last executing test programs: 8.723139515s ago: executing program 0 (id=534): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x9) 7.189668943s ago: executing program 0 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 6.704718442s ago: executing program 0 (id=546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.344461005s ago: executing program 2 (id=549): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 5.036255691s ago: executing program 3 (id=551): syz_usb_connect(0x3, 0x34, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 4.953000626s ago: executing program 2 (id=552): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6f5e, 0x40) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup(r0) pipe(&(0x7f0000000440)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 4.38738309s ago: executing program 3 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c0003800400"], 0x74}}, 0x0) 4.253994056s ago: executing program 3 (id=558): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) 3.972212929s ago: executing program 0 (id=559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000ddffffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.828233938s ago: executing program 2 (id=561): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.521026266s ago: executing program 1 (id=562): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.495188523s ago: executing program 4 (id=563): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0xc53}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x7, 0x5, 0x0, 0x2, 0x2, 0x2, 0x4, 0x3, 0x9, 0x3, 0x0, 0x3, 0x6, 0xbbd, 0x2], 0x50000, 0x8340}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.461837431s ago: executing program 0 (id=564): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 2.339939778s ago: executing program 4 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073113300000000008510000002000000850000009900000095000810000000009500a50500000000e2044545cfbd17576630aefe992b9b4b024760c6ca8428c2d720800b30744162c6c1d68c0859292af9d33dda349f59fe5229ba70f85aa1e78cbd0b64df7aae833db746747ad713088544922241e6faecd35737bacf2916b29ba4c624ccbd7f6eb43098cdccdb01aec0f568"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.28820673s ago: executing program 1 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 2.214877547s ago: executing program 2 (id=567): syz_usb_connect(0x3, 0x34, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 2.138319305s ago: executing program 1 (id=568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c0003800400"], 0x74}}, 0x0) 2.091372049s ago: executing program 3 (id=569): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 2.091179957s ago: executing program 4 (id=570): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, 0x0, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 1.946779508s ago: executing program 1 (id=571): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x1, 0x2, 0x100f, 0x7, 0x9, 0x8}}) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) 1.776680803s ago: executing program 4 (id=572): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 1.652779023s ago: executing program 3 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x8007}}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.539278049s ago: executing program 1 (id=574): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000ddffffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.481872139s ago: executing program 2 (id=575): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0xc53}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x7, 0x5, 0x0, 0x2, 0x2, 0x2, 0x4, 0x3, 0x9, 0x3, 0x0, 0x3, 0x6, 0xbbd, 0x2], 0x50000, 0x8340}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.245660096s ago: executing program 2 (id=576): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) 1.103282022s ago: executing program 0 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002180)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.05465821s ago: executing program 4 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x60, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 57.479273ms ago: executing program 1 (id=579): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) 56.034672ms ago: executing program 3 (id=580): msgget(0x2, 0x624) r0 = msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 0s ago: executing program 4 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c0003800400"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): [ 87.159427][ T2028] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 90.310326][ T5580] cgroup: Unknown subsys name 'net' [ 90.551628][ T5580] cgroup: Unknown subsys name 'cpuset' [ 90.626262][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.604181][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.128750][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.141570][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.169213][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.189952][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.211792][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.216119][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.218227][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.218752][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.228580][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.234473][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.237650][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.240003][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.250425][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.255821][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.268507][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.269463][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.278257][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.280831][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.282087][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.286813][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.288659][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.290760][ T4913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.292262][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.298228][ T4913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.301685][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.366919][ T5602] Bluetooth: hci2: command tx timeout [ 97.366912][ T5598] Bluetooth: hci0: command tx timeout [ 97.368138][ T59] Bluetooth: hci4: command tx timeout [ 97.446622][ T5602] Bluetooth: hci3: command tx timeout [ 97.446881][ T59] Bluetooth: hci1: command tx timeout [ 98.120621][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.121561][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.121721][ T5593] bridge_slave_0: entered allmulticast mode [ 98.123496][ T5593] bridge_slave_0: entered promiscuous mode [ 98.203004][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.203081][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.203219][ T5593] bridge_slave_1: entered allmulticast mode [ 98.204811][ T5593] bridge_slave_1: entered promiscuous mode [ 98.210020][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.210169][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.210763][ T5594] bridge_slave_0: entered allmulticast mode [ 98.213438][ T5594] bridge_slave_0: entered promiscuous mode [ 98.291411][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.291529][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.291633][ T5594] bridge_slave_1: entered allmulticast mode [ 98.293279][ T5594] bridge_slave_1: entered promiscuous mode [ 98.298957][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.299081][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.299243][ T5596] bridge_slave_0: entered allmulticast mode [ 98.302226][ T5596] bridge_slave_0: entered promiscuous mode [ 98.308215][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.308343][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.308853][ T5595] bridge_slave_0: entered allmulticast mode [ 98.312215][ T5595] bridge_slave_0: entered promiscuous mode [ 98.318788][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.318911][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.319088][ T5592] bridge_slave_0: entered allmulticast mode [ 98.322804][ T5592] bridge_slave_0: entered promiscuous mode [ 98.388635][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.388763][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.388938][ T5596] bridge_slave_1: entered allmulticast mode [ 98.402756][ T5596] bridge_slave_1: entered promiscuous mode [ 98.424925][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.425059][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.428317][ T5595] bridge_slave_1: entered allmulticast mode [ 98.434828][ T5595] bridge_slave_1: entered promiscuous mode [ 98.437219][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.437348][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.439517][ T5592] bridge_slave_1: entered allmulticast mode [ 98.442254][ T5592] bridge_slave_1: entered promiscuous mode [ 98.496126][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.601779][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.605376][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.677874][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.682410][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.689876][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.699543][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.743091][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.757166][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.759556][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.761551][ T5593] team0: Port device team_slave_0 added [ 98.841774][ T5593] team0: Port device team_slave_1 added [ 98.843632][ T5594] team0: Port device team_slave_0 added [ 98.938845][ T5594] team0: Port device team_slave_1 added [ 98.940669][ T5596] team0: Port device team_slave_0 added [ 98.942929][ T5595] team0: Port device team_slave_0 added [ 98.945165][ T5592] team0: Port device team_slave_0 added [ 98.983485][ T5596] team0: Port device team_slave_1 added [ 98.985282][ T5595] team0: Port device team_slave_1 added [ 98.987336][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.987352][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.987375][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.999349][ T5592] team0: Port device team_slave_1 added [ 99.048177][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.048195][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.048219][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.097052][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.097064][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.097079][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.172001][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.172020][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.172046][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.173431][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.173442][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.173456][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.180008][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.180022][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.180044][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.182999][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.183013][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.183035][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.202374][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.202390][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.202413][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.209694][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.209710][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.209732][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.211239][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.211250][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.211272][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.353671][ T5593] hsr_slave_0: entered promiscuous mode [ 99.355173][ T5593] hsr_slave_1: entered promiscuous mode [ 99.447201][ T59] Bluetooth: hci4: command tx timeout [ 99.447240][ T59] Bluetooth: hci0: command tx timeout [ 99.447261][ T59] Bluetooth: hci2: command tx timeout [ 99.490056][ T5594] hsr_slave_0: entered promiscuous mode [ 99.491502][ T5594] hsr_slave_1: entered promiscuous mode [ 99.492632][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 99.492738][ T5594] Cannot create hsr debugfs directory [ 99.535962][ T5602] Bluetooth: hci1: command tx timeout [ 99.535993][ T5602] Bluetooth: hci3: command tx timeout [ 99.552174][ T5596] hsr_slave_0: entered promiscuous mode [ 99.553666][ T5596] hsr_slave_1: entered promiscuous mode [ 99.554588][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 99.554611][ T5596] Cannot create hsr debugfs directory [ 99.592549][ T5595] hsr_slave_0: entered promiscuous mode [ 99.593421][ T5595] hsr_slave_1: entered promiscuous mode [ 99.594012][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 99.594030][ T5595] Cannot create hsr debugfs directory [ 100.122445][ T5592] hsr_slave_0: entered promiscuous mode [ 100.123323][ T5592] hsr_slave_1: entered promiscuous mode [ 100.123908][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 100.123930][ T5592] Cannot create hsr debugfs directory [ 100.885225][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.948870][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.954816][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.982595][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.997441][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.021806][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.042435][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.079463][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.204853][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.241650][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.252382][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.292770][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.309780][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.341792][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.366709][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.401348][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.537155][ T59] Bluetooth: hci2: command tx timeout [ 101.537193][ T59] Bluetooth: hci0: command tx timeout [ 101.537217][ T59] Bluetooth: hci4: command tx timeout [ 101.556658][ T5594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.591370][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.598390][ T5594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.605669][ T5602] Bluetooth: hci3: command tx timeout [ 101.605702][ T5602] Bluetooth: hci1: command tx timeout [ 101.641467][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.645788][ T5594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.680313][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.705165][ T5594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.740605][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.902302][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.940733][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.954301][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.984905][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.026909][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.069092][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.121164][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.139871][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.212230][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.314302][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.349566][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.369523][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.410822][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.415436][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.451439][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.468590][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.470986][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.499592][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.543789][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.544552][ T1513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.594171][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.624780][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.624893][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.729686][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.789184][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.804447][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.804558][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.859191][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.859642][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.951114][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.005188][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.005335][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.053253][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.089637][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.090357][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.308404][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.402178][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.411749][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.411961][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.500595][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.500746][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.616343][ T59] Bluetooth: hci4: command tx timeout [ 103.616380][ T59] Bluetooth: hci0: command tx timeout [ 103.616403][ T59] Bluetooth: hci2: command tx timeout [ 103.667438][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.696002][ T59] Bluetooth: hci3: command tx timeout [ 103.696054][ T5602] Bluetooth: hci1: command tx timeout [ 103.791132][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.791320][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.854952][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.855173][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.331059][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.902267][ T5593] veth0_vlan: entered promiscuous mode [ 104.943073][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.002890][ T5593] veth1_vlan: entered promiscuous mode [ 105.349218][ T5593] veth0_macvtap: entered promiscuous mode [ 105.408757][ T5596] veth0_vlan: entered promiscuous mode [ 105.450869][ T5593] veth1_macvtap: entered promiscuous mode [ 105.521774][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.569718][ T5596] veth1_vlan: entered promiscuous mode [ 105.640259][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.687289][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.719786][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.808739][ T1189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.829886][ T1189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.853904][ T1189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.929612][ T1189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.946498][ T5596] veth0_macvtap: entered promiscuous mode [ 106.052280][ T5596] veth1_macvtap: entered promiscuous mode [ 106.132901][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.411537][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.411760][ T5595] veth0_vlan: entered promiscuous mode [ 106.467031][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.503781][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.503808][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.578420][ T5595] veth1_vlan: entered promiscuous mode [ 106.580809][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.597039][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.616872][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.634656][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.752492][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.752514][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.879174][ T5594] veth0_vlan: entered promiscuous mode [ 106.883434][ T5592] veth0_vlan: entered promiscuous mode [ 107.091299][ T5594] veth1_vlan: entered promiscuous mode [ 107.130303][ T5592] veth1_vlan: entered promiscuous mode [ 107.208981][ T5595] veth0_macvtap: entered promiscuous mode [ 107.243821][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.243844][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.281455][ T5595] veth1_macvtap: entered promiscuous mode [ 107.493697][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.493720][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.532835][ T5592] veth0_macvtap: entered promiscuous mode [ 107.548783][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.553342][ T5594] veth0_macvtap: entered promiscuous mode [ 107.624129][ T5592] veth1_macvtap: entered promiscuous mode [ 107.667013][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.669000][ T5594] veth1_macvtap: entered promiscuous mode [ 107.766583][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.775286][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.807863][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.854393][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.870991][ T1403] Bluetooth: hci5: Frame reassembly failed (-90) [ 107.885247][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.895061][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.012181][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.023744][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.173646][ T1461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.176672][ T1461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.243614][ T1461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.285956][ T1461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.334243][ T1461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.420847][ T1461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.430640][ T1461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.499755][ T1461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.315862][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.315882][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.534249][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.534275][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.790005][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.790044][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.848335][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.158946][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.158967][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.282760][ T5797] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.627218][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.627242][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.457142][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.457167][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.413486][ T5824] syzkaller0: entered promiscuous mode [ 112.413515][ T5824] syzkaller0: entered allmulticast mode [ 125.494321][ T2028] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.846572][ T2028] usb 4-1: Using ep0 maxpacket: 16 [ 125.933883][ T2028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.933921][ T2028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.933944][ T2028] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.933999][ T2028] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.934022][ T2028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.174308][ T2028] usb 4-1: config 0 descriptor?? [ 128.795822][ T5600] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.107506][ T5600] usb 1-1: Using ep0 maxpacket: 32 [ 129.185702][ T5600] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.212112][ T5600] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 129.212212][ T5600] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 129.212233][ T5600] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 129.212254][ T5600] usb 1-1: config 128 has no interface number 0 [ 129.212304][ T5600] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 129.212925][ T5600] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.212951][ T5600] usb 1-1: config 128 interface 127 has no altsetting 0 [ 129.374523][ T5600] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 129.374557][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.374640][ T5600] usb 1-1: Product: syz [ 129.374656][ T5600] usb 1-1: Manufacturer: syz [ 129.374670][ T5600] usb 1-1: SerialNumber: syz [ 130.048225][ T2028] usbhid 4-1:0.0: can't add hid device: -71 [ 130.048342][ T2028] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.165958][ T5600] usb 1-1: can't set config #128, error -71 [ 130.264330][ T2028] usb 4-1: USB disconnect, device number 2 [ 130.294449][ T5600] usb 1-1: USB disconnect, device number 2 [ 131.084285][ T6011] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 133.331353][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.331464][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.827171][ T6044] input: syz0 as /devices/virtual/input/input5 [ 133.906592][ T37] audit: type=1326 audit(1777251195.004:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6055 comm="syz.3.85" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c9c7cdd9 code=0x0 [ 134.048126][ T5712] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.345626][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 134.350747][ T5712] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.350775][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.350795][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.354454][ T5712] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.354486][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.354506][ T5712] usb 1-1: Product: syz [ 134.354521][ T5712] usb 1-1: Manufacturer: syz [ 134.354535][ T5712] usb 1-1: SerialNumber: syz [ 134.702432][ T6044] tc_dump_action: action bad kind [ 134.815076][ T5712] usb 1-1: 0:2 : does not exist [ 135.464476][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 135.906865][ T6074] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 137.775532][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.775984][ T6044] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 137.780126][ T6044] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 137.962503][ T6044] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.047177][ T6044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.047291][ T6044] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.118193][ T6044] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.174343][ T6044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.174479][ T6044] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.240969][ T6044] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.309921][ T6044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.310057][ T6044] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.388639][ T6044] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.450566][ T6044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.450722][ T6044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.490587][ T6044] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.664844][ T5600] usb 1-1: USB disconnect, device number 3 [ 139.434916][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.720479][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.741284][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 139.741318][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.741338][ T9] usb 2-1: Product: syz [ 139.741353][ T9] usb 2-1: Manufacturer: syz [ 139.741368][ T9] usb 2-1: SerialNumber: syz [ 139.845716][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.011524][ T9] usb 2-1: selecting invalid altsetting 1 [ 140.012549][ T9] usb 2-1: unit 6 not found! [ 140.085793][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.251991][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.325655][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.494843][ T5602] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.595636][ T5600] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.737194][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 140.739098][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.809600][ T5600] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.811903][ T5600] usb 1-1: config 246 has an invalid interface number: 89 but max is 0 [ 140.811942][ T5600] usb 1-1: config 246 has no interface number 0 [ 140.811975][ T5600] usb 1-1: config 246 interface 89 has no altsetting 0 [ 140.856694][ T5600] usb 1-1: New USB device found, idVendor=1bc7, idProduct=3001, bcdDevice=af.ac [ 140.856729][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.856749][ T5600] usb 1-1: Product: syz [ 140.856762][ T5600] usb 1-1: Manufacturer: syz [ 140.856775][ T5600] usb 1-1: SerialNumber: syz [ 140.904650][ T9] usb 2-1: selecting invalid altsetting 1 [ 140.918889][ T9] usb 2-1: unit 6 not found! [ 140.921051][ T9] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 140.949665][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 141.033717][ T9] usb 2-1: selecting invalid altsetting 1 [ 141.034846][ T9] usb 2-1: unit 6 not found! [ 141.051497][ T9] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 141.547761][ T5600] usb 1-1: USB disconnect, device number 4 [ 141.686972][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 142.405704][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.635730][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.635773][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.635800][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.760373][ T9] usb 2-1: USB disconnect, device number 2 [ 142.893460][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.265419][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.884822][ T5605] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.700847][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.818352][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.818411][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.856401][ T5605] usb 2-1: Using ep0 maxpacket: 32 [ 144.860662][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.860697][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.860737][ T5605] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.860761][ T5605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.948670][ T5605] usb 2-1: config 0 descriptor?? [ 145.054453][ T5605] hub 2-1:0.0: USB hub found [ 145.102285][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.242415][ T5605] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 145.683609][ T5605] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 145.687532][ T5605] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 145.976582][ T5605] usb 2-1: USB disconnect, device number 3 [ 152.507792][ T6212] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 158.440541][ T5712] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.620220][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 158.641416][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.661398][ T5712] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 158.661429][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.661446][ T5712] usb 4-1: Product: syz [ 158.661459][ T5712] usb 4-1: Manufacturer: syz [ 158.661472][ T5712] usb 4-1: SerialNumber: syz [ 160.749043][ T5712] usb 4-1: USB disconnect, device number 3 [ 160.865720][ T6265] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.551176][ T5712] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 163.586965][ T5712] usb 4-1: not running at top speed; connect to a high speed hub [ 163.652589][ T5712] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1104, setting to 64 [ 163.652628][ T5712] usb 4-1: config 1 interface 0 has no altsetting 0 [ 163.742726][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.742758][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.742777][ T5712] usb 4-1: Product: syz [ 163.742791][ T5712] usb 4-1: Manufacturer: syz [ 163.742800][ T5712] usb 4-1: SerialNumber: syz [ 163.861439][ T6273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.266737][ T5712] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 164.338780][ T5712] usb 4-1: USB disconnect, device number 4 [ 176.133941][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 177.472433][ T2028] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.650906][ T2028] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.829242][ T2028] usb 2-1: string descriptor 0 read error: -71 [ 179.829406][ T2028] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 179.829429][ T2028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.092950][ T2028] usb 2-1: can't set config #1, error -71 [ 180.113821][ T2028] usb 2-1: USB disconnect, device number 4 [ 181.787367][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.009041][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.009073][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.044631][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.044662][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.044678][ T31] usb 1-1: SerialNumber: syz [ 182.728322][ T31] usb 1-1: 0:2 : does not exist [ 183.640757][ T31] usb 1-1: USB disconnect, device number 5 [ 184.310238][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.826808][ T6470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.316260][ T5600] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.525382][ T5600] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 195.525435][ T5600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.525462][ T5600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.525494][ T5600] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.535146][ T5600] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 195.535174][ T5600] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 195.535193][ T5600] usb 1-1: Manufacturer: syz [ 195.601340][ T5600] usb 1-1: config 0 descriptor?? [ 197.420685][ T5600] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 198.044207][ T5600] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 198.545012][ T6537] Illegal XDP return value 65535 on prog (id 13) dev N/A, expect packet loss! [ 198.644112][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.644193][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.630500][ T5715] usb 1-1: USB disconnect, device number 6 [ 204.612922][ T6569] overlayfs: upper fs does not support file handles, falling back to index=off. [ 204.904977][ T6570] overlayfs: failed lookup in lower (newroot/45, name='file2', err=-40): overlapping layers [ 205.105717][ T5715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 205.212981][ T6579] kernel profiling enabled (shift: 9) [ 205.269563][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.269623][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 205.309048][ T5715] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 205.309070][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.309081][ T5715] usb 1-1: Product: syz [ 205.309089][ T5715] usb 1-1: Manufacturer: syz [ 205.309096][ T5715] usb 1-1: SerialNumber: syz [ 205.604901][ T5715] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.604960][ T5715] usb 1-1: MIDIStreaming interface descriptor not found [ 207.124922][ T6597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.144895][ T5605] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 208.201759][ T5715] usb 1-1: USB disconnect, device number 7 [ 208.394675][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.394713][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.394751][ T5605] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 208.394773][ T5605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.428112][ T5605] usb 2-1: config 0 descriptor?? [ 209.149092][ T6618] ptrace attach of "./syz-executor exec"[6619] was attempted by "./syz-executor exec"[6618] [ 211.533318][ T6623] udevd[6623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.183532][ T5605] hid-led 0003:1D34:000A.0003: unbalanced delimiter at end of report description [ 212.184775][ T5605] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -22 [ 212.278887][ T5605] usb 2-1: USB disconnect, device number 5 [ 214.374427][ T6647] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.282453][ T6697] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.966590][ T6747] Zero length message leads to an empty skb [ 226.073494][ T5605] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 226.237668][ T5605] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.251650][ T5605] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 226.267896][ T5605] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 226.267931][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.267952][ T5605] usb 2-1: Product: syz [ 226.267967][ T5605] usb 2-1: Manufacturer: syz [ 226.267981][ T5605] usb 2-1: SerialNumber: syz [ 226.380293][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.563539][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 226.593293][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.593358][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.593386][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.593425][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 