last executing test programs: 7.796267848s ago: executing program 1 (id=2791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x100}, {&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb3526e6c5524e8307b9012440403f", 0xb2}], 0x2}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5], 0x0, 0x0, 0xff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.546308218s ago: executing program 0 (id=2793): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc25088157f170e377a3bd757523142a7a77078116e0ca27", 0x60}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x48, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1"}, {0x88, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c6261"}], 0xd0}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={r4, r5+60000000}, &(0x7f00000021c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) 6.826007899s ago: executing program 1 (id=2794): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="ea"]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\xf2\xba\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="1cdcf8", 0x3, 0x24008000, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$TIOCCBRK(r7, 0x5428) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r8, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0xffe0}], 0x1}, 0x85) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/210) 6.661291666s ago: executing program 0 (id=2795): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x2a4c, 0xc532fc83d094d41d, 0xfffffffe, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r6, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 3.566505668s ago: executing program 0 (id=2803): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc25088157f170e377a3bd757523142a7a77078116e0ca27", 0x60}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x48, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1"}, {0x88, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c6261"}], 0xd0}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={r4, r5+60000000}, &(0x7f00000021c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) 3.446407423s ago: executing program 2 (id=2805): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000001180)=[{0x200, 0xc010, 0x0, 0x0}], 0xc}) 2.629004618s ago: executing program 0 (id=2809): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 2.463759545s ago: executing program 0 (id=2810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.360125919s ago: executing program 0 (id=2811): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x2a4c, 0xc532fc83d094d41d, 0xfffffffe, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r6, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 2.032261483s ago: executing program 1 (id=2812): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, &(0x7f0000000180)={{0x0}, {0x0, 0x0}}) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x40045) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x10, r0, 0xfffff000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r9, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "bb81d97c4147997e2d01c0fc32a1c14d7c45b2dcdf4a43c9e1e28d1a570f608958f0a40c7f6658b1bb2779be7001313f8083369fbbf71e1d8ba589d80cf3fbb7cc0baf4e73febbfb55bc0e0850ba125c83b3a5ca4705934cb78553f3f308081e9d7702a94a6d232aa7cb7b67f64499ce35c3f4d75e70b6e683048d46820a9fce28710360bf4ce463690dc198c6f251d03f14b67702d13853c4e0fce52db2b139d402da784d8ff5fc14501828527ac865b6fbd2f0cbe3be98c2f94d4ab7147e9a73d600d2dd1e66abeca63b5893984748cd756eab304443cb95ca7bf20b439fa91af205180f4215f78492a3cef3dc47b4f1b74107bd2c145f2b6cc7fa2b89e541aab20fe3a825413eff9e644a2f61f620c9925b90bcdb6607c107339d92af3d20f16274c4e0a8387a09ae654aac8f9e776bc8a9e57867856b65ea22f6b9c2618e0f4e52fe05d18b2879a6390f30e63e3fdf64858a3b16c9096720255f679928300a2b21f3ee625f8f9ce3ddcbaa455b3064b23c7a075d269294e434cb1b9d2b2d5efd0a219866ba256a61b593520f95f8575aebcb114dab75861743fda87c5cfde8a37298bee68d0090260c62a99b7c67fe88469f4c934f53dc8ad8a4974cf39073beda010f3c7c36f927ffb60c281a9fbf1204033b97c60f72ae17bb626c0b0aaa9e8b4b1250a934bb45bafe29db6ee3609a22bd52ee1ada1cc16037bd3efdfc554a7f556ca435b2e3ab07f6416e7416292f53113e8f8b6781af27e64dba38811978ffdb4b168e40f83669867e9d6872b806616ef9d52313820eed98f9a38ce79e4fddf08401111889d037358204f3339560071aa322a942658ccff3cbf219fac1b8e1e7d2d594f60a271d580028e6a475bc08003d322c407129fd34db0aceb32108bfbbe15f0fe2b90ea3a5cc4cdcabb1949dc619b68346caf339c1874dc6610406a85ec9cc480032e31a006ab2b919df0032900d70bdf71e58f1cee9301a295368953871c523003b866d81c1acf64210c272c44f20fb2f1d3347deadb33c4a1f61168d1c4aa36d15b72ae8b1da1543e63b126f4d47eb2e2b34e9b2b285a3b3f8273b4a392a3df8ac30f6bf0abf09e7ed2901312fa53a770ebc01007e940206f7872430208fe2240b742875c91e468264bd1e71b10ecda7a629dde07541577e9ee0579a3d99613d8550cb63bfa503000000000000e561a8e1c9d7ff55c113e28c1d499ea338dd56fe3ec5af073e49d807ea81e9a975ac35efd774aac379813a7ccbee372266cb75cddc045c672ea297a5defcec040269a8c68da5c68991e47593d6b02157f3872ee0ebe30bd3805b1cfde0cf2962afc446c5e303cc1b7b39ee330252db53230d6c145e79275d8a2e9e2cea8d61f01ac09056a44e9cfc8d8311fa9582476131ef5a09b12400"}, 0x418, 0x823}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r9, 0x7ac, &(0x7f0000000040)={&(0x7f0000000700)={{@host, 0x2}, {@any, 0x200}, 0x400, "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"}, 0x418, 0xffffffff}) set_mempolicy(0x4005, 0x0, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002b80)={0x50, 0xfffffffffffffff5, r10, {0x7, 0x2d, 0x8, 0x2020040a, 0x8, 0x85, 0xfffffffc, 0x2, 0x0, 0x0, 0x4, 0x4}}, 0x50) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x35c}, 0x1, 0x0, 0x0, 0x42811}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000000880)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x2, 0xefffffffffffb5b2, 0x3a8e5b6d, 0x0, 0x8]}, &(0x7f0000000200)=0x50) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r12) socket$kcm(0x10, 0x7, 0x0) 1.808264312s ago: executing program 3 (id=2813): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcf0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcbc, 0x2, [@TCA_BPF_POLICE={0x454, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc61b}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc92}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffeffffff5, 0x6, 0x4, 0x9f3, {0x81, 0x1, 0x6, 0xc99, 0x1, 0x4}, {0xe, 0x1, 0x8, 0x62c7, 0x4, 0x1}, 0x3, 0x5, 0xf8f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffff, 0x0, 0x7, 0xfff, 0x8, 0x9, 0x9, 0x42, 0x34f4, 0x0, 0x100, 0x1eea, 0x80000001, 0x1, 0x2, 0x7, 0x81, 0x4, 0x8, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x8, 0x7, 0xe, 0x7, 0x101, 0x5, 0x1a88, 0x1, 0x2, 0x7, 0x40, 0x2, 0xff, 0x6, 0x7d0d9f45, 0xfff, 0x0, 0x8000, 0x8, 0x47, 0xff, 0x1ff, 0xc, 0x10000, 0x8, 0x7fff, 0x40, 0x31b384e9, 0x0, 0x9, 0x8, 0x200, 0x7fffffff, 0x1, 0x400, 0x40, 0x5b7, 0x1, 0x9, 0x19a, 0x7, 0x8001, 0x4, 0x5, 0x1000, 0x0, 0x3, 0x401, 0xfffc, 0x5e, 0x8, 0x21b, 0x8, 0xc6ca, 0x6, 0x4, 0xf5, 0xc585, 0x0, 0x7fffffff, 0x4, 0xa5f, 0x2, 0xd, 0x921, 0x46fa7ced, 0xfffffffe, 0x3, 0x9, 0x80, 0x1, 0x80000001, 0x56b0fa01, 0x3, 0x3, 0xc, 0x2, 0xd35, 0xf, 0x4, 0x6, 0x5, 0x8, 0x0, 0x40, 0x1, 0x81, 0xffff4265, 0xd, 0xc, 0x10000005, 0x4518, 0x16e, 0x40, 0xd5, 0x1, 0x8, 0x0, 0x0, 0x10001, 0x7, 0x7c6, 0x0, 0x3, 0x5, 0x9, 0xa980, 0x1f, 0x2, 0x4, 0x2a7, 0xe28, 0xfffffffc, 0x101, 0x7fff, 0xc75, 0x7fffffff, 0x8, 0x2, 0x10001, 0x4, 0x7, 0x9, 0x80000001, 0x4f, 0x8, 0x100, 0x6, 0xcecd, 0x3ff, 0x8, 0x0, 0x9, 0x2, 0x9, 0x240, 0x101, 0x97eb, 0x8, 0x6b, 0x1, 0x2971f9c7, 0x6, 0x4447, 0x80000000, 0xe, 0x2, 0x6, 0x80000000, 0x0, 0x7, 0x1, 0x1, 0x4, 0x0, 0x9, 0x2, 0x8, 0xe, 0xfffffff8, 0x21, 0x102c19, 0xfffffffe, 0x4000, 0x6, 0x6, 0x8, 0x4, 0xd44, 0x2, 0x5, 0x23c, 0x81, 0x4, 0x7, 0x0, 0x401, 0x4, 0x2, 0x8, 0x10, 0x8, 0x1, 0x8, 0xfffffff4, 0x3, 0x2, 0xfb71, 0x5, 0x1ff, 0x7, 0x8, 0x0, 0x6, 0x3ff, 0x5, 0x2, 0xc1e, 0x636b, 0x0, 0x40, 0x7, 0xfffff108, 0x2, 0x8000, 0x7, 0x9, 0x9, 0x7, 0x0, 0x9, 0x5, 0x10001, 0xa, 0x66e595e8, 0x8, 0x80, 0x4, 0x8, 0x7ff, 0x10, 0x46b0, 0xc, 0x9b, 0xe, 0x0, 0x10000, 0x0, 0xffffff81, 0x100]}]}, @TCA_BPF_POLICE={0x840, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x38a, 0x9, 0x8, 0x800, 0x7, 0x0, 0x1000, 0x2, 0x0, 0x3, 0x7f9, 0x84, 0xffffffff, 0x9, 0x3ff, 0xe0000000, 0xffff, 0x1, 0x9, 0x9, 0x0, 0x3, 0xffffffff, 0x6, 0x0, 0x8, 0xfffffff8, 0x8, 0x2, 0x400, 0x6, 0x3, 0x9, 0x9, 0x80, 0x242c, 0xf, 0x1, 0xb47, 0x9, 0xb379, 0x0, 0x9, 0x4, 0x10000, 0x5ba6, 0x8, 0x5ac2810, 0x3ff, 0x6, 0x4, 0xd2c1, 0x80000000, 0x1, 0x0, 0x7fff, 0x7fffffff, 0x4f07, 0x483, 0x5, 0xfffffffd, 0x29a, 0xc29, 0x30, 0x1, 0x89ab, 0x7, 0x3, 0x6, 0x0, 0x0, 0x81, 0x9, 0x6, 0x2, 0x10, 0x149, 0x3, 0xb4, 0x4, 0x57b, 0x9, 0x2, 0x1, 0x2, 0xffffffff, 0x1, 0x9e7, 0x200, 0x81, 0x200, 0x6, 0x4, 0x10, 0x8, 0x3, 0x2, 0x2, 0xaa, 0x9, 0x1, 0xfffffffa, 0x5, 0x9, 0x1, 0xff, 0xf36, 0x6, 0x10000, 0xb, 0xfff, 0xf481, 0x0, 0x1, 0x0, 0x7, 0x7ff, 0x3, 0x6, 0xfffffffa, 0x2, 0x7, 0x1, 0x8, 0x4, 0x6, 0x6, 0x2, 0xb3, 0xfffffffa, 0x6, 0x100, 0x2, 0x1, 0x3, 0x755b, 0x2, 0x1, 0x3, 0x6, 0x9dc, 0x2, 0x81, 0x0, 0x4, 0x1, 0x6, 0x4, 0x3, 0x522d, 0x3, 0x2, 0x4, 0x8, 0x8001, 0x6d, 0x3e1013a6, 0x9, 0x8000, 0x24, 0x6, 0xffff8001, 0x7fff, 0x1, 0x3, 0x6, 0x0, 0x6, 0x10, 0x9bc0, 0x8, 0x8, 0x86f4, 0x9, 0x3ff, 0xa, 0x7, 0x3, 0x5, 0x9, 0x5, 0x4, 0x800, 0xfffffffe, 0x6, 0x2, 0x6, 0x8, 0x1, 0x8, 0x2, 0x100, 0x7, 0x6, 0x3, 0x3, 0x2, 0x88d, 0x7, 0xfffffe36, 0xe, 0x3, 0x6, 0xd87, 0x2, 0x5, 0x7, 0x3, 0x1eb6, 0x5, 0x68, 0xfffffffe, 0xffff, 0x94e500, 0x9, 0x1, 0x4, 0x40, 0x28e, 0x8, 0x4aa, 0x5, 0xa66, 0x7fff, 0x7, 0x3e4d, 0x6, 0x5, 0x3, 0x9ae, 0xf5c, 0xfffffff2, 0x4b, 0xd29c, 0xffffff81, 0x7, 0x8, 0xffffff67, 0x1, 0x2, 0x8aa, 0x0, 0xd7, 0x2, 0x4800000, 0x3, 0x1, 0xff, 0x911a, 0x1, 0x101, 0xb0e2, 0x10, 0x3, 0x7fff, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x88e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x80000000, 0x7, 0x2, 0x7, 0x5, 0x5, 0xfffff801, 0x4, 0x482, 0xcb8, 0x1, 0x10, 0x2, 0x1, 0x4, 0x9, 0x6, 0x10001, 0x4, 0x5a5, 0x3727, 0xce3, 0x4, 0xfffffffd, 0xbb, 0xeb70, 0x1, 0x8000, 0x6, 0x5, 0x5, 0x39c8acbe, 0x9d1, 0x9, 0x3, 0x2, 0x0, 0x7f, 0x2, 0x5b8, 0xaa4, 0x80, 0x0, 0x8, 0x8000, 0x3, 0x1, 0x7, 0x4, 0x11c, 0x10d, 0xfff, 0xffff, 0x825a, 0x8, 0x6e, 0xffff, 0x81, 0x3, 0x5, 0x7d, 0x443, 0x869, 0x10001, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x93, 0x19d6, 0xe67e, 0x7131, 0x16, 0x8, 0xffffff68, 0x6, 0x3ff, 0x52, 0x8, 0x2, 0x7b7, 0x3e2, 0x7fffffff, 0x0, 0x8, 0x2, 0x4, 0x1, 0xb55e, 0xff, 0xfffffff8, 0x40, 0xedd, 0x1, 0x10001, 0x6, 0xe00, 0xfb5, 0x6, 0x4, 0xb3, 0x9, 0x5, 0x6, 0x6, 0x3, 0x4, 0x2, 0x20000000, 0xd059, 0xfffffffb, 0xb7, 0x1ff, 0x7ff, 0x2, 0x800, 0x17f9, 0xfffffc72, 0xfffffff9, 0x10000, 0x0, 0x1, 0x0, 0x8, 0xcf8, 0x3, 0x7, 0x2, 0x8, 0x9, 0x408, 0x1, 0x1, 0xffff, 0x1, 0x8, 0x1, 0x2, 0x2, 0x9, 0xacff, 0x10001, 0x3bd8, 0x4, 0xb, 0x4543, 0xb6160, 0x721d802b, 0x200, 0xfdcf, 0x6, 0x3, 0x0, 0x1, 0x8, 0x2, 0x3, 0xf, 0x10, 0x0, 0x8018, 0xfb7, 0x2, 0x0, 0x5, 0x80, 0x8, 0x6, 0x8, 0x5, 0x8, 0xc4a, 0x3fda339f, 0x7, 0x7b89, 0x10, 0x2, 0x5, 0xfffffff8, 0x7, 0x9, 0x6, 0x23f, 0x200, 0x400, 0x3, 0x401, 0x6, 0x101, 0x80000001, 0xe, 0xd, 0x7, 0x1, 0x3ff, 0x7, 0x1, 0x7, 0x2, 0x9f6, 0x1, 0x2, 0xdc7, 0x0, 0xfffff18f, 0x0, 0x6, 0x100, 0x0, 0x39, 0xc, 0x80000001, 0x1, 0x7, 0xffff, 0x0, 0x2a6f5a52, 0x10001, 0xffff7fff, 0x0, 0x1000, 0x4, 0x80, 0x80, 0x10001, 0x2, 0x1, 0x5, 0x4, 0x3ff, 0xffff, 0x4d, 0x9413, 0x80, 0x6, 0xa804, 0x8, 0xffffff01, 0x1, 0x3, 0x0, 0x3, 0x5, 0x1000, 0x5, 0x98, 0x8, 0x0, 0x6037, 0x8, 0x4, 0x100, 0x3]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x5}}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0xcf0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 1.741987096s ago: executing program 3 (id=2814): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x3, 0x2, &(0x7f0000000040)={0x12, "cc9e00a9a76fe4dd0c678ee30fffffffdfffffff0000000000003c00"}}) 1.64004984s ago: executing program 3 (id=2815): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdab, 0x0, 0x0, 0x0, 0xfffffffc}, 0x62) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000ffea0000008000009500000000000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000006f0284008af1bb0000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.607563892s ago: executing program 3 (id=2816): r0 = io_uring_setup(0x3642, &(0x7f0000000400)={0x0, 0xeb8a, 0x1000, 0xffffffff, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) 1.547231184s ago: executing program 3 (id=2817): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="87ee88c59562b5f4623ec5cc4a13bc6de50d26bf2907aada90d6034a9faa4dac42", 0x21}, {&(0x7f0000000400)="71f6485a5da09b0cde83f4f9e1522c4d53d1db87057febbd7d24e1462ac9d3f5ceeabe9af81bee55cc636f2bba2d065be1544e73be6d675ef0ce7df253535f652977610cfd2f79c19a24d0749b181e1aa6a5d64fe669a0ec9206a2c016be765ce9132b5d6d84263e60ae421ed31de163a13672963feede0730617dd8f79c319ec4f6f7e1d1d85c49de85803a4965f0328ee175587c3516a623c8d6e50ad5d5425d094c951da0d56579b3f8735f075f9121261dbab9008cd75a9f26c596cfae00153a0e8f7d1a165902c3120102c02062b26da3c3b8f06bdb3f69adafcf23d8f4547ae8176ec2a9bd1acb67abb701deb6dee1eda68ac81a8f67", 0xf9}, {&(0x7f0000000500)="04dca1e6d7a1b3d6b11e09e185a3511b2595cbdb7f53d1a96d13f82d34fc82acdc03429850500db51a80a28e2c619ba76cf793ae3f5e30ec33885be8b1d4300bc6dd57a8fd97b58ffc25088157f170e377a3bd757523142a7a77078116e0ca27", 0x60}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000600)=[{0x48, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1"}, {0x88, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c6261"}], 0xd0}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={r4, r5+60000000}, &(0x7f00000021c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) 1.072371424s ago: executing program 1 (id=2818): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 990.713128ms ago: executing program 1 (id=2819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 916.70699ms ago: executing program 1 (id=2820): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="ea"]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\xf2\xba\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="1cdcf8", 0x3, 0x24008000, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$TIOCCBRK(r7, 0x5428) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/210) 629.467453ms ago: executing program 3 (id=2821): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 303.878587ms ago: executing program 2 (id=2822): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcf0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcbc, 0x2, [@TCA_BPF_POLICE={0x454, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc61b}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc92}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffeffffff5, 0x6, 0x4, 0x9f3, {0x81, 0x1, 0x6, 0xc99, 0x1, 0x4}, {0xe, 0x1, 0x8, 0x62c7, 0x4, 0x1}, 0x3, 0x5, 0xf8f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffff, 0x0, 0x7, 0xfff, 0x8, 0x9, 0x9, 0x42, 0x34f4, 0x0, 0x100, 0x1eea, 0x80000001, 0x1, 0x2, 0x7, 0x81, 0x4, 0x8, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x8, 0x7, 0xe, 0x7, 0x101, 0x5, 0x1a88, 0x1, 0x2, 0x7, 0x40, 0x2, 0xff, 0x6, 0x7d0d9f45, 0xfff, 0x0, 0x8000, 0x8, 0x47, 0xff, 0x1ff, 0xc, 0x10000, 0x8, 0x7fff, 0x40, 0x31b384e9, 0x0, 0x9, 0x8, 0x200, 0x7fffffff, 0x1, 0x400, 0x40, 0x5b7, 0x1, 0x9, 0x19a, 0x7, 0x8001, 0x4, 0x5, 0x1000, 0x0, 0x3, 0x401, 0xfffc, 0x5e, 0x8, 0x21b, 0x8, 0xc6ca, 0x6, 0x4, 0xf5, 0xc585, 0x0, 0x7fffffff, 0x4, 0xa5f, 0x2, 0xd, 0x921, 0x46fa7ced, 0xfffffffe, 0x3, 0x9, 0x80, 0x1, 0x80000001, 0x56b0fa01, 0x3, 0x3, 0xc, 0x2, 0xd35, 0xf, 0x4, 0x6, 0x5, 0x8, 0x0, 0x40, 0x1, 0x81, 0xffff4265, 0xd, 0xc, 0x10000005, 0x4518, 0x16e, 0x40, 0xd5, 0x1, 0x8, 0x0, 0x0, 0x10001, 0x7, 0x7c6, 0x0, 0x3, 0x5, 0x9, 0xa980, 0x1f, 0x2, 0x4, 0x2a7, 0xe28, 0xfffffffc, 0x101, 0x7fff, 0xc75, 0x7fffffff, 0x8, 0x2, 0x10001, 0x4, 0x7, 0x9, 0x80000001, 0x4f, 0x8, 0x100, 0x6, 0xcecd, 0x3ff, 0x8, 0x0, 0x9, 0x2, 0x9, 0x240, 0x101, 0x97eb, 0x8, 0x6b, 0x1, 0x2971f9c7, 0x6, 0x4447, 0x80000000, 0xe, 0x2, 0x6, 0x80000000, 0x0, 0x7, 0x1, 0x1, 0x4, 0x0, 0x9, 0x2, 0x8, 0xe, 0xfffffff8, 0x21, 0x102c19, 0xfffffffe, 0x4000, 0x6, 0x6, 0x8, 0x4, 0xd44, 0x2, 0x5, 0x23c, 0x81, 0x4, 0x7, 0x0, 0x401, 0x4, 0x2, 0x8, 0x10, 0x8, 0x1, 0x8, 0xfffffff4, 0x3, 0x2, 0xfb71, 0x5, 0x1ff, 0x7, 0x8, 0x0, 0x6, 0x3ff, 0x5, 0x2, 0xc1e, 0x636b, 0x0, 0x40, 0x7, 0xfffff108, 0x2, 0x8000, 0x7, 0x9, 0x9, 0x7, 0x0, 0x9, 0x5, 0x10001, 0xa, 0x66e595e8, 0x8, 0x80, 0x4, 0x8, 0x7ff, 0x10, 0x46b0, 0xc, 0x9b, 0xe, 0x0, 0x10000, 0x0, 0xffffff81, 