last executing test programs: 1.6994822s ago: executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4010) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', r3, 0x2f, 0xbe, 0x9, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x1}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000500)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) getresuid(0x0, &(0x7f00000005c0), 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000800), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000980)='timerslack_ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x80010, 0xffffffffffffffff, 0x78df3000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000a00)) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) write$P9_RSTATFS(r5, &(0x7f0000000ac0)={0x43, 0x9, 0x4bc9, {0x0, 0x1, 0x20000000000000, 0x0, 0x472, 0x902c, 0x6, 0x9, 0x46a}}, 0x43) write$cgroup_subtree(r1, 0x0, 0x0) 1.540972879s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.518078217s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010003b1500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c0002800600080035000000080003006401010008000c00fdffffff06000e000000000006000d"], 0x58}}, 0x0) 1.421596622s ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) gettid() r2 = socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000f80), 0x4000000000002d8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.419083079s ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) wait4(0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r0, 0x9, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r3, 0x0, 0x2908}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbc6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0xfffffff8}, 0x8) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xc7}, 0x0) 1.345651697s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x107c, 0x30, 0x0, 0x0, 0x0, {}, [{0x1068, 0x1, [@m_pedit={0x1064, 0x0, 0x0, 0x0, {{0xa}, {0xfd0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x164, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{}, 0x0, 0x0, [{}, {}, {}]}}}]}, {0x69, 0x6, "6b91e8026cc45eb8055d17d08107cb87e2c8837d267692599d5880fe828330ebe4740b0889d5a285df59e6f39e5467b2fd34874c46dd598bccf7c9311d4f56b67fc1db2be0fb6733f0643e07b7d8734caf5a494a8a51600bc736899a6bcf9149df91982a5a"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x107c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_devices(r0, &(0x7f00000012c0)=ANY=[], 0x36) 1.228195247s ago: executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/238, 0xee}, {0x0}], 0x2}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7b00008f28aaf0"}, 0x10}}, 0x0) 978.204678ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010003b1500"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c0002800600080035000000080003006401010008000c00fdffffff06000e000000000006000d"], 0x58}}, 0x0) 890.078942ms ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) 641.360745ms ago: executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 636.800131ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 588.397081ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400008024000100000000000100000000000000fdffff01000000000000000000000000000000001400040002000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0) 571.735428ms ago: executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4010) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', r3, 0x2f, 0xbe, 0x9, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x1}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000500)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) getresuid(0x0, &(0x7f00000005c0), 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000800), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000980)='timerslack_ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x80010, 0xffffffffffffffff, 0x78df3000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000a00)) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) write$P9_RSTATFS(r5, &(0x7f0000000ac0)={0x43, 0x9, 0x4bc9, {0x0, 0x1, 0x20000000000000, 0x0, 0x472, 0x902c, 0x6, 0x9, 0x46a}}, 0x43) write$cgroup_subtree(r1, 0x0, 0x0) 534.115461ms ago: executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000002b80)={0x278, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_TESTDATA={0x81, 0x45, "0e67163347d93ff3df5c739b0020fcb1285b730bf756702a46d3cb4b61a007674659bc6e20119622aeeed68bef7d34867ffa87ef0702470b33991cdb7d9638c0efeaa1ec1b2983f600df599c6f207cbb3df0161ef12686282903609c061d13b79c6abdb4c8bc8df83c876cf0fb17d60ae93df6e18a95b9a9d75e323e44"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, "d9"}, @NL80211_ATTR_TESTDATA={0x29, 0x45, "8f117a6c7e47d8c77e781491cfcc360325b6af681c0a8a16af491bddfadb7e8e3731c15be5"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "c2122abfa50f998a776ffb298b829229558dbb17ac84e236d65072f5"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "9a94"}, @NL80211_ATTR_TESTDATA={0xc7, 0x45, "4827c019b25b76a3274ebac0443004417d7ee42da9cf790f1e19f660d3ad058b0bfa122dd17e711f516f1e8ba37b0c0472d4843fde217d3ad4edc3effcec44e87c52589eade4ecfd6782e07f9a2371393e719bf8a9511601220dbc824ff3f11aa4e7b0a10846854c7fefde9ae6d219bfa99b97a23270aa37383013e51e457355a9da535b882d942e98f66f733b34ee15f7af2b5bf2dda23de7010b4d529acc105b3d3414001db1a8e2e635afde48e814f6aef49ab24a098a338b32520b43846f4c8b30"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xaf, 0x45, "78b36d3073c4e203415fa1f4ef2096845d5d16d3e36023e05eb6212d4816e17caa2ca2ccae2f0aba05a2c88f6fae50df8be5b8f989b6296650605ec068e7bea4210ffcf54f5d92a0bcdef041d76b8dcb34b466f1299e5fa83940b31235e9ec42eb2ae13a9750d9733e0db581c5847e087547294ac62fecbe2c6daf441ad5c037b1e80274608ff9633a794992d76ad56627093904cbb8e440975c78e4bc48eec969b42e409f96bd6b8a7a8c"}]}, 0x278}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x68, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, 0x0, @default, @val, @val={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, 0x9}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x68}}, 0x0) 490.093324ms ago: executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xe) 486.111064ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0xb, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000010280)={&(0x7f0000010140)=ANY=[], &(0x7f0000010180)=""/252, 0x2b, 0xfc, 0x1, 0xfffffff7}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000010140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 475.634927ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010003b1500"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100736974002c0002800600080035000000080003006401010008000c00fdffffff06000e000000000006000d"], 0x58}}, 0x0) 455.532144ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000300)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0}) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r3, 0x3, r4}) unshare(0x20020400) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000140)="417ca2d0facbab6cfa58261ef3a80fb92b3c4ff281a4f869de5327fef30567ebab455d50b5462e630434842852b0033547a525fb2bc768dd28aea871270cbbe4693890ec1e27f293778a42b1b4f67fa7e47a0955f95f0565843c0dffcf970c20545c1d55448ec387906e7ff60cc76186817e31c05e0202432668218af06c0c8ef46a8db48a", 0x85}, {&(0x7f0000000000)="1823f1326f12ae80a7a241c09fca4a4c1be13f962869ee8391af7260a709d79afb6b3f7f91391ff7a49b9eb1f261239b1719c99ead7a44f403b8a0a2a309b2371abfb773c799d50deffa4380353f07271cddff06b971e6e0ec6c5e48a16884d6d2a5d67f4654e54143cbef0af18cfbea3a8d5abd", 0x74}, {&(0x7f0000000200)="dc7ddf71eb38a12bdc8dcdfdfb4e489950f94b1a1967fee77be36054ea83887b615e162ccc2df03a", 0x28}, {&(0x7f0000000240)="34916a369a434c9e98cbd8cbb3496da520c1910ec01ee6ed0ccd3d9bc2fb4f94a890fdf7b0d38dc2cff18f3621813cebf33e0ab127cb890e35cbeb2b28de4de02aa6bec3f7d8373fbb3f5f62d4ce893bf30bbfafc4a70a84c020797d4d6910089d2cddf6a4bf6e45a36e6cb16450aab30cc6e0a978f9ba7133a2e4ff7a73f75aac", 0x81}, {&(0x7f0000000300)="ce6e2f9022a36cbe4448f9ee18d5b0693e1c49ee6e5e9a884f4791525474fe3f0bea232e70fc4095ee276c4254172a21c8fb6de7310e3b4cd361779eab5235895b6c5198e9fedfe07c2c2c23fe37398b31ef5aaaef2905ef6d6eb0a3687f0a2bddff613d0458390cc7bead361b7a78023bf9e1fd1ebacedb5db536b914fd5b94d95dd80d99779ffa22e3c9575da32328de91b6ae2f9eb66da4efa3b324d38654687d9bfd465defc39b340edfb1b0c7e77cf2502f93c9bc3ba31bda6209e7e6196a5307d901b670e395063174df1eab26afa31e95", 0xd4}], 0x5) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f00000019c0)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32=r5, @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 393.812654ms ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0x1}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x0) 341.228357ms ago: executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) 317.588815ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000080)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4, 0x5}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 301.89632ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 249.072415ms ago: executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @private, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 191.636445ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 184.484912ms ago: executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd(r0, &(0x7f0000000080)={[0x8]}, 0x8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', r3, 0x2f, 0xbe, 0x9, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x1}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000500)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000540)) getresuid(0x0, &(0x7f00000005c0), 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000800), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000980)='timerslack_ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x80010, 0xffffffffffffffff, 0x78df3000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000a00)) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) write$P9_RSTATFS(r5, &(0x7f0000000ac0)={0x43, 0x9, 0x4bc9, {0x0, 0x1, 0x20000000000000, 0x0, 0x472, 0x902c, 0x6, 0x9, 0x46a}}, 0x43) write$cgroup_subtree(r1, 0x0, 0x0) 170.909684ms ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) gettid() r2 = socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000f80), 0x4000000000002d8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 141.482868ms ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) wait4(0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(r0, 0x9, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r3, 0x0, 0x2908}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbc6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0xfffffff8}, 0x8) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xc7}, 0x0) 113.821142ms ago: executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000002b80)={0x278, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_TESTDATA={0x81, 0x45, "0e67163347d93ff3df5c739b0020fcb1285b730bf756702a46d3cb4b61a007674659bc6e20119622aeeed68bef7d34867ffa87ef0702470b33991cdb7d9638c0efeaa1ec1b2983f600df599c6f207cbb3df0161ef12686282903609c061d13b79c6abdb4c8bc8df83c876cf0fb17d60ae93df6e18a95b9a9d75e323e44"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, "d9"}, @NL80211_ATTR_TESTDATA={0x29, 0x45, "8f117a6c7e47d8c77e781491cfcc360325b6af681c0a8a16af491bddfadb7e8e3731c15be5"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "c2122abfa50f998a776ffb298b829229558dbb17ac84e236d65072f5"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "9a94"}, @NL80211_ATTR_TESTDATA={0xc7, 0x45, "4827c019b25b76a3274ebac0443004417d7ee42da9cf790f1e19f660d3ad058b0bfa122dd17e711f516f1e8ba37b0c0472d4843fde217d3ad4edc3effcec44e87c52589eade4ecfd6782e07f9a2371393e719bf8a9511601220dbc824ff3f11aa4e7b0a10846854c7fefde9ae6d219bfa99b97a23270aa37383013e51e457355a9da535b882d942e98f66f733b34ee15f7af2b5bf2dda23de7010b4d529acc105b3d3414001db1a8e2e635afde48e814f6aef49ab24a098a338b32520b43846f4c8b30"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xaf, 0x45, "78b36d3073c4e203415fa1f4ef2096845d5d16d3e36023e05eb6212d4816e17caa2ca2ccae2f0aba05a2c88f6fae50df8be5b8f989b6296650605ec068e7bea4210ffcf54f5d92a0bcdef041d76b8dcb34b466f1299e5fa83940b31235e9ec42eb2ae13a9750d9733e0db581c5847e087547294ac62fecbe2c6daf441ad5c037b1e80274608ff9633a794992d76ad56627093904cbb8e440975c78e4bc48eec969b42e409f96bd6b8a7a8c"}]}, 0x278}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x68, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, 0x0, @default, @val, @val={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, 0x9}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x68}}, 0x0) 55.24239ms ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) 0s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0xb, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000010280)={&(0x7f0000010140)=ANY=[], &(0x7f0000010180)=""/252, 0x2b, 0xfc, 0x1, 0xfffffff7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000010140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): umerate USB device [ 198.871253][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.930799][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.166355][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.379279][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.524262][ T5167] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.726187][ T5167] usb 4-1: device descriptor read/64, error -71 [ 200.844922][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.006360][ T5167] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.219429][ T5167] usb 4-1: device descriptor read/64, error -71 [ 201.367821][ T5167] usb usb4-port1: attempt power cycle [ 201.722631][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.846322][ T5167] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 201.899452][ T5167] usb 4-1: device descriptor read/8, error -71 [ 202.041740][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.051057][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.186197][ T5167] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.247880][ T5167] usb 4-1: device descriptor read/8, error -71 [ 202.304823][ T8598] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.378586][ T5167] usb usb4-port1: unable to enumerate USB device [ 203.105613][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.212058][ T8638] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.556937][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.741686][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.910917][ T8670] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.941564][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.244344][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.413752][ T8686] syzkaller0: entered promiscuous mode [ 204.427236][ T8686] syzkaller0: entered allmulticast mode [ 204.451384][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.580932][ T1052] syzkaller0: tun_net_xmit 48 [ 204.829448][ T8714] net_ratelimit: 46 callbacks suppressed [ 204.829468][ T8714] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 204.841759][ T8714] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.252736][ T8714] hsr_slave_0: left promiscuous mode [ 206.283590][ T8714] hsr_slave_1: left promiscuous mode [ 