last executing test programs: 5.206838129s ago: executing program 4 (id=349): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000020700000000000000000000000000dd80d18a", 0x48}], 0x1) 4.920103697s ago: executing program 4 (id=350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f00000000c0)=""/33, 0x21}], 0x4}}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "d86e89a06df593b53e3a22ea39107c3380ab7994e08cf716faef94bb48f633421739f9daf4b204fb7868bd25a529c8f2259f0a180aab15b15bea139141"}, 0x52) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff014d564b"]) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='W', 0x1}], 0x1}, 0x0) eventfd2(0x0, 0x1001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={r8, 0x80}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x4f, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x5, @dev, 'ip_vti0\x00'}}, 0x1e) write$binfmt_aout(r10, &(0x7f00000011c0)=ANY=[], 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001980)) 3.615970949s ago: executing program 4 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x12000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x21, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 3.414169219s ago: executing program 0 (id=360): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000}) io_uring_enter(r1, 0x1066, 0x0, 0x2a, 0x0, 0x0) 3.275975692s ago: executing program 4 (id=361): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30cadbe9993b1993b8bb4b476f7c7e0000003f764128974b9503dfd9a2bb83e127a6dffc978057b8d342bbfb71a81036eb8789722781a4aa0f1e749501800000ddf79ba40d6a09d75f1a5ae980002f8d27bde04f5e7a6c854a50db8873dbdc984f7965ca891b31f7c44e926b085828d9e4d44a180c9bdf97d56dbcce69be1a6acf1535eb2ca9b93a2dad1c478b5573135d4458dd399a3cb8cdde39f0baa1e06d45723897180617ee30d8976156f10baf5dd9a6231094ea09c0a4461522532d6d6d45e240019a7bd9a842296c36bb537cd5860da0186826fc1573d73d8e6981e866944d91", @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000000000000141000000140017000000000000000069623a6c6f000000"], 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x1f6, 0x8, 0x2, 0x18}, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1cb1, &(0x7f0000000280)={0x0, 0xa3ac, 0x400, 0x1, 0x3b5}, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f0000000040), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr\xcaY\xe1\xad[\x11\xd9\x8b:\xe0\xd6;\xee\xa2ebUT\x8a\xae\xf3\xa6\x1e\xef\x14\xb0lL\xab\xc1\x13v\xa4\x8a5Z\xa0\xa3\x0f\xa2\xe8\xa5L\xfb\xaa\xa8\x1fA\xdbLv_\xb8\r\xd7\xfa\xd9r\xe1\xe6Z\xbe\a\xd1\xfbf\x89P\xed\xd7P\v\x11\xba\xeex\x16\xea\'\x18\x8b\xbb/\xb3\xb2@\x7f\xafS\xa1\x12,.\x0f\x17\xff\x1fy_ug\x9f\xe5', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$isdn(0x22, 0x3, 0x26) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) dup(r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) inotify_init1(0xc0000) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x40000005, 0x9fd, 0x84, 0x1}, 0x48) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r8}) 3.270381249s ago: executing program 0 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 3.057290334s ago: executing program 0 (id=364): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x80000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x7, 0x100000, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) 3.009997837s ago: executing program 3 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000c00001a0000000080200000001100050000000008000300", @ANYRES32=r1], 0x2c}}, 0x0) 2.827670192s ago: executing program 3 (id=366): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 2.675272323s ago: executing program 1 (id=368): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000600)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0xaa1414ac}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000080)=@l2={0x1f, 0x9, @any, 0x2, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="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", 0x10e}], 0x1}, 0x0) 2.456138441s ago: executing program 2 (id=369): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="95847085e797edd85de8", 0xa}], 0x1}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x0, 0x1, 0x70, {0x70, 0x7, "f25d3c12fb9c3cbafaf8e9a302495c7bf6230940c62be3bdde71e4b5c8196bda393b819c3a327c01d881550a9e412cb10761011e41e91d200695665e5e19c821f1313ea100a137f95d9b2bbbe58067f6fb53159ac05c6bdedb998870fc32e1f00d7a9164b97a4d0de44c468fc665"}}, &(0x7f00000001c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "a1a9d77aa77c0eaad9209fd4ba3d1b2f8197232bd109a570921152a32e1b41510ebd418a9d87ec1956ecd5d78fa89ccba8536c0ae8363908a969e20d3da57742abc2492a66fb2fe81ef5bbabaadbf40e1fd8dd69e593d65aaf5d903798868c8dd58f43135979012d91b1049405e300d0e91c5c0752f5af8d468283595bd012810e295f11bcb9ca4a8983287565fe36c50f5e7d8b8974914cd5fe5929f88c022652c1e06e57a1ab8d8498ed835e0d836c6df86ee81645ac66be0f9eda8f592767191a545497d37413996fe8c5838a783e0f6800a6cb31ca74a43da1ee92097cd68fed8a22ae938f46786d503c90de5418e13eee"}}, &(0x7f00000002c0)={0x0, 0xf, 0xc6, {0x5, 0xf, 0xc6, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "c98e5859c95f056fa77c8d38e91109a1"}, @generic={0x79, 0x10, 0x1, "7bea8d45aff40048555dd6d76fded99d1f6106f0fca40828ffaf976c8df5325b4c11303ce6a36687bb481f7cf5b46ce96e41ea58701c91d432fe10c76afa16065307772f64b2bab8d18015f3597ad98837efb90a25ce93b1aa38e8e2a7bebcf734b4330e7efba886653091de09cbe6b098194a620a49"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x5b, 0x2, 0xff, 0x3, 0x3e}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x6, 0xff00, 0x8, [0x0, 0xf, 0xc030]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x8, 0x200}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0xfd, "ebe2d62b", "be8351f5"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x0, 0x7, 0x6, 0xc350, 0xfffa}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x20, 0x15, 0x73, "7b1f71431ab6db0d45935fe549dde4a289ba64eb8c2c2b660bfa5c338cd43b47bfd5fcfeaa92cec45ccfda274e15914e66cbe6b334c8bdd5bfc2a4b50bd406906829daade05375f85299def8d3c41f7adfa8316dbeb7867e0dd90a3d835217e4cc4ccc42d6bc8f14573a1db52409d7c5020fe4"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x20, 0x8, [0xff0f]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, 'F4'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="4844e60c1fe3"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "8f1f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xf5}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1}}) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000a00)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000b40)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x4, 0x6}) 2.374947515s ago: executing program 4 (id=370): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2f1f000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 2.359974783s ago: executing program 3 (id=371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6}) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r9}) 2.159553709s ago: executing program 4 (id=372): syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3", @ANYRES64], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x14) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, r4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000340)=0x86e) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x585, 0x7f, 0x1, 0x0, 0x3500, 0x2400000}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) madvise(&(0x7f0000144000/0x1000)=nil, 0x1000, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000020601000000000000000000000000000d0003006c6973743a73657400b5685a32c0a047f3896e1f908d0000000900020073797a31000000000c00078008000800000000000500010007000000050004"], 0x54}}, 0x0) r8 = gettid() timer_create(0x2, &(0x7f00000004c0)={0x0, 0x27, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000380)=0x0) getgroups(0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0xee01, 0x0, 0xee01]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r8, r10, r11}, 0xc) r12 = userfaultfd(0x1) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x280}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x84, 0x0, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xd0, 0x22}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "90be34a77e331275e5f8b88b4c100feb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0a49165f8947e00071e59a9b7daeaea7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5baf37906dfb60c754fddbf8186c85d5"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "bc4e3795342cb063e3f7476657fa8ee0"}]}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.803789521s ago: executing program 3 (id=373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 1.793930657s ago: executing program 0 (id=374): socket$packet(0x11, 0x0, 0x300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000100000000000800000002180000ff0000080000000008000100ac1414"], 0x24}}, 0x0) 1.668453437s ago: executing program 2 (id=375): io_setup(0xc, &(0x7f0000000280)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x121a41, 0x0) io_submit(r0, 0x1, &(0x7f0000001740)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x1000000}]) 1.668200893s ago: executing program 1 (id=376): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000d00001a0000000080200000001100050000000008000300", @ANYRES32=r1], 0x2c}}, 0x0) 1.666575742s ago: executing program 0 (id=377): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0c81) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0400000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0c00810005000200130000000a0006000802110000010000"], 0x34}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9c000065bcc5b433977fc7c3b1e4a383a040a67f07ee41223ef53a049e4beef067dc92b1d13ac7af8886dab39a06c2670000000000000000400000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESOCT=r0, @ANYBLOB="67003300800000000802110000010802110000015050505050500000000000000000000000000000030100050300000025030000073c04000000002d1a02000c0600000000000000090007001300000008040700000007720603030303030376060000000000000004008e001200cd0007000600080006000300040000020000"], 0x9c}}, 0x40001) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000600)="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"/274, 0x112) r10 = accept$alg(r9, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r9, 0x24, &(0x7f0000000000)={0x1, 0x2, 0x6ad, 0x3}) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0x100000530) 1.644687906s ago: executing program 3 (id=378): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.484761677s ago: executing program 2 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x95ee}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0xba01}, 0x0) 1.459916649s ago: executing program 3 (id=380): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/71, 0x47}, {0x0}], 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002540), 0x13f}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) shutdown(r0, 0x0) 1.3363633s ago: executing program 1 (id=381): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 1.160634853s ago: executing program 2 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000005c00e1"]) 805.656251ms ago: executing program 2 (id=383): r0 = syz_io_uring_setup(0x5b89, &(0x7f0000000000)={0x0, 0xbaf8, 0x1, 0x0, 0x63}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) (async) pipe(0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) (async) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000110001000000000000000000fc000000000000000000000000000000000000000000ff000c0015000800000000000000"], 0x34}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006, 0x0, 0x0, 0x100}]}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000040)=""/41, &(0x7f0000000140)=0x29) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0x7fff, 0xfffffffc, 0xffffffc0, 0x0, 0x20, "83843c556dec3a9a90800124b904cf7929a300"}) r4 = syz_io_uring_setup(0x1fc7, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_enter(r4, 0x0, 0x0, 0xf, 0x0, 0x18) (async) io_uring_enter(r4, 0x0, 0x0, 0xf, 0x0, 0x18) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) 755.380819ms ago: executing program 1 (id=384): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2140, 0x0) preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/124, 0x7c}, {&(0x7f0000001100)=""/246, 0xf6}, {&(0x7f0000001200)=""/60, 0x3c}], 0x5, 0x5, 0xc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000012c0)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) fcntl$setown(r0, 0x8, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001580)={0x7c, 0x0, &(0x7f0000001440)=[@decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001380)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x28}}, &(0x7f0000001400)={0x0, 0x18, 0x30}}, 0x400}, @clear_death, @clear_death, @decrefs], 0xbd, 0x0, &(0x7f00000014c0)="caeea92c1de06051bdf81244b677fa3336f058ed23fb4b54b97735b631d9edee1f4fe01ad055d3023220d454134548274415ed27ef495a40dc0d4f8a8ddb074e2368a8b0184cd1c956b2bdb987414b86a1b56ab08c42bc60be431bbb267b2d1d71b9c958b155b1f4e32a044b7205ce9c2b1e698bb1090fe785cb9f1dbe69c68d6d024cba2a7ff47987bb290c8423b7651343a362b3b4afff3ffe52316d8b1ac0baedf9b109f28a55457e3c9f2c70f82753dc225a2d510845f9a791c6d7"}) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000015c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001600)={{r4}, r5, 0xa, @unused=[0xff, 0xb9, 0x3], @name="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"}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002600)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x50, 0x0, "7f7b23fb0d2b7633c88acfdee5bc873325999756d2c946ea1b81a794d0c33fb8956a7e5bf507dbc76d5c7fd2d883deb35eac46ce9bcf2a50e756b1fc3736a46cf5c8c400a0da79a6c2568af9024c0e92"}, 0xd8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000002700)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x41, 0x81, 0x8, 0x1, 0x3, 0x4, "f48aa0d3887d385618475a53e18fc4d9f6580f51e53f519f47f565c740a2136b6e27373e2dc732df63cca4593062ed0521b2f091697423852b7e8ba29996e0b5f6"}}, 0x159) syz_open_dev$sg(&(0x7f0000002880), 0x8, 0x200000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000028c0)={@dev}, &(0x7f0000002900)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002940)={0x80000000, 0x3, 0xe, 0x401, 0x3}, 0x14) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000002980), 0x40000, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000029c0)=0x401) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000002a00)=0x7ff) socket$alg(0x26, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000002a40)={0x8, "f559ab350f89a6256f2997ae7a82730c0469d432fa10e3adefd61988cc925682", 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r9, {r2, r3}}, './file0\x00'}) ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f0000002ac0)={0x5, 0x100, 0x4, {0x7, 0x33, 0x9}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x40, r11, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x6, 0x6, 0x7, 0x6]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11a7}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0xff64, 0x0, 0x200, 0x5]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r12 = socket$isdn(0x22, 0x3, 0x26) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000002c40)={0x0, 0x4, 0x1, 0x6}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002c80)={[0x20f, 0xffffffffffff688c, 0x9, 0x8000000000000001, 0x5db, 0x7fffffff, 0x3, 0x7000000000000000, 0x4, 0x5, 0x3, 0x7, 0x6, 0x4, 0x1ff, 0x9603], 0x2}) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000002d40)=0x4) 287.499493ms ago: executing program 2 (id=385): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000010005a800c1001800500040000000000"], 0x38}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000500)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000200), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000300)=[r7], &(0x7f00000000c0), &(0x7f0000000400)=[r8], &(0x7f0000000200)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fchdir(r9) mkdir(&(0x7f0000000000)='./control\x00', 0x408) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') setxattr$incfs_metadata(&(0x7f0000000100)='./control\x00', &(0x7f0000000140), &(0x7f0000000200), 0x0, 0x3) read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) 242.499737ms ago: executing program 0 (id=386): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0xc840, 0x0, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x44800, 0x0) (async, rerun: 32) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000009c0)=@migrate={0xc4, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, [@XFRMA_IF_ID={0x8}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@mcast1}}, @migrate={0x50, 0x11, [{@in6=@loopback, @in=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@private2}]}]}, 0xc4}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r4, 0x4bfb, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) (async) chown(&(0x7f0000000300)='./bus\x00', 0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local={0xfe, 0x0}}]}]}, 0xb4}}, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x15) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) (async) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() (async) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async) r9 = gettid() (async) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000100)}, {&(0x7f0000000240)="122f5811b6cf8d2d78fccf71e0bc012d8d229e8f41313a56c65cbd3a5436e421529d686233e5ccbec71ec257b21e5e33b420803d0b3e4d68f814629bd595c1456c887f9c968e87525811a49eae0d4f79b41009b20a0e803ba624605f55dd2bba5b19c56f99ced69024e06ce63f2eeb6760401c8befd8985976faaede6768f1569fbea8d893757811661880d13a728ea90f06ee8ed7b7210b91a15cb3d1e0915d568dc99e3cc5ff49cb07807ab3e14d463448", 0xb2}, {&(0x7f0000000140)="b1446372ee51a81cf85d8112d9091a36f43aabee583ba67f320d3e2d65aaa865ad3d6aa31ac2118cf7a07c907defcc29af39c9", 0x33}, {&(0x7f0000000380)="6bf1956b686a1bac96b81ee0d47073cd65c74a89d6c590ec98a2c542a029057b0250717b1ca989fe1cffff3d9e8282379c61a1d2bcdd97138b02d67fe0f01de2f991eb3c4b747979241d0296367b4a690c1cccc1a83a5ebaad41867ad54b0f8266370a4e9771d97deff89cf3c080e34cefcae21e461948899fae129bb2d40a21e82bd3eb2035ba3b042c689059ab637fd8", 0x91}, {&(0x7f00000001c0)="af18c87ca5d15bf998aa6b", 0xb}], 0x5) tkill(r9, 0x15) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) 232.959863ms ago: executing program 1 (id=387): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="260000002200474e5412729d7bdce0db01050007108980e3ff06006d20002b1f00c0e90101c7", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b000000ffffa888a1", 0x12, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): d: batadv_slave_0 [ 112.111074][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.122692][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.134212][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.152444][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.163768][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.181261][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.205346][ T5422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.223752][ T5422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.242726][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.300224][ T5422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.311996][ T5422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.326051][ T5422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.351877][ T5422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.398522][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.408056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.560293][ T5593] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 112.569203][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.577356][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.584315][ T5593] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 112.593900][ T5593] netlink: 16074 bytes leftover after parsing attributes in process `syz.4.95'. [ 112.759355][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.790638][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.920053][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.933787][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.982457][ T5143] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.196024][ T5143] usb 2-1: Using ep0 maxpacket: 8 [ 113.221242][ T5143] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 113.256344][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.264430][ T5143] usb 2-1: Product: syz [ 113.309719][ T5143] usb 2-1: Manufacturer: syz [ 113.327142][ T5143] usb 2-1: SerialNumber: syz [ 113.349790][ T5143] usb 2-1: config 0 descriptor?? [ 113.363216][ T5143] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 113.445268][ T5145] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.456198][ T5607] syz_tun: entered promiscuous mode [ 113.467822][ T5143] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 113.486403][ T5607] ip6gretap0: entered promiscuous mode [ 113.494570][ T5613] kAFS: unparsable volume name [ 113.617370][ T5145] usb 4-1: device descriptor read/64, error -71 [ 113.814048][ T49] usb 3-1: USB disconnect, device number 3 [ 113.925208][ T5145] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.056310][ T5624] hsr0: entered promiscuous mode [ 114.084979][ T5624] macsec1: entered promiscuous mode [ 114.090489][ T5624] macsec1: entered allmulticast mode [ 114.117722][ T5145] usb 4-1: device descriptor read/64, error -71 [ 114.135204][ T5624] hsr0: entered allmulticast mode [ 114.205534][ T5624] hsr_slave_0: entered allmulticast mode [ 114.222985][ T5624] hsr_slave_1: entered allmulticast mode [ 114.265981][ T5145] usb usb4-port1: attempt power cycle [ 114.280503][ T5624] hsr0: left allmulticast mode [ 114.286791][ T5624] hsr_slave_0: left allmulticast mode [ 114.307635][ T5624] hsr_slave_1: left allmulticast mode [ 114.442913][ T5147] usb 2-1: USB disconnect, device number 3 [ 114.685142][ T5145] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.725389][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.726617][ T5145] usb 4-1: device descriptor read/8, error -71 [ 114.863469][ T5645] Zero length message leads to an empty skb [ 114.937276][ T8] usb 1-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 114.963282][ T8] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 115.011577][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 115.016481][ T5145] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.040525][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.080231][ T5145] usb 4-1: device descriptor read/8, error -71 [ 115.099545][ T8] usb 1-1: Product: syz [ 115.113297][ T8] usb 1-1: Manufacturer: syz [ 115.126065][ T8] usb 1-1: SerialNumber: syz [ 115.148393][ T5648] loop7: detected capacity change from 0 to 16385 [ 115.226599][ T5145] usb usb4-port1: unable to enumerate USB device [ 115.557454][ T8] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 115.670330][ T8] usb 1-1: USB disconnect, device number 5 [ 116.514997][ T5145] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.720251][ T5145] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.740438][ T5145] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.785741][ T5145] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.801545][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.801691][ T5684] x_tables: duplicate underflow at hook 1 [ 116.809789][ T5145] usb 4-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 116.851860][ T5145] usb 4-1: SerialNumber: syz [ 116.871366][ T5684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.120'. [ 116.935517][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.106157][ T5145] usb 4-1: 0:2 : does not exist [ 117.135088][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 117.152044][ T8] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 117.170207][ T5145] usb 4-1: USB disconnect, device number 7 [ 117.197282][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.215088][ T8] usb 1-1: Product: syz [ 117.230489][ T5099] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.239575][ T5099] Bluetooth: hci1: Injecting HCI hardware error event [ 117.247994][ T5099] Bluetooth: hci1: hardware error 0x00 [ 117.274533][ T8] usb 1-1: Manufacturer: syz [ 117.283295][ T8] usb 1-1: SerialNumber: syz [ 117.291139][ T8] usb 1-1: config 0 descriptor?? [ 117.299592][ T8] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 117.329341][ T8] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 117.468118][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.210557][ T2481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.341512][ T5143] usb 1-1: USB disconnect, device number 6 [ 118.424266][ T2481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.577079][ T2481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.669910][ T2481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.906564][ T2481] bridge_slave_1: left allmulticast mode [ 118.915227][ T2481] bridge_slave_1: left promiscuous mode [ 118.921028][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.941680][ T2481] bridge_slave_0: left allmulticast mode [ 118.954999][ T2481] bridge_slave_0: left promiscuous mode [ 118.960951][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.320862][ T5099] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 119.905193][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.971027][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.987724][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.001163][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.023534][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.041739][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.049423][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.075670][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.119695][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.139039][ T5150] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.149881][ T8] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 120.171245][ T2481] bond0 (unregistering): Released all slaves [ 120.176401][ T8] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.199738][ T8] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 120.212780][ T8] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 120.225744][ T8] usb 2-1: Manufacturer: syz [ 120.246477][ T8] usb 2-1: SerialNumber: syz [ 120.355647][ T5150] usb 5-1: Using ep0 maxpacket: 8 [ 120.370292][ T5150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.389777][ T5737] veth0_to_team: entered promiscuous mode [ 120.402386][ T5150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.416862][ T5150] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.432194][ T5737] veth0_to_team: left promiscuous mode [ 120.454709][ T5150] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 120.469737][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.493943][ T5150] usb 5-1: Product: syz [ 120.509433][ T5150] usb 5-1: Manufacturer: syz [ 120.529305][ T8] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 120.542640][ T5150] usb 5-1: SerialNumber: syz [ 120.580686][ T8] usb 2-1: USB disconnect, device number 4 [ 120.613624][ T5150] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 120.885979][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.896671][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.187023][ T2481] hsr_slave_0: left promiscuous mode [ 121.226494][ T2481] hsr_slave_1: left promiscuous mode [ 121.257522][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.279938][ T4529] bcm5974 5-1:1.0: could not read from device [ 121.300248][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.318198][ T4529] bcm5974 5-1:1.0: could not read from device [ 121.326228][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.350163][ T5150] usb 5-1: USB disconnect, device number 4 [ 121.357578][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.376082][ T4529] bcm5974 5-1:1.0: could not read from device [ 121.500916][ T2481] veth1_macvtap: left promiscuous mode [ 121.509098][ T2481] veth0_macvtap: left promiscuous mode [ 121.520910][ T2481] veth1_vlan: left promiscuous mode [ 121.533909][ T2481] veth0_vlan: left promiscuous mode [ 122.105329][ T5099] Bluetooth: hci1: command tx timeout [ 122.889423][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 123.014410][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 123.902022][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 124.185261][ T5099] Bluetooth: hci1: command tx timeout [ 124.380051][ T5739] chnl_net:caif_netlink_parms(): no params data found [ 124.764032][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.782412][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.792609][ T5739] bridge_slave_0: entered allmulticast mode [ 124.826487][ T5739] bridge_slave_0: entered promiscuous mode [ 124.866463][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.885448][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.905523][ T5739] bridge_slave_1: entered allmulticast mode [ 124.970220][ T5739] bridge_slave_1: entered promiscuous mode [ 125.179089][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.230393][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.238822][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.271245][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.282389][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.311520][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.333682][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.353595][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.620405][ T2481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.753004][ T5739] team0: Port device team_slave_0 added [ 125.784853][ T5739] team0: Port device team_slave_1 added [ 125.859192][ T2481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.983438][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 126.024484][ T5837] trusted_key: encrypted_key: hex blob is missing [ 126.046492][ T5832] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 126.116694][ T2481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.185746][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.192825][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.218721][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.232819][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.254437][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.262070][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.295317][ T5099] Bluetooth: hci1: command tx timeout [ 126.299393][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.333380][ T2481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.399292][ T5150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.491875][ T5739] hsr_slave_0: entered promiscuous mode [ 126.510428][ T5739] hsr_slave_1: entered promiscuous mode [ 126.527904][ T5739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.545931][ T5739] Cannot create hsr debugfs directory [ 126.615704][ T5150] usb 2-1: Using ep0 maxpacket: 16 [ 126.634335][ T5150] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 126.655268][ T5150] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.682616][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.716521][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.769877][ T5150] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=74.cc [ 126.815445][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.847520][ T5150] usb 2-1: Product: syz [ 126.851856][ T5150] usb 2-1: Manufacturer: syz [ 126.875077][ T5150] usb 2-1: SerialNumber: syz [ 126.893021][ T5150] usb 2-1: config 0 descriptor?? [ 127.316718][ T49] usb 2-1: USB disconnect, device number 5 [ 127.397799][ T2481] bridge_slave_1: left allmulticast mode [ 127.427182][ T2481] bridge_slave_1: left promiscuous mode [ 127.445338][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.465073][ T5099] Bluetooth: hci3: command tx timeout [ 127.502948][ T2481] bridge_slave_0: left allmulticast mode [ 127.522594][ T2481] bridge_slave_0: left promiscuous mode [ 127.544191][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.852955][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.874378][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.897659][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.909628][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.924450][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.932865][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.345285][ T5099] Bluetooth: hci1: command tx timeout [ 128.439345][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.470631][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.492319][ T2481] bond0 (unregistering): Released all slaves [ 128.585251][ T5150] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 128.670513][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 128.821378][ T5150] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.851750][ T5150] usb 5-1: config 179 has no interface number 0 [ 128.873668][ T5150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 128.886325][ T5150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 128.924298][ T5150] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 128.939460][ T5150] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.954704][ T5150] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.964029][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.978200][ T5874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.990980][ T5874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.333864][ T5878] : entered promiscuous mode [ 129.555210][ T5099] Bluetooth: hci3: command tx timeout [ 129.709793][ T2481] hsr_slave_0: left promiscuous mode [ 129.726644][ T2481] hsr_slave_1: left promiscuous mode [ 129.765784][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.773399][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.800663][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.818797][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.864079][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 129.864086][ T5148] usb 5-1: USB disconnect, device number 5 [ 129.878997][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 129.909022][ T2481] veth1_macvtap: left promiscuous mode [ 129.914633][ T2481] veth0_macvtap: left promiscuous mode [ 129.927152][ T2481] veth1_vlan: left promiscuous mode [ 129.932572][ T2481] veth0_vlan: left promiscuous mode [ 129.955486][ T5099] Bluetooth: hci4: command tx timeout [ 