0x100]}]}, @TCA_BPF_POLICE={0x840, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x38a, 0x9, 0x8, 0x800, 0x7, 0x0, 0x1000, 0x2, 0x0, 0x3, 0x7f9, 0x84, 0xffffffff, 0x9, 0x3ff, 0xe0000000, 0xffff, 0x1, 0x9, 0x9, 0x0, 0x3, 0xffffffff, 0x6, 0x0, 0x8, 0xfffffff8, 0x8, 0x2, 0x400, 0x6, 0x3, 0x9, 0x9, 0x80, 0x242c, 0xf, 0x1, 0xb47, 0x9, 0xb379, 0x0, 0x9, 0x4, 0x10000, 0x5ba6, 0x8, 0x5ac2810, 0x3ff, 0x6, 0x4, 0xd2c1, 0x80000000, 0x1, 0x0, 0x7fff, 0x7fffffff, 0x4f07, 0x483, 0x5, 0xfffffffd, 0x29a, 0xc29, 0x30, 0x1, 0x89ab, 0x7, 0x3, 0x6, 0x0, 0x0, 0x81, 0x9, 0x6, 0x2, 0x10, 0x149, 0x3, 0xb4, 0x4, 0x57b, 0x9, 0x2, 0x1, 0x2, 0xffffffff, 0x1, 0x9e7, 0x200, 0x81, 0x200, 0x6, 0x4, 0x10, 0x8, 0x3, 0x2, 0x2, 0xaa, 0x9, 0x1, 0xfffffffa, 0x5, 0x9, 0x1, 0xff, 0xf36, 0x6, 0x10000, 0xb, 0xfff, 0xf481, 0x0, 0x1, 0x0, 0x7, 0x7ff, 0x3, 0x6, 0xfffffffa, 0x2, 0x7, 0x1, 0x8, 0x4, 0x6, 0x6, 0x2, 0xb3, 0xfffffffa, 0x6, 0x100, 0x2, 0x1, 0x3, 0x755b, 0x2, 0x1, 0x3, 0x6, 0x9dc, 0x2, 0x81, 0x0, 0x4, 0x1, 0x6, 0x4, 0x3, 0x522d, 0x3, 0x2, 0x4, 0x8, 0x8001, 0x6d, 0x3e1013a6, 0x9, 0x8000, 0x24, 0x6, 0xffff8001, 0x7fff, 0x1, 0x3, 0x6, 0x0, 0x6, 0x10, 0x9bc0, 0x8, 0x8, 0x86f4, 0x9, 0x3ff, 0xa, 0x7, 0x3, 0x5, 0x9, 0x5, 0x4, 0x800, 0xfffffffe, 0x6, 0x2, 0x6, 0x8, 0x1, 0x8, 0x2, 0x100, 0x7, 0x6, 0x3, 0x3, 0x2, 0x88d, 0x7, 0xfffffe36, 0xe, 0x3, 0x6, 0xd87, 0x2, 0x5, 0x7, 0x3, 0x1eb6, 0x5, 0x68, 0xfffffffe, 0xffff, 0x94e500, 0x9, 0x1, 0x4, 0x40, 0x28e, 0x8, 0x4aa, 0x5, 0xa66, 0x7fff, 0x7, 0x3e4d, 0x6, 0x5, 0x3, 0x9ae, 0xf5c, 0xfffffff2, 0x4b, 0xd29c, 0xffffff81, 0x7, 0x8, 0xffffff67, 0x1, 0x2, 0x8aa, 0x0, 0xd7, 0x2, 0x4800000, 0x3, 0x1, 0xff, 0x911a, 0x1, 0x101, 0xb0e2, 0x10, 0x3, 0x7fff, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x88e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x80000000, 0x7, 0x2, 0x7, 0x5, 0x5, 0xfffff801, 0x4, 0x482, 0xcb8, 0x1, 0x10, 0x2, 0x1, 0x4, 0x9, 0x6, 0x10001, 0x4, 0x5a5, 0x3727, 0xce3, 0x4, 0xfffffffd, 0xbb, 0xeb70, 0x1, 0x8000, 0x6, 0x5, 0x5, 0x39c8acbe, 0x9d1, 0x9, 0x3, 0x2, 0x0, 0x7f, 0x2, 0x5b8, 0xaa4, 0x80, 0x0, 0x8, 0x8000, 0x3, 0x1, 0x7, 0x4, 0x11c, 0x10d, 0xfff, 0xffff, 0x825a, 0x8, 0x6e, 0xffff, 0x81, 0x3, 0x5, 0x7d, 0x443, 0x869, 0x10001, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x93, 0x19d6, 0xe67e, 0x7131, 0x16, 0x8, 0xffffff68, 0x6, 0x3ff, 0x52, 0x8, 0x2, 0x7b7, 0x3e2, 0x7fffffff, 0x0, 0x8, 0x2, 0x4, 0x1, 0xb55e, 0xff, 0xfffffff8, 0x40, 0xedd, 0x1, 0x10001, 0x6, 0xe00, 0xfb5, 0x6, 0x4, 0xb3, 0x9, 0x5, 0x6, 0x6, 0x3, 0x4, 0x2, 0x20000000, 0xd059, 0xfffffffb, 0xb7, 0x1ff, 0x7ff, 0x2, 0x800, 0x17f9, 0xfffffc72, 0xfffffff9, 0x10000, 0x0, 0x1, 0x0, 0x8, 0xcf8, 0x3, 0x7, 0x2, 0x8, 0x9, 0x408, 0x1, 0x1, 0xffff, 0x1, 0x8, 0x1, 0x2, 0x2, 0x9, 0xacff, 0x10001, 0x3bd8, 0x4, 0xb, 0x4543, 0xb6160, 0x721d802b, 0x200, 0xfdcf, 0x6, 0x3, 0x0, 0x1, 0x8, 0x2, 0x3, 0xf, 0x10, 0x0, 0x8018, 0xfb7, 0x2, 0x0, 0x5, 0x80, 0x8, 0x6, 0x8, 0x5, 0x8, 0xc4a, 0x3fda339f, 0x7, 0x7b89, 0x10, 0x2, 0x5, 0xfffffff8, 0x7, 0x9, 0x6, 0x23f, 0x200, 0x400, 0x3, 0x401, 0x6, 0x101, 0x80000001, 0xe, 0xd, 0x7, 0x1, 0x3ff, 0x7, 0x1, 0x7, 0x2, 0x9f6, 0x1, 0x2, 0xdc7, 0x0, 0xfffff18f, 0x0, 0x6, 0x100, 0x0, 0x39, 0xc, 0x80000001, 0x1, 0x7, 0xffff, 0x0, 0x2a6f5a52, 0x10001, 0xffff7fff, 0x0, 0x1000, 0x4, 0x80, 0x80, 0x10001, 0x2, 0x1, 0x5, 0x4, 0x3ff, 0xffff, 0x4d, 0x9413, 0x80, 0x6, 0xa804, 0x8, 0xffffff01, 0x1, 0x3, 0x0, 0x3, 0x5, 0x1000, 0x5, 0x98, 0x8, 0x0, 0x6037, 0x8, 0x4, 0x100, 0x3]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x5}}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0xcf0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 249.277219ms ago: executing program 2 (id=2823): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x1000000000000}) 192.610772ms ago: executing program 2 (id=2824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdab, 0x0, 0x0, 0x0, 0xfffffffc}, 0x62) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000ffea0000008000009500000000000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000006f0284008af1bb0000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 110.337365ms ago: executing program 2 (id=2825): r0 = io_uring_setup(0x3642, &(0x7f0000000400)={0x0, 0xeb8a, 0x1000, 0xffffffff, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) 0s ago: executing program 2 (id=2826): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "a40f78cb84bb1874"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x80044) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) kernel console output (not intermixed with test programs): 01 length: 249 > 9 [ 735.758762][T11622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.766972][T11622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 735.775490][T11622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 735.776139][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.808532][T12341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.823502][T12341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.830923][T12341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.840257][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.852274][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.862551][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.874247][T12341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.882407][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.893518][T12341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 735.902912][T12341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.038536][T14883] syzkaller0: entered promiscuous mode [ 736.068084][T14883] syzkaller0: entered allmulticast mode [ 736.187398][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.299483][T14896] syzkaller0: entered promiscuous mode [ 736.305146][T14896] syzkaller0: entered allmulticast mode [ 737.533713][T14922] loop1: detected capacity change from 0 to 4096 [ 737.985994][T11622] Bluetooth: hci3: command tx timeout [ 739.322351][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.410723][T14904] syzkaller0: entered promiscuous mode [ 739.418345][T14904] syzkaller0: entered allmulticast mode [ 740.063805][T12341] Bluetooth: hci3: command tx timeout [ 742.149925][T11622] Bluetooth: hci3: command tx timeout [ 742.369611][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.391678][T14941] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 742.401208][T14941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 742.413017][T14941] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 742.479906][ T12] team0: Port device netdevsim0 removed [ 742.487852][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.898775][T14974] loop0: detected capacity change from 0 to 4096 [ 743.755333][ T2195] syzkaller0: tun_net_xmit 76 [ 743.783662][ T8] syzkaller0: tun_net_xmit 76 [ 744.030808][ T8] syzkaller0: tun_net_xmit 76 [ 744.138917][T14970] syzkaller0: delete flow: hash 3716421678 index 2 [ 744.169058][ T2195] syzkaller0: tun_net_xmit 76 [ 744.233724][T11622] Bluetooth: hci3: command tx timeout [ 744.314869][ T2195] syzkaller0: tun_net_xmit 76 [ 744.524670][ T2195] syzkaller0: tun_net_xmit 76 [ 746.303679][T11622] Bluetooth: hci3: command tx timeout [ 747.012355][T14884] chnl_net:caif_netlink_parms(): no params data found [ 747.356040][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.357052][T15032] syzkaller0: entered promiscuous mode [ 747.362370][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.393937][T15032] syzkaller0: entered allmulticast mode [ 747.927503][T14884] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.943685][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.953749][T14884] bridge_slave_0: entered allmulticast mode [ 747.975132][T14884] bridge_slave_0: entered promiscuous mode [ 748.188244][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.203593][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.238636][T14884] bridge_slave_1: entered allmulticast mode [ 748.250271][T14884] bridge_slave_1: entered promiscuous mode [ 748.383691][T11622] Bluetooth: hci3: command tx timeout [ 748.471023][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.512182][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.592191][T15065] loop0: detected capacity change from 0 to 4096 [ 748.735531][T14884] team0: Port device team_slave_0 added [ 749.831121][T14884] team0: Port device team_slave_1 added [ 750.645102][ T795] syzkaller0: tun_net_xmit 76 [ 750.651286][T15070] syzkaller0: create flow: hash 3716421678 index 1 [ 750.661714][ T795] syzkaller0: tun_net_xmit 48 [ 750.681776][ T12] hsr_slave_0: left promiscuous mode [ 750.688147][ T5808] syzkaller0: tun_net_xmit 76 [ 750.700216][ T12] hsr_slave_1: left promiscuous mode [ 750.710975][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.719190][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.744083][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.751567][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.766872][ T12] bridge_slave_1: left allmulticast mode [ 750.773220][ T12] bridge_slave_1: left promiscuous mode [ 750.783680][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.821761][ T12] bridge_slave_0: left allmulticast mode [ 750.827918][ T28] syzkaller0: tun_net_xmit 76 [ 750.833152][ T12] bridge_slave_0: left promiscuous mode [ 750.839213][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.881993][ T12] veth1_macvtap: left promiscuous mode [ 750.888199][ T12] veth0_macvtap: left promiscuous mode [ 750.895873][ T12] veth1_vlan: left promiscuous mode [ 750.901517][ T12] veth0_vlan: left promiscuous mode [ 751.404522][ T12] bond1 (unregistering): Released all slaves [ 751.425868][ T28] syzkaller0: tun_net_xmit 76 [ 751.917758][ T12] team0 (unregistering): Port device team_slave_1 removed [ 751.966064][ T12] team0 (unregistering): Port device team_slave_0 removed [ 752.014589][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.062011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.412943][ T12] bond0 (unregistering): Released all slaves [ 752.489006][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.497232][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.524619][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.553773][T12341] Bluetooth: hci3: command tx timeout [ 752.632345][T15069] syzkaller0: delete flow: hash 3716421678 index 1 [ 753.820884][ T5138] udevd[5138]: worker [5781] /devices/virtual/block/nbd0 timeout; kill it [ 753.831352][ T5138] udevd[5138]: seq 23501 '/devices/virtual/block/nbd0' killed [ 754.566849][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.578470][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.643988][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.821614][T14884] hsr_slave_0: entered promiscuous mode [ 754.857861][T14884] hsr_slave_1: entered promiscuous mode [ 754.876405][T14884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.894488][T14884] Cannot create hsr debugfs directory [ 754.910382][T15119] syzkaller0: entered promiscuous mode [ 754.941881][T15119] syzkaller0: entered allmulticast mode [ 755.086784][T15128] loop0: detected capacity change from 0 to 4096 [ 755.935954][T15139] loop2: detected capacity change from 0 to 4096 [ 758.073882][ T28] syzkaller0: tun_net_xmit 76 [ 758.300336][T15183] syzkaller0: entered promiscuous mode [ 758.308258][T15183] syzkaller0: entered allmulticast mode [ 758.338025][T14884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 758.374807][T14884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 758.383757][ T28] syzkaller0: tun_net_xmit 76 [ 758.480055][T14884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 758.516516][T14884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.616803][T15187] loop0: detected capacity change from 0 to 4096 [ 758.753690][T15168] syzkaller0: delete flow: hash 3716421678 index 2 [ 758.760512][ T23] syzkaller0: tun_net_xmit 76 [ 758.783746][T10656] syzkaller0: tun_net_xmit 76 [ 759.651400][T11622] Bluetooth: hci3: command tx timeout [ 760.005252][T15201] loop1: detected capacity change from 0 to 4096 [ 762.777880][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.815312][T14884] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.852259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.860618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.894858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.902049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.297910][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.376844][ T10] block nbd0: Possible stuck request ffff888021f88000: control (read@0,4096B). Runtime 240 seconds [ 763.466662][T14884] veth0_vlan: entered promiscuous mode [ 763.498665][T14884] veth1_vlan: entered promiscuous mode [ 764.218161][T14884] veth0_macvtap: entered promiscuous mode [ 764.317641][T14884] veth1_macvtap: entered promiscuous mode [ 764.370833][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.378155][T15254] loop1: detected capacity change from 0 to 4096 [ 764.425366][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.453789][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.497960][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.525132][T14884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.584599][T15256] loop0: detected capacity change from 0 to 4096 [ 764.605803][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.779935][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.032352][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.115595][T11622] Bluetooth: hci3: command tx timeout [ 765.231903][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.425449][T14884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.458815][T14884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.467811][T14884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.476648][T14884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.485492][T14884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.021218][T12334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.073464][T12334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.259894][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.279503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.960225][ T11] syzkaller0: tun_net_xmit 76 [ 766.975693][ T11] syzkaller0: tun_net_xmit 48 [ 766.983706][T15276] syzkaller0: tun_net_xmit 76 [ 767.005536][T15278] syzkaller0: delete flow: hash 3716421678 index 2 [ 769.746496][T15341] loop2: detected capacity change from 0 to 4096 [ 770.143508][T11622] Bluetooth: hci3: command tx timeout [ 770.763117][T15344] loop2: detected capacity change from 0 to 4096 [ 772.277087][T15354] syzkaller0: entered promiscuous mode [ 772.304990][T15354] syzkaller0: entered allmulticast mode [ 772.467523][T15364] syzkaller0: entered promiscuous mode [ 772.493586][T15364] syzkaller0: entered allmulticast mode [ 773.602736][T15378] loop2: detected capacity change from 0 to 4096 [ 773.615749][T15380] loop1: detected capacity change from 0 to 4096 [ 773.841588][ T3431] syzkaller0: tun_net_xmit 76 [ 773.944715][ T5808] syzkaller0: tun_net_xmit 76 [ 773.950509][ T3431] syzkaller0: tun_net_xmit 48 [ 774.124325][ T5808] syzkaller0: tun_net_xmit 76 [ 774.181724][T15391] syzkaller0: create flow: hash 3716421678 index 2 [ 774.863888][T11622] Bluetooth: hci3: command 0x0405 tx timeout [ 775.697020][ T5808] syzkaller0: tun_net_xmit 76 [ 775.904412][T15395] ±ÿª¨úrBº“: renamed from lo (while UP) [ 775.930953][T15383] syzkaller0: delete flow: hash 3716421678 index 2 [ 775.937896][ T5808] syzkaller0: tun_net_xmit 76 [ 778.579040][T15432] syzkaller0: entered promiscuous mode [ 778.594131][T15432] syzkaller0: entered allmulticast mode [ 779.537421][T15446] loop3: detected capacity change from 0 to 4096 [ 780.678267][T15468] syzkaller0: entered promiscuous mode [ 780.705867][T15468] syzkaller0: entered allmulticast mode [ 780.805425][T11622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 780.817542][T11622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 780.843077][T11622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.859891][T11622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.869693][ T5773] Bluetooth: hci3: command 0x0405 tx timeout [ 780.885366][T11622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 780.892702][T11622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 780.943679][ T5767] syz_tun (unregistering): left allmulticast mode [ 780.959917][T15472] syzkaller0: entered promiscuous mode [ 