206.893262][ T8760] __nla_validate_parse: 3 callbacks suppressed [ 206.893282][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.407566][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.136204][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.360663][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 208.387986][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.403902][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.422893][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.432933][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.448356][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 208.494440][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.730869][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.029301][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.069969][ T8877] team0: Port device batadv0 added [ 209.104745][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.288394][ T8889] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.466271][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.479444][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.587444][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.612544][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.876272][ T50] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 210.076095][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 210.112411][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 210.145245][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 210.180506][ T50] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.242857][ T50] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0139, bcdDevice=fe.9e [ 210.266922][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.288984][ T50] usb 2-1: Product: syz [ 210.298061][ T50] usb 2-1: Manufacturer: syz [ 210.315164][ T50] usb 2-1: SerialNumber: syz [ 210.344855][ T50] usb 2-1: config 0 descriptor?? [ 210.371895][ T50] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 210.392926][ T50] ftdi_sio ttyUSB0: unknown device type: 0xfe9e [ 210.591637][ T50] usb 2-1: USB disconnect, device number 17 [ 210.619802][ T50] ftdi_sio 2-1:0.0: device disconnected [ 210.840380][ T5166] usb 3-1: USB disconnect, device number 17 [ 211.092436][ T8983] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 211.656148][ T5163] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.866067][ T5163] usb 2-1: Using ep0 maxpacket: 8 [ 211.882342][ T5163] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 211.905711][ T5163] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.917167][ T5163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.936387][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 211.961664][ T5163] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.998917][ T5163] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.025829][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.067915][ T5163] usbtmc 2-1:16.0: bulk endpoints not found [ 212.136160][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 212.153088][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 212.174844][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.211048][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.228074][ T8] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0139, bcdDevice=fe.9e [ 212.245152][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.254032][ T8] usb 3-1: Product: syz [ 212.258440][ T8] usb 3-1: Manufacturer: syz [ 212.263194][ T8] usb 3-1: SerialNumber: syz [ 212.270798][ T8] usb 3-1: config 0 descriptor?? [ 212.282567][ T8] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 212.297413][ T8] ftdi_sio ttyUSB0: unknown device type: 0xfe9e [ 212.502307][ T8] usb 3-1: USB disconnect, device number 18 [ 212.529424][ T8] ftdi_sio 3-1:0.0: device disconnected [ 213.444176][ T9102] __nla_validate_parse: 10 callbacks suppressed [ 213.444191][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.461269][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.809307][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 213.972868][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.006245][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 214.023940][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 214.044740][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.057462][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.071923][ T8] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0139, bcdDevice=fe.9e [ 214.081574][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.091457][ T8] usb 1-1: Product: syz [ 214.095879][ T8] usb 1-1: Manufacturer: syz [ 214.101259][ T8] usb 1-1: SerialNumber: syz [ 214.118530][ T8] usb 1-1: config 0 descriptor?? [ 214.137862][ T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 214.159253][ T8] ftdi_sio ttyUSB0: unknown device type: 0xfe9e [ 214.375657][ T8] usb 1-1: USB disconnect, device number 17 [ 214.398210][ T8] ftdi_sio 1-1:0.0: device disconnected [ 214.410533][ T9123] macvlan2: entered promiscuous mode [ 214.442723][ T9123] macvlan2: entered allmulticast mode [ 214.455835][ T5166] usb 2-1: USB disconnect, device number 18 [ 214.479252][ T9123] bridge0: entered promiscuous mode [ 214.485509][ T9123] bridge0: entered allmulticast mode [ 214.508616][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.522180][ T9123] team0: Port device macvlan2 added [ 214.530088][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.760526][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.951368][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.214201][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.248494][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.364537][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.396412][ T50] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.586511][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 215.597983][ T50] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 215.627005][ T50] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.651897][ T50] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.669861][ T50] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.698555][ T50] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.734922][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.783373][ T50] usbtmc 3-1:16.0: bulk endpoints not found [ 215.958572][ T9190] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 216.657669][ T9226] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 217.541564][ T9273] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 218.153340][ T8] usb 3-1: USB disconnect, device number 19 [ 218.747013][ T9333] __nla_validate_parse: 19 callbacks suppressed [ 218.747036][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.814483][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.847013][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.884126][ T9338] syzkaller0: entered allmulticast mode [ 219.016400][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 219.171906][ T9351] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 219.180864][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.227093][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 219.235122][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 219.267250][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.301103][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.311464][ T29] audit: type=1326 audit(1717489411.807:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7fc00000 [ 219.327092][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.352286][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.384837][ T29] audit: type=1326 audit(1717489411.817:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7415579 code=0x7fc00000 [ 219.413725][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.430101][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.457891][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 219.569769][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.701109][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.824043][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.847576][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.855544][ T9376] IPv6: NLM_F_CREATE should be set when creating new route [ 219.996319][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.006932][ T29] audit: type=1326 audit(1717489412.517:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7fc00000 [ 220.450610][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.750557][ T50] usb 4-1: USB disconnect, device number 17 [ 222.290323][ T9488] syzkaller0: entered promiscuous mode [ 222.300763][ T9488] syzkaller0: entered allmulticast mode [ 222.506114][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.706447][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 222.735221][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.771532][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.800557][ T8] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.814800][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.833821][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.843846][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.903890][ T8] usbtmc 2-1:16.0: bulk endpoints not found [ 223.086521][ T9528] syzkaller0: entered promiscuous mode [ 223.095784][ T9528] syzkaller0: entered allmulticast mode [ 223.775624][ T9557] __nla_validate_parse: 16 callbacks suppressed [ 223.775646][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.145482][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.239117][ T9575] vlan2: entered promiscuous mode [ 224.244308][ T9575] gretap0: entered promiscuous mode [ 224.269641][ T9575] vlan2: entered allmulticast mode [ 224.274827][ T9575] gretap0: entered allmulticast mode [ 224.305331][ T9575] gretap0: left allmulticast mode [ 224.316048][ T9575] gretap0: left promiscuous mode [ 224.734503][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.753643][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.015910][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.186717][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.230548][ T5167] usb 2-1: USB disconnect, device number 19 [ 225.574218][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.972743][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.012336][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.025560][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.035158][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.044400][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.054879][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.060744][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.073121][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.308881][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.339210][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.379950][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.386378][ T5167] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.447340][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.547790][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.576259][ T9634] chnl_net:caif_netlink_parms(): no params data found [ 226.586076][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.607527][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 226.621962][ T5167] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.663685][ T5167] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.701069][ T5167] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.724676][ T5167] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.760975][ T5167] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.789304][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.813566][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.827713][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.843026][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 226.859548][ T5167] usbtmc 3-1:16.0: bulk endpoints not found [ 226.874698][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.920152][ T8] usb 5-1: config 0 descriptor?? [ 226.938815][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 226.996427][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.003597][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.026640][ T9634] bridge_slave_0: entered allmulticast mode [ 227.034089][ T9634] bridge_slave_0: entered promiscuous mode [ 227.060120][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.076203][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.083451][ T9634] bridge_slave_1: entered allmulticast mode [ 227.098148][ T9634] bridge_slave_1: entered promiscuous mode [ 227.128852][ T35] bridge_slave_1: left allmulticast mode [ 227.134559][ T35] bridge_slave_1: left promiscuous mode [ 227.146466][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.167205][ T35] bridge_slave_0: left allmulticast mode [ 227.172903][ T35] bridge_slave_0: left promiscuous mode [ 227.185554][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.643766][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.663662][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.678080][ T35] bond0 (unregistering): Released all slaves [ 227.692978][ T35] bond1 (unregistering): Released all slaves [ 227.729179][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.765909][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.903968][ T9667] syzkaller0: entered promiscuous mode [ 227.912356][ T9667] syzkaller0: entered allmulticast mode [ 228.003749][ T2463] syzkaller0: tun_net_xmit 48 [ 228.116902][ T4493] Bluetooth: hci1: command tx timeout [ 228.218715][ T9634] team0: Port device team_slave_0 added [ 229.126882][ T5165] usb 3-1: USB disconnect, device number 20 [ 229.322530][ T50] usb 5-1: USB disconnect, device number 8 [ 229.877944][ T9634] team0: Port device team_slave_1 added [ 229.998541][ T9694] __nla_validate_parse: 2 callbacks suppressed [ 229.998564][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.054639][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.195838][ T35] hsr_slave_0: left promiscuous mode [ 230.197402][ T4493] Bluetooth: hci1: command tx timeout [ 230.215391][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.226295][ T35] hsr_slave_1: left promiscuous mode [ 230.242176][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.266094][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.308546][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.334871][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.385078][ T35] veth1_macvtap: left promiscuous mode [ 230.416909][ T35] veth0_macvtap: left promiscuous mode [ 230.424102][ T35] veth1_vlan: left promiscuous mode [ 230.438078][ T35] veth0_vlan: left promiscuous mode [ 230.676513][ T5163] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.856370][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 230.870769][ T5163] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.886837][ T5163] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.903562][ T5163] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.926070][ T5163] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.939793][ T5163] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.950570][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.978624][ T5163] usbtmc 4-1:16.0: bulk endpoints not found [ 231.124348][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.169523][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.256079][ T50] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 231.472438][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.482659][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.496496][ T50] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 231.505638][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.509218][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.522242][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.524242][ T50] usb 3-1: config 0 descriptor?? [ 231.569151][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.584913][ T50] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.610243][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.647467][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.686106][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.754510][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.847022][ T9634] hsr_slave_0: entered promiscuous mode [ 231.871666][ T9634] hsr_slave_1: entered promiscuous mode [ 232.277435][ T4493] Bluetooth: hci1: command tx timeout [ 232.801358][ T9634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.829291][ T9634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.856933][ T9634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.871532][ T9634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.015822][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.075844][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.104085][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.111319][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.148500][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.155681][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.235319][ T9634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.262532][ T9634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.344926][ T9776] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 233.409960][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.441012][ T5163] usb 4-1: USB disconnect, device number 18 [ 233.606508][ T9634] veth0_vlan: entered promiscuous mode [ 233.628027][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.658564][ T9634] veth1_vlan: entered promiscuous mode [ 233.799367][ T9634] veth0_macvtap: entered promiscuous mode [ 233.840963][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.855206][ T9634] veth1_macvtap: entered promiscuous mode [ 233.913453][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.932525][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.943953][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.961729][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.005197][ T5163] usb 3-1: USB disconnect, device number 21 [ 234.015074][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.048908][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.071316][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.096360][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.144196][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.198845][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.233008][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.244014][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.266526][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.286310][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.309606][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.338446][ T9634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.352140][ T9634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.363403][ T4493] Bluetooth: hci1: command tx timeout [ 234.380094][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.536049][ T5163] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 234.549698][ T9818] syzkaller0: entered promiscuous mode [ 234.562892][ T9818] syzkaller0: entered allmulticast mode [ 234.597285][ T9634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.627753][ T9634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.638777][ T9634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.653890][ T9634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.666559][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.727263][ T5163] usb 3-1: Using ep0 maxpacket: 8 [ 234.738104][ T5163] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.757254][ T5163] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.781875][ T5163] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.801882][ T5163] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 234.823626][ T5163] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.848626][ T5163] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.867283][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.896703][ T5163] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 236.795589][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.827319][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.868130][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.902162][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.976197][ T58] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 237.120964][ T5164] usb 3-1: USB disconnect, device number 22 [ 237.131186][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.189016][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.229458][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.289127][ T58] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 237.324605][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.341006][ T58] usb 2-1: config 0 descriptor?? [ 237.361297][ T58] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 237.653111][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.076576][ T5165] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 238.267641][ T5165] usb 3-1: Using ep0 maxpacket: 8 [ 238.294093][ T5165] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.320567][ T5165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.346382][ T5165] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 238.377997][ T5165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 238.392878][ T5165] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.407429][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.427438][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.441954][ T5165] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.451365][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.480635][ T5165] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 239.559482][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.629708][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.725526][ T5116] usb 2-1: USB disconnect, device number 20 [ 239.863089][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.892346][ T29] audit: type=1326 audit(1717489432.397:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7466579 code=0x0 [ 239.898873][ T9974] syzkaller0: entered allmulticast mode [ 239.933387][ T9973] syzkaller0: left allmulticast mode [ 239.973924][ T29] audit: type=1326 audit(1717489432.477:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 239.999298][ T29] audit: type=1326 audit(1717489432.477:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 240.670934][ T29] audit: type=1326 audit(1717489433.177:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 240.815096][ T5165] usb 3-1: USB disconnect, device number 23 [ 240.936157][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.972648][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.150056][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.189167][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.215682][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.252623][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 241.279306][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.310859][ T8] usb 5-1: config 0 descriptor?? [ 241.744419][ T8] wacom 0003:056A:4004.000F: unbalanced delimiter at end of report description [ 241.773929][ T8] wacom 0003:056A:4004.000F: parse failed [ 241.794816][ T8] wacom 0003:056A:4004.000F: probe with driver wacom failed with error -22 [ 241.945527][ T8] usb 5-1: USB disconnect, device number 9 [ 241.951847][ T29] audit: type=1326 audit(1717489434.457:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 241.998565][ T29] audit: type=1326 audit(1717489434.457:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 242.555737][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.708044][ T29] audit: type=1326 audit(1717489435.217:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10023 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 242.771594][ T5165] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.842679][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.995300][ T5165] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 243.026236][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.035462][ T5165] usb 4-1: Product: syz [ 243.056040][ T5165] usb 4-1: Manufacturer: syz [ 243.060700][ T5165] usb 4-1: SerialNumber: syz [ 243.087290][ T5165] usb 4-1: config 0 descriptor?? [ 243.100864][ T5165] ch341 4-1:0.0: ch341-uart converter detected [ 243.366075][ T5116] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 243.568261][ T5116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.595725][ T5116] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.632278][ T5116] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 243.665608][ T5116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.693519][ T5116] usb 3-1: config 0 descriptor?? [ 243.713680][ T5116] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 244.166169][ T784] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.312055][ T5165] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 244.376019][ T784] usb 5-1: Using ep0 maxpacket: 16 [ 244.404026][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.422786][ T784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.445154][ T784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.466122][ T784] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.481879][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.495543][ T784] usb 5-1: config 0 descriptor?? [ 244.521408][ T5165] usb 4-1: USB disconnect, device number 19 [ 244.549362][ T5165] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 244.585423][ T5165] ch341 4-1:0.0: device disconnected [ 244.868524][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.914398][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 244.939159][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 244.963351][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 244.974023][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 244.992020][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.000319][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.014974][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.023039][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.044634][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.070119][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.091736][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.103777][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.117015][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.125412][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.139598][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.163463][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.182123][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.201634][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.218786][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.238066][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.259971][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.277264][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.300166][ T784] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 245.323843][ T784] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 245.352861][ T784] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 245.390759][ T784] microsoft 0003:045E:07DA.0010: no inputs found [ 245.404688][ T784] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 245.451019][ T784] usb 5-1: USB disconnect, device number 10 [ 245.466276][ T5116] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.666304][ T5116] usb 4-1: Using ep0 maxpacket: 8 [ 245.677494][ T5116] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.717261][ T5116] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.749168][ T5116] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.782785][ T5116] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.820049][ T5116] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.829525][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.054152][ T5116] usb 4-1: usb_control_msg returned -71 [ 246.069813][ T5116] usbtmc 4-1:16.0: can't read capabilities [ 246.075464][ T5165] usb 3-1: USB disconnect, device number 24 [ 246.082148][ T5116] usb 4-1: USB disconnect, device number 20 [ 246.543562][T10116] syzkaller0: entered promiscuous mode [ 246.566111][T10116] syzkaller0: entered allmulticast mode [ 247.236589][ T58] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 247.443870][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.468970][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.482418][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.505888][ T58] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 247.524341][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.552626][ T58] usb 2-1: config 0 descriptor?? [ 247.569327][ T58] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 249.056156][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.136443][ T5167] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.246279][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 249.260957][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.277724][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.288264][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.299017][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.315125][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.325744][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.341224][ T5167] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.352686][ T5167] usb 5-1: config 0 has no interfaces? [ 249.362265][ T5167] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.373781][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.391975][ T5167] usb 5-1: config 0 descriptor?? [ 249.572585][ T8] usb 4-1: usb_control_msg returned -71 [ 249.586146][ T8] usbtmc 4-1:16.0: can't read capabilities [ 249.610929][ T8] usb 4-1: USB disconnect, device number 21 [ 249.697117][ T5167] usb 5-1: USB disconnect, device number 11 [ 249.842577][T10178] ptrace attach of "/root/syz-executor.0 exec"[9634] was attempted by "/root/syz-executor.0 exec"[10178] [ 249.954241][ T8] usb 2-1: USB