130.552669][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 130.593531][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 130.999145][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.011456][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.022257][ T5815] bridge_slave_0: entered allmulticast mode [ 131.031197][ T5815] bridge_slave_0: entered promiscuous mode [ 131.040945][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.057294][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.090617][ T5815] bridge_slave_1: entered allmulticast mode [ 131.103823][ T5815] bridge_slave_1: entered promiscuous mode [ 131.113327][ T5898] netlink: 'syz.1.172': attribute type 21 has an invalid length. [ 131.123721][ T5898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.172'. [ 131.255278][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.369097][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.427762][ T5815] team0: Port device team_slave_0 added [ 131.438189][ T5815] team0: Port device team_slave_1 added [ 131.455215][ T5150] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.546485][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.573882][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.599875][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.607821][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.621650][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.628774][ T5099] Bluetooth: hci3: command tx timeout [ 131.634288][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.660475][ T5150] usb 5-1: Using ep0 maxpacket: 32 [ 131.665717][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.679227][ T5150] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 131.690534][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.701948][ T5150] usb 5-1: config 0 descriptor?? [ 131.711765][ T5150] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 131.714507][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 131.758195][ T5150] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.772704][ T5150] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 131.789476][ T5150] usb 5-1: media controller created [ 131.859053][ T5150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.926604][ T5150] usb 5-1: selecting invalid altsetting 1 [ 131.932403][ T5150] set interface failed [ 131.933001][ T5150] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 131.951875][ T5150] error writing reg: 0xff, val: 0x00 [ 132.006889][ T5815] hsr_slave_0: entered promiscuous mode [ 132.032194][ T5099] Bluetooth: hci4: command tx timeout [ 132.048947][ T5815] hsr_slave_1: entered promiscuous mode [ 132.065453][ T5150] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 132.078043][ T5150] usb 5-1: USB disconnect, device number 6 [ 132.158225][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.169665][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.237840][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.260828][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.272673][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.284368][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.298815][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.310155][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.317798][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.325570][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.332771][ T5867] bridge_slave_0: entered allmulticast mode [ 132.336640][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.347261][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.349245][ T5867] bridge_slave_0: entered promiscuous mode [ 132.368165][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.387927][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.403201][ T5867] bridge_slave_1: entered allmulticast mode [ 132.410784][ T5867] bridge_slave_1: entered promiscuous mode [ 132.440151][ T2481] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.553839][ T2481] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.596912][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.637756][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.693580][ T2481] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.756186][ T5867] team0: Port device team_slave_0 added [ 132.789261][ T2481] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.817138][ T5867] team0: Port device team_slave_1 added [ 132.836236][ T5145] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.884839][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.892288][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.920551][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.953966][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.961160][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.988369][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.039850][ T5145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.053336][ T5145] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.069721][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076584][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.090810][ T5145] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.100627][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.109525][ T5145] usb 5-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 133.117249][ T5145] usb 5-1: SerialNumber: syz [ 133.237209][ T5867] hsr_slave_0: entered promiscuous mode [ 133.244846][ T5867] hsr_slave_1: entered promiscuous mode [ 133.251807][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.263754][ T5867] Cannot create hsr debugfs directory [ 133.494028][ T5145] usb 5-1: 0:2 : does not exist [ 133.531517][ T5145] usb 5-1: USB disconnect, device number 7 [ 133.602500][ T2481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.629426][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 133.705768][ T5099] Bluetooth: hci3: command tx timeout [ 133.766566][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.799125][ T2481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.932764][ T2481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.060407][ T2481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.105584][ T5099] Bluetooth: hci4: command tx timeout [ 134.146364][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.153635][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.161045][ T5915] bridge_slave_0: entered allmulticast mode [ 134.169078][ T5915] bridge_slave_0: entered promiscuous mode [ 134.231295][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.257898][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.265458][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.274084][ T5915] bridge_slave_1: entered allmulticast mode [ 134.282365][ T5915] bridge_slave_1: entered promiscuous mode [ 134.329496][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.401720][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.424499][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.436058][ T5099] Bluetooth: hci0: command tx timeout [ 134.442895][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.456567][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.463702][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.487653][ T5143] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 134.529856][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.542384][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.558771][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.565977][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.592722][ T5915] team0: Port device team_slave_0 added [ 134.604695][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.642404][ T2481] bridge_slave_1: left allmulticast mode [ 134.648965][ T2481] bridge_slave_1: left promiscuous mode [ 134.654722][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.665987][ T2481] bridge_slave_0: left allmulticast mode [ 134.675443][ T2481] bridge_slave_0: left promiscuous mode [ 134.681596][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.685221][ T5143] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.698357][ T5143] usb 5-1: config 179 has no interface number 0 [ 134.705588][ T5143] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 134.716878][ T5143] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 134.719809][ T2481] bridge_slave_1: left allmulticast mode [ 134.727913][ T5143] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 134.727950][ T5143] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.727998][ T5143] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.743597][ T2481] bridge_slave_1: left promiscuous mode [ 134.746175][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.759702][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.793049][ T2481] bridge_slave_0: left allmulticast mode [ 134.801085][ T5942] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.804726][ T2481] bridge_slave_0: left promiscuous mode [ 134.809270][ T5942] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.814209][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.083576][ T49] usb 5-1: USB disconnect, device number 8 [ 135.083806][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 135.489042][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.502047][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.514136][ T2481] bond0 (unregistering): Released all slaves [ 135.602353][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.616489][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.631889][ T2481] bond0 (unregistering): Released all slaves [ 135.664355][ T5915] team0: Port device team_slave_1 added [ 135.814201][ T2481] : left promiscuous mode [ 135.858313][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.865730][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.893662][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.909072][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.917692][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.945375][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.186086][ T5099] Bluetooth: hci4: command tx timeout [ 136.512376][ T5099] Bluetooth: hci0: command tx timeout [ 136.534380][ T5915] hsr_slave_0: entered promiscuous mode [ 136.544710][ T5915] hsr_slave_1: entered promiscuous mode [ 136.552932][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.564123][ T5915] Cannot create hsr debugfs directory [ 137.120401][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.256328][ T2481] hsr_slave_0: left promiscuous mode [ 137.272088][ T2481] hsr_slave_1: left promiscuous mode [ 137.290578][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.315618][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.335503][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.343458][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.372952][ T2481] hsr_slave_0: left promiscuous mode [ 137.388973][ T2481] hsr_slave_1: left promiscuous mode [ 137.419289][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.467525][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.486129][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.493801][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.583755][ T2481] veth1_macvtap: left promiscuous mode [ 137.589898][ T2481] veth0_macvtap: left promiscuous mode [ 137.595791][ T2481] veth1_vlan: left promiscuous mode [ 137.601446][ T2481] veth0_vlan: left promiscuous mode [ 137.614643][ T2481] veth1_macvtap: left promiscuous mode [ 137.620528][ T2481] veth0_macvtap: left promiscuous mode [ 137.643172][ T2481] veth1_vlan: left promiscuous mode [ 137.649527][ T2481] veth0_vlan: left promiscuous mode [ 137.835277][ T5150] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.025153][ T5150] usb 5-1: Using ep0 maxpacket: 8 [ 138.034662][ T5150] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 138.050758][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.085309][ T5150] usb 5-1: config 0 descriptor?? [ 138.093483][ T5150] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 138.105220][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 138.127314][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 138.135513][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 138.143272][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 138.163044][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 138.194761][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 138.209912][ T5150] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 138.239197][ T5150] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 138.586397][ T5099] Bluetooth: hci0: command tx timeout [ 138.731965][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 138.784409][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 139.870128][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 139.932315][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 140.276177][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.287163][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.307027][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.338215][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.423334][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.450839][ T5150] usb 5-1: USB disconnect, device number 9 [ 140.526840][ T5150] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 140.560181][ T5150] keyspan 5-1:0.0: device disconnected [ 140.665238][ T5099] Bluetooth: hci0: command tx timeout [ 140.703838][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.843334][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.850559][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.921086][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.928324][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.019771][ T5739] veth0_vlan: entered promiscuous mode [ 141.051204][ T5739] veth1_vlan: entered promiscuous mode [ 141.175484][ T5148] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.418313][ T5148] usb 5-1: Using ep0 maxpacket: 32 [ 141.504203][ T5739] veth0_macvtap: entered promiscuous mode [ 141.581195][ T5739] veth1_macvtap: entered promiscuous mode [ 141.658119][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.734305][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.749450][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.770894][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.800554][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.883763][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.922468][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.934821][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.949578][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.970913][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.983204][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.016882][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.024094][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.054044][ T5739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.069348][ T5739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.079534][ T5739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.092656][ T5739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.162785][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.218336][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.250912][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.258146][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.611391][ T5815] veth0_vlan: entered promiscuous mode [ 142.718308][ T5815] veth1_vlan: entered promiscuous mode [ 142.814675][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.825352][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.915785][ T5815] veth0_macvtap: entered promiscuous mode [ 142.994792][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.007989][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.009020][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.038488][ T5815] veth1_macvtap: entered promiscuous mode [ 143.179765][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.194206][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.233876][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.276153][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.316213][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.348087][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.374107][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.392405][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.406548][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.421367][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.446039][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.513236][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.559844][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.592725][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.624314][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.661795][ T5148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.725883][ T5148] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 143.733536][ T5148] usb 5-1: can't read configurations, error -71 [ 143.767053][ T5867] veth0_vlan: entered promiscuous mode [ 143.875052][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.928761][ T5867] veth1_vlan: entered promiscuous mode [ 144.041772][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.049100][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.097208][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.104429][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.140556][ T6065] hsr0: entered promiscuous mode [ 144.154373][ T6065] macsec1: entered promiscuous mode [ 144.161069][ T6065] macsec1: entered allmulticast mode [ 144.177506][ T6065] hsr0: entered allmulticast mode [ 144.182589][ T6065] hsr_slave_0: entered allmulticast mode [ 144.200872][ T6065] hsr_slave_1: entered allmulticast mode [ 144.265648][ T6065] hsr0: left allmulticast mode [ 144.278429][ T6065] hsr_slave_0: left allmulticast mode [ 144.283893][ T6065] hsr_slave_1: left allmulticast mode [ 144.433215][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.474172][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.505997][ T5145] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 144.541610][ T5867] veth0_macvtap: entered promiscuous mode [ 144.572404][ T5867] veth1_macvtap: entered promiscuous mode [ 144.600359][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.608994][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.663804][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.683887][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.695182][ T5148] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.720957][ T5145] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.725022][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.730190][ T5145] usb 4-1: config 179 has no interface number 0 [ 144.747954][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.760102][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 144.782677][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 144.784945][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.795018][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 144.817231][ T5145] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.838079][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.838332][ T5145] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 144.848584][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.850545][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.861419][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.879868][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.898047][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.908411][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.918911][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.925356][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.929876][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.947001][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.948029][ T5148] usb 5-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 144.958712][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.989889][ T5148] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 144.998762][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.007439][ T5148] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 145.029444][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.040863][ T5148] usb 5-1: Product: syz [ 145.043771][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.047152][ T5148] usb 5-1: Manufacturer: syz [ 145.054877][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.059910][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.059943][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.101627][ T5148] usb 5-1: SerialNumber: syz [ 145.263396][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.271772][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.293699][ T6081] usb 4-1: USB disconnect, device number 8 [ 145.364742][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.378147][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.395576][ T5148] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 145.427079][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.441857][ T5148] usb 5-1: USB disconnect, device number 11 [ 145.529166][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.543706][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.584942][ T5915] veth0_vlan: entered promiscuous mode [ 145.620204][ T5915] veth1_vlan: entered promiscuous mode [ 145.701630][ T5915] veth0_macvtap: entered promiscuous mode [ 145.722674][ T5915] veth1_macvtap: entered promiscuous mode [ 145.782258][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.799467][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.820067][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.853004][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.874997][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.909995][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.927616][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.939830][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.966391][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.987530][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.001037][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.013400][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.026769][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.037273][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.049498][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.075156][ T5143] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.077412][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.102399][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.122154][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.168277][ T5915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.183543][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.194791][ T5915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.198647][ T6095] input: syz1 as /devices/virtual/input/input6 [ 146.213808][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.305331][ T5143] usb 1-1: Using ep0 maxpacket: 16 [ 146.321147][ T5143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.357224][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.406057][ T5143] usb 1-1: Product: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 146.445601][ T5143] usb 1-1: Manufacturer: 䎼컨枈䰊晆睧ﵼ⊬⏈뾭ࡄ诸珽뜒잽袪Ɤɍ馹♒䪚겁㯹ᮭ籠ꌇ錵遞ᶩ⯚੤㊽釾⥺ࢊ楝﷾硨쯧꣪ᢦ㮛⏄✔ꆎ㼏ׁᘡ晋༰㥥␃ꯓ숒㆙㳒》队渍ন㿳뗘Ӕ臭릍硔䗆鏈ᰣ튍둞ꓝ撯퓫鰚꘱錈竍쉤䨚⎙튃伩ㄴ⢹﫱嚊궰㜖쬓䐓줓ͱ磵萩㋼謁룒辂裢烐繺ɹ佇엤⺠ [ 146.509087][ T5143] usb 1-1: SerialNumber: 㰊 [ 146.522616][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.557881][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.638551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.651328][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.664640][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 146.800909][ T6111] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 146.885474][ T5143] cdc_ncm 1-1:1.0: bind() failure [ 146.900869][ T5143] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 146.925764][ T5143] cdc_ncm 1-1:1.1: bind() failure [ 146.960001][ T5143] usb 1-1: USB disconnect, device number 7 [ 147.245681][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.629105][ T5148] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 147.804044][ T6131] mmap: syz.0.199 (6131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.827937][ T5148] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.837557][ T5148] usb 5-1: config 179 has no interface number 0 [ 147.852335][ T5148] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 147.863935][ T5148] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 147.880801][ T5148] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 147.914439][ T5148] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.945150][ T5148] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.970957][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.003872][ T6125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.013970][ T6125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.354483][ T5148] usb 5-1: USB disconnect, device number 12 [ 148.360443][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 148.360482][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 148.476683][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 148.570793][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 148.995135][ T5148] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.216398][ T5148] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 149.269641][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.309896][ T6081] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.328688][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.341831][ T5148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 149.356716][ T5148] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 149.368166][ T5148] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 149.377932][ T5148] usb 3-1: Manufacturer: syz [ 149.390509][ T5148] usb 3-1: config 0 descriptor?? [ 149.504995][ T6081] usb 1-1: Using ep0 maxpacket: 32 [ 149.531153][ T2481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.725055][ T2481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.826766][ T5148] usbhid 3-1:0.0: can't add hid device: -71 [ 149.851822][ T5148] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 149.869121][ T5148] usb 3-1: USB disconnect, device number 4 [ 149.916693][ T2481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.107870][ T2481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.223051][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 150.663651][ T2481] bridge_slave_1: left allmulticast mode [ 150.698810][ T2481] bridge_slave_1: left promiscuous mode [ 150.727672][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.763974][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.774029][ T2481] bridge_slave_0: left allmulticast mode [ 150.775710][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.792430][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.802019][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.818695][ T2481] bridge_slave_0: left promiscuous mode [ 150.824956][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.833505][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.847697][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.025782][ T5095] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 151.239822][ T5095] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.252025][ T5095] usb 5-1: config 179 has no interface number 0 [ 151.270876][ T5095] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 151.286769][ T5095] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 151.300659][ T5095] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 151.315034][ T5095] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.330376][ T5095] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.341628][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.357974][ T6185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.367218][ T6185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.943306][ T6081] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.010603][ T6081] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 152.024413][ T6081] usb 1-1: can't read configurations, error -71 [ 152.036658][ T5095] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.046825][ T49] usb 5-1: USB disconnect, device number 13 [ 152.046845][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.062837][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.115391][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.161341][ T2481] bond0 (unregistering): Released all slaves [ 152.222992][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 152.223012][ T29] audit: type=1326 audit(1720542520.035:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.0.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560eb75bd9 code=0x0 [ 152.264149][ T5095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.300595][ T6186] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 152.304953][ T5095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.329250][ T5095] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.405877][ T5095] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.429158][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.472250][ T5095] usb 3-1: config 0 descriptor?? [ 152.844205][ T2481] hsr_slave_0: left promiscuous mode [ 152.875114][ T2481] hsr_slave_1: left promiscuous mode [ 152.881801][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.895122][ T5143] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.907254][ T29] audit: type=1326 audit(1720542520.715:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 152.939573][ T5099] Bluetooth: hci1: command tx timeout [ 152.954215][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.965817][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.973475][ T29] audit: type=1326 audit(1720542520.715:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.003825][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.014806][ T29] audit: type=1326 audit(1720542520.725:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.060037][ T2481] veth1_macvtap: left promiscuous mode [ 153.066090][ T2481] veth0_macvtap: left promiscuous mode [ 153.073077][ T2481] veth1_vlan: left promiscuous mode [ 153.080406][ T2481] veth0_vlan: left promiscuous mode [ 153.090552][ T29] audit: type=1326 audit(1720542520.725:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.160725][ T29] audit: type=1326 audit(1720542520.725:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.198633][ T29] audit: type=1326 audit(1720542520.745:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.202581][ T5143] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.229686][ T29] audit: type=1326 audit(1720542520.745:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.262741][ T29] audit: type=1326 audit(1720542520.745:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.292666][ T29] audit: type=1326 audit(1720542520.745:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f77775bd9 code=0x7ffc0000 [ 153.308126][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.378032][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.378065][ T5143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.397602][ T5143] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.397626][ T5143] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.397659][ T5143] usb 5-1: Manufacturer: syz [ 153.409480][ T5143] usb 5-1: config 0 descriptor?? [ 153.831108][ T5143] usbhid 5-1:0.0: can't add hid device: -71 [ 153.852116][ T5143] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.873050][ T5143] usb 5-1: USB disconnect, device number 14 [ 154.206179][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 154.293474][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 154.601130][ T5143] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 154.685295][ T5095] usbhid 3-1:0.0: can't add hid device: -71 [ 154.694673][ T5095] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.715433][ T5095] usb 3-1: USB disconnect, device number 5 [ 154.807025][ T5143] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.816915][ T5143] usb 1-1: config 179 has no interface number 0 [ 154.823424][ T5143] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 154.838611][ T5143] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 154.851041][ T5143] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 154.862485][ T5143] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 154.876173][ T5143] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.885369][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.905592][ T6248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.913129][ T6248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.950609][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 155.000828][ T5099] Bluetooth: hci1: command tx timeout [ 155.429476][ T6081] usb 1-1: USB disconnect, device number 10 [ 155.429479][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.429525][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.478564][ T5143] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.619309][ T6188] chnl_net:caif_netlink_parms(): no params data found [ 155.698948][ T5143] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.714432][ T5143] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.763560][ T5143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.789703][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.802258][ T5143] usb 2-1: Product: syz [ 155.821082][ T6267] netlink: 9 bytes leftover after parsing attributes in process `syz.0.240'. [ 155.830713][ T5143] usb 2-1: Manufacturer: syz [ 155.849433][ T5143] usb 2-1: SerialNumber: syz [ 155.882615][ T6270] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 155.917921][ T5143] cdc_ncm 2-1:1.0: skipping garbage [ 155.955629][ T6267] gretap0: entered promiscuous mode [ 156.007245][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.019031][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.028052][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.049059][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.057973][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.065583][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.114818][ T6272] netlink: 5 bytes leftover after parsing attributes in process `syz.0.240'. [ 156.135580][ T6272] 0XD: renamed from gretap0 [ 156.171709][ T6272] 0XD: left promiscuous mode [ 156.176841][ T6272] 0XD: entered allmulticast mode [ 156.192614][ T6272] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 156.253359][ T6272] syz.0.240 (6272) used greatest stack depth: 18512 bytes left [ 156.285264][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.292431][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.343258][ T6188] bridge_slave_0: entered allmulticast mode [ 156.376442][ T6188] bridge_slave_0: entered promiscuous mode [ 156.424503][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.464312][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.475509][ T6188] bridge_slave_1: entered allmulticast mode [ 156.483146][ T6188] bridge_slave_1: entered promiscuous mode [ 156.540639][ T2481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.655418][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.660259][ T2481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.689828][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.705052][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.705096][ T5095] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.765247][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.786197][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.801684][ T2481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.828599][ T5143] cdc_ncm 2-1:1.0: bind() failure [ 156.843837][ T6188] team0: Port device team_slave_0 added [ 156.852629][ T5143] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 156.858321][ T6188] team0: Port device team_slave_1 added [ 156.871952][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 156.885613][ T5143] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 156.893942][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.907134][ T5143] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 156.915408][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.922838][ T2481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.936348][ T5095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.948102][ T5143] usb 2-1: USB disconnect, device number 6 [ 156.954206][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 156.969744][ T5095] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.980902][ T5095] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.006598][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.017650][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.028507][ T5095] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.037954][ T9] usb 1-1: Manufacturer: syz [ 157.044488][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.055070][ T9] usb 1-1: config 0 descriptor?? [ 157.069998][ T5099] Bluetooth: hci1: command tx timeout [ 157.082851][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.092983][ T5095] usb 5-1: config 0 descriptor?? [ 157.094348][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.124000][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.135161][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.150504][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.161765][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.187725][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.193913][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.504114][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 157.527215][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 157.527233][ T29] audit: type=1326 audit(1720542525.345:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.537571][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.587184][ T6188] hsr_slave_0: entered promiscuous mode [ 157.600279][ T29] audit: type=1326 audit(1720542525.345:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.607233][ T9] usb 1-1: USB disconnect, device number 11 [ 157.641928][ T6188] hsr_slave_1: entered promiscuous mode [ 157.655578][ T6188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.671371][ T6188] Cannot create hsr debugfs directory [ 157.692728][ T29] audit: type=1326 audit(1720542525.345:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.729108][ T29] audit: type=1326 audit(1720542525.345:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.797522][ T29] audit: type=1326 audit(1720542525.345:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.819637][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.920596][ T29] audit: type=1326 audit(1720542525.385:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 157.970320][ T29] audit: type=1326 audit(1720542525.385:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 158.004305][ T29] audit: type=1326 audit(1720542525.385:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 158.039779][ T6279] chnl_net:caif_netlink_parms(): no params data found [ 158.060986][ T29] audit: type=1326 audit(1720542525.385:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 158.105348][ T5099] Bluetooth: hci3: command tx timeout [ 158.146750][ T29] audit: type=1326 audit(1720542525.385:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f58f0775bd9 code=0x7ffc0000 [ 158.168771][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.178741][ T2481] bridge_slave_1: left allmulticast mode [ 158.206028][ T2481] bridge_slave_1: left promiscuous mode [ 158.230940][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.268524][ T2481] bridge_slave_0: left allmulticast mode [ 158.287482][ T2481] bridge_slave_0: left promiscuous mode [ 158.299110][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.939177][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.960536][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.978398][ T2481] bond0 (unregistering): Released all slaves [ 159.027662][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 159.096696][ T6332] hsr0: entered promiscuous mode [ 159.108031][ T6332] macsec1: entered promiscuous mode [ 159.113759][ T6332] macsec1: entered allmulticast mode [ 159.119914][ T6332] hsr0: entered allmulticast mode [ 159.125491][ T6332] hsr_slave_0: entered allmulticast mode [ 159.131172][ T6332] hsr_slave_1: entered allmulticast mode [ 159.137997][ T5148] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.149104][ T6332] hsr0: left allmulticast mode [ 159.155112][ T5099] Bluetooth: hci1: command tx timeout [ 159.160631][ T6332] hsr_slave_0: left allmulticast mode [ 159.167397][ T6332] hsr_slave_1: left allmulticast mode [ 159.328584][ T5148] usb 2-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 159.361149][ T5148] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 159.396798][ T5095] usbhid 5-1:0.0: can't add hid device: -71 [ 159.408794][ T5095] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 159.422348][ T5095] usb 5-1: USB disconnect, device number 15 [ 159.428704][ T5148] usb 2-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 159.440314][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.488398][ T5148] usb 2-1: Product: syz [ 159.493568][ T5148] usb 2-1: Manufacturer: syz [ 159.508324][ T5148] usb 2-1: SerialNumber: syz [ 159.629768][ T5636] syz_tun (unregistering): left promiscuous mode [ 159.868877][ T5148] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 159.936217][ T5148] usb 2-1: USB disconnect, device number 7 [ 160.062301][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.095018][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.106256][ T49] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.135175][ T6279] bridge_slave_0: entered allmulticast mode [ 160.142783][ T6279] bridge_slave_0: entered promiscuous mode [ 160.187296][ T5099] Bluetooth: hci3: command tx timeout [ 160.199187][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.217645][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.255538][ T6279] bridge_slave_1: entered allmulticast mode [ 160.286718][ T6279] bridge_slave_1: entered promiscuous mode [ 160.315232][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 160.324330][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.351350][ T49] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.395305][ T49] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.415797][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.438871][ T2481] hsr_slave_0: left promiscuous mode [ 160.440101][ T49] usb 1-1: config 0 descriptor?? [ 160.485115][ T2481] hsr_slave_1: left promiscuous mode [ 160.530154][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.545613][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.556168][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.563613][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.652178][ T2481] veth1_macvtap: left promiscuous mode [ 160.666039][ T2481] veth0_macvtap: left promiscuous mode [ 160.679348][ T2481] veth1_vlan: left promiscuous mode [ 160.694388][ T2481] veth0_vlan: left promiscuous mode [ 161.236361][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.246304][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.254662][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.282570][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.298570][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.317543][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.505087][ T5095] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.745166][ T5095] usb 2-1: Using ep0 maxpacket: 8 [ 161.759719][ T5095] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 161.769946][ T5095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.779754][ T5095] usb 2-1: Product: syz [ 161.784155][ T5095] usb 2-1: Manufacturer: syz [ 161.793639][ T5095] usb 2-1: SerialNumber: syz [ 161.802511][ T5095] usb 2-1: config 0 descriptor?? [ 161.816400][ T5095] gspca_main: sq905-2.14.0 probing 2770:9120 [ 161.996712][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 162.050028][ T5095] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 162.067322][ T5095] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 162.105150][ T5095] usb 2-1: USB disconnect, device number 8 [ 162.132469][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 162.266575][ T5099] Bluetooth: hci3: command tx timeout [ 162.675393][ T49] usbhid 1-1:0.0: can't add hid device: -71 [ 162.681476][ T49] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.713310][ T49] usb 1-1: USB disconnect, device number 12 [ 163.077731][ T6279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.097315][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 163.232222][ T6279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.390112][ T6279] team0: Port device team_slave_0 added [ 163.396200][ T5099] Bluetooth: hci2: command tx timeout [ 163.402597][ T6279] team0: Port device team_slave_1 added [ 163.497512][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.508363][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.535875][ T6279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.566918][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.574001][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.600421][ T6279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.605206][ T49] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 163.645202][ T58] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 163.771472][ T6279] hsr_slave_0: entered promiscuous mode [ 163.778408][ T6279] hsr_slave_1: entered promiscuous mode [ 163.807834][ T49] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.819096][ T49] usb 1-1: config 179 has no interface number 0 [ 163.827124][ T49] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 163.827783][ T58] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.847717][ T49] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 163.859054][ T49] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 163.871487][ T58] usb 2-1: config 179 has no interface number 0 [ 163.878044][ T58] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 163.883278][ T2481] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.895553][ T49] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.918697][ T58] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 163.931655][ T58] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 163.943133][ T49] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.952807][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.961025][ T58] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.963685][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 163.978215][ T58] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.991307][ T6389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.999094][ T6389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.003488][ T6188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.013679][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.084595][ T6391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.094039][ T6391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.096547][ T2481] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.121940][ C1] hrtimer: interrupt took 407167 ns [ 164.223969][ T6188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.292454][ T6188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.345144][ T5099] Bluetooth: hci3: command tx timeout [ 164.489461][ T9] usb 1-1: USB disconnect, device number 13 [ 164.489472][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.489665][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.578284][ T8] usb 2-1: USB disconnect, device number 9 [ 164.579532][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.607368][ T2481] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.631657][ T6188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.737273][ T2481] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.781076][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.789416][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.797532][ T6370] bridge_slave_0: entered allmulticast mode [ 164.805372][ T6370] bridge_slave_0: entered promiscuous mode [ 164.814276][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.822927][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.830627][ T6370] bridge_slave_1: entered allmulticast mode [ 164.840357][ T6370] bridge_slave_1: entered promiscuous mode [ 164.930980][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.973522][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.102873][ T6370] team0: Port device team_slave_0 added [ 165.131515][ T6370] team0: Port device team_slave_1 added [ 165.191136][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 165.355186][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.362196][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.398628][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.444248][ T2481] bridge_slave_1: left allmulticast mode [ 165.458557][ T2481] bridge_slave_1: left promiscuous mode [ 165.466842][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.481424][ T5099] Bluetooth: hci2: command tx timeout [ 165.496718][ T2481] bridge_slave_0: left allmulticast mode [ 165.503181][ T2481] bridge_slave_0: left promiscuous mode [ 165.515462][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.688185][ T2481] ip6gretap0 (unregistering): left promiscuous mode [ 165.987416][ T6081] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.052521][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.064090][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.082481][ T2481] bond0 (unregistering): Released all slaves [ 166.144169][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.152375][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.189030][ T6081] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.199303][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.221702][ T6081] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.251362][ T6081] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.277999][ T6081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.297357][ T6081] usb 1-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 166.309585][ T6081] usb 1-1: SerialNumber: syz [ 166.331483][ T6370] hsr_slave_0: entered promiscuous mode [ 166.341721][ T6370] hsr_slave_1: entered promiscuous mode [ 166.351160][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.361592][ T6370] Cannot create hsr debugfs directory [ 166.579797][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.632189][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.647664][ T6081] usb 1-1: 0:2 : does not exist [ 166.685387][ T6081] usb 1-1: USB disconnect, device number 14 [ 166.688906][ T6279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.770937][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 166.779299][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.796455][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.811769][ T6279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.815012][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 166.838592][ T6279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.844938][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.863013][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.893508][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.913622][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.937645][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.965831][ T2481] hsr_slave_0: left promiscuous mode [ 166.972664][ T2481] hsr_slave_1: left promiscuous mode [ 167.013631][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.040233][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.060813][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.078614][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.136664][ T2481] veth1_macvtap: left promiscuous mode [ 167.142773][ T2481] veth0_macvtap: left promiscuous mode [ 167.155515][ T2481] veth1_vlan: left promiscuous mode [ 167.161095][ T2481] veth0_vlan: left promiscuous mode [ 167.168466][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 167.174039][ T8] usbtmc 2-1:16.0: can't read capabilities [ 167.547538][ T5099] Bluetooth: hci2: command tx timeout [ 167.675021][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.722216][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 167.760981][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 167.879894][ T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 167.892455][ T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 167.915888][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 167.925233][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.940097][ T6449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.214504][ T6279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.252313][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.290217][ T9] usb 2-1: USB disconnect, device number 10 [ 168.344458][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.351731][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.364091][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.371362][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.417318][ T8] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 168.435843][ T8] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 168.500846][ T8] usb 1-1: USB disconnect, device number 15 [ 168.500907][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 168.594791][ T6188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.799574][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.994276][ T6279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.100462][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.429830][ T6188] veth0_vlan: entered promiscuous mode [ 169.545863][ T2481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.614328][ T6279] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.635224][ T5099] Bluetooth: hci2: command tx timeout [ 169.752079][ T2481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.819272][ T6370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.877582][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.884795][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.918950][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.926197][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.988513][ T2481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.039866][ T6370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.085563][ T6479] : entered promiscuous mode [ 170.099085][ T6370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.155008][ T6370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.238945][ T2481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.276934][ T6188] veth1_vlan: entered promiscuous mode [ 170.299535][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.312305][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.325266][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.336819][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.347066][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.354704][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.367233][ T6488] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.277'. [ 170.613296][ T6188] veth0_macvtap: entered promiscuous mode [ 170.707485][ T6188] veth1_macvtap: entered promiscuous mode [ 170.793614][ T5099] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 170.798647][ T5099] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 170.823621][ T6279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.840157][ T2481] bridge_slave_1: left allmulticast mode [ 170.849005][ T2481] bridge_slave_1: left promiscuous mode [ 170.860794][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.872199][ T2481] bridge_slave_0: left allmulticast mode [ 170.880076][ T2481] bridge_slave_0: left promiscuous mode [ 170.885986][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.539629][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.563037][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.581741][ T2481] bond0 (unregistering): Released all slaves [ 171.652819][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.677068][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.693027][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.704017][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.736982][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.787768][ T2481] IPVS: stopping backup sync thread 6111 ... [ 171.869889][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.894802][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.905610][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.918709][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.931079][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.058446][ T6188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.067635][ T6188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.077742][ T6188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.089369][ T6188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.176696][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 172.329516][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.342506][ T6279] veth0_vlan: entered promiscuous mode [ 172.405177][ T2481] hsr_slave_0: left promiscuous mode [ 172.421569][ T2481] hsr_slave_1: left promiscuous mode [ 172.427266][ T5099] Bluetooth: hci4: command tx timeout [ 172.447869][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.455469][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.467511][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.491542][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.538318][ T2481] veth1_macvtap: left promiscuous mode [ 172.543979][ T2481] veth0_macvtap: left promiscuous mode [ 172.552405][ T2481] veth1_vlan: left promiscuous mode [ 172.565545][ T2481] veth0_vlan: left promiscuous mode [ 172.875408][ T5145] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.090014][ T5145] usb 2-1: Using ep0 maxpacket: 32 [ 173.253162][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 173.321975][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 173.880933][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.952729][ T6279] veth1_vlan: entered promiscuous mode [ 173.982681][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 174.133908][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.141150][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.204708][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.211939][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.305698][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.327172][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.506717][ T5099] Bluetooth: hci4: command tx timeout [ 174.553577][ T6279] veth0_macvtap: entered promiscuous mode [ 174.657952][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.677788][ T6279] veth1_macvtap: entered promiscuous mode [ 174.688213][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.730051][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.746350][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.763156][ T6494] bridge_slave_0: entered allmulticast mode [ 174.785557][ T6494] bridge_slave_0: entered promiscuous mode [ 174.879737][ T6370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.894727][ T6370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.956597][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.971922][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.983386][ T6494] bridge_slave_1: entered allmulticast mode [ 175.015394][ T6494] bridge_slave_1: entered promiscuous mode [ 175.255282][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.293636][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.334841][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.360407][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.406325][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.443671][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.487397][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.541863][ T5145] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.567365][ T5145] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 175.605029][ T5145] usb 2-1: can't read configurations, error -71 [ 175.644795][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.683876][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.704620][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.715932][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.730082][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.789378][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.887614][ T6279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.922039][ T6279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.945017][ T6279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.954164][ T6279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.985868][ T6494] team0: Port device team_slave_0 added [ 176.018213][ T6494] team0: Port device team_slave_1 added [ 176.164229][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.184672][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.227693][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.249932][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.259313][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.285248][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.296784][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.546000][ T6494] hsr_slave_0: entered promiscuous mode [ 176.588245][ T53] Bluetooth: hci4: command tx timeout [ 176.596768][ T6494] hsr_slave_1: entered promiscuous mode [ 176.639124][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.655421][ T6494] Cannot create hsr debugfs directory [ 176.735451][ T6592] qrtr: Invalid version 5 [ 176.938346][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 177.018858][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.039049][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.089634][ T6370] veth0_vlan: entered promiscuous mode [ 177.263766][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.290347][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.323672][ T6370] veth1_vlan: entered promiscuous mode [ 177.635529][ T6614] syz.2.239 uses obsolete (PF_INET,SOCK_PACKET) [ 177.700469][ T6370] veth0_macvtap: entered promiscuous mode [ 177.714709][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.294'. [ 177.744473][ T6370] veth1_macvtap: entered promiscuous mode [ 177.877151][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 178.068085][ T6626] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.297'. [ 178.126105][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 178.253772][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.296599][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.312170][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.329902][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.342761][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.360887][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.373388][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.410978][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.424670][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.449275][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.466135][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.479989][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.502725][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.536766][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.616121][ T6647] qrtr: Invalid version 5 [ 178.636695][ T6370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.663805][ T6370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.665209][ T53] Bluetooth: hci4: command tx timeout [ 178.695708][ T6370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.736737][ T6370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.779475][ T6652] binder: 6651:6652 ioctl 40046205 0 returned -22 [ 178.867172][ T6494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.954772][ T6494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.095788][ T6494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.135450][ T6494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.265393][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.430782][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.510253][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.515910][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.552549][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.554979][ T9] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 179.585403][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.601745][ T9] usb 3-1: config 0 descriptor?? [ 179.611693][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.643595][ T9] option 3-1:0.0: GSM modem (1-port) converter detected [ 179.774675][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.885603][ T9] usb 3-1: USB disconnect, device number 6 [ 179.892671][ T9] option 3-1:0.0: device disconnected [ 179.912428][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.946218][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 179.956607][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 179.965427][ T53] Bluetooth: hci0: hardware error 0x00 [ 180.073927][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.135354][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.302650][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.313332][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.322318][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.332140][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.340380][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.351777][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.470360][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.518490][ T35] bridge_slave_1: left allmulticast mode [ 180.536242][ T35] bridge_slave_1: left promiscuous mode [ 180.543177][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.570089][ T35] bridge_slave_0: left allmulticast mode [ 180.580848][ T35] bridge_slave_0: left promiscuous mode [ 180.606289][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.307522][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.329017][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.349035][ T35] bond0 (unregistering): Released all slaves [ 181.388685][ T6696] : entered promiscuous mode [ 181.407594][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 181.546036][ T6713] qrtr: Invalid version 5 [ 181.597194][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.714084][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.721270][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.105893][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 182.122813][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.130166][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.403190][ T35] hsr_slave_0: left promiscuous mode [ 182.425893][ T35] hsr_slave_1: left promiscuous mode [ 182.436898][ T53] Bluetooth: hci1: command tx timeout [ 182.445404][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.452868][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.499380][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.512047][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.548296][ T35] veth1_macvtap: left promiscuous mode [ 182.558195][ T35] veth0_macvtap: left promiscuous mode [ 182.563971][ T35] veth1_vlan: left promiscuous mode [ 182.572542][ T35] veth0_vlan: left promiscuous mode [ 182.669877][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 182.669895][ T29] audit: type=1326 audit(1720542550.485:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.1.