbol lgdt330x_attach() [ 99.282604][ T4316] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 99.428955][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.456579][ T4316] rc_core: IR keymap rc-dvico-portable not found [ 99.462985][ T4316] Registered IR keymap rc-empty [ 99.490784][ T4544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.516952][ T4316] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 99.566887][ T4316] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 99.598026][ T4316] dvb-usb: schedule remote query interval to 100 msecs. [ 99.605028][ T4316] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 99.614097][ T4498] chnl_net:caif_netlink_parms(): no params data found [ 99.626644][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 99.727121][ T4316] usb 2-1: USB disconnect, device number 5 [ 99.893036][ T4316] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 100.043836][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.086609][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.116776][ T4498] device bridge_slave_0 entered promiscuous mode [ 100.196441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.216440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.226437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.236448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.246429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.256434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.266438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 100.276430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 100.286456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 100.296462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 100.413204][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.454668][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.495986][ T4498] device bridge_slave_1 entered promiscuous mode [ 100.701599][ T4498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.820497][ T4562] device bridge1 entered promiscuous mode [ 100.872703][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.882230][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.892450][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.901121][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.912253][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.919962][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.950339][ T4498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.093893][ T4498] team0: Port device team_slave_0 added [ 101.134260][ T4498] team0: Port device team_slave_1 added [ 101.272104][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.301024][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.368078][ T4498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.457056][ T4498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.464067][ T4498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.563965][ T4498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.706679][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 101.858610][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.045006][ T4498] device hsr_slave_0 entered promiscuous mode [ 102.082292][ T4498] device hsr_slave_1 entered promiscuous mode [ 102.142254][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.362567][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.454180][ T4588] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 102.523136][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.542010][ T4568] chnl_net:caif_netlink_parms(): no params data found [ 102.686478][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.740742][ T4605] process 'syz.1.62' launched './file0' with NULL argv: empty string added [ 102.846840][ T4358] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.900701][ T4313] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.920294][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.961667][ T4313] usb 3-1: config 0 descriptor?? [ 102.986626][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 102.993494][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.015743][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.051579][ T4568] device bridge_slave_0 entered promiscuous mode [ 103.077354][ T4358] usb 5-1: Using ep0 maxpacket: 16 [ 103.090608][ T4358] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 103.144949][ T4358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.166698][ T4358] usb 5-1: config 0 has no interface number 0 [ 103.172972][ T4358] usb 5-1: config 0 interface 64 altsetting 0 has an invalid endpoint with address 0xCC, skipping [ 103.198088][ T4358] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.211471][ T4358] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 103.232339][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.277605][ T4358] usb 5-1: config 0 descriptor?? [ 103.295279][ T4313] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 103.315897][ T4358] usb 5-1: Found UVC 0.00 device (0bd3:0555) [ 103.322973][ T4313] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 103.332638][ T4358] usb 5-1: No valid video chain found. [ 103.338854][ T4313] [drm:udl_init] *ERROR* Selecting channel failed [ 103.368871][ T4313] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 103.376754][ T4313] [drm] Initialized udl on minor 2 [ 103.386290][ T4313] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.402319][ T4313] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 103.414338][ T4313] usb 3-1: USB disconnect, device number 4 [ 103.417093][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.420047][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.420358][ T27] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 103.578897][ C1] sd 0:0:1:0: [sda] tag#610 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 103.589385][ C1] sd 0:0:1:0: [sda] tag#610 CDB: Write(6) 0a 00 00 00 00 00 00 01 00 00 00 00 [ 103.795648][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.803244][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.892871][ T4568] device bridge_slave_1 entered promiscuous mode [ 103.997238][ T4315] usb 5-1: USB disconnect, device number 5 [ 104.246717][ T4568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.332202][ T4568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.592099][ T4568] team0: Port device team_slave_0 added [ 104.681454][ T4568] team0: Port device team_slave_1 added [ 104.938231][ T4568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.955475][ T4568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.993403][ T4568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.019966][ T4498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.067461][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 105.105383][ T4568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.112976][ T4568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.139405][ T4568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.187232][ T4642] device bridge2 entered promiscuous mode [ 105.196903][ T4498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.333702][ T4568] device hsr_slave_0 entered promiscuous mode [ 105.374571][ T4568] device hsr_slave_1 entered promiscuous mode [ 105.412837][ T4568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.421236][ T4568] Cannot create hsr debugfs directory [ 105.429291][ T4498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.478912][ T4498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.981014][ T11] device hsr_slave_0 left promiscuous mode [ 106.011088][ T11] device hsr_slave_1 left promiscuous mode [ 106.041629][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.081996][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.115782][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.152167][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.179645][ T11] device bridge_slave_1 left promiscuous mode [ 106.196072][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.254607][ T11] device bridge_slave_0 left promiscuous mode [ 106.298761][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.498045][ T11] device veth1_macvtap left promiscuous mode [ 106.511162][ T11] device veth0_macvtap left promiscuous mode [ 106.539800][ T11] device veth1_vlan left promiscuous mode [ 106.545682][ T11] device veth0_vlan left promiscuous mode [ 107.147605][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 107.386745][ T4315] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 107.588552][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.614822][ T4315] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.624957][ T4315] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 107.645178][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.665315][ T4315] usb 5-1: config 0 descriptor?? [ 107.906629][ T4646] syz.1.72 (4646): drop_caches: 3 [ 107.952711][ T4649] syz.2.69 (4649): drop_caches: 3 [ 108.282361][ T11] team0 (unregistering): Port device team_slave_1 removed [ 108.457818][ T11] team0 (unregistering): Port device team_slave_0 removed [ 108.494301][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.531149][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.791245][ T11] bond0 (unregistering): Released all slaves [ 109.055361][ T4498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.082320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.091642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.140457][ T4498] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.173838][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.205114][ T4665] fuse: Invalid rootmode [ 109.210299][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.221521][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.228704][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.236672][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 109.275562][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.321852][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.361972][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.392410][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.399640][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.415644][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.516550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.534587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.580532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.615385][ T4665] device ipip0 entered promiscuous mode [ 109.637101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.657271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.705747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.745238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.771237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.797515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.816349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.844556][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.018572][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.218353][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.240203][ T14] usb 5-1: USB disconnect, device number 6 [ 110.290787][ T4568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.395267][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.456980][ T4568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.506620][ T4568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.637506][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.701839][ T4568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.793859][ T4682] device syzkaller0 entered promiscuous mode [ 111.260096][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.277822][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.285677][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.294196][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.301983][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.309563][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.592022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.600525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.684104][ T4498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.765796][ T4568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.850254][ T4568] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.875107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.897997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.028274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.043118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.063274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.088094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.097217][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.104388][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.131248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.217072][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.240690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.261681][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.268914][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.297495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.378178][ T4498] device veth0_vlan entered promiscuous mode [ 112.396279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.411667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.492396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.521835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.552174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.643108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.677563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.712912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.725779][ T4498] device veth1_vlan entered promiscuous mode [ 112.803569][ T4688] chnl_net:caif_netlink_parms(): no params data found [ 112.853097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.897299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.927303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.098861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.128647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.156470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.195147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.216939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.261482][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.386615][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 113.634833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.666601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.730162][ T4498] device veth0_macvtap entered promiscuous mode [ 113.840939][ T4498] device veth1_macvtap entered promiscuous mode [ 113.886599][ T11] device hsr_slave_0 left promiscuous mode [ 113.897026][ T11] device hsr_slave_1 left promiscuous mode [ 113.925848][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.966325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.981176][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.012490][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.051578][ T11] device bridge_slave_1 left promiscuous mode [ 114.082021][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.136146][ T11] device bridge_slave_0 left promiscuous mode [ 114.146996][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.249975][ T11] device veth1_macvtap left promiscuous mode [ 114.289302][ T11] device veth0_macvtap left promiscuous mode [ 114.295504][ T11] device veth1_vlan left promiscuous mode [ 114.302715][ T11] device veth0_vlan left promiscuous mode [ 115.230455][ T11] team0 (unregistering): Port device team_slave_1 removed [ 115.272813][ T11] team0 (unregistering): Port device team_slave_0 removed [ 115.314643][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.368769][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.466898][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 115.778111][ T11] bond0 (unregistering): Released all slaves [ 115.947045][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.975545][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.983685][ T4688] device bridge_slave_0 entered promiscuous mode [ 116.053746][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.064060][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.110920][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.122847][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.134561][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.146155][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.158895][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.167104][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.174255][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.202275][ T4688] device bridge_slave_1 entered promiscuous mode [ 116.226540][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.235473][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.283649][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.315068][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.330457][ T4498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.343823][ T4498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.358292][ T4498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.409934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.459951][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.481110][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.511979][ T4498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.537279][ T4498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.550873][ T4498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.566458][ T4498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.605472][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.649252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.658533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.679711][ T4568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.762291][ T4688] team0: Port device team_slave_0 added [ 116.804487][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.813619][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.871768][ T4688] team0: Port device team_slave_1 added [ 116.912293][ T4751] device syzkaller1 entered promiscuous mode [ 116.969828][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.991809][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.051496][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.066844][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.098474][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.115820][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.133461][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.151770][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.169494][ T4568] device veth0_vlan entered promiscuous mode [ 117.179781][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.188638][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.215055][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.233021][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.248462][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.287645][ T4568] device veth1_vlan entered promiscuous mode [ 117.361214][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.369863][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.432928][ T4688] device hsr_slave_0 entered promiscuous mode [ 117.467379][ T4688] device hsr_slave_1 entered promiscuous mode [ 117.503188][ T4688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.537879][ T4688] Cannot create hsr debugfs directory [ 117.546946][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 117.553510][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.638403][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.647311][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.654954][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.664618][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.672858][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.687175][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.779787][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.814533][ T4568] device veth0_macvtap entered promiscuous mode [ 117.924107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.948720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.962883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.977088][ T4568] device veth1_macvtap entered promiscuous mode [ 118.042543][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.065175][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.081433][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.095750][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.111461][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.122095][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.143144][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.286846][ T4568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.431170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.467174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.519547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.594153][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.728454][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.766507][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.776856][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.797290][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.817657][ T4568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.828621][ T4568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.849551][ T4568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.862490][ T4768] device syzkaller1 entered promiscuous mode [ 119.155386][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.207636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.232742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.280751][ T4568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.309973][ T4568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.346572][ T4568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.366540][ T4568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.626622][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 119.706635][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 119.838109][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.846004][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.987673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.267562][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.275544][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.296036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.312130][ T4765] chnl_net:caif_netlink_parms(): no params data found [ 120.398386][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 120.650025][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.673296][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.733156][ T4765] device bridge_slave_0 entered promiscuous mode [ 120.809148][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.838174][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.885198][ T4765] device bridge_slave_1 