disconnect, device number 21 [ 249.990723][T10182] syzkaller0: entered promiscuous mode [ 250.016406][T10182] syzkaller0: entered allmulticast mode [ 250.133616][T10188] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.349959][T10202] ptrace attach of "/root/syz-executor.3 exec"[7441] was attempted by "/root/syz-executor.3 exec"[10202] [ 250.644330][T10208] syzkaller0: entered promiscuous mode [ 250.652748][T10208] syzkaller0: entered allmulticast mode [ 250.857764][T10225] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.876087][ T5165] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 251.066199][ T5165] usb 3-1: Using ep0 maxpacket: 8 [ 251.087643][ T5165] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.104550][ T5165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.124222][ T5165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.134610][ T5165] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.178821][ T5165] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.189872][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.430327][ T5165] usb 3-1: usb_control_msg returned -71 [ 251.442095][ T5165] usbtmc 3-1:16.0: can't read capabilities [ 251.457955][ T5116] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 251.479459][ T5165] usb 3-1: USB disconnect, device number 25 [ 251.658119][ T5116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.689766][ T5116] usb 1-1: config 0 has no interfaces? [ 251.707370][ T5116] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.726237][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.742559][ T5116] usb 1-1: config 0 descriptor?? [ 252.107237][ T5163] usb 1-1: USB disconnect, device number 18 [ 252.665743][ T29] audit: type=1326 audit(1717489445.167:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7428579 code=0x0 [ 252.836636][T10247] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 253.233393][T10251] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.305718][ T29] audit: type=1326 audit(1717489445.807:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7fc00000 [ 253.342478][ T29] audit: type=1326 audit(1717489445.847:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73cf579 code=0x7fc00000 [ 253.544438][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.696500][ T5163] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 253.712664][ T29] audit: type=1326 audit(1717489446.217:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 253.815072][T10276] syzkaller0: entered promiscuous mode [ 253.820638][T10276] syzkaller0: entered allmulticast mode [ 253.896086][ T5163] usb 1-1: Using ep0 maxpacket: 8 [ 253.904075][ T5163] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.918918][ T5163] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.932738][ T5163] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.944924][ T5163] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.963625][ T5163] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.972854][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.076324][ T29] audit: type=1326 audit(1717489446.577:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cf579 code=0x7fc00000 [ 254.212383][ T5163] usb 1-1: usb_control_msg returned -32 [ 254.225579][ T5163] usbtmc 1-1:16.0: can't read capabilities [ 254.259346][ T5163] usb 1-1: USB disconnect, device number 19 [ 254.452750][ T29] audit: type=1326 audit(1717489446.937:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73c0579 code=0x7fc00000 [ 254.621727][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.638054][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.646993][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.661041][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.673977][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.681617][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.094950][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.924529][T10281] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.073478][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.200212][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.207601][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.278085][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.330654][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.402022][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.541736][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.546650][ T784] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 256.580963][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.672533][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.756267][ T4493] Bluetooth: hci0: command tx timeout [ 256.756316][ T784] usb 4-1: Using ep0 maxpacket: 8 [ 256.761775][ T784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.809948][T10283] chnl_net:caif_netlink_parms(): no params data found [ 256.817240][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.834024][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.862271][ T784] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.877478][ T784] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.887116][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.890044][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.976327][ T5167] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.102161][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.122632][ T784] usb 4-1: usb_control_msg returned -32 [ 257.128490][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.135520][ T784] usbtmc 4-1:16.0: can't read capabilities [ 257.165247][ T784] usb 4-1: USB disconnect, device number 22 [ 257.176349][T10283] bridge_slave_0: entered allmulticast mode [ 257.197939][T10283] bridge_slave_0: entered promiscuous mode [ 257.208998][ T5167] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.228981][ T5167] usb 1-1: config 0 has no interfaces? [ 257.246933][ T5167] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.266285][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.275108][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.284136][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.302466][T10283] bridge_slave_1: entered allmulticast mode [ 257.309762][ T5167] usb 1-1: config 0 descriptor?? [ 257.322910][T10283] bridge_slave_1: entered promiscuous mode [ 257.391646][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.440901][ T35] bridge_slave_1: left allmulticast mode [ 257.450239][ T35] bridge_slave_1: left promiscuous mode [ 257.459257][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.490137][ T35] bridge_slave_0: left allmulticast mode [ 257.495859][ T35] bridge_slave_0: left promiscuous mode [ 257.501749][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.600364][T10347] netlink: 440 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.738065][ T8] usb 1-1: USB disconnect, device number 20 [ 257.900275][ T35] bridge0 (unregistering): left allmulticast mode [ 257.924758][ T35] team0: Port device macvlan2 removed [ 258.165406][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.181844][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.194534][ T35] bond0 (unregistering): Released all slaves [ 258.210073][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.220318][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.414420][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.437040][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.469224][T10283] team0: Port device team_slave_0 added [ 258.636668][T10283] team0: Port device team_slave_1 added [ 258.766518][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.773516][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.842915][ T4493] Bluetooth: hci0: command tx timeout [ 258.849626][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.951035][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.980374][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.984918][T10388] netlink: 440 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.020313][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.075308][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.085179][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.086603][ T784] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 259.114319][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.140332][ T29] audit: type=1326 audit(1717489451.647:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.176113][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.213061][ T29] audit: type=1326 audit(1717489451.647:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.258521][ T35] veth1_macvtap: left promiscuous mode [ 259.280128][ T35] veth0_macvtap: left promiscuous mode [ 259.291864][ T35] veth1_vlan: left promiscuous mode [ 259.294300][ T29] audit: type=1326 audit(1717489451.647:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.298385][ T784] usb 4-1: Using ep0 maxpacket: 8 [ 259.332934][ T35] veth0_vlan: left promiscuous mode [ 259.349036][ T29] audit: type=1326 audit(1717489451.647:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.364601][ T784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.424275][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.429491][ T29] audit: type=1326 audit(1717489451.647:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.455157][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.492419][ T29] audit: type=1326 audit(1717489451.647:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.525295][ T29] audit: type=1326 audit(1717489451.647:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.526743][ T784] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.569373][ T29] audit: type=1326 audit(1717489451.647:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.606291][ T784] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.619621][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.630348][ T29] audit: type=1326 audit(1717489451.647:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.672039][ T29] audit: type=1326 audit(1717489451.647:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73c0579 code=0x7ffc0000 [ 259.861419][ T784] usb 4-1: usb_control_msg returned -32 [ 259.878555][ T784] usbtmc 4-1:16.0: can't read capabilities [ 259.904375][ T784] usb 4-1: USB disconnect, device number 23 [ 260.109877][ T35] team0 (unregistering): Port device team_slave_1 removed [ 260.154403][ T35] team0 (unregistering): Port device team_slave_0 removed [ 260.810626][T10283] hsr_slave_0: entered promiscuous mode [ 260.825308][T10283] hsr_slave_1: entered promiscuous mode [ 260.849514][T10283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.860649][T10283] Cannot create hsr debugfs directory [ 260.916281][ T4493] Bluetooth: hci0: command tx timeout [ 261.366074][ T5116] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.520111][T10445] __nla_validate_parse: 3 callbacks suppressed [ 261.520176][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.552521][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.574730][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.587362][ T5116] usb 1-1: Using ep0 maxpacket: 8 [ 261.615142][ T5116] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.650749][ T5116] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.677138][ T5116] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.705257][ T5116] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.727746][ T5116] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.752651][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.838308][T10454] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.998628][ T5116] usb 1-1: usb_control_msg returned -32 [ 262.010746][ T5116] usbtmc 1-1:16.0: can't read capabilities [ 262.052262][ T5116] usb 1-1: USB disconnect, device number 21 [ 262.212942][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.550387][T10283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.608683][T10283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.646285][T10283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.674013][T10283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.998252][ T4493] Bluetooth: hci0: command tx timeout [ 263.010383][T10283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.046801][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.191413][T10283] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.239866][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.247118][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.309569][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.316809][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.482130][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.642945][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.691347][T10283] veth0_vlan: entered promiscuous mode [ 263.729438][T10283] veth1_vlan: entered promiscuous mode [ 263.890428][T10283] veth0_macvtap: entered promiscuous mode [ 263.927215][T10283] veth1_macvtap: entered promiscuous mode [ 263.999163][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.045282][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.064433][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.085297][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.114321][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.133441][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.143882][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.162372][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.176045][ T5163] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 264.185174][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.233803][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.263549][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.276167][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.306086][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.328898][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.362377][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.366050][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 264.378980][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.396997][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.400157][ T5163] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.409242][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.433972][ T5163] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.455556][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.486079][ T5163] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.526434][ T5163] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.548603][T10283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.556972][ T5163] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.577078][T10283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.597256][T10283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.608240][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.627046][T10283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.875732][ T5163] usb 4-1: usb_control_msg returned -32 [ 264.890313][ T5163] usbtmc 4-1:16.0: can't read capabilities [ 264.938197][ T5163] usb 4-1: USB disconnect, device number 24 [ 264.975262][ T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.011726][ T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.039432][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.104000][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.106537][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.118252][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.377194][ T5163] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 266.572909][T10645] __nla_validate_parse: 3 callbacks suppressed [ 266.572931][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.578390][ T5163] usb 5-1: Using ep0 maxpacket: 8 [ 266.607523][ T5163] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.623271][ T5163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.646083][ T5163] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.666059][ T5163] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.692122][ T5163] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.708458][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.933882][ T5163] usb 5-1: usb_control_msg returned -32 [ 266.957531][ T5163] usbtmc 5-1:16.0: can't read capabilities [ 267.001762][ T5163] usb 5-1: USB disconnect, device number 12 [ 267.036737][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.306267][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.336056][T10669] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 267.568330][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.861474][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.953124][T10704] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 268.113903][T10709] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.159879][T10711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.267620][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.418376][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.614292][T10740] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.672969][T10742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.754871][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.144373][T10772] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 269.194839][T10773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.772480][T10803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.843788][T10851] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 270.876507][T10851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.339905][T10875] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 271.919072][T10903] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 271.959587][T10903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.155612][T10911] __nla_validate_parse: 4 callbacks suppressed [ 272.155632][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.268884][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.477410][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.541255][T10932] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 272.648716][T10937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.691812][T10941] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.701961][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.875878][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.050807][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.113697][T10963] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 273.167789][T10963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.335053][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.590974][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.719033][T10993] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 273.847396][T10996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.038009][T11008] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.049261][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.948788][T11155] IPv6: sit1: Disabled Multicast RS [ 278.112901][T11204] __nla_validate_parse: 13 callbacks suppressed [ 278.112915][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.785208][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.794902][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.803358][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.812705][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.827426][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.834908][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.952487][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.479144][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.590906][T11218] chnl_net:caif_netlink_parms(): no params data found [ 279.718828][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.730639][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.738669][T11218] bridge_slave_0: entered allmulticast mode [ 279.751220][T11218] bridge_slave_0: entered promiscuous mode [ 279.763680][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.775512][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.785747][T11218] bridge_slave_1: entered allmulticast mode [ 279.801588][T11218] bridge_slave_1: entered promiscuous mode [ 279.880826][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.911801][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.991313][T11218] team0: Port device team_slave_0 added [ 280.002912][T11218] team0: Port device team_slave_1 added [ 280.065848][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.081429][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.135186][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.186470][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.211745][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.283041][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.371145][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.580291][T11218] hsr_slave_0: entered promiscuous mode [ 280.597452][T11218] hsr_slave_1: entered promiscuous mode [ 280.616091][T11218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.624105][T11218] Cannot create hsr debugfs directory [ 280.775711][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.915005][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.916272][ T4493] Bluetooth: hci4: command tx timeout [ 280.944131][T11286] macvlan2: entered promiscuous mode [ 280.954810][T11286] macvlan2: entered allmulticast mode [ 280.964061][T11286] bridge0: entered allmulticast mode [ 280.973299][T11286] bridge0: entered promiscuous mode [ 280.985581][T11286] team0: Port device macvlan2 added [ 281.034457][T11287] bridge0: port 3(netdevsim1) entered blocking state [ 281.043187][T11287] bridge0: port 3(netdevsim1) entered disabled state [ 281.051183][T11287] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 281.076484][T11287] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 281.161446][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.227249][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.391413][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.414258][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.588408][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.670511][ T35] bridge_slave_1: left allmulticast mode [ 281.705534][ T35] bridge_slave_1: left promiscuous mode [ 281.728863][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.742672][ T35] bridge_slave_0: left allmulticast mode [ 281.756223][ T35] bridge_slave_0: left promiscuous mode [ 281.762012][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.120904][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.205088][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.443403][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.467443][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.480784][ T35] bond0 (unregistering): Released all slaves [ 282.495319][ T35] bond1 (unregistering): Released all slaves [ 282.509538][ T35] bond2 (unregistering): Released all slaves [ 282.624084][ T35] bond3 (unregistering): Released all slaves [ 282.637724][ T35] bond4 (unregistering): Released all slaves [ 282.651426][ T35] bond5 (unregistering): Released all slaves [ 282.704563][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.996396][ T4493] Bluetooth: hci4: command tx timeout [ 283.448229][ T35] hsr_slave_0: left promiscuous mode [ 283.454361][ T35] hsr_slave_1: left promiscuous mode [ 283.461375][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.471636][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.485519][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.494282][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.520359][ T35] veth1_macvtap: left promiscuous mode [ 283.527559][ T35] veth0_macvtap: left promiscuous mode [ 283.533367][ T35] veth1_vlan: left promiscuous mode [ 283.539295][ T35] veth0_vlan: left promiscuous mode [ 283.775460][T11377] __nla_validate_parse: 1 callbacks suppressed [ 283.775479][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.161174][ T35] team0 (unregistering): Port device team_slave_1 removed [ 284.187316][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.224368][ T35] team0 (unregistering): Port device team_slave_0 removed [ 284.589007][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.858807][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.939540][T11400] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 285.050465][T11218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.076443][ T4493] Bluetooth: hci4: command tx timeout [ 285.092185][T11218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.126798][T11218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.151751][T11218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.402319][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.419834][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.458111][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.480872][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.488136][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.524119][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.531321][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.692493][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.766781][T11218] veth0_vlan: entered promiscuous mode [ 285.784536][T11218] veth1_vlan: entered promiscuous mode [ 285.815552][T11218] veth0_macvtap: entered promiscuous mode [ 285.835714][T11218] veth1_macvtap: entered promiscuous mode [ 285.855410][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.867655][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.878198][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.889316][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.899352][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.910110][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.920417][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.932560][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.950983][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.965855][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.977104][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.987057][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.997686][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.007575][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.018223][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.028668][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.043627][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.060811][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.075392][T11218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.084549][T11218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.106439][T11218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.115466][T11218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.263806][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.276594][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.291376][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.333197][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.348982][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.382247][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.611673][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.664197][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.926466][T11468] pimreg: entered allmulticast mode [ 287.156308][ T5119] Bluetooth: hci4: command tx timeout [ 287.441638][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.847938][T11499] pimreg: entered allmulticast mode [ 288.146117][ T5163] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.338131][ T5163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.349286][ T5163] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.362939][ T5163] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.373859][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.384089][ T5163] usb 2-1: config 0 descriptor?? [ 288.806912][ T5163] plantronics 0003:047F:FFFF.0011: bogus close delimiter [ 288.814062][ T5163] plantronics 0003:047F:FFFF.0011: item 0 4 2 10 parsing failed [ 288.828208][ T5163] plantronics 0003:047F:FFFF.0011: parse failed [ 288.834766][ T5163] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 288.996704][ T5119] Bluetooth: hci3: command 0x0406 tx timeout [ 289.035672][ T5163] usb 2-1: USB disconnect, device number 22 [ 289.155663][T11526] __nla_validate_parse: 2 callbacks suppressed [ 289.155682][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.398627][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.937276][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.247052][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.661206][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.847320][T11585] input: syz0 as /devices/virtual/input/input15 [ 291.115732][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.541770][T11606] syzkaller0: entered promiscuous mode [ 291.554021][T11606] syzkaller0: entered allmulticast mode [ 293.346972][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.695188][T11632] input: syz0 as /devices/virtual/input/input16 [ 293.740656][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.199544][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.900339][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.991506][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.206373][ T5166] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 295.420061][ T5166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.459218][ T5166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.506090][ T5166] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 295.515324][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.527566][ T5166] usb 4-1: config 0 descriptor?? [ 295.951713][ T5166] corsair 0003:1B1C:1B3E.0012: failed to start in urb: -90 [ 295.983928][ T5166] corsair 0003:1B1C:1B3E.