780.983545][T15472] syzkaller0: entered allmulticast mode [ 781.197306][T15489] fuse: Unknown parameter '0x0000000000000003' [ 781.221990][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.331940][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.355411][T15473] chnl_net:caif_netlink_parms(): no params data found [ 781.414585][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.486550][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.505978][T15276] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 781.520813][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.528393][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.535853][T15473] bridge_slave_0: entered allmulticast mode [ 781.542680][T15473] bridge_slave_0: entered promiscuous mode [ 781.561605][T15473] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.569370][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.577929][T15473] bridge_slave_1: entered allmulticast mode [ 781.595310][T15473] bridge_slave_1: entered promiscuous mode [ 781.693479][T15276] usb 3-1: Using ep0 maxpacket: 16 [ 781.702241][T15276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.717224][T15276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.729065][T15276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.741430][T15276] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 781.751272][T15276] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.766368][T15276] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 781.775883][T15276] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 781.787752][T15276] usb 3-1: Manufacturer: syz [ 781.791216][T15473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.802853][T15276] usb 3-1: config 0 descriptor?? [ 781.815451][T15473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.023115][T15473] team0: Port device team_slave_0 added [ 782.032427][T15473] team0: Port device team_slave_1 added [ 782.118259][ T11] tipc: Left network mode [ 782.120553][T15473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.150072][T15276] rc_core: IR keymap rc-hauppauge not found [ 782.170312][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.196285][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.206229][T15276] Registered IR keymap rc-empty [ 782.211262][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.224516][T15473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.237582][T15473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.245315][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.271599][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.290114][T15473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.315830][T15276] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 782.330993][T15276] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 782.356790][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.408530][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.443819][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.483527][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.516832][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.544886][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.567372][T15473] hsr_slave_0: entered promiscuous mode [ 782.579419][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.579506][T15473] hsr_slave_1: entered promiscuous mode [ 782.580287][T15473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.580343][T15473] Cannot create hsr debugfs directory [ 782.603931][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.633594][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.663536][T15276] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.699100][T15276] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 782.699124][T15276] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 782.704717][T15526] syzkaller0: entered promiscuous mode [ 782.704742][T15526] syzkaller0: entered allmulticast mode [ 782.951565][T11622] Bluetooth: hci0: command tx timeout [ 782.986585][ T5808] usb 3-1: USB disconnect, device number 11 [ 783.517390][T15545] fuse: Unknown parameter '0x0000000000000003' [ 783.843561][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 783.927545][ T11] hsr_slave_0: left promiscuous mode [ 783.937733][ T11] hsr_slave_1: left promiscuous mode [ 783.945415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.952987][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.965839][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.975969][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.988714][ T11] bridge_slave_1: left allmulticast mode [ 783.997727][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.009405][ T11] bridge_slave_0: left allmulticast mode [ 784.017365][ T11] bridge_slave_0: left promiscuous mode [ 784.023242][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.066309][ T11] veth1_macvtap: left promiscuous mode [ 784.072910][ T11] veth0_macvtap: left promiscuous mode [ 784.082939][ T11] veth1_vlan: left promiscuous mode [ 784.088579][ T11] veth0_vlan: left promiscuous mode [ 784.173942][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 784.207767][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.272424][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.356580][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 784.457395][ T5808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 784.559068][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.679840][ T5808] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.783311][ T5808] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.802394][ T5808] usb 4-1: Manufacturer: syz [ 784.809545][ T5808] usb 4-1: config 0 descriptor?? [ 784.906998][T15561] loop2: detected capacity change from 0 to 4096 [ 785.036146][T11622] Bluetooth: hci0: command tx timeout [ 785.754501][ T5808] rc_core: IR keymap rc-hauppauge not found [ 785.760550][ T5808] Registered IR keymap rc-empty [ 785.792459][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 785.863661][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 785.894905][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 785.941966][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 785.982484][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.023632][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.071772][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.123683][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.173996][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.255717][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.304497][T15589] fuse: Unknown parameter '0x0000000000000003' [ 786.333714][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.373987][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.443587][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.486204][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.531302][ T5808] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 786.542731][ T5808] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 786.549126][ T11] team0 (unregistering): Port device team_slave_1 removed [ 786.560077][ T5808] usb 4-1: USB disconnect, device number 9 [ 786.686719][ T11] team0 (unregistering): Port device team_slave_0 removed [ 786.767809][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.857678][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.945991][ T5808] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 787.106215][T11622] Bluetooth: hci0: command tx timeout [ 787.133435][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 787.148929][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.171155][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.192932][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.218411][ T5808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 787.247791][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.273092][ T5808] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.282814][ T5808] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.291578][ T5808] usb 4-1: Manufacturer: syz [ 787.298816][ T5808] usb 4-1: config 0 descriptor?? [ 787.630980][ T11] bond0 (unregistering): Released all slaves [ 787.693656][ T5808] rc_core: IR keymap rc-hauppauge not found [ 787.699613][ T5808] Registered IR keymap rc-empty [ 787.709223][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 787.743854][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 787.785287][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 788.421080][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 788.513419][T15473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.542598][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.575919][T15473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.583071][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.616541][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.624027][T15473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.658300][T15473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.673665][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.730799][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.793924][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.836691][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.873585][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.915625][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 788.932067][T15473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.964266][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 789.006671][ T5808] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 789.008746][T15473] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.022888][ T5808] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 789.041417][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.048651][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.063134][ T5808] usb 4-1: USB disconnect, device number 10 [ 789.134868][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.142079][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.183601][T11622] Bluetooth: hci0: command tx timeout [ 789.401700][T15628] fuse: Unknown parameter '0x0000000000000003' [ 789.689890][T15473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.783566][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 789.847732][T15473] veth0_vlan: entered promiscuous mode [ 789.893933][T15473] veth1_vlan: entered promiscuous mode [ 789.983820][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 789.998834][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.016821][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.040538][T15473] veth0_macvtap: entered promiscuous mode [ 790.052433][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 790.075402][T15473] veth1_macvtap: entered promiscuous mode [ 790.086249][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 790.105917][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.128312][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.154984][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 790.164470][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 790.172547][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.172619][ T8] usb 4-1: Manufacturer: syz [ 790.194234][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.202145][ T8] usb 4-1: config 0 descriptor?? [ 790.230074][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.254504][T15473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.299316][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.351091][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.361279][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.409984][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.428392][T15473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.454650][T15473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.470490][T15473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.485579][T15473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.495693][T15473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.573753][ T8] rc_core: IR keymap rc-hauppauge not found [ 790.604260][ T8] Registered IR keymap rc-empty [ 790.609277][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 790.653600][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 790.682553][T12334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.706376][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 790.711660][T12334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.784449][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 790.837527][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.860598][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 790.871640][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.934916][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.003495][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.044570][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.103003][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.147009][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.208040][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.263684][T11622] Bluetooth: hci0: command tx timeout [ 791.274510][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.319483][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.363604][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 791.425785][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 791.494055][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 792.129436][ T8] usb 4-1: USB disconnect, device number 11 [ 792.456780][T15693] fuse: Unknown parameter '0x0000000000000003' [ 792.785122][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 793.015458][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 793.035447][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.066237][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.107392][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.133392][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 793.163501][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.203395][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.214465][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.227855][ T8] usb 1-1: Manufacturer: syz [ 793.263912][ T8] usb 1-1: config 0 descriptor?? [ 793.425438][ T10] block nbd0: Possible stuck request ffff888021f88000: control (read@0,4096B). Runtime 270 seconds [ 793.614468][ T8] rc_core: IR keymap rc-hauppauge not found [ 793.620435][ T8] Registered IR keymap rc-empty [ 793.651284][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.703700][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.758702][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 793.803634][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 793.865032][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.900923][T15708] loop3: detected capacity change from 0 to 4096 [ 793.923588][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.953956][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 793.999261][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.048084][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.164233][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.273749][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.384228][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.539577][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.636108][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 794.693858][ T8] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.702952][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.737071][T15717] fuse: Unknown parameter '0x0000000000000003' [ 794.781079][ T8] usb 1-1: USB disconnect, device number 7 [ 795.043945][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 795.227924][T15734] loop0: detected capacity change from 0 to 4096 [ 795.245103][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 795.268870][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.285203][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.296668][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 795.306957][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 795.317669][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.335418][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 795.347997][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 795.359287][ T23] usb 4-1: Manufacturer: syz [ 