entered promiscuous mode [ 121.050459][ T4813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.057808][ T4813] IPv6: NLM_F_CREATE should be set when creating new route [ 121.065131][ T4813] IPv6: NLM_F_CREATE should be set when creating new route [ 121.134644][ T4688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.256302][ T4765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.265853][ T4312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.301389][ T4688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.374709][ T4765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.409518][ T4688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.459437][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 121.468657][ T4312] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 121.542553][ T4688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.554366][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.564427][ T4765] team0: Port device team_slave_0 added [ 121.599755][ T4312] usb 4-1: config 0 descriptor?? [ 121.684163][ T4765] team0: Port device team_slave_1 added [ 121.786853][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 121.953065][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.970478][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.018621][ T4765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.034539][ T4765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.042909][ T4765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.102356][ T4765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.590275][ T4765] device hsr_slave_0 entered promiscuous mode [ 122.633293][ T4765] device hsr_slave_1 entered promiscuous mode [ 122.650665][ T4765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.684084][ T4765] Cannot create hsr debugfs directory [ 122.804454][ T11] device hsr_slave_0 left promiscuous mode [ 122.823529][ T11] device hsr_slave_1 left promiscuous mode [ 122.851255][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.872166][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.892015][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.915422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.944853][ T11] device bridge_slave_1 left promiscuous mode [ 122.972058][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.018078][ T11] device bridge_slave_0 left promiscuous mode [ 123.043487][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.183881][ T11] device veth1_macvtap left promiscuous mode [ 123.214911][ T11] device veth0_macvtap left promiscuous mode [ 123.250276][ T11] device veth1_vlan left promiscuous mode [ 123.278593][ T11] device veth0_vlan left promiscuous mode [ 123.791880][ T4312] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 123.862261][ T4312] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 123.877462][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 123.916584][ T4312] dib0700: firmware download failed at 7 with -22 [ 123.973475][ T4312] usb 4-1: USB disconnect, device number 2 [ 124.144223][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.157700][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.165952][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.194704][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.210134][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.217976][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.810616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 124.851338][ T11] team0 (unregistering): Port device team_slave_0 removed [ 124.884841][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.923486][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.171990][ T11] bond0 (unregistering): Released all slaves [ 125.293868][ T4852] netlink: 'syz.3.102': attribute type 6 has an invalid length. [ 125.314296][ T4852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.102'. [ 125.377801][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.430779][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.447413][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.463086][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.512925][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.528808][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.564809][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.571985][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.628466][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.644872][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.665808][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.697066][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.704228][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.751943][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.814479][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.833745][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.848780][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.898098][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.924816][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.948560][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 126.036120][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.072069][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.104166][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.137358][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.200573][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.266620][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 126.282502][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.830499][ T4888] device syzkaller1 entered promiscuous mode [ 126.892440][ T4851] chnl_net:caif_netlink_parms(): no params data found [ 127.128204][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.153146][ T4895] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.416584][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.650609][ T4906] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.665222][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.739530][ T4765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.769517][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.794874][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.835413][ T4851] device bridge_slave_0 entered promiscuous mode [ 127.869395][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.905910][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.922700][ T4851] device bridge_slave_1 entered promiscuous mode [ 127.957898][ T4765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.110597][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.186336][ T4765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.233940][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.264795][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.274527][ T4765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.320331][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.339788][ T4851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.349529][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 128.411243][ T4851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.544755][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.579190][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.657777][ T4851] team0: Port device team_slave_0 added [ 128.682038][ T4851] team0: Port device team_slave_1 added [ 128.768623][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.827702][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.896734][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.905239][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.923810][ T4688] device veth0_vlan entered promiscuous mode [ 128.959772][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.997191][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.094910][ T4851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.140085][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.156424][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.226826][ T4851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.374321][ T4688] device veth1_vlan entered promiscuous mode [ 129.544010][ T4851] device hsr_slave_0 entered promiscuous mode [ 129.571020][ T4851] device hsr_slave_1 entered promiscuous mode [ 129.583366][ T4851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.591886][ T4851] Cannot create hsr debugfs directory [ 129.644273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.655977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.735079][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.747679][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.436513][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 130.666207][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.675618][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.684062][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.692401][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.701616][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.710666][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.533134][ T4765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.681935][ T4688] device veth0_macvtap entered promiscuous mode [ 131.704453][ T4688] device veth1_macvtap entered promiscuous mode [ 131.797433][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.805548][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.891839][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.915924][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.927396][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.941823][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.951972][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.962771][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.000754][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.014827][ T4765] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.039059][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.050865][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.074819][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.086259][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.097232][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.109657][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.121905][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.133020][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.144737][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.176359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.185354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.199894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.209889][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.220333][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.227541][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.237133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.264243][ T4688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.282408][ T4688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.292886][ T4688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.306039][ T4688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.365651][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.377915][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.389229][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.396455][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.461759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.470831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.518123][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 