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 296.144312][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.166455][ T5166] usb 4-1: USB disconnect, device number 25 [ 296.282823][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.991401][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.031522][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.097095][ T50] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 297.150575][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.289776][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.313292][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.346926][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.348482][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.386635][ T50] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 297.424274][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.472962][ T50] usb 2-1: config 0 descriptor?? [ 297.548258][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.874342][ T11] bridge_slave_1: left allmulticast mode [ 297.896012][ T11] bridge_slave_1: left promiscuous mode [ 297.901828][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.953342][ T50] hid (null): unknown global tag 0xc [ 297.967462][ T11] bridge_slave_0: left allmulticast mode [ 297.973157][ T11] bridge_slave_0: left promiscuous mode [ 297.984698][ T50] wacom 0003:056A:00D0.0013: unknown global tag 0xc [ 298.006971][ T50] wacom 0003:056A:00D0.0013: item 0 2 1 12 parsing failed [ 298.007745][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.018964][ T50] wacom 0003:056A:00D0.0013: parse failed [ 298.027561][ T50] wacom 0003:056A:00D0.0013: probe with driver wacom failed with error -22 [ 298.036428][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.054481][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.063549][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.072953][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.080857][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.089722][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.200769][ T8] usb 2-1: USB disconnect, device number 23 [ 298.613933][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.625591][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.641613][ T11] bond0 (unregistering): Released all slaves [ 298.653393][ T11] bond1 (unregistering): Released all slaves [ 298.668365][ T11] bond2 (unregistering): Released all slaves [ 298.686578][ T11] bond3 (unregistering): Released all slaves [ 298.702438][ T11] bond4 (unregistering): Released all slaves [ 298.759204][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.806014][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.951540][T11789] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 298.968879][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 299.439596][T11812] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 299.457978][ T11] hsr_slave_0: left promiscuous mode [ 299.492460][ T11] hsr_slave_1: left promiscuous mode [ 299.510201][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.552834][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.589808][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.601094][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.693425][ T11] veth1_macvtap: left promiscuous mode [ 299.702979][ T11] veth0_macvtap: left promiscuous mode [ 299.726243][ T11] veth1_vlan: left promiscuous mode [ 299.738560][ T11] veth0_vlan: left promiscuous mode [ 300.116680][ T4493] Bluetooth: hci0: command tx timeout [ 300.872743][ T11] team0 (unregistering): Port device team_slave_1 removed [ 300.961067][ T11] team0 (unregistering): Port device team_slave_0 removed [ 300.967271][T11857] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.724627][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.001340][T11775] chnl_net:caif_netlink_parms(): no params data found [ 302.199309][ T4493] Bluetooth: hci0: command tx timeout [ 302.608139][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.627860][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.635163][T11775] bridge_slave_0: entered allmulticast mode [ 302.687423][T11775] bridge_slave_0: entered promiscuous mode [ 302.725787][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.776313][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.783613][T11775] bridge_slave_1: entered allmulticast mode [ 302.841851][T11775] bridge_slave_1: entered promiscuous mode [ 302.987114][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.022328][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.199428][T11775] team0: Port device team_slave_0 added [ 303.224949][T11775] team0: Port device team_slave_1 added [ 303.334263][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.366490][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.430783][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.499128][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.520349][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.588342][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.613535][T11923] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 303.844975][T11775] hsr_slave_0: entered promiscuous mode [ 303.864363][T11775] hsr_slave_1: entered promiscuous mode [ 303.883934][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.902340][T11775] Cannot create hsr debugfs directory [ 304.041665][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.276577][ T5119] Bluetooth: hci0: command tx timeout [ 304.363683][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 305.691337][T11982] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.752539][T11775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.802997][T11775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.933587][T11775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.966840][T11775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.294791][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.356323][ T4493] Bluetooth: hci0: command tx timeout [ 306.371602][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.424938][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.432169][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.493397][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.500625][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.764080][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.884381][T11775] veth0_vlan: entered promiscuous mode [ 306.906907][ T5163] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 306.948398][T11775] veth1_vlan: entered promiscuous mode [ 307.041441][T11775] veth0_macvtap: entered promiscuous mode [ 307.088762][T11775] veth1_macvtap: entered promiscuous mode [ 307.127657][ T5163] usb 1-1: Using ep0 maxpacket: 16 [ 307.147796][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.178518][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.196059][ T5163] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.230581][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.249786][ T5163] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 307.273412][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.289711][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.326007][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.338067][ T5163] usb 1-1: config 0 descriptor?? [ 307.360227][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.393596][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.429941][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.448295][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.487927][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.518617][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.543805][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.574789][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.607277][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.637860][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.676676][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.715142][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.735832][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.757022][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.785901][T11775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.795787][T11775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.818678][ T5163] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 307.826414][T11775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.835233][T11775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.846663][ T5163] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 307.868788][ T5163] microsoft 0003:045E:07DA.0014: no inputs found [ 307.885919][ T5163] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 308.092977][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.109605][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.208279][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.213026][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.229123][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.250122][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.614738][ T5116] usb 1-1: USB disconnect, device number 22 [ 308.652443][T12052] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 308.914382][T12069] bridge0: port 4(gretap1) entered blocking state [ 308.966660][T12069] bridge0: port 4(gretap1) entered disabled state [ 308.973361][T12069] gretap1: entered allmulticast mode [ 309.013066][T12069] gretap1: entered promiscuous mode [ 309.035094][T12074] bridge0: port 4(gretap1) entered disabled state [ 309.623675][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 310.281173][ T50] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 310.486032][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 310.518648][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.558434][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 310.590984][ T50] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.621293][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.638881][ T50] usb 2-1: config 0 descriptor?? [ 311.068355][ T50] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 311.092905][ T50] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 311.118458][ T50] microsoft 0003:045E:07DA.0015: no inputs found [ 311.130811][ T50] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 311.335553][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.346798][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.406474][T12184] bridge0: port 3(gretap1) entered blocking state [ 312.427745][T12184] bridge0: port 3(gretap1) entered disabled state [ 312.450123][T12184] gretap1: entered allmulticast mode [ 312.477235][T12184] gretap1: entered promiscuous mode [ 312.499565][T12189] bridge0: port 3(gretap1) entered blocking state [ 312.506315][T12189] bridge0: port 3(gretap1) entered forwarding state [ 312.515006][T12189] bridge0: port 3(gretap1) entered disabled state [ 313.004437][ T58] usb 2-1: USB disconnect, device number 24 [ 313.033670][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.258091][T12223] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.437253][T12237] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.629613][T12245] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 313.750455][T12255] bond13: (slave vcan1): The slave device specified does not support setting the MAC address [ 313.760845][T12255] bond13: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 313.774361][T12255] bond13: (slave vcan1): making interface the new active one [ 313.805266][T12255] bond13: (slave vcan1): Enslaving as an active interface with an up link [ 313.926306][T12263] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.951072][T12266] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 313.965152][T12266] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 313.975333][T12266] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 314.078399][T12272] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.461702][T12297] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.560585][T12301] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.978050][T12328] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.095619][T12334] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.216208][ T58] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 315.433483][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.457468][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.478558][ T58] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.512713][ T58] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 315.536116][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.560644][ T58] usb 1-1: config 0 descriptor?? [ 315.591715][T12362] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.720751][T12370] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 315.723943][T12369] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.996348][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.019509][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.028409][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.035483][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.055864][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.080006][ T58] wacom 0003:056A:4004.0016: unknown main item tag 0x0 [ 316.123302][ T58] wacom 0003:056A:4004.0016: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 316.150980][T12387] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 316.193185][ T58] usb 1-1: USB disconnect, device number 23 [ 316.247038][T12393] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.345343][T12395] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 316.355666][T12395] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 316.369669][T12395] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 316.381765][T12398] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.461117][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.498125][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.518482][T12402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.530675][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.538719][T12402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.594304][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.839215][T12422] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.952986][T12428] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 316.982379][T12427] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.051667][T12428] bond0: (slave bond_slave_0): Releasing backup interface [ 317.334406][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.350816][T12449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.368798][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.380446][T12449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.427610][T12455] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.587334][ T58] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 317.646897][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.653341][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.802218][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.823676][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.849391][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.867728][ T58] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 317.880676][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.901397][ T58] usb 3-1: config 0 descriptor?? [ 