795.369830][ T23] usb 4-1: config 0 descriptor?? [ 797.753610][ T23] rc_core: IR keymap rc-hauppauge not found [ 797.759651][ T23] Registered IR keymap rc-empty [ 797.783641][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.826364][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.894843][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 797.919456][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 797.958841][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.024990][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.075202][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.133633][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.184910][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.220320][T15745] syzkaller0: entered promiscuous mode [ 798.230486][T15745] syzkaller0: entered allmulticast mode [ 798.253872][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.318401][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.360285][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.413642][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.455440][T15749] IPv6: NLM_F_CREATE should be specified when creating new route [ 798.463642][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.515026][ T23] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 798.540631][ T23] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.576330][ T23] usb 4-1: USB disconnect, device number 12 [ 798.818747][T15753] loop1: detected capacity change from 0 to 4096 [ 801.471974][T15771] syzkaller0: entered promiscuous mode [ 801.479708][T15771] syzkaller0: entered allmulticast mode [ 801.576785][T12341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 801.586962][T12341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 801.596532][T12341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 801.618595][T12341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 801.627953][T12341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 801.644237][T12341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.909124][T15772] chnl_net:caif_netlink_parms(): no params data found [ 802.055381][T15772] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.063891][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.072231][T15772] bridge_slave_0: entered allmulticast mode [ 802.079823][T15772] bridge_slave_0: entered promiscuous mode [ 802.091102][T15772] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.099650][T15772] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.107199][T15772] bridge_slave_1: entered allmulticast mode [ 802.114934][T15772] bridge_slave_1: entered promiscuous mode [ 802.140367][T15772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.151780][T15772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.186671][T15772] team0: Port device team_slave_0 added [ 802.195143][T15772] team0: Port device team_slave_1 added [ 802.215924][T15772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.223053][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.250008][T15772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.264381][T15772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.271475][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.300356][T15772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.313003][T15787] capability: warning: `syz.2.2426' uses 32-bit capabilities (legacy support in use) [ 802.322781][ T27] audit: type=1326 audit(1778598352.616:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.367736][T15772] hsr_slave_0: entered promiscuous mode [ 802.375020][T15772] hsr_slave_1: entered promiscuous mode [ 802.395939][ T27] audit: type=1326 audit(1778598352.616:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.443462][ T27] audit: type=1326 audit(1778598352.616:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.472083][ T27] audit: type=1326 audit(1778598352.616:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.498868][ T27] audit: type=1326 audit(1778598352.616:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.523861][ T27] audit: type=1326 audit(1778598352.646:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.568242][ T27] audit: type=1326 audit(1778598352.646:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.600739][ T27] audit: type=1326 audit(1778598352.696:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.635400][ T27] audit: type=1326 audit(1778598352.696:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 802.663969][ T27] audit: type=1326 audit(1778598352.696:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15786 comm="syz.2.2426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c19cdd9 code=0x7ffc0000 [ 803.193909][T15772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.204863][T15772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.214351][T15772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.229013][T15772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.305023][T15772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.325514][T15772] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.343792][T15276] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 803.358617][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.365817][ T795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.410522][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.417799][ T795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.559671][T15276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 803.578280][T15276] usb 3-1: config 0 has no interface number 0 [ 803.600429][T15276] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 803.618638][T15276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.632485][T15276] usb 3-1: Product: syz [ 803.643756][T15276] usb 3-1: Manufacturer: syz [ 803.656918][T15276] usb 3-1: SerialNumber: syz [ 803.708399][T15276] usb 3-1: config 0 descriptor?? [ 803.718007][T15276] usb 3-1: selecting invalid altsetting 1 [ 803.734719][T15276] dvb_ttusb_budget: ttusb_init_controller: error [ 803.741733][T15276] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 803.753974][T11622] Bluetooth: hci1: command tx timeout [ 803.795745][T15772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.856632][T15772] veth0_vlan: entered promiscuous mode [ 803.884476][T15772] veth1_vlan: entered promiscuous mode [ 803.897139][T15276] DVB: Unable to find symbol stv0299_attach() [ 803.958337][T15276] DVB: Unable to find symbol tda8083_attach() [ 803.981110][T15276] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 803.982918][T15772] veth0_macvtap: entered promiscuous mode [ 804.002269][T15772] veth1_macvtap: entered promiscuous mode [ 804.020129][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.033772][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.048909][T15276] usb 3-1: USB disconnect, device number 12 [ 804.053211][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.074011][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.086723][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.097970][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.118956][T15772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.162869][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.178409][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.193224][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.204731][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.215050][T15772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.227129][T15772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.241038][T15772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.270385][T15772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.280431][T15772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.294454][T15772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.303287][T15772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.516248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.547937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.646084][T12331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.655742][T12331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.096795][T15828] syzkaller0: entered promiscuous mode [ 805.102421][T15828] syzkaller0: entered allmulticast mode [ 805.232970][T15830] syzkaller0: entered promiscuous mode [ 805.239218][T15830] syzkaller0: entered allmulticast mode [ 805.823953][T11622] Bluetooth: hci1: command tx timeout [ 806.010273][T15842] fuse: Unknown parameter '0x0000000000000003' [ 806.293492][T10656] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 806.504584][T10656] usb 4-1: Using ep0 maxpacket: 16 [ 806.514696][T10656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.526038][T10656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.537468][T10656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 806.547380][T10656] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 806.557157][T10656] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.573965][T10656] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.586867][T10656] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.595690][T10656] usb 4-1: Manufacturer: syz [ 806.602013][T10656] usb 4-1: config 0 descriptor?? [ 806.843696][T15276] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 806.865924][T10656] rc_core: IR keymap rc-hauppauge not found [ 806.871998][T10656] Registered IR keymap rc-empty [ 806.877047][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.915907][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.948373][T10656] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 806.962955][T10656] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 806.978069][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.013528][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.028506][T15276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.041955][T15276] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 807.046842][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.051134][T15276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.067207][T15276] usb 3-1: Product: syz [ 807.071392][T15276] usb 3-1: Manufacturer: syz [ 807.076079][T15276] usb 3-1: SerialNumber: syz [ 807.082722][T15276] usb 3-1: config 0 descriptor?? [ 807.087044][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.092562][T15276] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 807.133608][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.163481][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.193668][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.223611][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.254147][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.293104][T10656] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 807.324869][T10656] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 807.334274][T10656] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 807.346840][T10656] usb 4-1: USB disconnect, device number 13 [ 807.804350][T15276] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 807.811796][T15276] gspca_pac7302: probe of 3-1:0.0 failed with error -110 [ 807.903573][T11622] Bluetooth: hci1: command tx timeout [ 808.045302][T10656] usb 3-1: USB disconnect, device number 13 [ 808.150927][T15855] syzkaller0: entered promiscuous mode [ 808.169601][T15855] syzkaller0: entered allmulticast mode [ 808.278731][T15857] loop0: detected capacity change from 0 to 4096 [ 808.786837][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.889350][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.983972][T11622] Bluetooth: hci1: command tx timeout [ 810.205975][T15861] loop2: detected capacity change from 0 to 4096 [ 811.494001][T15869] loop1: detected capacity change from 0 to 4096 [ 811.516021][T15873] syzkaller0: entered promiscuous mode [ 811.552076][T15873] syzkaller0: entered allmulticast mode [ 815.026728][T15921] loop1: detected capacity change from 0 to 4096 [ 816.309607][T15932] loop0: detected capacity change from 0 to 4096 [ 816.367007][T15930] block device autoloading is deprecated and will be removed. [ 818.105625][T15930] netlink: 'syz.3.2462': attribute type 4 has an invalid length. [ 818.420399][T15941] syzkaller0: entered promiscuous mode [ 818.433444][T15941] syzkaller0: entered allmulticast mode [ 821.132023][T15977] loop3: detected capacity change from 0 to 4096 [ 822.649747][T15953] syzkaller0: entered promiscuous mode [ 822.656497][T15953] syzkaller0: entered allmulticast mode [ 823.504155][ T10] block nbd0: Possible stuck request ffff888021f88000: control (read@0,4096B). Runtime 300 seconds [ 825.418420][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 825.765422][T16000] syzkaller0: entered promiscuous mode [ 825.786275][T16003] Bluetooth: MGMT ver 1.22 [ 825.793291][T16000] syzkaller0: entered allmulticast mode [ 826.333447][ T28] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 826.555236][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.576174][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 826.597183][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.620782][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 826.636983][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.665405][ T28] usb 4-1: config 0 descriptor?? [ 826.972181][T16011] kernel profiling enabled (shift: 3) [ 827.419408][T12334] syzkaller0: tun_net_xmit 76 [ 827.425179][T16037] syzkaller0: create flow: hash 3716421678 index 2 [ 827.446381][T12334] syzkaller0: tun_net_xmit 48 [ 827.451497][ T5807] syzkaller0: tun_net_xmit 76 [ 827.503819][ T5807] syzkaller0: tun_net_xmit 76 [ 827.770333][T16043] syzkaller0: entered promiscuous mode [ 827.777136][T16043] syzkaller0: entered allmulticast mode [ 827.985716][ T8] syzkaller0: tun_net_xmit 76 [ 828.059120][ T8] usb 4-1: USB disconnect, device number 14 [ 828.104112][T16034] syzkaller0: delete flow: hash 3716421678 index 2 [ 828.894574][T16058] loop3: detected capacity change from 0 to 4096 [ 829.286738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805caaf800: rx timeout, send abort [ 829.786851][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024bcd000: rx timeout, send abort [ 829.796826][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805caaf800: abort rx timeout. Force session deactivation [ 830.301611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024bcd000: abort rx timeout. Force session deactivation [ 830.312187][T12341] Bluetooth: hci1: command tx timeout [ 832.708944][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 832.881764][T16085] syzkaller0: entered promiscuous mode [ 832.897011][T16085] syzkaller0: entered allmulticast mode [ 833.781781][T12341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 833.802420][T12341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 833.814149][T12341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 833.835460][T12341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 833.864283][T12341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 833.873598][T12341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 835.189423][T11622] Bluetooth: hci1: command tx timeout [ 835.983861][T11622] Bluetooth: hci4: command tx timeout [ 836.280801][T16135] syzkaller0: create flow: hash 3716421678 index 2 [ 836.287925][ T5807] syzkaller0: tun_net_xmit 76 [ 836.301819][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 836.336510][T16112] chnl_net:caif_netlink_parms(): no params data found [ 836.440569][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.456599][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.466234][T16112] bridge_slave_0: entered allmulticast mode [ 836.476380][T16112] bridge_slave_0: entered promiscuous mode [ 836.506225][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.520449][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.530757][T16112] bridge_slave_1: entered allmulticast mode [ 836.538825][ T5807] syzkaller0: tun_net_xmit 76 [ 836.550326][T16112] bridge_slave_1: entered promiscuous mode [ 836.620144][T16112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.638846][T16112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.718631][T16112] team0: Port device team_slave_0 added [ 836.742460][T16112] team0: Port device team_slave_1 added [ 