226.593448][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.655449][ T5605] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 226.681623][ T9] usb 5-1: config 0 descriptor?? [ 226.798055][ T5605] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 226.798084][ T5605] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 227.250067][ T5605] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 227.463294][ T5605] usb 2-1: USB disconnect, device number 6 [ 227.547370][ T9] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 227.547397][ T9] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 227.738171][ T9] usb 5-1: USB disconnect, device number 2 [ 229.999645][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.383348][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 231.555896][ T5605] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 231.573735][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 231.587820][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 231.587854][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.593012][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.593042][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.593063][ T10] usb 3-1: SerialNumber: syz [ 231.693555][ T6798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.725026][ T5605] usb 4-1: Using ep0 maxpacket: 32 [ 231.728413][ T5605] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.949549][ T10] usb 3-1: No union descriptors [ 232.183639][ T5605] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 232.183671][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.183689][ T5605] usb 4-1: Product: syz [ 232.183702][ T5605] usb 4-1: Manufacturer: syz [ 232.183715][ T5605] usb 4-1: SerialNumber: syz [ 232.223237][ T6798] process 'syz.2.311' launched './file1' with NULL argv: empty string added [ 232.274981][ T10] usb 3-1: USB disconnect, device number 2 [ 232.290802][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.405338][ T5605] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 232.514015][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 232.522647][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.522716][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.522745][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.522766][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.522789][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.524103][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.524130][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.524149][ T31] usb 1-1: Manufacturer: syz [ 232.547168][ T31] usb 1-1: config 0 descriptor?? [ 232.755526][ T5605] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 232.826985][ T5605] usb 4-1: USB disconnect, device number 5 [ 232.989298][ T6623] udevd[6623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.575116][ T31] rc_core: IR keymap rc-hauppauge not found [ 234.575139][ T31] Registered IR keymap rc-empty [ 234.575679][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.588767][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 234.701685][ T6820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.734746][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 234.787033][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 234.954728][ T6833] batman_adv: batadv0: Adding interface: wlan1 [ 234.954749][ T6833] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.954780][ T6833] batman_adv: batadv0: Interface activated: wlan1 [ 235.075174][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.089408][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.114768][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.135366][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.139187][ T6838] comedi comedi0: pcmmio: I/O port conflict (0x2f00,32) [ 235.164388][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.169785][ T59] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 235.423352][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.452734][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.025253][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.051242][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.083389][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.148389][ T31] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.148416][ T31] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.315778][ T31] usb 1-1: USB disconnect, device number 8 [ 236.433523][ T6853] batman_adv: batadv0: Adding interface: dummy0 [ 236.433542][ T6853] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.433575][ T6853] batman_adv: batadv0: Interface activated: dummy0 [ 236.624723][ T6853] batadv0: mtu less than device minimum [ 236.650797][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.674035][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.696697][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.717451][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.783904][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.807571][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.827542][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.847975][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.868393][ T6853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.152333][ T6856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.205991][ T6856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.750786][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 238.871400][ T6875] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 238.937128][ T6868] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.189325][ T59] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 239.376218][ T6880] usb usb8: usbfs: process 6880 (syz.3.337) did not claim interface 0 before use [ 239.887539][ T6891] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.176957][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 242.612445][ T59] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 247.837962][ T6259] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 248.747765][ T6259] usb 5-1: device descriptor read/all, error -71 [ 255.635207][ T6978] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.094402][ T7018] net_ratelimit: 12 callbacks suppressed [ 260.094427][ T7018] openvswitch: netlink: Message has 4 unknown bytes. [ 260.094479][ T7018] openvswitch: netlink: Actions may not be safe on all matching packets [ 262.877937][ T7031] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 263.906077][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.906157][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.694950][ T7031] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 265.166634][ T7047] netlink: 44 bytes leftover after parsing attributes in process `syz.3.384'. [ 265.203013][ T7049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.284023][ T7053] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 265.497974][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.565501][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.244687][ T7050] netlink: 'syz.3.384': attribute type 12 has an invalid length. [ 267.244712][ T7050] netlink: 'syz.3.384': attribute type 29 has an invalid length. [ 267.244726][ T7050] netlink: 148 bytes leftover after parsing attributes in process `syz.3.384'. [ 267.268149][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.274394][ T7053] bridge0: port 2(bridge_slave_1) entered listening state [ 267.290180][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.985927][ T7053] bridge0: port 1(bridge_slave_0) entered