132.545223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.561079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.570369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.582890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.591846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.697699][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.705581][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.733303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.750248][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756654][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 132.766944][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.806058][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.814779][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.825947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.034072][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.072931][ T4825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.094261][ T4825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.160732][ T11] device hsr_slave_0 left promiscuous mode [ 133.203329][ T11] device hsr_slave_1 left promiscuous mode [ 133.220686][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.236578][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.259886][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.270974][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.295324][ T11] device bridge_slave_1 left promiscuous mode [ 133.304372][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.346327][ T11] device bridge_slave_0 left promiscuous mode [ 133.367041][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.441151][ T11] device veth1_macvtap left promiscuous mode [ 133.454764][ T11] device veth0_macvtap left promiscuous mode [ 133.461196][ T11] device veth1_vlan left promiscuous mode [ 133.474296][ T11] device veth0_vlan left promiscuous mode [ 134.036166][ T11] team0 (unregistering): Port device team_slave_1 removed [ 134.073218][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.105923][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.144812][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.385068][ T11] bond0 (unregistering): Released all slaves [ 134.468172][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.490617][ T4941] chnl_net:caif_netlink_parms(): no params data found [ 134.802604][ T4851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.830083][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 134.876818][ T4851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.915372][ T4851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.956192][ T4941] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.993601][ T4941] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.010105][ T4941] device bridge_slave_0 entered promiscuous mode [ 135.024531][ T4851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.070351][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.079197][ T4941] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.088805][ T4941] device bridge_slave_1 entered promiscuous mode [ 135.103725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.139077][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.163492][ T4765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.242800][ T4941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.349699][ T4941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.502826][ T4941] team0: Port device team_slave_0 added [ 135.528077][ T4851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.558090][ T4941] team0: Port device team_slave_1 added [ 135.663878][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.729799][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.746883][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.779677][ T4941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.804218][ T4941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.881179][ T4941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.913008][ T4851] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.941637][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.964887][ T4941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.987613][ T4941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.048267][ T4941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.105051][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.134759][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.157267][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.205755][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.212953][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.275736][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.307171][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.336646][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.343769][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.385665][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.394320][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.537340][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.686999][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.729796][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.778541][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.807705][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.827103][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.859780][ T4941] device hsr_slave_0 entered promiscuous mode [ 136.907328][ T4941] device hsr_slave_1 entered promiscuous mode [ 136.917001][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 136.945775][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.006166][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.014973][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.023912][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.043483][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.069545][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.095399][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.107036][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.246533][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.267460][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.303855][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.327052][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.391717][ T4765] device veth0_vlan entered promiscuous mode [ 137.456330][ T4765] device veth1_vlan entered promiscuous mode [ 137.694610][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.725152][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.846755][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.855855][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.924388][ T4765] device veth0_macvtap entered promiscuous mode [ 137.991391][ T4765] device veth1_macvtap entered promiscuous mode [ 138.034688][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.062654][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.084107][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.115600][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.175323][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.214710][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.261364][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.366732][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.377417][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.415688][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.439177][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.479429][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.490879][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.500694][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.509813][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.518122][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.537045][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.546709][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.554174][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.565383][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.596492][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.616568][ T4765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.676764][ T4765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.786558][ T4765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.856503][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.874564][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.898112][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.905812][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.938015][ T4765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.954684][ T4765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.974995][ T4765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.986719][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 139.011755][ T4765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.042925][ T4851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.187170][ T4941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.265508][ T4941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.352448][ T4941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.367522][ T4941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.411697][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.426702][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.481949][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.513323][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.526552][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.623297][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.636311][ T4851] device veth0_vlan entered promiscuous mode [ 139.659905][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.679552][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.702015][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.712140][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.760901][ T126] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 139.776293][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.783735][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.785192][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.813397][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.841542][ T4851] device veth1_vlan entered promiscuous mode [ 139.870327][ T11] device hsr_slave_0 left promiscuous mode [ 139.885483][ T126] usb 3-1: config 0 descriptor?? [ 139.898262][ T11] device hsr_slave_1 left promiscuous mode [ 139.919013][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.931223][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.962091][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.973400][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.990125][ T11] device bridge_slave_1 left promiscuous mode [ 140.007522][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.016172][ T11] device bridge_slave_0 left promiscuous mode [ 140.025203][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.055520][ T11] device veth1_macvtap left promiscuous mode [ 140.063675][ T11] device veth0_macvtap left promiscuous mode [ 140.070066][ T11] device veth1_vlan left promiscuous mode [ 140.075982][ T11] device veth0_vlan left promiscuous mode [ 140.286776][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 140.312518][ T126] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 140.321399][ T126] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 140.331065][ T126] [drm:udl_init] *ERROR* Selecting channel failed [ 140.357275][ T126] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 140.365093][ T126] [drm] Initialized udl on minor 2 [ 140.374199][ T126] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 140.382731][ T126] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 140.399325][ T126] usb 3-1: USB disconnect, device number 5 [ 140.418683][ T4312] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 140.431422][ T4312] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 140.440228][ T4312] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 140.502417][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.518870][ T7] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 140.532509][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.539478][ T7] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 140.548915][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.568185][ T7] usb 5-1: config 0 descriptor?? [ 140.601034][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 140.789601][ T7] usb 5-1: string descriptor 0 read error: -71 [ 140.799727][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 140.811080][ T7] usb 5-1: USB disconnect, device number 7 [ 140.826720][ T11] team0 (unregistering): Port device team_slave_1 removed [ 140.917706][ T11] team0 (unregistering): Port device team_slave_0 removed [ 140.978373][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.030209][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.278772][ T11] bond0 (unregistering): Released all slaves [ 141.366616][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.384382][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.395167][ T5040] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 141.421563][ T5017] chnl_net:caif_netlink_parms(): no params data found [ 141.444415][ T5037] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 141.563094][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 141.571803][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.583541][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.593901][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.611218][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 141.622954][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.640445][ T7] usb 3-1: config 0 descriptor?? [ 142.002375][ T4851] device veth0_macvtap entered promiscuous mode [ 142.017697][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.043713][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.100058][ T4851] device veth1_macvtap entered promiscuous mode [ 142.131636][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.142074][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.170251][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.182170][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.201430][ T5017] device bridge_slave_0 entered promiscuous mode [ 142.234006][ T4941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.245552][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.268536][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.279247][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.291739][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.298865][ T7] hid-generic 0003:045E:FC40.0001: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.2-1/input0 [ 142.315353][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.326243][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.338499][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.350051][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.375848][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.411589][ T5017] device bridge_slave_1 entered promiscuous mode [ 142.431768][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.468096][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.540479][ T4316] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 142.543100][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.589926][ T4316] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 142.622746][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.666698][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 142.686490][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.725770][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.743290][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.760647][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.776103][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.791114][ T5037] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 142.803610][ T5037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 142.901096][ T5037] team0: Port device geneve0 added [ 143.024059][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.042367][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.056277][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.088805][ T4851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.099096][ T4851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.108272][ T4851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.131859][ T4851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.162403][ T4941] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.182688][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.199095][ T5063] fuse: Bad value for 'fd' [ 143.217482][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.231390][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.313800][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.331294][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.342256][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.349534][ T4825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.365106][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.374539][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.410114][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.417347][ T4825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.427142][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.466010][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.494832][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.534486][ T5017] team0: Port device team_slave_0 added [ 143.572395][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.597013][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.622020][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.650688][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.670154][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.688089][ T5017] team0: Port device team_slave_1 added [ 143.709061][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.721352][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.748760][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.756613][ T4358] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.771711][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.784377][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.820251][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.839366][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.894621][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.914227][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.925872][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.946074][ T4358] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 143.969942][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.976621][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.020867][ T4358] usb 5-1: Product: syz [ 144.038255][ T4358] usb 5-1: Manufacturer: syz [ 144.039484][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.042890][ T4358] usb 5-1: SerialNumber: syz [ 144.103813][ T4358] usb 5-1: config 0 descriptor?? [ 144.131279][ T7] usb 3-1: USB disconnect, device number 6 [ 144.158095][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.169302][ T4358] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.180332][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.209019][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.240975][ T4358] hub: probe of 5-1:0.0 failed with error -5 [ 144.310258][ T5072] fuse: Bad value for 'rootmode' [ 144.326487][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.354473][ T26] kauditd_printk_skb: 717 callbacks suppressed [ 144.354486][ T26] audit: type=1326 audit(1777056426.128:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 144.404210][ T4358] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 144.434233][ T4358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.481932][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.493247][ T4358] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 144.508810][ T26] audit: type=1326 audit(1777056426.158:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 144.531643][ T4358] usb 5-1: media controller created [ 144.546034][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.610640][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.635191][ T4358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.668720][ T26] audit: type=1326 audit(1777056426.168:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 144.694427][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.721456][ T26] audit: type=1326 audit(1777056426.168:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdc979cb42 code=0x7ffc0000 [ 144.751739][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 144.769685][ T26] audit: type=1326 audit(1777056426.188:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdc979cb42 code=0x7ffc0000 [ 144.802900][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.823240][ T5017] device hsr_slave_0 entered promiscuous mode [ 144.830805][ T5017] device hsr_slave_1 entered promiscuous mode [ 144.841426][ T5017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.852972][ T26] audit: type=1326 audit(1777056426.198:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 144.922296][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.960162][ T26] audit: type=1326 audit(1777056426.228:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 144.996543][ T5017] Cannot create hsr debugfs directory [ 145.075910][ T26] audit: type=1326 audit(1777056426.278:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 145.110179][ T4358] DVB: Unable to find symbol dib7000p_attach() [ 145.125394][ T4358] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 145.137420][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 145.149007][ T126] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 145.190862][ T26] audit: type=1326 audit(1777056426.278:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 145.215680][ T5081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.101'. [ 145.236457][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.261297][ T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.294572][ T26] audit: type=1326 audit(1777056426.278:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc979cdd9 code=0x7ffc0000 [ 145.317435][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.326216][ T126] usb 3-1: Product: syz [ 145.330786][ T126] usb 3-1: Manufacturer: syz [ 145.335499][ T126] usb 3-1: SerialNumber: syz [ 145.416801][ T4358] rc_core: IR keymap rc-dib0700-rc5 not found [ 145.423252][ T4358] Registered IR keymap rc-empty [ 145.447725][ T4358] dvb-usb: could not initialize remote control. [ 145.459969][ T4358] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 145.537489][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.588866][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.618085][ T126] usb 3-1: 0:2 : does not exist [ 145.668821][ T4941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.688642][ T126] usb 3-1: USB disconnect, device number 7 [ 145.924617][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.964559][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.059558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.102862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.123239][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.130232][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.139345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.153169][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.159655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.159982][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.195520][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.201966][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.244679][ T4941] device veth0_vlan entered promiscuous mode [ 146.256763][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.263785][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.352651][ T4941] device veth1_vlan entered promiscuous mode [ 146.402296][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.409324][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.521564][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.560500][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.567129][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.674280][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.680821][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.712687][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.719233][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.733294][ T126] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 146.752274][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.775049][ T126] usb 1-1: Product: syz [ 146.785177][ T126] usb 1-1: Manufacturer: syz [ 146.785490][ T5086] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.796288][ T5086] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.809077][ T126] usb 1-1: SerialNumber: syz [ 146.821864][ T126] usb 1-1: config 0 descriptor?? [ 146.828905][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 146.846815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.858788][ T126] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 146.870300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.879733][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.890654][ T126] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 146.900490][ T126] usb 1-1: media controller created [ 146.906960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.931139][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.949897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.979791][ T4941] device veth0_macvtap entered promiscuous mode [ 147.096453][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.111976][ T4941] device veth1_macvtap entered promiscuous mode [ 147.146924][ T126] DVB: Unable to find symbol mt352_attach() [ 147.228114][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.244832][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.254797][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.272127][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.337373][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.390414][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.406683][ T126] DVB: Unable to find symbol nxt6000_attach() [ 147.420651][ T126] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 147.446526][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.472045][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.493102][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 147.519377][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.556857][ T126] dvb-usb: schedule remote query interval to 1000 msecs. [ 147.563921][ T126] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 147.574370][ T5017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.624888][ T126] dvb-usb: bulk message failed: -22 (7/0) [ 147.643301][ T126] dvb-usb: bulk message failed: -22 (7/0) [ 147.679701][ T126] usb 1-1: USB disconnect, device number 2 [ 147.744305][ T5017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.840077][ T126] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 147.919513][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.947944][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.993787][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.020696][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.071491][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.092361][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.130492][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.155642][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.176741][ T4337] usb 5-1: USB disconnect, device number 8 [ 148.223886][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.244767][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.289749][ T4337] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 148.325206][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.342663][ T5017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.427654][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.442995][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.469843][ T4941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.493229][ T4941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.509350][ T4941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.532103][ T4941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.545245][ T5109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.134'. [ 148.555830][ T5017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.940102][ T5124] capability: warning: `syz.4.136' uses 32-bit capabilities (legacy support in use) [ 149.116463][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.323919][ T11] device hsr_slave_0 left promiscuous mode [ 149.333283][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 149.349929][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 149.393824][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 149.425213][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 149.457148][ T11] device hsr_slave_1 left promiscuous mode [ 149.465465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.474113][ T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 149.524063][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.531758][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.571935][ T7] usb 1-1: Product: syz [ 149.582934][ T7] usb 1-1: Manufacturer: syz [ 149.612505][ T7] usb 1-1: SerialNumber: syz [ 149.625193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.644922][ T7] usb 1-1: config 0 descriptor?? [ 149.658007][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.691484][ T11] device bridge_slave_1 left promiscuous mode [ 149.768318][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.862862][ T11] device bridge_slave_0 left promiscuous mode [ 149.881070][ T7] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 149.904361][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.060613][ T11] device veth1_macvtap left promiscuous mode [ 150.080972][ T7] usb 1-1: USB disconnect, device number 3 [ 150.102964][ T11] device veth0_macvtap left promiscuous mode [ 150.138520][ T11] device veth1_vlan left promiscuous mode [ 150.147092][ T11] device veth0_vlan left promiscuous mode [ 151.741188][ T5147] syz.0.139 (5147): drop_caches: 3 [ 152.070079][ T11] team0 (unregistering): Port device team_slave_1 removed [ 152.129078][ T11] team0 (unregistering): Port device team_slave_0 removed [ 152.205612][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.305914][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.683260][ T11] bond0 (unregistering): Released all slaves [ 152.926524][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.939623][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.955232][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.024867][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.040573][ T5158] netlink: 'syz.2.141': attribute type 6 has an invalid length. [ 153.049310][ T5158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'. [ 153.075066][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.077530][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.109179][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.124031][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.145416][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.161747][ T5017] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.190842][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.206765][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.232148][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.239362][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.261944][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.282582][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 153.282601][ T26] audit: type=1326 audit(1777056435.058:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.325830][ T26] audit: type=1326 audit(1777056435.098:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.355221][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.364935][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.375056][ T26] audit: type=1326 audit(1777056435.158:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.415716][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.422935][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.440509][ T26] audit: type=1326 audit(1777056435.158:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.467129][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.515661][ T26] audit: type=1326 audit(1777056435.158:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.566619][ T26] audit: type=1326 audit(1777056435.158:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.610317][ T5162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.142'. [ 153.646217][ T26] audit: type=1326 audit(1777056435.158:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.683777][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.711934][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.755066][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.793805][ T26] audit: type=1326 audit(1777056435.158:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.796319][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.864967][ T26] audit: type=1326 audit(1777056435.158:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.945740][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.965174][ T26] audit: type=1326 audit(1777056435.158:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 153.987349][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.996222][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.057650][ T5165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 154.078093][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.132962][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.163535][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.320394][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.087362][ T5184] net_ratelimit: 186 callbacks suppressed [ 155.087381][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.099742][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.107228][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.113635][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.171408][ T5186] netlink: 52 bytes leftover after parsing attributes in process `syz.2.147'. [ 