836.802990][T16112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.813916][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.841372][T16112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.855476][T16112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.862777][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.889399][T16112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.945205][ T5807] syzkaller0: tun_net_xmit 76 [ 836.989872][T16126] syzkaller0: delete flow: hash 3716421678 index 2 [ 836.998536][ T5807] syzkaller0: tun_net_xmit 76 [ 837.401179][T16153] fuse: Bad value for 'fd' [ 837.448542][T16154] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 838.082473][T12341] Bluetooth: hci4: command tx timeout [ 838.526681][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 838.717839][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.737552][ T8] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 838.747072][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.755711][ T8] usb 2-1: Product: syz [ 838.760033][ T8] usb 2-1: Manufacturer: syz [ 838.764756][ T8] usb 2-1: SerialNumber: syz [ 838.774333][ T8] usb 2-1: config 0 descriptor?? [ 838.792294][ T8] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 839.507336][ T8] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 839.519411][ T8] gspca_pac7302: probe of 2-1:0.0 failed with error -110 [ 839.763107][T10656] usb 2-1: USB disconnect, device number 7 [ 840.099752][T16112] hsr_slave_0: entered promiscuous mode [ 840.108473][T16112] hsr_slave_1: entered promiscuous mode [ 840.115232][T16112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.122816][T16112] Cannot create hsr debugfs directory [ 840.143784][T11622] Bluetooth: hci4: command tx timeout [ 840.392392][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.403620][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.542644][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.554176][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.665211][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.686333][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.783901][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.803409][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.027390][T16112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.047310][T16112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.057955][T16112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.073301][T16112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.288552][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.347924][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.375918][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.383129][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.488278][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.495484][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.594347][T16199] netlink: 'syz.0.2532': attribute type 4 has an invalid length. [ 841.699163][T16199] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2532'. [ 841.874177][ T786] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 841.932468][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.022287][T16112] veth0_vlan: entered promiscuous mode [ 842.043848][T16112] veth1_vlan: entered promiscuous mode [ 842.064979][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 842.084837][T16112] veth0_macvtap: entered promiscuous mode [ 842.086895][ T786] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 842.107339][T16112] veth1_macvtap: entered promiscuous mode [ 842.118507][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.136151][ T786] usb 4-1: Product: syz [ 842.140892][ T786] usb 4-1: Manufacturer: syz [ 842.146433][ T786] usb 4-1: SerialNumber: syz [ 842.148795][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.161489][ T786] usb 4-1: config 0 descriptor?? [ 842.164676][ T786] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 842.177315][ T786] dvb-usb: bulk message failed: -22 (4/0) [ 842.178520][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.184973][ T786] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 842.200731][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.204801][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 842.220715][ T786] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 842.223964][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.235232][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 842.247911][T12341] Bluetooth: hci4: command tx timeout [ 842.252415][ T786] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 842.264259][ T786] usb 4-1: media controller created [ 842.269694][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.282339][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.290802][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.296136][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.317611][ T786] usb 4-1: selecting invalid altsetting 3 [ 842.319852][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.324033][ T786] ttusb2: set interface to alts=3 failed [ 842.335878][T16112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.355622][T16217] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 842.369417][T16201] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 842.382840][T16201] dvb-usb: bulk message failed: -22 (7/0) [ 842.398223][T16201] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 842.450674][T16201] ttusb2: i2c transfer failed. [ 842.515772][ T786] DVB: Unable to find symbol tda10086_attach() [ 842.521982][ T786] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 842.523062][T16218] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 842.536606][ T786] dvb-usb: bulk message failed: -22 (4/0) [ 842.546687][ T786] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 842.552352][T16218] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 842.557379][ T786] dvb-usb: bulk message failed: -22 (5/0) [ 842.572116][ T786] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 842.582808][ T786] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 842.599148][ T786] usb 4-1: USB disconnect, device number 15 [ 842.635388][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.648957][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.683200][ T786] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 842.684657][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.703731][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.714305][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.727239][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.737559][T16112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.748370][T16112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.759787][T16112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.781617][T16219] bond1: (slave gretap1): making interface the new active one [ 842.801166][T16219] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 842.829399][T16217] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 842.851545][T16226] macvlan2: entered promiscuous mode [ 842.857077][T16226] macvlan2: entered allmulticast mode [ 842.863271][T16226] bond1: entered promiscuous mode [ 842.868679][T16226] gretap1: entered promiscuous mode [ 842.874886][T16226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 842.886984][T16226] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 842.899413][T16226] bond1: left promiscuous mode [ 842.907866][T16226] gretap1: left promiscuous mode [ 842.943917][T16112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.952854][T16112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.961987][T16112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.971352][T16112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.177903][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.208790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.258644][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.275961][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.380884][T16228] bond1: entered promiscuous mode [ 843.386691][T16228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.541603][T16235] loop2: detected capacity change from 0 to 4096 [ 843.592903][T16241] handle_userfault: 14 callbacks suppressed [ 843.592918][T16241] FAULT_FLAG_ALLOW_RETRY missing 801 [ 843.615609][T16241] CPU: 0 PID: 16241 Comm: syz.3.2543 Not tainted syzkaller #0 [ 843.623123][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 843.633212][T16241] Call Trace: [ 843.636539][T16241] [ 843.639511][T16241] dump_stack_lvl+0x18c/0x250 [ 843.644402][T16241] ? show_regs_print_info+0x20/0x20 [ 843.649640][T16241] ? load_image+0x420/0x420 [ 843.654214][T16241] ? assert_fault_locked+0x17f/0x3a0 [ 843.659573][T16241] handle_userfault+0x1139/0x1300 [ 843.664905][T16241] ? userfaultfd_wp_unpopulated+0xa0/0xa0 [ 843.670678][T16241] ? do_raw_spin_unlock+0x121/0x230 [ 843.675948][T16241] ? free_unref_page+0x190/0x2e0 [ 843.680924][T16241] handle_mm_fault+0x3ef2/0x4c00 [ 843.685860][T16241] ? handle_mm_fault+0xe7/0x4c00 [ 843.690808][T16241] ? numa_migrate_prep+0x350/0x350 [ 843.695908][T16241] ? follow_page_pte+0x6dd/0x1ac0 [ 843.700970][T16241] ? pmd_lock+0x60/0x60 [ 843.705131][T16241] __get_user_pages+0x5d0/0x1380 [ 843.710065][T16241] ? khugepaged_enter_vma+0x114/0x120 [ 843.715466][T16241] ? populate_vma_page_range+0x380/0x380 [ 843.721101][T16241] populate_vma_page_range+0x2c1/0x380 [ 843.726568][T16241] ? fixup_user_fault+0x700/0x700 [ 843.731769][T16241] ? vma_set_page_prot+0x12e/0x3e0 [ 843.736882][T16241] mprotect_fixup+0x981/0xca0 [ 843.741565][T16241] ? change_protection+0x3200/0x3200 [ 843.746843][T16241] ? apparmor_file_mprotect+0xfe/0x120 [ 843.752327][T16241] ? bpf_lsm_file_mprotect+0x9/0x10 [ 843.757523][T16241] do_mprotect_pkey+0x7c2/0xcb0 [ 843.762377][T16241] ? prot_none_test+0x10/0x10 [ 843.767073][T16241] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 843.773165][T16241] __x64_sys_mprotect+0x80/0x90 [ 843.778118][T16241] do_syscall_64+0x55/0xa0 [ 843.782595][T16241] ? clear_bhb_loop+0x40/0x90 [ 843.787332][T16241] ? clear_bhb_loop+0x40/0x90 [ 843.792014][T16241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.798074][T16241] RIP: 0033:0x7f7654f9cdd9 [ 843.802507][T16241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.822133][T16241] RSP: 002b:00007f7655f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 843.830572][T16241] RAX: ffffffffffffffda RBX: 00007f7655215fa0 RCX: 00007f7654f9cdd9 [ 843.838726][T16241] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 843.846707][T16241] RBP: 00007f7655032d69 R08: 0000000000000000 R09: 0000000000000000 [ 843.854691][T16241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.862665][T16241] R13: 00007f7655216038 R14: 00007f7655215fa0 R15: 00007ffe3a63ff88 [ 843.870648][T16241] [ 844.223593][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 844.313510][T11622] Bluetooth: hci4: command tx timeout [ 844.992323][T16266] syzkaller0: entered promiscuous mode [ 845.022165][T16266] syzkaller0: entered allmulticast mode [ 845.217325][T16270] loop2: detected capacity change from 0 to 32768 [ 845.247196][T16270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2554 (16270) [ 845.264481][T16270] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 845.275136][T16270] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 845.283820][T16270] BTRFS info (device loop2): using free space tree [ 845.327203][T16270] BTRFS info (device loop2): enabling ssd optimizations [ 845.334261][T16270] BTRFS info (device loop2): auto enabling async discard [ 846.079332][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 846.107418][T16112] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 846.384516][T12341] Bluetooth: hci4: command tx timeout [ 847.201954][T16304] syzkaller0: delete flow: hash 3716421678 index 2 [ 847.842217][T16332] loop2: detected capacity change from 0 to 32768 [ 847.861985][T16332] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2567 (16332) [ 847.883810][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'. [ 847.894290][T16332] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 847.904624][T16332] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 847.913228][T16332] BTRFS info (device loop2): using free space tree [ 848.046447][T16332] BTRFS info (device loop2): enabling ssd optimizations [ 848.053487][T16332] BTRFS info (device loop2): auto enabling async discard [ 848.483456][T12341] Bluetooth: hci4: command tx timeout [ 849.238304][T16367] binder: BINDER_SET_CONTEXT_MGR already set [ 849.260139][T16112] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 849.266610][T16367] binder: 16365:16367 ioctl 4018620d 200000000040 returned -16 [ 849.908170][ T2195] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 850.120218][ T2195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.136284][ T2195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 850.147568][ T2195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.160521][ T2195] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 850.169714][ T2195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.189083][ T2195] usb 2-1: config 0 descriptor?? [ 850.429696][ T2195] usb 2-1: USB disconnect, device number 8 [ 850.547088][T12341] Bluetooth: hci4: command tx timeout [ 852.626470][T11622] Bluetooth: hci4: command tx timeout [ 853.317507][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2583'. [ 853.592069][ T10] block nbd0: Possible stuck request ffff888021f88000: control (read@0,4096B). Runtime 330 seconds [ 853.759332][T16422] syzkaller0: entered promiscuous mode [ 853.765546][T16422] syzkaller0: entered allmulticast mode [ 854.075270][T16429] binder: BINDER_SET_CONTEXT_MGR already set [ 854.093443][T16429] binder: 16428:16429 ioctl 4018620d 200000000040 returned -16 [ 854.341570][T16435] fuse: Unknown parameter '0x0000000000000003' [ 854.674691][T10656] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 854.713600][T12341] Bluetooth: hci4: command tx timeout [ 854.923430][T10656] usb 3-1: Using ep0 maxpacket: 16 [ 854.930971][T10656] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.953863][T10656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.983390][T10656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 855.014130][T10656] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 855.033646][T10656] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.071720][T10656] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 855.101475][T10656] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 855.126147][T10656] usb 3-1: Manufacturer: syz [ 855.154997][T10656] usb 3-1: config 0 descriptor?? [ 855.533560][T10656] rc_core: IR keymap rc-hauppauge not found [ 855.539705][T10656] Registered IR keymap rc-empty [ 855.545212][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.583457][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.614053][T10656] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 855.645606][T10656] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 855.699016][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.744682][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.790028][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.833571][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.873789][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.914672][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.953552][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.973737][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.024575][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.072043][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.116933][T10656] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 856.126722][T10656] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 856.794925][T12341] Bluetooth: hci4: command tx timeout [ 857.668158][ T5807] usb 3-1: USB disconnect, device number 14 [ 857.726556][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2594'. [ 859.178241][ T5807] IPVS: starting estimator thread 0... [ 859.203979][T16478] binder: 16476:16478 ioctl c0306201 0 returned -14 [ 859.224309][T16477] binder: 16476:16477 ioctl c0306201 0 returned -14 [ 859.303552][T16479] IPVS: using max 37 ests per chain, 88800 per kthread [ 859.508963][T16483] syzkaller0: entered promiscuous mode [ 859.540563][T16483] syzkaller0: entered allmulticast mode [ 859.601698][T16486] fuse: Unknown parameter '0x0000000000000003' [ 859.821081][T16488] loop0: detected capacity change