317.941064][T12478] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.371279][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.389561][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.406142][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.413319][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.425729][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.434700][ T58] wacom 0003:056A:4004.0017: unknown main item tag 0x0 [ 318.454603][T12508] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.455021][ T58] wacom 0003:056A:4004.0017: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.2-1/input0 [ 318.568961][ T58] usb 3-1: USB disconnect, device number 26 [ 318.654074][T12519] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 318.673705][T12519] __nla_validate_parse: 2 callbacks suppressed [ 318.673723][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.999847][T12538] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.132261][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.488588][T12572] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.682191][T12582] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.840105][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.860518][ T784] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 319.891208][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.069140][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.089982][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.101414][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.115206][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.133651][ T784] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 320.143480][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.152102][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.161028][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.173095][ T784] usb 2-1: config 0 descriptor?? [ 320.185837][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.194710][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.208919][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.563529][T12595] chnl_net:caif_netlink_parms(): no params data found [ 320.565707][T12610] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.621603][ T784] wacom 0003:056A:4004.0018: unknown main item tag 0x0 [ 320.649485][ T784] wacom 0003:056A:4004.0018: unknown main item tag 0x0 [ 320.670786][ T784] wacom 0003:056A:4004.0018: unknown main item tag 0x0 [ 320.702828][ T784] wacom 0003:056A:4004.0018: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.1-1/input0 [ 320.796598][ T5166] usb 2-1: USB disconnect, device number 25 [ 320.907692][T12595] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.917362][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.924635][T12595] bridge_slave_0: entered allmulticast mode [ 320.937508][T12595] bridge_slave_0: entered promiscuous mode [ 320.999787][T12595] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.016181][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.023569][T12595] bridge_slave_1: entered allmulticast mode [ 321.037825][T12595] bridge_slave_1: entered promiscuous mode [ 321.194203][T12595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.223103][T12595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.300102][T12635] tipc: Enabling of bearer rejected, failed to enable media [ 321.315706][T12595] team0: Port device team_slave_0 added [ 321.341105][T12595] team0: Port device team_slave_1 added [ 321.454887][T12595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.468222][T12642] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 321.478819][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.510649][T12595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.524449][T12595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.531987][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.558845][T12595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.707005][T12595] hsr_slave_0: entered promiscuous mode [ 321.719213][T12595] hsr_slave_1: entered promiscuous mode [ 321.725387][T12595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.734766][T12595] Cannot create hsr debugfs directory [ 321.988131][T12659] tipc: Enabling of bearer rejected, failed to enable media [ 322.201623][T12595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.286786][ T4493] Bluetooth: hci3: command tx timeout [ 322.316347][ T5166] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 322.341792][T12595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.354403][T12666] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.452710][T12595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.536239][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.575112][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.588348][ T5166] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.598541][T12595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.605092][ T5166] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 322.626131][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.654443][ T5166] usb 2-1: config 0 descriptor?? [ 322.944448][T12677] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.112349][ T5166] wacom 0003:056A:4004.0019: unknown main item tag 0x0 [ 323.123337][ T5166] wacom 0003:056A:4004.0019: unknown main item tag 0x0 [ 323.141310][T12595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.154580][ T5166] wacom 0003:056A:4004.0019: unknown main item tag 0x0 [ 323.181180][ T5166] wacom 0003:056A:4004.0019: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.1-1/input0 [ 323.186751][T12595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.293483][T12595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.308634][T12685] tipc: Enabling of bearer rejected, failed to enable media [ 323.316525][ T50] usb 2-1: USB disconnect, device number 26 [ 323.330534][T12595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.332687][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.714136][T12595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.801141][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.863922][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.871161][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.899442][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.906699][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.029315][T12595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.115587][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.135371][T12595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.268994][T12595] veth0_vlan: entered promiscuous mode [ 324.312844][T12595] veth1_vlan: entered promiscuous mode [ 324.357062][ T4493] Bluetooth: hci3: command tx timeout [ 324.380630][T12595] veth0_macvtap: entered promiscuous mode [ 324.410589][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.465514][T12595] veth1_macvtap: entered promiscuous mode [ 324.542462][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.558817][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.572928][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.585436][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.596435][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.607517][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.619602][T12595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.629004][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.686695][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.703933][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.727828][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.768240][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.794195][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.806091][ T5116] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 324.819014][T12595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.836481][T12595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.851321][T12595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.863025][T12739] tipc: Started in network mode [ 324.869374][T12739] tipc: Node identity fe8, cluster identity 4711 [ 324.877345][T12739] tipc: Enabling of bearer rejected, failed to enable media [ 324.891256][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.894303][T12595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.939285][T12595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.956036][T12595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.964784][T12595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.030452][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.063295][ T5116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.115705][ T5116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.160860][ T5116] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 325.175057][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.204654][ T5116] usb 2-1: config 0 descriptor?? [ 325.273037][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.309451][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.375648][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.417020][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.651444][ T5116] wacom 0003:056A:4004.001A: unknown main item tag 0x0 [ 325.671757][ T5116] wacom 0003:056A:4004.001A: unknown main item tag 0x0 [ 325.679893][ T5116] wacom 0003:056A:4004.001A: unknown main item tag 0x0 [ 325.691823][ T5116] wacom 0003:056A:4004.001A: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.1-1/input0 [ 325.743933][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.761374][T12772] tipc: Started in network mode [ 325.766788][T12772] tipc: Node identity fe8, cluster identity 4711 [ 325.774170][T12772] tipc: Enabling of bearer rejected, failed to enable media [ 325.858737][ T5116] usb 2-1: USB disconnect, device number 27 [ 325.920450][T12779] syzkaller0: left promiscuous mode [ 325.927236][T12779] syzkaller0: left allmulticast mode [ 326.063599][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.074443][T12783] bridge_slave_1: left allmulticast mode [ 326.087458][T12783] bridge_slave_1: left promiscuous mode [ 326.093427][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.114481][T12783] bridge_slave_0: left allmulticast mode [ 326.126572][T12783] bridge_slave_0: left promiscuous mode [ 326.132598][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.436478][ T4493] Bluetooth: hci3: command tx timeout [ 326.554696][T12797] tipc: Enabling of bearer rejected, failed to enable media [ 326.990553][T12820] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 327.158780][T12828] tipc: Enabling of bearer rejected, failed to enable media [ 327.244436][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.296671][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.306236][ T5116] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 327.518713][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.529837][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.539832][ T5116] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.553454][ T5116] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 327.563757][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.575214][ T5116] usb 1-1: config 0 descriptor?? [ 327.870586][T12853] tipc: Enabling of bearer rejected, failed to enable media [ 328.017292][ T5116] wacom 0003:056A:4004.001B: unknown main item tag 0x0 [ 328.046126][ T5116] wacom 0003:056A:4004.001B: unknown main item tag 0x0 [ 328.060915][ T5116] wacom 0003:056A:4004.001B: unknown main item tag 0x0 [ 328.085786][ T5116] wacom 0003:056A:4004.001B: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 328.211400][ T5165] usb 1-1: USB disconnect, device number 24 [ 328.526280][ T4493] Bluetooth: hci3: command tx timeout [ 329.606401][ T5167] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 329.799222][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.818024][ T5167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.836258][ T5167] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.851464][ T5167] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 329.860755][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.874389][ T5167] usb 1-1: config 0 descriptor?? [ 330.307871][ T5167] wacom 0003:056A:4004.001C: unknown main item tag 0x0 [ 330.315038][ T5167] wacom 0003:056A:4004.001C: unknown main item tag 0x0 [ 330.322786][ T5167] wacom 0003:056A:4004.001C: unknown main item tag 0x0 [ 330.351288][ T5167] wacom 0003:056A:4004.001C: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 330.504571][ T58] usb 1-1: USB disconnect, device number 25 [ 330.708201][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.752942][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.961645][T12962] bond0: (slave bond_slave_1): Releasing backup interface [ 330.992714][T12970] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.644399][T13003] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.989321][ T5166] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 332.188658][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.230330][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.280638][ T5166] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.325757][ T5166] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 332.338649][T13027] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.351219][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.378459][ T5166] usb 3-1: config 0 descriptor?? [ 332.482256][T13033] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 332.825049][ T5166] wacom 0003:056A:4004.001D: unknown main item tag 0x0 [ 332.849661][ T5166] wacom 0003:056A:4004.001D: unknown main item tag 0x0 [ 332.858128][ T5166] wacom 0003:056A:4004.001D: unknown main item tag 0x0 [ 332.873321][ T5166] wacom 0003:056A:4004.001D: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.2-1/input0 [ 333.019324][T13060] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.040027][ T5166] usb 3-1: USB disconnect, device number 27 [ 333.103202][T13063] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.516107][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 333.566330][T13084] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.654463][T13089] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.982179][T13105] macvlan4: entered promiscuous mode [ 334.000355][T13105] macvlan4: entered allmulticast mode [ 334.035473][T13109] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.169853][T13116] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.503057][T13141] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.540133][T13143] macvlan4: entered promiscuous mode [ 334.551413][T13143] macvlan4: entered allmulticast mode [ 334.759982][T13151] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.050127][T13168] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.084383][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 335.084403][ T29] audit: type=1326 audit(1717489527.587:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 335.138268][ T29] audit: type=1326 audit(1717489527.627:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7409579 code=0x7fc00000 [ 335.162092][T13174] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.478612][T13195] ------------[ cut here ]------------ [ 335.484517][T13195] WARNING: CPU: 1 PID: 13195 