155.235186][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.241710][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.393687][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.400211][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.531911][ T5184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 155.538463][ T5184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 155.597725][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.615968][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.662210][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.777160][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.787201][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.917144][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.931705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.956637][ T5017] device veth0_vlan entered promiscuous mode [ 155.967225][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.002813][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.037622][ T5017] device veth1_vlan entered promiscuous mode [ 156.105268][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.122446][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.172122][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.196153][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.255547][ T5017] device veth0_macvtap entered promiscuous mode [ 156.274752][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.296255][ T5199] sctp: [Deprecated]: syz.0.149 (pid 5199) Use of int in max_burst socket option. [ 156.296255][ T5199] Use struct sctp_assoc_value instead [ 156.349578][ T5017] device veth1_macvtap entered promiscuous mode [ 156.395035][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.415761][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.439029][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.481663][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.504623][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.526278][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.542213][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.558722][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.599687][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.617722][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.644215][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.686690][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.730492][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.763801][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.798237][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.820570][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.841723][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.869865][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.894614][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.927470][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.935585][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.963954][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.005271][ T5017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.029004][ T5017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.050956][ T5017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.076275][ T5017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.274479][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.299292][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.350046][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.406422][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.424989][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.462692][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.956502][ T4312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.146641][ T4312] usb 1-1: Using ep0 maxpacket: 16 [ 158.160094][ T4312] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 158.190447][ T4312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.219154][ T4312] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.242596][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.332704][ T4312] usb 1-1: Product: syz [ 158.359356][ T4312] usb 1-1: Manufacturer: syz [ 158.365348][ T4312] usb 1-1: SerialNumber: syz [ 158.406511][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 158.406525][ T26] audit: type=1326 audit(1777056440.178:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9379ca6b code=0x7ffc0000 [ 158.496935][ T26] audit: type=1326 audit(1777056440.178:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9379ca6b code=0x7ffc0000 [ 158.547327][ C1] sd 0:0:1:0: [sda] tag#603 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 158.557662][ C1] sd 0:0:1:0: [sda] tag#603 CDB: Read(6) 08 00 00 00 61 6c 6c 65 72 00 00 00 [ 158.584284][ T26] audit: type=1326 audit(1777056440.218:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9379ca6b code=0x7ffc0000 [ 158.650477][ T4312] usb 1-1: 0:2 : does not exist [ 158.655999][ T5218] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 158.701413][ T26] audit: type=1326 audit(1777056440.218:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e9375d60e code=0x7ffc0000 [ 158.723705][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.807774][ T4312] usb 1-1: USB disconnect, device number 4 [ 158.834200][ T26] audit: type=1326 audit(1777056440.418:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 158.888142][ T26] audit: type=1326 audit(1777056440.418:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x7ffc0000 [ 160.020637][ T26] audit: type=1326 audit(1777056441.788:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b0b9cdd9 code=0x7ffc0000 [ 160.226178][ T5235] netlink: 52 bytes leftover after parsing attributes in process `syz.3.159'. [ 160.333127][ T26] audit: type=1326 audit(1777056441.878:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6b0b9cdd9 code=0x7ffc0000 [ 160.476847][ T5238] net_ratelimit: 194 callbacks suppressed [ 160.476865][ T5238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.489175][ T5238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.527001][ T26] audit: type=1326 audit(1777056441.878:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b0b9cdd9 code=0x7ffc0000 [ 160.561078][ T5238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.567717][ T5238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.574554][ T26] audit: type=1326 audit(1777056441.938:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.3.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6b0b9cdd9 code=0x7ffc0000 [ 160.612571][ T5238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.619044][ T5238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.689158][ T5238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.695625][ T5238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.741508][ T5238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.747978][ T5238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.835722][ T5239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 162.295427][ T5263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.167'. [ 163.509084][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.173'. [ 164.153778][ T5293] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 165.096661][ T4337] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.296594][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 165.303844][ T4337] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.396565][ T4337] usb 3-1: config 0 has no interface number 0 [ 165.402811][ T4337] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.515511][ T4337] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.578480][ T4337] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.657980][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.809194][ T4337] usb 3-1: Product: syz [ 165.842437][ T4337] usb 3-1: SerialNumber: syz [ 165.924266][ T4337] usb 3-1: config 0 descriptor?? [ 165.985432][ T4337] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 166.044434][ T4337] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 166.088635][ T26] kauditd_printk_skb: 108 callbacks suppressed [ 166.088649][ T26] audit: type=1326 audit(1777056447.868:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e9379cdd9 code=0x0 [ 166.204785][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.213066][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.220861][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.228594][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.236447][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.243908][ T4337] usb 3-1: USB disconnect, device number 8 [ 166.251784][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.258765][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 166.275857][ T4337] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 166.292513][ T5311] fuse: Invalid rootmode [ 166.435241][ T5311] device ipip0 entered promiscuous mode [ 166.502435][ T5318] net_ratelimit: 398 callbacks suppressed [ 166.502448][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.514743][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.573964][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.580526][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.593340][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.599814][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.618313][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.624763][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.638419][ T5318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.644835][ T5318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.836483][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.030518][ T126] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 167.070449][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.112481][ T126] usb 4-1: Product: syz [ 167.137408][ T126] usb 4-1: Manufacturer: syz [ 167.157692][ T126] usb 4-1: SerialNumber: syz [ 167.197129][ T126] usb 4-1: config 0 descriptor?? [ 167.227785][ T126] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 167.301589][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.415186][ T126] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 167.486124][ T126] usb 4-1: media controller created [ 167.514487][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.613790][ T5336] fuse: Bad value for 'fd' [ 167.754424][ T126] DVB: Unable to find symbol mt352_attach() [ 167.941450][ T126] DVB: Unable to find symbol nxt6000_attach() [ 167.956756][ T126] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 168.025522][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 168.148477][ T126] dvb-usb: schedule remote query interval to 1000 msecs. [ 168.166589][ T4312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.209647][ T126] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 168.254006][ T126] dvb-usb: bulk message failed: -22 (7/0) [ 168.260247][ T126] dvb-usb: bulk message failed: -22 (7/0) [ 168.292010][ T126] usb 4-1: USB disconnect, device number 3 [ 168.369406][ T126] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 168.385322][ T4312] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 168.403616][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.422249][ T4312] usb 1-1: Product: syz [ 168.441234][ T4312] usb 1-1: Manufacturer: syz [ 168.451298][ T4312] usb 1-1: SerialNumber: syz [ 168.473376][ T3598] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.481725][ T4312] usb 1-1: config 0 descriptor?? [ 168.513620][ T4312] hub 1-1:0.0: bad descriptor, ignoring hub [ 168.530020][ T4312] hub: probe of 1-1:0.0 failed with error -5 [ 168.667093][ T3598] usb 5-1: Using ep0 maxpacket: 32 [ 168.687128][ T3598] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.698883][ T4312] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 168.723405][ T4312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.733123][ T3598] usb 5-1: config 0 has no interface number 0 [ 168.763817][ T4312] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 168.773744][ T3598] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 168.791956][ T4312] usb 1-1: media controller created [ 168.833340][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.885943][ T3598] usb 5-1: Product: syz [ 168.909203][ T3598] usb 5-1: Manufacturer: syz [ 168.917212][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.951577][ T3598] usb 5-1: SerialNumber: syz [ 169.061816][ T3598] usb 5-1: config 0 descriptor?? [ 169.128935][ T3598] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 169.198445][ T3598] usb 5-1: selecting invalid altsetting 1 [ 169.232478][ T3598] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 169.354264][ T3598] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.418394][ T3598] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 169.447240][ T4337] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.461746][ T3598] usb 5-1: media controller created [ 169.503727][ T4312] DVB: Unable to find symbol dib7000p_attach() [ 169.514952][ T4312] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 169.640559][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.645962][ T4337] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 169.692605][ T4337] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.752517][ T4337] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.807771][ T4337] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.843468][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.905673][ T4337] usb 3-1: invalid MIDI out EP 0 [ 169.966667][ T4312] rc_core: IR keymap rc-dib0700-rc5 not found [ 169.976318][ T4312] Registered IR keymap rc-empty [ 170.108640][ T4337] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 170.281272][ T5361] udevd[5361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.917369][ T3598] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 170.948733][ T4313] usb 3-1: USB disconnect, device number 9 [ 170.966604][ T3598] zl10353_read_register: readreg error (reg=127, ret==-110) [ 172.931361][ T5380] net_ratelimit: 195 callbacks suppressed [ 172.931380][ T5380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 172.943686][ T5380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.029480][ T5380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.035987][ T5380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.116579][ T5380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.123064][ T5380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.203002][ T5380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.209528][ T5380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.236591][ T5380] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.243041][ T5380] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.296684][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.511533][ T4315] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 173.532374][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.561356][ T4315] usb 4-1: Product: syz [ 173.578462][ T4315] usb 4-1: Manufacturer: syz [ 173.594722][ T4315] usb 4-1: SerialNumber: syz [ 173.633906][ T4315] usb 4-1: config 0 descriptor?? [ 173.655474][ T4315] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 173.685838][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.697965][ T4315] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 173.712337][ T4315] usb 4-1: media controller created [ 173.740159][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.902356][ T4315] DVB: Unable to find symbol mt352_attach() [ 173.949239][ T4312] dvb-usb: could not initialize remote control. [ 173.955665][ T5342] ------------[ cut here ]------------ [ 173.961632][ T5342] usb 1-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 174.006468][ T4312] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 174.017186][ T5342] WARNING: CPU: 1 PID: 5342 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11ae/0x1920 [ 174.027167][ T5342] Modules linked in: [ 174.031132][ T5342] CPU: 1 PID: 5342 Comm: syz.4.190 Not tainted syzkaller #0 [ 174.038612][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.048787][ T5342] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 174.054490][ T5342] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 20 ac 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 09 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 174.074243][ T5342] RSP: 0018:ffffc90003dc7868 EFLAGS: 00010246 [ 174.080620][ T5342] RAX: e63fb2de4d4fbc00 RBX: ffff88801f647500 RCX: 0000000000080000 [ 174.088667][ T5342] RDX: ffffc90012ba1000 RSI: 0000000000004df2 RDI: 0000000000004df3 [ 174.096686][ T5342] RBP: 1ffff1100fc3bee1 R08: ffffc90003dc74e7 R09: 1ffff920007b8e9c [ 174.104697][ T5342] R10: dffffc0000000000 R11: fffff520007b8e9d R12: ffff88805c961870 [ 174.112713][ T5342] R13: ffff888027ac40f8 R14: 0000000080000580 R15: ffff88807e1df708 [ 174.120723][ T5342] FS: 00007f277367f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 174.129693][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.136287][ T5342] CR2: 00007fcdca5456b8 CR3: 0000000077a59000 CR4: 00000000003506e0 [ 174.144298][ T5342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.152307][ T5342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.160314][ T5342] Call Trace: [ 174.163612][ T5342] [ 174.166613][ T5342] usb_start_wait_urb+0x13c/0x580 [ 174.171665][ T5342] ? usb_api_blocking_completion+0xb0/0xb0 [ 174.177624][ T5342] usb_control_msg+0x231/0x3e0 [ 174.182423][ T5342] dib0700_i2c_xfer+0xbc8/0xf90 [ 174.187344][ T5342] ? rt_mutex_slowlock+0x395/0x740 [ 174.192470][ T5342] ? dib0700_set_gpio+0x1f0/0x1f0 [ 174.197533][ T5342] __i2c_transfer+0x880/0x22b0 [ 174.202351][ T5342] ? i2c_cmd+0x110/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.206690][ T5342] ? __might_fault+0xa6/0x120 [ 174.211417][ T5342] ? i2c_transfer+0x117/0x3a0 [ 174.216117][ T5342] i2c_transfer+0x25d/0x3a0 [ 174.220699][ T5342] ? __i2c_transfer+0x22b0/0x22b0 [ 174.225784][ T5342] ? __might_fault+0xc2/0x120 [ 174.230541][ T5342] ? __might_fault+0xa6/0x120 [ 174.235240][ T5342] ? _copy_from_user+0x10b/0x170 [ 174.240249][ T5342] i2cdev_ioctl_rdwr+0x3dc/0x6d0 [ 174.245217][ T5342] i2cdev_ioctl+0x610/0x7b0 [ 174.249775][ T5342] ? i2cdev_write+0x120/0x120 [ 174.254482][ T5342] ? bpf_lsm_file_ioctl+0x5/0x10 [ 174.259471][ T5342] ? security_file_ioctl+0x7c/0xa0 [ 174.264621][ T5342] ? i2cdev_write+0x120/0x120 [ 174.269371][ T5342] __se_sys_ioctl+0xfa/0x170 [ 174.274461][ T5342] do_syscall_64+0x4c/0xa0 [ 174.278936][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 174.283640][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 174.288371][ T5342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.294296][ T5342] RIP: 0033:0x7f277279cdd9 [ 174.298789][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.318446][ T5342] RSP: 002b:00007f277367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.326918][ T5342] RAX: ffffffffffffffda RBX: 00007f2772a15fa0 RCX: 00007f277279cdd9 [ 174.334905][ T5342] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 174.342916][ T5342] RBP: 00007f2772832d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.350938][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.358947][ T5342] R13: 00007f2772a16038 R14: 00007f2772a15fa0 R15: 00007ffeb28ba768 [ 174.367006][ T5342] [ 174.370049][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.377333][ T5342] CPU: 1 PID: 5342 Comm: syz.4.190 Not tainted syzkaller #0 [ 174.384623][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.394684][ T5342] Call Trace: [ 174.397968][ T5342] [ 174.400940][ T5342] dump_stack_lvl+0x188/0x24e [ 174.405664][ T5342] ? memcpy+0x3c/0x60 [ 174.409665][ T5342] ? show_regs_print_info+0x12/0x12 [ 174.414904][ T5342] ? load_image+0x400/0x400 [ 174.419429][ T5342] panic+0x2e5/0x730 [ 174.423348][ T5342] ? bpf_jit_dump+0xd0/0xd0 [ 174.427886][ T5342] __warn+0x2f8/0x4f0 [ 174.431890][ T5342] ? usb_submit_urb+0x11ae/0x1920 [ 174.436927][ T5342] ? usb_submit_urb+0x11ae/0x1920 [ 174.442048][ T5342] report_bug+0x2ba/0x4f0 [ 174.446461][ T5342] ? usb_submit_urb+0x11ae/0x1920 [ 174.451524][ T5342] handle_bug+0x3a/0x70 [ 174.455725][ T5342] exc_invalid_op+0x16/0x40 [ 174.460250][ T5342] asm_exc_invalid_op+0x16/0x20 [ 174.465123][ T5342] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 174.470795][ T5342] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 20 ac 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 09 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 174.490426][ T5342] RSP: 0018:ffffc90003dc7868 EFLAGS: 00010246 [ 174.496525][ T5342] RAX: e63fb2de4d4fbc00 RBX: ffff88801f647500 RCX: 0000000000080000 [ 174.504508][ T5342] RDX: ffffc90012ba1000 RSI: 0000000000004df2 RDI: 0000000000004df3 [ 174.512504][ T5342] RBP: 1ffff1100fc3bee1 R08: ffffc90003dc74e7 R09: 1ffff920007b8e9c [ 174.520496][ T5342] R10: dffffc0000000000 R11: fffff520007b8e9d R12: ffff88805c961870 [ 174.528492][ T5342] R13: ffff888027ac40f8 R14: 0000000080000580 R15: ffff88807e1df708 [ 174.536501][ T5342] ? usb_submit_urb+0x11ae/0x1920 [ 174.541570][ T5342] usb_start_wait_urb+0x13c/0x580 [ 174.546629][ T5342] ? usb_api_blocking_completion+0xb0/0xb0 [ 174.552481][ T5342] usb_control_msg+0x231/0x3e0 [ 174.557254][ T5342] dib0700_i2c_xfer+0xbc8/0xf90 [ 174.562165][ T5342] ? rt_mutex_slowlock+0x395/0x740 [ 174.567305][ T5342] ? dib0700_set_gpio+0x1f0/0x1f0 [ 174.572375][ T5342] __i2c_transfer+0x880/0x22b0 [ 174.577167][ T5342] ? i2c_cmd+0x110/0x110 [ 174.581418][ T5342] ? __might_fault+0xa6/0x120 [ 174.586105][ T5342] ? i2c_transfer+0x117/0x3a0 [ 174.590795][ T5342] i2c_transfer+0x25d/0x3a0 [ 174.595337][ T5342] ? __i2c_transfer+0x22b0/0x22b0 [ 174.600388][ T5342] ? __might_fault+0xc2/0x120 [ 174.605085][ T5342] ? __might_fault+0xa6/0x120 [ 174.609779][ T5342] ? _copy_from_user+0x10b/0x170 [ 174.614741][ T5342] i2cdev_ioctl_rdwr+0x3dc/0x6d0 [ 174.619700][ T5342] i2cdev_ioctl+0x610/0x7b0 [ 174.624219][ T5342] ? i2cdev_write+0x120/0x120 [ 174.628915][ T5342] ? bpf_lsm_file_ioctl+0x5/0x10 [ 174.633870][ T5342] ? security_file_ioctl+0x7c/0xa0 [ 174.638994][ T5342] ? i2cdev_write+0x120/0x120 [ 174.643683][ T5342] __se_sys_ioctl+0xfa/0x170 [ 174.648303][ T5342] do_syscall_64+0x4c/0xa0 [ 174.652732][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 174.657453][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 174.662158][ T5342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.668060][ T5342] RIP: 0033:0x7f277279cdd9 [ 174.672489][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.692105][ T5342] RSP: 002b:00007f277367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.700528][ T5342] RAX: ffffffffffffffda RBX: 00007f2772a15fa0 RCX: 00007f277279cdd9 [ 174.708508][ T5342] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 174.716502][ T5342] RBP: 00007f2772832d69 R08: 0000000000000000 R09: 0000000000000000 [ 174.724479][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.732459][ T5342] R13: 00007f2772a16038 R14: 00007f2772a15fa0 R15: 00007ffeb28ba768 [ 174.740459][ T5342] [ 174.744073][ T5342] Kernel Offset: disabled [ 174.748460][ T5342] Rebooting in 86400 seconds..