from 0 to 4096 [ 859.873825][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 860.073438][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 861.509762][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.587367][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.598588][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.739977][T16491] loop3: detected capacity change from 0 to 32768 [ 861.756562][T16491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2605 (16491) [ 861.781038][ T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 861.781084][T16491] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 861.800968][T16491] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 861.809619][T16491] BTRFS info (device loop3): using free space tree [ 861.853541][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.912978][ T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 861.930383][ T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 861.940789][ T786] usb 2-1: Manufacturer: syz [ 861.950808][ T786] usb 2-1: config 0 descriptor?? [ 861.956094][T16491] BTRFS info (device loop3): enabling ssd optimizations [ 861.963053][T16491] BTRFS info (device loop3): auto enabling async discard [ 862.063702][T12341] Bluetooth: hci3: command 0x0405 tx timeout [ 862.643542][ T786] rc_core: IR keymap rc-hauppauge not found [ 862.649496][ T786] Registered IR keymap rc-empty [ 862.692756][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 862.744344][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 862.844369][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 862.846002][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 862.864856][T14884] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 862.882058][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 862.904803][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 862.933779][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 862.963613][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.060866][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.085523][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.113568][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.144741][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.177399][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.213460][ T786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 863.245856][ T786] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 863.245881][ T786] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 863.393468][ T5760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5760) [ 866.008442][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2608'. [ 866.033789][T15625] usb 2-1: USB disconnect, device number 9 [ 866.124528][ T11] tipc: Left network mode [ 866.317204][T16547] loop1: detected capacity change from 0 to 4096 [ 866.324220][T16546] syzkaller0: entered promiscuous mode [ 866.329923][T16546] syzkaller0: entered allmulticast mode [ 867.503953][ T786] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 867.623644][ T5807] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 867.706242][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.734107][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 867.760674][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.792443][T16565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2621'. [ 867.808091][ T786] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 867.862279][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.880094][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.918570][ T5807] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 867.932926][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.969549][ T786] usb 3-1: config 0 descriptor?? [ 867.979110][T16567] fuse: Unknown parameter '0x0000000000000003' [ 867.985652][ T5807] usb 1-1: Product: syz [ 867.985671][ T5807] usb 1-1: Manufacturer: syz [ 867.985684][ T5807] usb 1-1: SerialNumber: syz [ 867.991878][ T5807] usb 1-1: config 0 descriptor?? [ 868.008993][ T11] hsr_slave_0: left promiscuous mode [ 868.040114][ T11] hsr_slave_1: left promiscuous mode [ 868.052665][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.065998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.081369][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.094028][ T5807] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 868.109338][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.122358][ T11] bridge_slave_1: left allmulticast mode [ 868.137055][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.161999][ T11] bridge_slave_0: left allmulticast mode [ 868.172944][ T11] bridge_slave_0: left promiscuous mode [ 868.186054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.241151][T15276] usb 3-1: USB disconnect, device number 15 [ 868.325376][ T11] veth1_macvtap: left promiscuous mode [ 868.336530][ T786] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 868.347571][ T11] veth0_macvtap: left promiscuous mode [ 868.363665][ T11] veth1_vlan: left promiscuous mode [ 868.369033][ T11] veth0_vlan: left promiscuous mode [ 868.523601][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 868.544116][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.572328][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.597333][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 868.613585][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 868.633544][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.646891][ T5807] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 868.656512][ T5807] gspca_pac7302: probe of 1-1:0.0 failed with error -110 [ 868.665181][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.677298][ T786] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 868.688323][ T786] usb 4-1: Manufacturer: syz [ 868.729018][ T786] usb 4-1: config 0 descriptor?? [ 868.858992][ T28] usb 1-1: USB disconnect, device number 8 [ 869.143579][ T786] rc_core: IR keymap rc-hauppauge not found [ 869.158095][ T786] Registered IR keymap rc-empty [ 869.168298][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.213634][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.270633][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 869.334694][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 869.398105][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.494728][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.523765][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.553478][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.584797][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.613648][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.663526][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.723619][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.773554][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.806266][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 869.846704][ T786] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 869.856087][ T786] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 870.236902][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.253027][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.265454][ T11] team0 (unregistering): Port device team_slave_1 removed [ 870.331287][ T11] team0 (unregistering): Port device team_slave_0 removed [ 870.405093][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.477921][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.032572][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 871.164263][ T11] bond0 (unregistering): Released all slaves [ 871.323997][T16576] syzkaller0: entered promiscuous mode [ 871.329526][T16576] syzkaller0: entered allmulticast mode [ 871.411489][ T5808] usb 4-1: USB disconnect, device number 17 [ 871.555162][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2631'. [ 871.975330][ T11] IPVS: stop unused estimator thread 0... [ 872.778706][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2644'. [ 873.202845][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.223423][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.258024][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.270783][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.281263][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.292808][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.306852][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.323437][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.354036][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.417550][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.470493][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.485318][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.860974][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'. [ 874.623791][T12341] Bluetooth: hci4: command tx timeout [ 876.017846][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.041709][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.090156][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.123458][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.143516][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.172870][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.192745][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.207988][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.230391][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.241433][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.254288][T16717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.266274][T16717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.023587][T12341] Bluetooth: hci4: command tx timeout [ 877.933435][ T786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 878.123727][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 878.135955][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.140137][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.149435][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.172564][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 878.177248][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.182849][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 878.207394][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.214694][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.221864][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 878.233959][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.249726][ T786] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 878.250387][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.260812][ T786] usb 4-1: Manufacturer: syz [ 878.268749][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.284834][ T786] usb 4-1: config 0 descriptor?? [ 878.285751][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.300825][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.311061][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.325082][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.335374][T16768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.346215][T16768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.573448][ T786] rc_core: IR keymap rc-hauppauge not found [ 878.579458][ T786] Registered IR keymap rc-empty [ 878.584525][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.613489][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.644564][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 878.661435][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 878.694771][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.723775][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.757331][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.793953][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.837787][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.898208][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.919476][T16754] program syz.3.2677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 878.943599][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 878.984232][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.024048][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.065420][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.107442][T12341] Bluetooth: hci4: command tx timeout [ 879.133553][ T786] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 879.179760][ T786] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 879.527455][T16801] vivid-001: disconnect [ 880.348571][T16797] vivid-001: reconnect [ 880.445971][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2692'. [ 881.158091][T16818] fuse: Unknown parameter '0x0000000000000003' [ 881.346969][T11622] Bluetooth: hci4: command tx timeout [ 881.493649][T10656] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 881.713487][T10656] usb 3-1: Using ep0 maxpacket: 16 [ 881.722797][T10656] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.736963][T10656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.751540][T10656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 881.761413][T10656] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 881.771223][T10656] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.786500][T10656] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 881.795747][T10656] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 881.803949][T10656] usb 3-1: Manufacturer: syz [ 881.815025][T10656] usb 3-1: config 0 descriptor?? [ 882.133400][T10656] rc_core: IR keymap rc-hauppauge not found [ 882.140646][T10656] Registered IR keymap rc-empty [ 882.146066][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.184272][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.218967][T10656] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 882.236222][T10656] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input35 [ 882.255124][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.283573][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.324904][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.366711][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.414228][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.493536][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.523702][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.554126][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.594044][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.623914][T10656] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 882.655475][T10656] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 882.655500][T10656] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 882.678495][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 882.900191][ T786] usb 3-1: USB disconnect, device number 16 [ 883.665789][ T10] block nbd0: Possible stuck request ffff888021f88000: control (read@0,4096B). Runtime 360 seconds [ 883.743401][T12341] Bluetooth: hci4: command tx timeout [ 883.753408][ T5808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 883.913473][ T5808] usb 2-1: device descriptor read/64, error -71 [ 884.089434][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.104549][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.118906][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.131858][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.144585][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.157725][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.179179][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.190036][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.201054][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.212147][ T5808] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 884.219992][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.230522][T16859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.241805][T16859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.384072][ T5808] usb 2-1: device descriptor read/64, error -71 [ 884.506436][ T5808] usb usb2-port1: attempt power cycle [ 884.650779][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 884.933904][ T5808] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 884.985502][ T5808] usb 2-1: device descriptor read/8, error -71 [ 885.233506][T16879] fuse: Unknown parameter '0x0000000000000003' [ 885.263500][ T5808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 885.304356][ T5808] usb 2-1: device descriptor read/8, error -71 [ 885.433881][ T5808] usb usb2-port1: unable to enumerate USB