listening state [ 268.069334][ T7053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 269.988918][ T7090] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 270.609826][ T5605] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.978301][ T5605] usb 4-1: Using ep0 maxpacket: 32 [ 271.983189][ T5605] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 271.983224][ T5605] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.986342][ T5605] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.986370][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.986390][ T5605] usb 4-1: SerialNumber: syz [ 272.084222][ T7096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.157690][ T5605] usb 4-1: No union descriptors [ 272.392818][ T5605] usb 4-1: USB disconnect, device number 6 [ 275.989576][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.089585][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.363580][ T7141] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 276.409864][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.410413][ T7141] bridge0: port 2(bridge_slave_1) entered listening state [ 276.410815][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.410998][ T7141] bridge0: port 1(bridge_slave_0) entered listening state [ 276.473186][ T7141] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.070172][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 280.913505][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.913945][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.203678][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 281.246008][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 281.246044][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.252481][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.252512][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.252531][ T31] usb 1-1: SerialNumber: syz [ 282.367103][ T31] usb 1-1: can't set config #1, error -71 [ 282.373309][ T31] usb 1-1: USB disconnect, device number 9 [ 283.760603][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 285.028746][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 285.434926][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 286.182085][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 286.185079][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 286.185111][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.186978][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.187006][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.187026][ T36] usb 2-1: SerialNumber: syz [ 286.526495][ T7213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.529931][ T36] usb 2-1: No union descriptors [ 286.725581][ T7229] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 286.829239][ T36] usb 2-1: USB disconnect, device number 7 [ 286.867910][ T7235] comedi comedi0: pcmmio: I/O port conflict (0x2f00,32) [ 290.250948][ T5712] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 290.432710][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 290.437087][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 290.437120][ T5712] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.439516][ T5712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.439546][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.439566][ T5712] usb 3-1: SerialNumber: syz [ 290.500859][ T7265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.521149][ T5712] usb 3-1: No union descriptors [ 291.021987][ T5605] usb 3-1: USB disconnect, device number 3 [ 294.867603][ T5605] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.030452][ T5605] usb 1-1: Using ep0 maxpacket: 32 [ 295.241451][ T5605] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 295.241487][ T5605] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.242983][ T5605] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.243010][ T5605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.243030][ T5605] usb 1-1: SerialNumber: syz [ 295.347265][ T7330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.369749][ T5605] usb 1-1: No union descriptors [ 295.682056][ T5712] usb 1-1: USB disconnect, device number 10 [ 300.093190][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.093243][ C1] bridge0: topology change detected, propagating [ 300.898436][ T7415] input: syz1 as /devices/virtual/input/input9 [ 301.625630][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.625654][ C1] bridge0: topology change detected, propagating [ 303.140450][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 303.742779][ T7453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.906394][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 305.123544][ T7479] IPv6: Can't replace route, no match found [ 305.468301][ T5605] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 305.533699][ T7490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.628053][ T5605] usb 3-1: Using ep0 maxpacket: 32 [ 305.645417][ T5605] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.662989][ T5605] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 305.663022][ T5605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.663043][ T5605] usb 3-1: Product: syz [ 305.663057][ T5605] usb 3-1: Manufacturer: syz [ 305.663072][ T5605] usb 3-1: SerialNumber: syz [ 305.683922][ T5605] usb 3-1: selecting invalid altsetting 1 [ 305.688730][ T5605] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 305.694430][ T5605] usb 3-1: selecting invalid altsetting 1 [ 305.699087][ T5605] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 305.705337][ T5605] usb 3-1: selecting invalid altsetting 1 [ 306.074905][ T5605] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 306.118520][ T5605] usb 3-1: USB disconnect, device number 4 [ 306.520963][ T6626] udevd[6626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.848174][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 308.515669][ T7523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.850109][ T7531] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 308.988012][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 308.988240][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 309.275844][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 309.451935][ T7511] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 311.557639][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 311.764076][ T7579] vimc link validate: Sensor B:src:16x16 (0x33424752, 9, 0, 0, 8) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.976385][ T7584] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 312.429823][ T7595] netlink: 'syz.2.576': attribute type 2 has an invalid length. [ 313.664341][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 313.670649][ C1] [ 313.670663][ C1] ====================================================== [ 313.670672][ C1] WARNING: possible circular locking dependency detected [ 313.670681][ C1] syzkaller #0 Not tainted [ 313.670692][ C1] ------------------------------------------------------ [ 313.670699][ C1] syz.2.576/7595 is trying to acquire lock: [ 313.670710][ C1] ffff888066f7d160 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 313.670790][ C1] [ 313.670790][ C1] but task is already holding lock: [ 313.670797][ C1] ffff88803ba362e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 313.670848][ C1] [ 313.670848][ C1] which lock already depends on the new lock. [ 313.670848][ C1] [ 313.670855][ C1] [ 313.670855][ C1] the existing dependency chain (in reverse order) is: [ 313.670862][ C1] [ 313.670862][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 