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8a6b75bd9 code=0x0 [ 182.697670][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.445111][ T35] team0 (unregistering): Port device team_slave_1 removed [ 183.488820][ T35] team0 (unregistering): Port device team_slave_0 removed [ 183.884291][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'. [ 183.939216][ T6742] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 184.105887][ T6494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.160987][ T6494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.495452][ T6765] openvswitch: : Dropping previously announced user features [ 184.506278][ T53] Bluetooth: hci1: command tx timeout [ 184.578811][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.620116][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 184.683866][ T6769] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 184.743483][ T6769] team0: Port device netdevsim0 added [ 184.999481][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 185.221513][ T6494] veth0_vlan: entered promiscuous mode [ 185.237520][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.273406][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.275522][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.295648][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.332131][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.332269][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.378266][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.385183][ T6686] bridge_slave_0: entered allmulticast mode [ 185.408175][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.414327][ T6686] bridge_slave_0: entered promiscuous mode [ 185.432703][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.436082][ T9] usb 2-1: Manufacturer: syz [ 185.457394][ T9] usb 2-1: config 0 descriptor?? [ 185.465476][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.473657][ T6686] bridge_slave_1: entered allmulticast mode [ 185.517602][ T6686] bridge_slave_1: entered promiscuous mode [ 185.540465][ T6494] veth1_vlan: entered promiscuous mode [ 185.738082][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.769901][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.895445][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 185.906745][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.937475][ T9] usb 2-1: USB disconnect, device number 13 [ 185.960089][ T6686] team0: Port device team_slave_0 added [ 186.026643][ T6686] team0: Port device team_slave_1 added [ 186.084536][ T6494] veth0_macvtap: entered promiscuous mode [ 186.131950][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.141216][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.167152][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.235830][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.260704][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 186.325886][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.332935][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.409291][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.585068][ T53] Bluetooth: hci1: command tx timeout [ 186.605750][ T6809] wireguard0: entered promiscuous mode [ 186.652745][ T6809] wireguard0: entered allmulticast mode [ 186.785317][ T6494] veth1_macvtap: entered promiscuous mode [ 187.063046][ T6686] hsr_slave_0: entered promiscuous mode [ 187.079434][ T6686] hsr_slave_1: entered promiscuous mode [ 187.102350][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.121845][ T6686] Cannot create hsr debugfs directory [ 187.163227][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.194363][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.226834][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.242106][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.262234][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.289296][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.312147][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.466311][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.495038][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.505008][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.524991][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.554071][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.589505][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.611746][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.780883][ T6494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.813873][ T6494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.841187][ T6494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.866261][ T6494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.975159][ T5148] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.205698][ T5148] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 188.221046][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.263472][ T5148] usb 3-1: config 0 descriptor?? [ 188.541613][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.576159][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.695008][ T53] Bluetooth: hci1: command tx timeout [ 188.887988][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.903615][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.932499][ T6833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.340'. [ 189.274073][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.299140][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.659335][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 189.721420][ T6686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.780515][ T6686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.859501][ T6686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.931648][ T6686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.152200][ T5148] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.166522][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.234969][ T5148] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 190.262375][ T5148] asix 3-1:0.0: probe with driver asix failed with error -71 [ 190.310378][ T5148] usb 3-1: USB disconnect, device number 7 [ 190.389698][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.404967][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 190.432058][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 190.485840][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.536628][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.560810][ T9] usb 1-1: config 0 descriptor?? [ 190.599010][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 190.614409][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.621654][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.732048][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.739388][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.069538][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.115504][ T6894] trusted_key: syz.4.350 sent an empty control message without MSG_MORE. [ 191.132151][ T9] gspca_nw80x: reg_r err -71 [ 191.160547][ T9] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 191.212337][ T9] usb 1-1: USB disconnect, device number 16 [ 191.288467][ T6686] veth0_vlan: entered promiscuous mode [ 191.339380][ T6686] veth1_vlan: entered promiscuous mode [ 191.458104][ T6686] veth0_macvtap: entered promiscuous mode [ 191.487769][ T6686] veth1_macvtap: entered promiscuous mode [ 191.553604][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.584953][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.613366][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.668916][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.705116][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.745317][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.775969][ T6915] kvm: emulating exchange as write [ 191.792259][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.818733][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.850530][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.907489][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.931004][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.952416][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.970914][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.983902][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.998745][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.011389][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.033656][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.060800][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.114249][ T6686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.132094][ T6686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.153120][ T6686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.194067][ T6686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.452949][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.494924][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.559373][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 192.578369][ T6930] netlink: 13 bytes leftover after parsing attributes in process `syz.4.358'. [ 192.618823][ T6932] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 192.676713][ T6932] team0: Port device netdevsim0 added [ 192.729323][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.772176][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.095820][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 193.155167][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 193.164353][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 193.174077][ T53] Bluetooth: hci2: hardware error 0x00 [ 194.186290][ T5149] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 194.397571][ T5149] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.425403][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 194.434508][ T5149] usb 5-1: config 179 has no interface number 0 [ 194.456866][ T5149] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 194.519116][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524945][ T5149] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 194.527164][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600259][ T5149] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 194.662478][ T5149] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.703120][ T5149] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.723035][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.765970][ T6988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.791772][ T6988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.232815][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 195.985904][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 196.033023][ C0] ------------[ cut here ]------------ [ 196.039332][ C0] WARNING: CPU: 0 PID: 7021 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 196.048348][ C0] Modules linked in: [ 196.052304][ C0] CPU: 0 PID: 7021 Comm: syz.3.380 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 196.062331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.072438][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 196.078234][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 196.097903][ C0] RSP: 0000:ffffc90000006470 EFLAGS: 00010002 [ 196.104052][ C0] RAX: 0000000080010102 RBX: ffff88807d935a00 RCX: 0000000000000002 [ 196.112087][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 196.120106][ C0] RBP: 0100000000000005 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 196.128105][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 196.136097][ C0] R13: ffff888028d7d600 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 196.144114][ C0] FS: 00007f455fef76c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 196.153077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.159671][ C0] CR2: 0000001b317d7ff8 CR3: 000000001f45e000 CR4: 00000000003506f0 [ 196.167657][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.175659][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.183674][ C0] Call Trace: [ 196.186971][ C0] [ 196.189833][ C0] ? __warn+0x163/0x4e0 [ 196.194011][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 196.199164][ C0] ? report_bug+0x2b3/0x500 [ 196.203694][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 196.208826][ C0] ? handle_bug+0x3e/0x70 [ 196.213175][ C0] ? exc_invalid_op+0x1a/0x50 [ 196.217872][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 196.222928][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 196.227972][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 196.233093][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 196.237978][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 196.243727][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 196.249128][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 196.255038][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 196.260263][ C0] dummy_timer+0x830/0x45d0 [ 196.264790][ C0] ? __pfx_lock_release+0x10/0x10 [ 196.269851][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.276204][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 196.281605][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 196.286833][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 196.291789][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 196.296753][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 196.301973][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 196.307984][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 196.313733][ C0] hrtimer_interrupt+0x396/0x990 [ 196.318711][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 196.324725][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 196.330380][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.336387][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 196.343251][ C0] Code: 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 c0 a8 6d 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 196.362875][ C0] RSP: 0000:ffffc90000006c00 EFLAGS: 00000202 [ 196.368956][ C0] RAX: 0000000080000102 RBX: 0000000000000001 RCX: ffffc90009050000 [ 196.376940][ C0] RDX: ffff88807d935a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 196.384924][ C0] RBP: 1ffff92000000d9e R08: ffffffff8141008d R09: ffffffff8140ffe6 [ 196.392914][ C0] R10: 0000000000000003 R11: ffff88807d935a00 R12: ffffc900090576d8 [ 196.400898][ C0] R13: ffffc90009058000 R14: 1ffff92000000d9d R15: dffffc0000000000 [ 196.408974][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 196.414192][ C0] ? unwind_next_frame+0x109d/0x2a00 [ 196.419521][ C0] unwind_next_frame+0x109d/0x2a00 [ 196.424659][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 196.429398][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 196.434101][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.440285][ C0] arch_stack_walk+0x151/0x1b0 [ 196.445078][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 196.449853][ C0] stack_trace_save+0x118/0x1d0 [ 196.454729][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 196.460132][ C0] ? __pfx_validate_chain+0x10/0x10 [ 196.465366][ C0] ? hrtimer_interrupt+0x396/0x990 [ 196.470498][ C0] ? __pfx_validate_chain+0x10/0x10 [ 196.475716][ C0] kasan_save_track+0x3f/0x80 [ 196.480404][ C0] ? kasan_save_track+0x3f/0x80 [ 196.485260][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 196.490032][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 196.495069][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 196.501494][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 196.507309][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 196.513560][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 196.519383][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 196.524512][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 196.529824][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 196.534959][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 196.541151][ C0] ? tasklet_action_common+0x321/0x4d0 [ 196.546626][ C0] ? handle_softirqs+0x2c4/0x970 [ 196.551576][ C0] ? do_softirq+0x11b/0x1e0 [ 196.556086][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 196.561466][ C0] ? ieee80211_tx_skb_tid+0x264/0x420 [ 196.566856][ C0] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 196.572169][ C0] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 196.577824][ C0] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 196.582857][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 196.587581][ C0] __kasan_kmalloc+0x98/0xb0 [ 196.592192][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 196.598710][ C0] __kmalloc_noprof+0x1f9/0x400 [ 196.603589][ C0] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 196.609850][ C0] ? __pfx_lock_release+0x10/0x10 [ 196.614891][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 196.621609][ C0] ? __pfx_validate_chain+0x10/0x10 [ 196.626821][ C0] ? kernel_text_address+0xa7/0xe0 [ 196.631956][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 196.637783][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 196.643473][ C0] ? __pfx_validate_chain+0x10/0x10 [ 196.648692][ C0] ? validate_chain+0x11e/0x5900 [ 196.653661][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 196.659745][ C0] ? __pfx_validate_chain+0x10/0x10 [ 196.664964][ C0] ? mark_lock+0x9a/0x350 [ 196.669326][ C0] ? mark_lock+0x9a/0x350 [ 196.673674][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 196.678738][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 196.683775][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 196.689608][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 196.695700][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 196.701528][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 196.707187][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 