device [ 885.524478][T15625] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 885.723372][T15625] usb 1-1: Using ep0 maxpacket: 16 [ 885.730903][T15625] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.755668][T15625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.770867][T15625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 885.783795][T15625] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 885.800660][T15625] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.829424][T15625] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 885.845693][T15625] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 885.864146][T15625] usb 1-1: Manufacturer: syz [ 885.876759][T15625] usb 1-1: config 0 descriptor?? [ 886.163498][T15625] rc_core: IR keymap rc-hauppauge not found [ 886.171208][T15625] Registered IR keymap rc-empty [ 886.181977][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.223622][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.264399][T15625] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 886.284701][T15625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input36 [ 886.310806][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.357561][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.393455][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.445363][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.485422][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.533928][ T786] usb 4-1: USB disconnect, device number 18 [ 886.553563][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.613687][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.678635][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.715583][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.743530][T15625] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 886.785340][T15625] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 886.785364][T15625] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 886.992216][T15625] usb 1-1: USB disconnect, device number 9 [ 887.186226][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'. [ 887.385459][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.426982][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.466543][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.509874][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.563422][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.626224][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.664594][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.699506][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.713755][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.741592][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.752967][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.781507][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.132008][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 888.194591][ T786] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 888.243476][T15625] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 888.390046][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.406125][ T786] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 888.415975][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.424141][ T786] usb 1-1: Product: syz [ 888.428844][ T786] usb 1-1: Manufacturer: syz [ 888.433466][T15625] usb 4-1: device descriptor read/64, error -71 [ 888.461931][ T786] usb 1-1: SerialNumber: syz [ 888.481994][ T786] usb 1-1: config 0 descriptor?? [ 888.529863][ T786] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 888.543770][ T2195] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 888.706426][T15625] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 888.781170][ T2195] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 888.789636][ T2195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.805727][ T2195] usb 2-1: config 0 has no interface number 0 [ 888.812273][ T2195] usb 2-1: config 0 interface 205 has no altsetting 0 [ 888.826421][ T2195] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 888.837049][ T2195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.845615][ T2195] usb 2-1: Product: syz [ 888.851150][ T2195] usb 2-1: Manufacturer: syz [ 888.856650][ T2195] usb 2-1: SerialNumber: syz [ 888.872663][ T2195] usb 2-1: config 0 descriptor?? [ 888.887044][ T2195] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 888.900503][ T2195] dvb-usb: bulk message failed: -22 (3/0) [ 888.903468][T15625] usb 4-1: device descriptor read/64, error -71 [ 888.933120][ T786] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 888.954867][ T2195] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 888.963684][ T786] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 888.975435][ T2195] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 888.990953][ T786] usb 1-1: USB disconnect, device number 10 [ 889.002141][ T2195] usb 2-1: media controller created [ 889.025314][ T2195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 889.034973][T15625] usb usb4-port1: attempt power cycle [ 889.072169][ T2195] dvb-usb: bulk message failed: -22 (6/0) [ 889.093215][ T2195] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 889.147055][ T2195] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 889.231708][ T2195] dvb-usb: schedule remote query interval to 150 msecs. [ 889.247822][ T2195] dvb-usb: bulk message failed: -22 (3/0) [ 889.315559][ T2195] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 889.369868][T16940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2734'. [ 889.414173][ T2195] dvb-usb: bulk message failed: -22 (1/0) [ 889.444167][ T2195] dvb-usb: error while querying for an remote control event. [ 889.463613][T15625] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 889.494978][T15625] usb 4-1: device descriptor read/8, error -71 [ 889.633696][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 889.639656][ T786] dvb-usb: error while querying for an remote control event. [ 889.776290][T15625] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 889.813951][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 889.827857][T15625] usb 4-1: device descriptor read/8, error -71 [ 889.834331][ T786] dvb-usb: error while querying for an remote control event. [ 889.953624][T15625] usb usb4-port1: unable to enumerate USB device [ 890.003457][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 890.010092][ T786] dvb-usb: error while querying for an remote control event. [ 890.173453][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 890.179319][ T786] dvb-usb: error while querying for an remote control event. [ 890.353456][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 890.359311][ T786] dvb-usb: error while querying for an remote control event. [ 890.525577][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 890.535360][ T786] dvb-usb: error while querying for an remote control event. [ 890.645573][T16963] batadv_slave_1: entered promiscuous mode [ 890.705282][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 890.711484][ T786] dvb-usb: error while querying for an remote control event. [ 890.870610][T16963] batadv_slave_1: left promiscuous mode [ 890.900415][T15276] dvb-usb: bulk message failed: -22 (1/0) [ 890.918463][T15276] dvb-usb: error while querying for an remote control event. [ 891.095570][ T786] dvb-usb: bulk message failed: -22 (1/0) [ 891.113249][ T786] dvb-usb: error while querying for an remote control event. [ 891.176599][ T28] usb 2-1: USB disconnect, device number 14 [ 891.223439][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2742'. [ 891.320112][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 891.451804][T16971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.500939][T16975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.508006][T16975] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 891.525529][T16975] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 891.636605][T16971] wireguard0: entered promiscuous mode [ 892.397538][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.412210][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.423781][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.453505][T15625] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 892.456469][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.476411][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.488965][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.506708][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.528444][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.542068][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.549523][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 892.556049][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.575697][T16995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.588476][T16995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.613520][T15625] usb 1-1: device descriptor read/64, error -71 [ 892.903693][T15625] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 893.053850][T15625] usb 1-1: device descriptor read/64, error -71 [ 893.163637][ T786] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 893.173932][T15625] usb usb1-port1: attempt power cycle [ 893.226959][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2761'. [ 893.363791][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 893.370879][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.386161][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.399823][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 893.414652][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 893.426968][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.443349][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 893.457304][ T786] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 893.465908][ T786] usb 4-1: Manufacturer: syz [ 893.478228][ T786] usb 4-1: config 0 descriptor?? [ 893.593465][T15625] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 893.626807][T15625] usb 1-1: device descriptor read/8, error -71 [ 893.743547][ T786] rc_core: IR keymap rc-hauppauge not found [ 893.749697][ T786] Registered IR keymap rc-empty [ 893.754777][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.783703][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.824341][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 893.847287][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 893.878093][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.893887][T15625] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 893.923673][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 893.939810][T15625] usb 1-1: device descriptor read/8, error -71 [ 893.973477][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.013894][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.043536][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.064202][T15625] usb usb1-port1: unable to enumerate USB device [ 894.083640][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.099403][T17010] program syz.3.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.114210][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.153459][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.203714][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.229113][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 894.243548][ T786] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 894.281433][ T786] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 894.303535][ T786] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 894.533207][T17050] binder: BINDER_SET_CONTEXT_MGR already set [ 894.539694][T17050] binder: 17049:17050 ioctl 4018620d 200000001000 returned -16 [ 895.362503][T17057] fuse: Bad value for 'group_id' [ 895.552076][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2779'. [ 895.763507][T15625] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 895.966584][T15625] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 895.977741][T15625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.988821][T15625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.998664][T15625] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 896.013389][T15625] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 896.022749][T15625] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 896.030945][T15625] usb 1-1: Manufacturer: syz [ 896.038641][T15625] usb 1-1: config 0 descriptor?? [ 896.467172][T15625] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 896.485631][T15625] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 896.507462][T15625] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 896.950194][T17084] binder: BINDER_SET_CONTEXT_MGR already set [ 896.958019][T17084] binder: 17083:17084 ioctl 4018620d 200000001000 returned -16 [ 896.967178][ T28] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 897.143508][ T28] usb 3-1: device descriptor read/64, error -71 [ 897.240176][ T2195] usb 1-1: USB disconnect, device number 15 [ 897.423507][ T28] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 897.487382][ T5808] usb 4-1: USB disconnect, device number 23 [ 897.552064][T17086] fuse: Bad value for 'group_id' [ 897.594015][ T28] usb 3-1: device descriptor read/64, error -71 [ 897.652986][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 897.724973][ T28] usb usb3-port1: attempt power cycle [ 897.940819][T17100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.965503][T17100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.972527][T17100] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 897.984108][T17100] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 898.013239][T17102] wireguard0: entered promiscuous mode [ 898.083914][ T5808] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 898.153571][ T28] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 898.184654][ T28] usb 3-1: device descriptor read/8, error -71 [ 898.273815][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 898.280759][ T5808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 898.290293][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.301173][ T5808] usb 4-1: config 0 descriptor?? [ 898.463554][ T28] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 898.494924][ T28] usb 3-1: device descriptor read/8, error -71 [ 898.512755][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 898.523034][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.533591][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 898.540767][ T5808] usb 4-1: media controller created [ 898.557779][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.613741][ T28] usb usb3-port1: unable to enumerate USB device [ 898.717576][ T5808] az6027: usb out operation failed. (-71) [ 898.729106][ T5808] az6027: usb out operation failed. (-71) [ 898.736420][ T5808] stb0899_attach: Driver disabled by Kconfig [ 898.746513][ T5808] az6027: no front-end attached [ 898.746513][ T5808] [ 898.754728][ T5808] az6027: usb out operation failed. (-71) [ 898.760486][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 898.769772][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 898.799472][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 898.807123][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 898.831740][ T5808] usb 4-1: USB disconnect, device number 24 [ 898.902644][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 899.049869][ T23] IPVS: starting estimator thread 0... [ 899.123444][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 899.153593][T17113] IPVS: using max 23 ests per chain, 55200 per kthread [ 899.283616][T15625] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 899.323481][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 899.330928][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.341388][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.355360][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 899.366971][ T28] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 899.381348][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.404482][ T28] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.418616][ T28] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.427166][ T28] usb 2-1: Manufacturer: syz [ 899.435034][ T28] usb 2-1: config 0 descriptor?? [ 899.717833][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'. [ 899.730067][ T786] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 899.764273][ T28] rc_core: IR keymap rc-hauppauge not found [ 899.783675][ T28] Registered IR keymap rc-empty [ 899.788698][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 899.823743][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 899.865183][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 899.888823][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 899.892333][T17122] binder: BINDER_SET_CONTEXT_MGR already set [ 899.906375][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 899.914838][T17122] binder: 17121:17122 ioctl 4018620d 200000001000 returned -16 [ 899.947417][ T786] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 899.953700][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 899.961440][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 899.974825][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 899.984468][ T786] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 899.992790][ T786] usb 4-1: Product: syz [ 899.997424][ T786] usb 4-1: Manufacturer: syz [ 900.002051][ T786] usb 4-1: SerialNumber: syz [ 900.003621][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.015151][ T786] usb 4-1: config 0 descriptor?? [ 900.021122][T17115] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 900.038467][ T786] usb 4-1: selecting invalid altsetting 0 [ 900.053782][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.055632][T17109] program syz.1.