313.670888][ C1] rt_spin_lock+0x83/0x400 [ 313.670912][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 313.670934][ C1] phonet_rcv+0x781/0xc40 [ 313.670957][ C1] process_backlog+0x5e1/0xc60 [ 313.670985][ C1] __napi_poll+0xab/0x550 [ 313.671009][ C1] net_rx_action+0x696/0xe00 [ 313.671035][ C1] handle_softirqs+0x1de/0x6d0 [ 313.671054][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 313.671073][ C1] netif_rx+0xb9/0xf0 [ 313.671094][ C1] pn_send+0x62a/0x8e0 [ 313.671115][ C1] pn_skb_send+0x218/0x510 [ 313.671136][ C1] pipe_snd_status+0x1f1/0x320 [ 313.671160][ C1] pipe_do_rcv+0xf15/0x16a0 [ 313.671185][ C1] __sk_receive_skb+0x962/0x9e0 [ 313.671211][ C1] pep_do_rcv+0x685/0xaa0 [ 313.671236][ C1] __release_sock+0x2a9/0x3d0 [ 313.671258][ C1] release_sock+0x1be/0x290 [ 313.671284][ C1] pep_sock_accept+0xd47/0x11e0 [ 313.671308][ C1] pn_socket_accept+0xc1/0x310 [ 313.671327][ C1] do_accept+0x52b/0x760 [ 313.671342][ C1] __sys_accept4+0x139/0x230 [ 313.671358][ C1] __x64_sys_accept4+0x9a/0xb0 [ 313.671372][ C1] do_syscall_64+0x15f/0xf80 [ 313.671388][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.671406][ C1] [ 313.671406][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 313.671438][ C1] __lock_acquire+0x15a5/0x2cf0 [ 313.671462][ C1] lock_acquire+0x106/0x350 [ 313.671482][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 313.671504][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 313.671536][ C1] pep_do_rcv+0x685/0xaa0 [ 313.671561][ C1] __sk_receive_skb+0x962/0x9e0 [ 313.671588][ C1] phonet_rcv+0x781/0xc40 [ 313.671609][ C1] process_backlog+0x5e1/0xc60 [ 313.671632][ C1] __napi_poll+0xab/0x550 [ 313.671654][ C1] net_rx_action+0x696/0xe00 [ 313.671679][ C1] handle_softirqs+0x1de/0x6d0 [ 313.671698][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 313.671714][ C1] netif_rx+0xb9/0xf0 [ 313.671744][ C1] pn_send+0x62a/0x8e0 [ 313.671766][ C1] pn_skb_send+0x218/0x510 [ 313.671789][ C1] pep_sock_close+0x2c1/0x5b0 [ 313.671813][ C1] pn_socket_release+0x9b/0xc0 [ 313.671833][ C1] sock_close+0xc3/0x240 [ 313.671856][ C1] __fput+0x461/0xa70 [ 313.671883][ C1] task_work_run+0x1d9/0x270 [ 313.671908][ C1] get_signal+0x11c3/0x1310 [ 313.671926][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 313.671955][ C1] exit_to_user_mode_loop+0x86/0x480 [ 313.671979][ C1] do_syscall_64+0x33e/0xf80 [ 313.671995][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.672014][ C1] [ 313.672014][ C1] other info that might help us debug this: [ 313.672014][ C1] [ 313.672020][ C1] Possible unsafe locking scenario: [ 313.672020][ C1] [ 313.672026][ C1] CPU0 CPU1 [ 313.672033][ C1] ---- ---- [ 313.672039][ C1] lock(slock-AF_PHONET); [ 313.672054][ C1] lock(slock-AF_PHONET/1); [ 313.672072][ C1] lock(slock-AF_PHONET); [ 313.672085][ C1] lock(slock-AF_PHONET/1); [ 313.672101][ C1] [ 313.672101][ C1] *** DEADLOCK *** [ 313.672101][ C1] [ 313.672106][ C1] 7 locks held by syz.2.576/7595: [ 313.672118][ C1] #0: ffff8880609d82b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 313.672178][ C1] #1: ffff88803ba35ad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 313.672232][ C1] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 313.672279][ C1] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 313.672332][ C1] #4: ffff88803ba362e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 313.672389][ C1] #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 313.672440][ C1] #6: ffff88803ba36398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 313.672489][ C1] [ 313.672489][ C1] stack backtrace: [ 313.672503][ C1] CPU: 1 UID: 0 PID: 7595 Comm: syz.2.576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.672525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.672537][ C1] Call Trace: [ 313.672545][ C1] [ 313.672554][ C1] dump_stack_lvl+0xe8/0x150 [ 313.672578][ C1] print_circular_bug+0x2e1/0x300 [ 313.672599][ C1] check_noncircular+0x12e/0x150 [ 313.672632][ C1] __lock_acquire+0x15a5/0x2cf0 [ 313.672667][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 313.672694][ C1] lock_acquire+0x106/0x350 [ 313.672718][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 313.672756][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 313.672785][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 313.672810][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 313.672835][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 313.672858][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 313.672883][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 313.672907][ C1] ? rt_spin_lock+0x1e0/0x400 [ 313.672931][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 313.672961][ C1] pep_do_rcv+0x685/0xaa0 [ 313.672984][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 313.673013][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 313.673040][ C1] ? phonet_rcv+0x781/0xc40 [ 313.673065][ C1] __sk_receive_skb+0x962/0x9e0 [ 313.673099][ C1] phonet_rcv+0x781/0xc40 [ 313.673123][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.673156][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 313.673181][ C1] ? process_backlog+0x271/0xc60 [ 313.673208][ C1] ? process_backlog+0x271/0xc60 [ 313.673235][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 313.673259][ C1] process_backlog+0x5e1/0xc60 [ 313.673295][ C1] __napi_poll+0xab/0x550 [ 313.673324][ C1] net_rx_action+0x696/0xe00 [ 313.673361][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 313.673389][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 313.673422][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 313.673454][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 313.673483][ C1] handle_softirqs+0x1de/0x6d0 [ 313.673510][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 313.673533][ C1] netif_rx+0xb9/0xf0 [ 313.673557][ C1] pn_send+0x62a/0x8e0 [ 313.673585][ C1] pn_skb_send+0x218/0x510 [ 313.673613][ C1] pep_sock_close+0x2c1/0x5b0 [ 313.673643][ C1] pn_socket_release+0x9b/0xc0 [ 313.673666][ C1] sock_close+0xc3/0x240 [ 313.673693][ C1] ? __pfx_sock_close+0x10/0x10 [ 313.673728][ C1] __fput+0x461/0xa70 [ 313.673763][ C1] task_work_run+0x1d9/0x270 [ 313.673793][ C1] ? __pfx_task_work_run+0x10/0x10 [ 313.673822][ C1] ? task_work_add+0x395/0x440 [ 313.673854][ C1] get_signal+0x11c3/0x1310 [ 313.673875][ C1] ? __fput_deferred+0x253/0x3e0 [ 313.673903][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 313.673937][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 313.673971][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 313.674005][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.674026][ C1] exit_to_user_mode_loop+0x86/0x480 [ 313.674048][ C1] ? rcu_is_watching+0x15/0xb0 [ 313.674076][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.674097][ C1] do_syscall_64+0x33e/0xf80 [ 313.674115][ C1] ? trace_irq_disable+0x3b/0x140 [ 313.674139][ C1] ? clear_bhb_loop+0x40/0x90 [ 313.674162][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.674182][ C1] RIP: 0033:0x7f89d6becdd9 [ 313.674201][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.674219][ C1] RSP: 002b:00007f89d4e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 313.674240][ C1] RAX: 0000000000000000 RBX: 00007f89d6e65fa0 RCX: 00007f89d6becdd9 [ 313.674255][ C1] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 313.674268][ C1] RBP: 00007f89d6c82d69 R08: 0000000000000000 R09: 0000000000000000 [ 313.674281][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.674294][ C1] R13: 00007f89d6e66038 R14: 00007f89d6e65fa0 R15: 00007ffcaadc8328 [ 313.674316][ C1]