196.713392][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.719733][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 196.725560][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 196.730525][ C0] ieee80211_rx_list+0x2b00/0x3780 [ 196.735660][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 196.740709][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 196.746195][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 196.751230][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.757224][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.763571][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 196.768616][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 196.773572][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.779916][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 196.785392][ C0] ? skb_dequeue+0x113/0x150 [ 196.790026][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 196.796030][ C0] tasklet_action_common+0x321/0x4d0 [ 196.801332][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 196.807152][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.813493][ C0] ? workqueue_softirq_action+0xca/0x140 [ 196.819142][ C0] handle_softirqs+0x2c4/0x970 [ 196.823918][ C0] ? do_softirq+0x11b/0x1e0 [ 196.828435][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 196.833757][ C0] do_softirq+0x11b/0x1e0 [ 196.838115][ C0] [ 196.841138][ C0] [ 196.844075][ C0] ? __pfx_do_softirq+0x10/0x10 [ 196.848966][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 196.854610][ C0] ? rcu_is_watching+0x15/0xb0 [ 196.859411][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 196.864638][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 196.869493][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 196.875490][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 196.881218][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 196.887212][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 196.892507][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 196.897717][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 196.903048][ C0] ieee80211_mgmt_tx+0x1b46/0x2170 [ 196.908221][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 196.913497][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 196.918904][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 196.923781][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 196.929079][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 196.934405][ C0] genl_rcv_msg+0xb14/0xec0 [ 196.938928][ C0] ? mark_lock+0x9a/0x350 [ 196.943281][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.948342][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 196.953418][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 196.958814][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 196.964145][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 196.969626][ C0] ? __pfx___might_resched+0x10/0x10 [ 196.974940][ C0] netlink_rcv_skb+0x1e3/0x430 [ 196.979729][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.984765][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.990164][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 196.995655][ C0] genl_rcv+0x28/0x40 [ 196.999654][ C0] netlink_unicast+0x7ea/0x980 [ 197.004457][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 197.009757][ C0] ? __virt_addr_valid+0x183/0x520 [ 197.014932][ C0] ? __check_object_size+0x49c/0x900 [ 197.020244][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 197.025384][ C0] netlink_sendmsg+0x8db/0xcb0 [ 197.030179][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.035486][ C0] ? __import_iovec+0x536/0x820 [ 197.040374][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 197.045342][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 197.050639][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 197.056119][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.061422][ C0] __sock_sendmsg+0x221/0x270 [ 197.066145][ C0] ____sys_sendmsg+0x525/0x7d0 [ 197.070961][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.076288][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 197.080901][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.086068][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.092438][ C0] ? do_syscall_64+0x100/0x230 [ 197.097248][ C0] ? do_syscall_64+0xb6/0x230 [ 197.101964][ C0] do_syscall_64+0xf3/0x230 [ 197.106505][ C0] ? clear_bhb_loop+0x35/0x90 [ 197.111209][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.117126][ C0] RIP: 0033:0x7f455f175bd9 [ 197.121613][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.141255][ C0] RSP: 002b:00007f455fef7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.149732][ C0] RAX: ffffffffffffffda RBX: 00007f455f304038 RCX: 00007f455f175bd9 [ 197.157727][ C0] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000007 [ 197.165715][ C0] RBP: 00007f455f1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 197.173701][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.181686][ C0] R13: 000000000000006e R14: 00007f455f304038 R15: 00007f455f42fa78 [ 197.189687][ C0] [ 197.192733][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.200040][ C0] CPU: 0 PID: 7021 Comm: syz.3.380 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 197.210026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.220088][ C0] Call Trace: [ 197.223379][ C0] [ 197.226236][ C0] dump_stack_lvl+0x241/0x360 [ 197.230935][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.236155][ C0] ? __pfx__printk+0x10/0x10 [ 197.240756][ C0] ? _printk+0xd5/0x120 [ 197.244947][ C0] ? vscnprintf+0x5d/0x90 [ 197.249311][ C0] panic+0x349/0x860 [ 197.253222][ C0] ? __warn+0x172/0x4e0 [ 197.257395][ C0] ? __pfx_panic+0x10/0x10 [ 197.261829][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 197.267059][ C0] __warn+0x346/0x4e0 [ 197.271057][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 197.276186][ C0] report_bug+0x2b3/0x500 [ 197.280529][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 197.285655][ C0] handle_bug+0x3e/0x70 [ 197.289829][ C0] exc_invalid_op+0x1a/0x50 [ 197.294373][ C0] asm_exc_invalid_op+0x1a/0x20 [ 197.299252][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 197.304982][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 197.324608][ C0] RSP: 0000:ffffc90000006470 EFLAGS: 00010002 [ 197.330689][ C0] RAX: 0000000080010102 RBX: ffff88807d935a00 RCX: 0000000000000002 [ 197.338669][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 197.346649][ C0] RBP: 0100000000000005 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 197.354629][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 197.362612][ C0] R13: ffff888028d7d600 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 197.370600][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 197.375650][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 197.380515][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 197.386251][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 197.391637][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 197.397552][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 197.402798][ C0] dummy_timer+0x830/0x45d0 [ 197.407353][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.412422][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.418764][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 197.424163][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 197.429387][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 197.434459][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 197.439437][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 197.444679][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 197.450703][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 197.456455][ C0] hrtimer_interrupt+0x396/0x990 [ 197.461435][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 197.467438][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 197.473088][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.479085][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 197.485946][ C0] Code: 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 c0 a8 6d 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 197.505561][ C0] RSP: 0000:ffffc90000006c00 EFLAGS: 00000202 [ 197.511637][ C0] RAX: 0000000080000102 RBX: 0000000000000001 RCX: ffffc90009050000 [ 197.519614][ C0] RDX: ffff88807d935a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 197.527593][ C0] RBP: 1ffff92000000d9e R08: ffffffff8141008d R09: ffffffff8140ffe6 [ 197.535572][ C0] R10: 0000000000000003 R11: ffff88807d935a00 R12: ffffc900090576d8 [ 197.543546][ C0] R13: ffffc90009058000 R14: 1ffff92000000d9d R15: dffffc0000000000 [ 197.551535][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 197.556762][ C0] ? unwind_next_frame+0x109d/0x2a00 [ 197.562062][ C0] unwind_next_frame+0x109d/0x2a00 [ 197.567193][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 197.571877][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 197.576561][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 197.582728][ C0] arch_stack_walk+0x151/0x1b0 [ 197.587513][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 197.592195][ C0] stack_trace_save+0x118/0x1d0 [ 197.597059][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 197.602442][ C0] ? __pfx_validate_chain+0x10/0x10 [ 197.607647][ C0] ? hrtimer_interrupt+0x396/0x990 [ 197.612766][ C0] ? __pfx_validate_chain+0x10/0x10 [ 197.617978][ C0] kasan_save_track+0x3f/0x80 [ 197.622659][ C0] ? kasan_save_track+0x3f/0x80 [ 197.627518][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 197.632300][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 197.637334][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 197.643756][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 197.649574][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 197.655838][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 197.661655][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 197.666806][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 197.672103][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 197.677223][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 197.683387][ C0] ? tasklet_action_common+0x321/0x4d0 [ 197.688855][ C0] ? handle_softirqs+0x2c4/0x970 [ 197.693798][ C0] ? do_softirq+0x11b/0x1e0 [ 197.698308][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 197.703688][ C0] ? ieee80211_tx_skb_tid+0x264/0x420 [ 197.709077][ C0] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 197.714384][ C0] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 197.719944][ C0] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 197.724980][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 197.729785][ C0] __kasan_kmalloc+0x98/0xb0 [ 197.734393][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 197.740821][ C0] __kmalloc_noprof+0x1f9/0x400 [ 197.745701][ C0] cfg80211_inform_single_bss_data+0xd78/0x2360 [ 197.751966][ C0] ? __pfx_lock_release+0x10/0x10 [ 197.757003][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 197.763707][ C0] ? __pfx_validate_chain+0x10/0x10 [ 197.768923][ C0] ? kernel_text_address+0xa7/0xe0 [ 197.774053][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 197.779876][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 197.785541][ C0] ? __pfx_validate_chain+0x10/0x10 [ 197.790756][ C0] ? validate_chain+0x11e/0x5900 [ 197.795725][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 197.801811][ C0] ? __pfx_validate_chain+0x10/0x10 [ 197.807110][ C0] ? mark_lock+0x9a/0x350 [ 197.811455][ C0] ? mark_lock+0x9a/0x350 [ 197.815799][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 197.820855][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 197.825887][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 197.831712][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 197.837802][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 197.843628][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 197.849285][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 197.855461][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.861814][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 197.867645][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 197.872608][ C0] ieee80211_rx_list+0x2b00/0x3780 [ 197.877744][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 197.882791][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 197.888275][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 197.893309][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.899352][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.905699][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 197.910741][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 197.915694][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.922034][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 197.927532][ C0] ? skb_dequeue+0x113/0x150 [ 197.932179][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 197.938200][ C0] tasklet_action_common+0x321/0x4d0 [ 197.943536][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 197.949383][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.955737][ C0] ? workqueue_softirq_action+0xca/0x140 [ 197.961388][ C0] handle_softirqs+0x2c4/0x970 [ 197.966171][ C0] ? do_softirq+0x11b/0x1e0 [ 197.970687][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 197.975987][ C0] do_softirq+0x11b/0x1e0 [ 197.980322][ C0] [ 197.983255][ C0] [ 197.986189][ C0] ? __pfx_do_softirq+0x10/0x10 [ 197.991045][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 197.996690][ C0] ? rcu_is_watching+0x15/0xb0 [ 198.001464][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 198.006669][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 198.011522][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 198.017515][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 198.023242][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 198.029236][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 198.034531][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 198.039748][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 198.045048][ C0] ieee80211_mgmt_tx+0x1b46/0x2170 [ 198.050186][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 198.055401][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 198.060814][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 198.065684][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 198.070981][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 198.076295][ C0] genl_rcv_msg+0xb14/0xec0 [ 198.080806][ C0] ? mark_lock+0x9a/0x350 [ 198.085155][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.090217][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 198.095247][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 198.100631][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 198.105928][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 198.111399][ C0] ? __pfx___might_resched+0x10/0x10 [ 198.116703][ C0] netlink_rcv_skb+0x1e3/0x430 [ 198.121514][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.126569][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.131904][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 198.137396][ C0] genl_rcv+0x28/0x40 [ 198.141387][ C0] netlink_unicast+0x7ea/0x980 [ 198.146187][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 198.151498][ C0] ? __virt_addr_valid+0x183/0x520 [ 198.156649][ C0] ? __check_object_size+0x49c/0x900 [ 198.161960][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 198.167102][ C0] netlink_sendmsg+0x8db/0xcb0 [ 198.171920][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.177249][ C0] ? __import_iovec+0x536/0x820 [ 198.182137][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 198.187092][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.192378][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 198.197844][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.203138][ C0] __sock_sendmsg+0x221/0x270 [ 198.207832][ C0] ____sys_sendmsg+0x525/0x7d0 [ 198.212617][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.217932][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 198.222545][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.227697][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.234037][ C0] ? do_syscall_64+0x100/0x230 [ 198.238822][ C0] ? do_syscall_64+0xb6/0x230 [ 198.243518][ C0] do_syscall_64+0xf3/0x230 [ 198.248038][ C0] ? clear_bhb_loop+0x35/0x90 [ 198.252721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.258628][ C0] RIP: 0033:0x7f455f175bd9 [ 198.263048][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.282670][ C0] RSP: 002b:00007f455fef7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.291099][ C0] RAX: ffffffffffffffda RBX: 00007f455f304038 RCX: 00007f455f175bd9 [ 198.299080][ C0] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000007 [ 198.307058][ C0] RBP: 00007f455f1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 198.315047][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.323048][ C0] R13: 000000000000006e R14: 00007f455f304038 R15: 00007f455f42fa78 [ 198.331064][ C0] [ 198.334359][ C0] Kernel Offset: disabled [ 198.338768][ C0] Rebooting in 86400 seconds..