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.085000][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.151444][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.193699][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.234517][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.275462][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.315302][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 900.375788][ T28] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 900.386051][ T28] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 900.938382][T17134] binder: 17133:17134 ioctl c0306201 0 returned -14 [ 902.503856][ T786] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 902.582665][ T5807] usb 4-1: USB disconnect, device number 25 [ 902.664431][ T786] usb 3-1: device descriptor read/64, error -71 [ 902.700574][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 902.953844][ T786] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 903.034770][T11622] Bluetooth: hci0: command 0x0406 tx timeout [ 903.124466][ T786] usb 3-1: device descriptor read/64, error -71 [ 903.211466][T17156] binder: 17155:17156 ioctl c0306201 0 returned -14 [ 903.253955][ T786] usb usb3-port1: attempt power cycle [ 903.562605][ T2195] usb 2-1: USB disconnect, device number 15 [ 903.653581][T15625] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 903.683540][ T786] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 903.714070][ T786] usb 3-1: device descriptor read/8, error -71 [ 903.962619][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'. [ 903.983486][ T786] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 904.024157][ T786] usb 3-1: device descriptor read/8, error -71 [ 904.144921][ T786] usb usb3-port1: unable to enumerate USB device [ 905.023583][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 905.223659][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 905.231328][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.242179][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.253742][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 905.278160][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 905.283521][ T786] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 905.300497][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.315314][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 905.324925][ T23] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 905.333058][ T23] usb 2-1: Manufacturer: syz [ 905.345473][ T23] usb 2-1: config 0 descriptor?? [ 905.460386][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 905.472185][ T786] usb 4-1: device descriptor read/64, error -71 [ 905.663485][ T23] rc_core: IR keymap rc-hauppauge not found [ 905.669702][ T23] Registered IR keymap rc-empty [ 905.675144][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.713451][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.753551][ T786] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 905.755129][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 905.777240][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 905.793133][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.833742][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.873496][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.885479][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f0d3000: rx timeout, send abort [ 905.906488][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.913517][ T786] usb 4-1: device descriptor read/64, error -71 [ 905.954043][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 905.978009][T17183] program syz.1.2820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 905.987544][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 906.033608][ T786] usb usb4-port1: attempt power cycle [ 906.033608][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 906.064413][ T29] INFO: task udevd:5781 blocked for more than 143 seconds. [ 906.072241][ T29] Not tainted syzkaller #0 [ 906.077706][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 906.093551][ T29] task:udevd state:D stack:24168 pid:5781 ppid:5138 flags:0x00004006 [ 906.094925][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 906.113507][ T29] Call Trace: [ 906.118035][ T29] [ 906.121031][ T29] __schedule+0x1553/0x45a0 [ 906.132284][ T29] ? asan.module_dtor+0x20/0x20 [ 906.142992][ T29] ? mark_lock+0x94/0x320 [ 906.147848][ T29] ? lock_chain_count+0x20/0x20 [ 906.152733][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 906.153548][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 906.163676][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 906.170769][ T29] schedule+0xbd/0x170 [ 906.175802][ T29] io_schedule+0x80/0xd0 [ 906.180123][ T29] folio_wait_bit_common+0x714/0xfa0 [ 906.185903][ T29] ? folio_wait_bit+0x30/0x30 [ 906.190611][ T29] ? _compound_head+0x120/0x120 [ 906.195982][ T29] ? filemap_add_folio+0x192/0x3c0 [ 906.201139][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 906.203607][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 906.206978][ T29] ? blkdev_writepage+0x30/0x30 [ 906.218819][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 906.224236][ T29] ? blkdev_writepage+0x30/0x30 [ 906.229135][ T29] read_part_sector+0xd2/0x340 [ 906.234038][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 906.239611][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 906.245024][ T29] ? put_partition+0x370/0x370 [ 906.249819][ T29] ? alloc_pages+0x4dc/0x740 [ 906.254853][ T29] bdev_disk_changed+0x740/0x1420 [ 906.257544][ T23] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 906.259908][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 906.259937][ T29] ? iput+0x343/0x920 [ 906.259961][ T29] blkdev_get_whole+0x30d/0x390 [ 906.275536][ T23] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 906.279033][ T29] blkdev_get_by_dev+0x279/0x600 [ 906.299632][ T29] blkdev_open+0x152/0x360 [ 906.306280][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 906.310918][ T29] do_dentry_open+0x8c6/0x1500 [ 906.319147][ T29] path_openat+0x27f1/0x3230 [ 906.331962][ T29] ? do_sys_openat2+0xda/0x1d0 [ 906.346597][ T29] ? verify_lock_unused+0x140/0x140 [ 906.351873][ T29] ? do_filp_open+0x430/0x430 [ 906.363724][ T29] ? __virt_addr_valid+0x18c/0x540 [ 906.369748][ T29] do_filp_open+0x1f5/0x430 [ 906.374841][ T29] ? vfs_tmpfile+0x490/0x490 [ 906.379856][ T29] ? _raw_spin_unlock+0x28/0x40 [ 906.385250][ T29] ? alloc_fd+0x58f/0x630 [ 906.385594][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f0d3400: rx timeout, send abort [ 906.389960][ T29] do_sys_openat2+0x134/0x1d0 [ 906.397957][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f0d3000: abort rx timeout. Force session deactivation [ 906.403356][ T29] ? do_sys_open+0xe0/0xe0 [ 906.428033][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 906.434714][ T29] ? lock_chain_count+0x20/0x20 [ 906.439813][ T29] __x64_sys_openat+0x139/0x160 [ 906.443576][ T786] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 906.445574][ T29] do_syscall_64+0x55/0xa0 [ 906.458364][ T29] ? clear_bhb_loop+0x40/0x90 [ 906.463243][ T29] ? clear_bhb_loop+0x40/0x90 [ 906.483671][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.484108][ T786] usb 4-1: device descriptor read/8, error -71 [ 906.489781][ T29] RIP: 0033:0x7fc8e8ea7407 [ 906.507110][ T29] RSP: 002b:00007ffc9e5d0f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 906.517478][ T29] RAX: ffffffffffffffda RBX: 00007fc8e963d880 RCX: 00007fc8e8ea7407 [ 906.526162][ T29] RDX: 00000000000a0800 RSI: 000055a61c3624d0 RDI: ffffffffffffff9c [ 906.534559][ T29] RBP: 000055a61c361910 R08: 0000000000000000 R09: 0000000000000000 [ 906.542606][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a61c374e20 [ 906.551239][ T29] R13: 000055a61c379410 R14: 0000000000000000 R15: 000055a61c374e20 [ 906.559314][ T29] [ 906.562419][ T29] [ 906.562419][ T29] Showing all locks held in the system: [ 906.571029][ T29] 1 lock held by khungtaskd/29: [ 906.576034][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 906.586085][ T29] 5 locks held by kworker/0:2/786: [ 906.591251][ T29] #0: ffff888019aa1138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.603168][ T29] #1: ffffc90003a17d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.615288][ T29] #2: ffff88814332c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 906.624392][ T29] #3: ffff88814332f508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21d0/0x49f0 [ 906.634466][ T29] #4: ffff888142ff7968 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21f8/0x49f0 [ 906.644251][ T29] 2 locks held by kworker/u4:5/795: [ 906.649489][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 906.659548][ T29] #1: ffffc900042a7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.672527][ T29] 2 locks held by kworker/0:3/2195: [ 906.677908][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.689233][ T29] #1: ffffc900058e7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.701359][ T29] 2 locks held by getty/5528: [ 906.706814][ T29] #0: ffff88814c9eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 906.716694][ T29] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 906.726917][ T29] 1 lock held by udevd/5781: [ 906.731514][ T29] #0: ffff888021e124c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 906.741622][ T29] 6 locks held by kworker/1:2/15625: [ 906.747145][ T29] #0: ffff888019aa1138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.758606][ T29] #1: ffffc900036efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 906.763478][ T786] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 906.770620][ T29] #2: ffff888142f15190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 906.787320][ T29] #3: ffff88805db9b508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21d0/0x49f0 [ 906.797326][ T29] #4: ffff8881427a4368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21f8/0x49f0 [ 906.807082][ T29] #5: ffffffff8dcc9590 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x164/0x1730 [ 906.808074][ T786] usb 4-1: device descriptor read/8, error -71 [ 906.817622][ T29] 1 lock held by syz.1.2820/17183: [ 906.817641][ T29] #0: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 906.817758][ T29] [ 906.817763][ T29] ============================================= [ 906.817763][ T29] [ 906.817771][ T29] NMI backtrace for cpu 1 [ 906.854848][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 906.862041][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.872126][ T29] Call Trace: [ 906.875395][ T29] [ 906.878314][ T29] dump_stack_lvl+0x18c/0x250 [ 906.882988][ T29] ? show_regs_print_info+0x20/0x20 [ 906.888440][ T29] ? load_image+0x420/0x420 [ 906.892942][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 906.897845][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f0d3400: abort rx timeout. Force session deactivation [ 906.907908][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 906.914061][ T29] ? _printk+0xde/0x130 [ 906.918210][ T29] ? load_image+0x420/0x420 [ 906.922704][ T29] ? load_image+0x420/0x420 [ 906.927200][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 906.933269][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 906.939251][ T29] watchdog+0xf3d/0xf80 [ 906.943427][ T29] ? watchdog+0x1e1/0xf80 [ 906.947762][ T29] kthread+0x2fa/0x390 [ 906.951820][ T29] ? hungtask_pm_notify+0x90/0x90 [ 906.956838][ T29] ? kthread_blkcg+0xd0/0xd0 [ 906.961415][ T29] ret_from_fork+0x48/0x80 [ 906.965818][ T29] ? kthread_blkcg+0xd0/0xd0 [ 906.970393][ T29] ret_from_fork_asm+0x11/0x20 [ 906.975242][ T29] [ 906.978747][ T29] Sending NMI from CPU 1 to CPUs 0: [ 906.984230][ C0] NMI backtrace for cpu 0 [ 906.984240][ C0] CPU: 0 PID: 795 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 906.984254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.984263][ C0] Workqueue: bat_events batadv_nc_worker [ 906.984363][ C0] RIP: 0010:rcu_is_watching+0x8/0xb0 [ 906.984385][ C0] Code: 1e 85 15 09 48 c7 c7 40 89 13 8d 4c 89 f6 e8 7f 67 ec 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 <53> 65 ff 05 d8 d0 92 7e e8 db 9a 15 09 89 c3 83 f8 08 73 60 49 bf [ 906.984398][ C0] RSP: 0018:ffffc900042a7b48 EFLAGS: 00000202 [ 906.984410][ C0] RAX: ffffffff8a4dcaaf RBX: 0000000000000001 RCX: 0000000000000000 [ 906.984420][ C0] RDX: ffff88802149da00 RSI: 0000000000000001 RDI: 0000000000000000 [ 906.984430][ C0] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 906.984440][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: dffffc0000000000 [ 906.984451][ C0] R13: ffffffff8a4dc982 R14: ffff88807eed0c80 R15: 00000000000001f0 [ 906.984464][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 906.984482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.984492][ C0] CR2: 000000110c2c0352 CR3: 000000002f6fd000 CR4: 00000000003506f0 [ 906.984505][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 906.984515][ C0] DR3: ffffffffafffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 906.984524][ C0] Call Trace: [ 906.984529][ C0] [ 906.984536][ C0] batadv_nc_worker+0x208/0x610 [ 906.984552][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 906.984571][ C0] process_scheduled_works+0xa5d/0x15d0 [ 906.984600][ C0] ? worker_attach_to_pool+0x380/0x380 [ 906.984620][ C0] ? assign_work+0x3d2/0x5d0 [ 906.984639][ C0] worker_thread+0xa55/0xfc0 [ 906.984655][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 906.984673][ C0] ? _raw_spin_unlock+0x40/0x40 [ 906.984688][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 906.984714][ C0] kthread+0x2fa/0x390 [ 906.984726][ C0] ? pr_cont_work+0x560/0x560 [ 906.984743][ C0] ? kthread_blkcg+0xd0/0xd0 [ 906.984756][ C0] ret_from_fork+0x48/0x80 [ 906.984773][ C0] ? kthread_blkcg+0xd0/0xd0 [ 906.984786][ C0] ret_from_fork_asm+0x11/0x20 [ 906.984811][ C0] [ 907.046278][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 907.046293][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 907.046308][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.046318][ T29] Call Trace: [ 907.046324][ T29] [ 907.046331][ T29] dump_stack_lvl+0x18c/0x250 [ 907.046361][ T29] ? show_regs_print_info+0x20/0x20 [ 907.046383][ T29] ? load_image+0x420/0x420 [ 907.046412][ T29] panic+0x2dc/0x730 [ 907.046429][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 907.046447][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 907.046470][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 907.046512][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 907.046534][ T29] watchdog+0xf7c/0xf80 [ 907.046553][ T29] ? watchdog+0x1e1/0xf80 [ 907.046577][ T29] kthread+0x2fa/0x390 [ 907.046591][ T29] ? hungtask_pm_notify+0x90/0x90 [ 907.046610][ T29] ? kthread_blkcg+0xd0/0xd0 [ 907.046625][ T29] ret_from_fork+0x48/0x80 [ 907.046642][ T29] ? kthread_blkcg+0xd0/0xd0 [ 907.046657][ T29] ret_from_fork_asm+0x11/0x20 [ 907.046687][ T29] [ 907.052064][ T29] Kernel Offset: disabled [ 907.327163][ T29] Rebooting in 86400 seconds..