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 335.494104][T13195] Modules linked in: [ 335.498022][T13195] CPU: 1 PID: 13195 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 335.508538][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 335.518610][T13195] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 335.524621][T13195] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 6c 78 ad 8f 80 e1 07 80 c1 03 38 [ 335.544372][T13195] RSP: 0018:ffffc9000bd6e860 EFLAGS: 00010046 [ 335.550493][T13195] RAX: 0000000000000000 RBX: 1ffff920017add10 RCX: ffffc9000bd6e803 [ 335.558588][T13195] RDX: 0000000000000006 RSI: 0000000000000200 RDI: ffffffff895804c2 [ 335.566583][T13195] RBP: ffffc9000bd6e910 R08: ffffffff8fad462f R09: 1ffffffff1f5a8c5 2024/06/04 08:25:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 335.574584][T13195] R10: dffffc0000000000 R11: fffffbfff1f5a8c6 R12: dffffc0000000000 [ 335.582568][T13195] R13: 1ffff11004935820 R14: ffffc9000bd6e8a0 R15: 0000000000000200 [ 335.590561][T13195] FS: 0000000000000000(0000) GS:ffff8880b9500000(0063) knlGS:00000000f5eb9b40 [ 335.599528][T13195] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 335.606135][T13195] CR2: 00000000f5eb8578 CR3: 000000005995e000 CR4: 00000000003506f0 [ 335.614142][T13195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.622140][T13195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.630146][T13195] Call Trace: [ 335.633457][T13195] [ 335.636411][T13195] ? __warn+0x163/0x4e0 [ 335.640596][T13195] ? __local_bh_enable_ip+0x1be/0x200 [ 335.645995][T13195] ? report_bug+0x2b3/0x500 [ 335.650534][T13195] ? __local_bh_enable_ip+0x1be/0x200 [ 335.655931][T13195] ? handle_bug+0x3e/0x70 [ 335.660280][T13195] ? exc_invalid_op+0x1a/0x50 [ 335.664977][T13195] ? asm_exc_invalid_op+0x1a/0x20 [ 335.670027][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.675163][T13195] ? __local_bh_enable_ip+0x1be/0x200 [ 335.680564][T13195] ? dev_hard_start_xmit+0x773/0x7e0 [ 335.685885][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.691018][T13195] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.696764][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.701902][T13195] __dev_queue_xmit+0x16c9/0x3d30 [ 335.706954][T13195] ? cfg80211_change_iface+0x782/0xf30 [ 335.712445][T13195] ? nl80211_set_interface+0x5b5/0x830 [ 335.717933][T13195] ? genl_rcv_msg+0xb14/0xec0 [ 335.722645][T13195] ? __sys_sendmsg+0x2b0/0x3a0 [ 335.727433][T13195] ? __do_fast_syscall_32+0xb4/0x120 [ 335.732843][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 335.737990][T13195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.743386][T13195] ? __copy_skb_header+0x437/0x5b0 [ 335.748519][T13195] ? __asan_memcpy+0x40/0x70 [ 335.753132][T13195] ? __copy_skb_header+0x437/0x5b0 [ 335.758270][T13195] ? __skb_clone+0x454/0x6c0 [ 335.762886][T13195] ? skb_clone+0x240/0x390 [ 335.767325][T13195] __netlink_deliver_tap+0x54d/0x7c0 [ 335.772643][T13195] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.777865][T13195] netlink_deliver_tap+0x19d/0x1b0 [ 335.783002][T13195] netlink_broadcast_filtered+0xe5b/0x1290 [ 335.788864][T13195] genlmsg_multicast_netns+0x93/0xd0 [ 335.794180][T13195] nl80211_frame_tx_status+0x8f6/0xda0 [ 335.799680][T13195] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 335.805776][T13195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 335.811042][T13195] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 335.816964][T13195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.823332][T13195] ? ieee80211_report_used_skb+0x1621/0x2470 [ 335.829341][T13195] ieee80211_report_used_skb+0x19eb/0x2470 [ 335.835224][T13195] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 335.841414][T13195] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 335.846903][T13195] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 335.852832][T13195] ieee80211_free_txskb+0x24/0x40 [ 335.857885][T13195] ieee80211_do_stop+0x13ab/0x1ec0 [ 335.863039][T13195] ? _find_next_bit+0xec/0x120 [ 335.867289][ T29] audit: type=1326 audit(1717489528.367:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 335.867826][T13195] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 335.895763][T13195] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 335.901604][T13195] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 335.907792][T13195] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 335.914525][T13195] ieee80211_if_change_type+0x4cd/0xad0 [ 335.920105][T13195] ieee80211_change_iface+0xd2/0x4f0 [ 335.924483][ T29] audit: type=1326 audit(1717489528.367:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7409579 code=0x7fc00000 [ 335.925394][T13195] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 335.954387][T13195] cfg80211_change_iface+0x782/0xf30 [ 335.959720][T13195] nl80211_set_interface+0x5b5/0x830 [ 335.965038][T13195] ? __pfx_nl80211_set_interface+0x10/0x10 [ 335.970882][T13195] genl_rcv_msg+0xb14/0xec0 [ 335.975413][T13195] ? mark_lock+0x9a/0x350 [ 335.979798][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.982825][ T29] audit: type=1326 audit(1717489528.367:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 335.984856][T13195] ? __pfx_lock_acquire+0x10/0x10 [ 336.012389][T13195] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 336.017792][T13195] ? __pfx_nl80211_set_interface+0x10/0x10 [ 336.023616][T13195] ? __pfx_nl80211_post_doit+0x10/0x10 [ 336.029110][T13195] ? __pfx___might_resched+0x10/0x10 [ 336.034440][T13195] netlink_rcv_skb+0x1e3/0x430 [ 336.035066][ T29] audit: type=1326 audit(1717489528.367:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 336.039209][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.039237][T13195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.039272][T13195] ? __netlink_deliver_tap+0x77e/0x7c0 [ 336.039308][T13195] genl_rcv+0x28/0x40 [ 336.039329][T13195] netlink_unicast+0x7ea/0x980 [ 336.039365][T13195] ? __pfx_netlink_unicast+0x10/0x10 [ 336.091930][T13195] ? __virt_addr_valid+0x183/0x520 [ 336.092884][ T29] audit: type=1326 audit(1717489528.367:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 336.097055][T13195] ? __check_object_size+0x49c/0x900 [ 336.097085][T13195] ? bpf_lsm_netlink_send+0x9/0x10 [ 336.097113][T13195] netlink_sendmsg+0x8db/0xcb0 [ 336.097147][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.097171][T13195] ? aa_sock_msg_perm+0x91/0x160 [ 336.097195][T13195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 336.097211][T13195] ? security_socket_sendmsg+0x87/0xb0 [ 336.152995][ T29] audit: type=1326 audit(1717489528.367:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 336.155798][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.155828][T13195] __sock_sendmsg+0x221/0x270 [ 336.188281][T13195] ____sys_sendmsg+0x525/0x7d0 [ 336.193081][T13195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.198424][T13195] __sys_sendmsg+0x2b0/0x3a0 [ 336.203042][T13195] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.208191][T13195] ? __might_fault+0xaa/0x120 [ 336.209029][ T29] audit: type=1326 audit(1717489528.367:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x7fc00000 [ 336.212912][T13195] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 336.212938][T13195] ? lockdep_hardirqs_on+0x99/0x150 [ 336.212961][T13195] __do_fast_syscall_32+0xb4/0x120 [ 336.212985][T13195] ? exc_page_fault+0x590/0x8c0 [ 336.213008][T13195] do_fast_syscall_32+0x34/0x80 [ 336.213030][T13195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.213055][T13195] RIP: 0023:0xf7430579 [ 336.213086][T13195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 336.213104][T13195] RSP: 002b:00000000f5eb95ac EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 336.213127][T13195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 336.213142][T13195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.213155][T13195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.213168][T13195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.213181][T13195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.213214][T13195] [ 336.213225][T13195] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.213237][T13195] CPU: 1 PID: 13195 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 336.213258][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 336.213270][T13195] Call Trace: [ 336.213278][T13195] [ 336.213287][T13195] dump_stack_lvl+0x241/0x360 [ 336.213312][T13195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.213335][T13195] ? __pfx__printk+0x10/0x10 [ 336.213365][T13195] ? vscnprintf+0x5d/0x90 [ 336.213392][T13195] panic+0x349/0x860 [ 336.213415][T13195] ? __warn+0x172/0x4e0 [ 336.213447][T13195] ? __pfx_panic+0x10/0x10 [ 336.213490][T13195] __warn+0x346/0x4e0 [ 336.213514][T13195] ? __local_bh_enable_ip+0x1be/0x200 [ 336.213537][T13195] report_bug+0x2b3/0x500 [ 336.213555][T13195] ? __local_bh_enable_ip+0x1be/0x200 [ 336.213578][T13195] handle_bug+0x3e/0x70 [ 336.213599][T13195] exc_invalid_op+0x1a/0x50 [ 336.213621][T13195] asm_exc_invalid_op+0x1a/0x20 [ 336.213641][T13195] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 336.213661][T13195] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 6c 78 ad 8f 80 e1 07 80 c1 03 38 [ 336.213677][T13195] RSP: 0018:ffffc9000bd6e860 EFLAGS: 00010046 [ 336.213694][T13195] RAX: 0000000000000000 RBX: 1ffff920017add10 RCX: ffffc9000bd6e803 [ 336.213709][T13195] RDX: 0000000000000006 RSI: 0000000000000200 RDI: ffffffff895804c2 [ 336.213722][T13195] RBP: ffffc9000bd6e910 R08: ffffffff8fad462f R09: 1ffffffff1f5a8c5 [ 336.213736][T13195] R10: dffffc0000000000 R11: fffffbfff1f5a8c6 R12: dffffc0000000000 [ 336.213751][T13195] R13: 1ffff11004935820 R14: ffffc9000bd6e8a0 R15: 0000000000000200 [ 336.213777][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 336.213801][T13195] ? dev_hard_start_xmit+0x773/0x7e0 [ 336.213826][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 336.213845][T13195] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.213871][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 336.213892][T13195] __dev_queue_xmit+0x16c9/0x3d30 [ 336.213910][T13195] ? cfg80211_change_iface+0x782/0xf30 [ 336.213935][T13195] ? nl80211_set_interface+0x5b5/0x830 [ 336.213953][T13195] ? genl_rcv_msg+0xb14/0xec0 [ 336.213980][T13195] ? __sys_sendmsg+0x2b0/0x3a0 [ 336.213998][T13195] ? __do_fast_syscall_32+0xb4/0x120 [ 336.214025][T13195] ? __dev_queue_xmit+0x2d2/0x3d30 [ 336.214053][T13195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 336.214072][T13195] ? __copy_skb_header+0x437/0x5b0 [ 336.214094][T13195] ? __asan_memcpy+0x40/0x70 [ 336.214115][T13195] ? __copy_skb_header+0x437/0x5b0 [ 336.214139][T13195] ? __skb_clone+0x454/0x6c0 [ 336.214167][T13195] ? skb_clone+0x240/0x390 [ 336.214190][T13195] __netlink_deliver_tap+0x54d/0x7c0 [ 336.214223][T13195] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.214243][T13195] netlink_deliver_tap+0x19d/0x1b0 [ 336.214265][T13195] netlink_broadcast_filtered+0xe5b/0x1290 [ 336.214316][T13195] genlmsg_multicast_netns+0x93/0xd0 [ 336.214339][T13195] nl80211_frame_tx_status+0x8f6/0xda0 [ 336.214373][T13195] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 336.214393][T13195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 336.214432][T13195] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 336.214457][T13195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.214489][T13195] ? ieee80211_report_used_skb+0x1621/0x2470 [ 336.214512][T13195] ieee80211_report_used_skb+0x19eb/0x2470 [ 336.214548][T13195] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 336.214574][T13195] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 336.214597][T13195] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 336.214629][T13195] ieee80211_free_txskb+0x24/0x40 [ 336.214650][T13195] ieee80211_do_stop+0x13ab/0x1ec0 [ 336.214685][T13195] ? _find_next_bit+0xec/0x120 [ 336.214712][T13195] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 336.214733][T13195] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 336.214761][T13195] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 336.214785][T13195] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 336.214819][T13195] ieee80211_if_change_type+0x4cd/0xad0 [ 336.214851][T13195] ieee80211_change_iface+0xd2/0x4f0 [ 336.214869][T13195] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 336.214902][T13195] cfg80211_change_iface+0x782/0xf30 [ 336.214937][T13195] nl80211_set_interface+0x5b5/0x830 [ 336.214968][T13195] ? __pfx_nl80211_set_interface+0x10/0x10 [ 336.215004][T13195] genl_rcv_msg+0xb14/0xec0 [ 336.215026][T13195] ? mark_lock+0x9a/0x350 [ 336.215055][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.215108][T13195] ? __pfx_lock_acquire+0x10/0x10 [ 336.215126][T13195] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 336.215145][T13195] ? __pfx_nl80211_set_interface+0x10/0x10 [ 336.215164][T13195] ? __pfx_nl80211_post_doit+0x10/0x10 [ 336.215187][T13195] ? __pfx___might_resched+0x10/0x10 [ 336.215220][T13195] netlink_rcv_skb+0x1e3/0x430 [ 336.215242][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.215268][T13195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.215302][T13195] ? __netlink_deliver_tap+0x77e/0x7c0 [ 336.215339][T13195] genl_rcv+0x28/0x40 [ 336.215361][T13195] netlink_unicast+0x7ea/0x980 [ 336.215397][T13195] ? __pfx_netlink_unicast+0x10/0x10 [ 336.215426][T13195] ? __virt_addr_valid+0x183/0x520 [ 336.215455][T13195] ? __check_object_size+0x49c/0x900 [ 336.215480][T13195] ? bpf_lsm_netlink_send+0x9/0x10 [ 336.215509][T13195] netlink_sendmsg+0x8db/0xcb0 [ 336.215544][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.215568][T13195] ? aa_sock_msg_perm+0x91/0x160 [ 336.215591][T13195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 336.215608][T13195] ? security_socket_sendmsg+0x87/0xb0 [ 336.215637][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.215655][T13195] __sock_sendmsg+0x221/0x270 [ 336.215683][T13195] ____sys_sendmsg+0x525/0x7d0 [ 336.215712][T13195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.215749][T13195] __sys_sendmsg+0x2b0/0x3a0 [ 336.215771][T13195] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.215803][T13195] ? __might_fault+0xaa/0x120 [ 336.215867][T13195] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 336.215888][T13195] ? lockdep_hardirqs_on+0x99/0x150 [ 336.215910][T13195] __do_fast_syscall_32+0xb4/0x120 [ 336.215932][T13195] ? exc_page_fault+0x590/0x8c0 [ 336.215955][T13195] do_fast_syscall_32+0x34/0x80 [ 336.215976][T13195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.215999][T13195] RIP: 0023:0xf7430579 [ 336.216015][T13195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 336.216031][T13195] RSP: 002b:00000000f5eb95ac EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 336.216049][T13195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 336.216063][T13195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.216075][T13195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.216087][T13195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.216099][T13195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.216129][T13195] [ 336.236248][T13195] Kernel Offset: disabled