last executing test programs:

8.105876351s ago: executing program 1 (id=12205):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x313)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f00000000c0))
sendmsg(r3, &(0x7f00000012c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="8f6c55c27730d5519efcd918ab6ef6a5980297e93e8952fc9452c24d92594cb87beb4c437a4e6ad9b4117ecfe9ba24038ef92d1d8d77a52d93ffcf5ccea6845f69cfd02f6f53af11ac886109f4aa", 0x4e}, {&(0x7f00000001c0)="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", 0xdf1}], 0x2, &(0x7f00000011c0)=[{0x50, 0x118, 0x5, "fa969bd9ff115f31a9ef32ae681389bdedd726aee4bd24ebf643701669c5076af54ea194217295cf0efba470b8500b2478704d4bff8a9070db"}, {0x80, 0x3ad56b0348266919, 0x10, "be4881b6e2e9311a20122e74565bc0f54da47e6d4179cb7b0418ae4da050b5f68a458db93a6f7dae7bac78c4e5dab16b6fd916f439b33bc9fa33ad7db389796b8045d05f9e009a31aaf0d4c4e14e7aa8b0ad50510d2f0f77760db982c7690213d82709cc856c0a74c7e441db5ad4"}], 0xd0}, 0x20040018)
socket$packet(0x11, 0x3, 0x300)
r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xd3, 0x75, 0x8, 0x20, 0xac8, 0x321, 0x6fbe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xfe, 0x89}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)

6.160826151s ago: executing program 1 (id=12220):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@delnexthop={0x18, 0x69, 0x32c, 0x70bd28, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.63810912s ago: executing program 1 (id=12224):
r0 = socket(0xa, 0x1, 0x0)
close(r0)
socket$inet6_sctp(0xa, 0x0, 0x84)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev, @in=@empty, 0x4e21}, {0x0, 0x39}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private}}, 0xe8)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x20, 0x2, 0x400}]})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x2840, 0x1c3, 0x30}, 0x18)
sendto$inet6(r3, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r3, 0x1)
getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000080)=""/4047, &(0x7f0000001180)=0xfcf)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x412202)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
eventfd2(0x0, 0x0)

4.724975226s ago: executing program 1 (id=12232):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x8000, @empty}}, 0x0, 0xfffd, 0x0, 0x0, 0xce03d4}, 0x9c)

4.521278414s ago: executing program 1 (id=12234):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x18a3c85)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x7a615f80c94aa039)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x9)
write$UHID_CREATE(r1, &(0x7f0000000640)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/219, 0xdb, 0x6b6e, 0x4, 0x101, 0xffffffff, 0xfffff801}}, 0x120)
write$char_usb(r0, &(0x7f0000000240)="96", 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800a0001006c696d69740000000c00028008000440000000010900010073797a3000000000141177ad4532370e36000000000000000000000a"], 0x9c}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd", 0xf)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pidfd_send_signal(r7, 0x0, &(0x7f0000000540)={0x7, 0xfffffffe, 0x1}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000800), 0x0, 0xc0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000000)=0xc)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x1}}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
unshare(0x2040400)
socket$tipc(0x1e, 0x2, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)

4.33480115s ago: executing program 3 (id=12236):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000017136792c369df4500000008000300", @ANYRES32=r2], 0x24}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x2000000000000021, 0x2, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$inet(0x2, 0x2, 0x0)
syz_clone(0xbc198800, &(0x7f0000000840)="a36ac0518d3deefef754658b64f1b4e766d16dad431bde34f0d6b7fce669776c9de600f8ad7df3f598b593432e6e293a974d679f1dcf0e855636f659c0d3c97dae0fb0cd80ed1724a4b4b2073b41232f0aaf2e01ee0c0000a817028367821ffedd0a6ed7096de1a8ead4a3e99e4e47c7914724aa386fec8dcb7162e21fed49252e1ba543a733cc95d185feeca70737aa62a6435514d712abd92d10509793e89f82acf350b7575e33e1454b8e7344158451d5ae8d33692c3fac07491e916a47c1851a174fa1842edbb1946491e04c2b788fddbce7acde9f000000fd00000000c0ef15ee903b08d30e996b3cdf052e0d7a59200ead718928337ddbc66959d21072391e0eeed8f5804461f9dcbde02fe04a8ab5f5290b962dd808479153ea4749327cd6edab36f500b6f3f05b278962e420137df27777165c8ebbebe0686ed7feb7c9d9ed51771500cf113f37bc66ad16a2d046425e7371957cd4bbefc67537b1747d83618351c4971e2f7b002bf880b8a9d6e3b16ccf0845a0988a782577559296860a95878e5c358d477c5ee82fa8a8a73e745ede50c5efacf2a4d73f47ce6a3cf801693556f0e3d7a4ed03f8bda545060f9fa9f834d5bbc6828440a5483a73b05358902fe32f4b086539cf7df0ea537824b5b040f485e6e7a9fe0d550b6ceff8f8f5843e3ea57a107ba1b11ab4eacee4dd337c473f1cd0c8dd5234b1e7371f8ca5809ad36c006c1e6c6197951eb782553390d97b33ba578ff48118e11836ff8b1d3986bf535736bf6617e3dd1ec105660272616bb80616e2fd1d4a2ba99b0585f0843a0ffea60fba581a2b23a0d83a022ee20d36f0d86c193603ff5a011a2190ddce163f3a6a8a3829cbe9dd3f6a465c88b8b3020dd56196737beb95a0b3bbfd5eaabad88cb30534d1207a971556b78fa821ec2bb9b949689b28d40fbb849dadafe34d82a7e9a759b6bf33fe7cdf6c760f27", 0x2b2, 0x0, 0x0, 0x0)
r3 = getpid()
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="310700001200040008e1deca008a0000000600"/30], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x1000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f00000004c0)=""/99, 0x63}], 0x3, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$alg(0x26, 0x5, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)

4.101575053s ago: executing program 0 (id=12240):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x81, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003000000000000000000000000000000000018001280"], 0x4c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.081550914s ago: executing program 2 (id=12241):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_to_bridge\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x2e, 0x2, 0x200, {0x9, @sctp_ip4_spec={@local, @local, 0x4e20, 0x4e23, 0x3}, {0x0, @multicast, 0x7, 0x772, [0x8, 0xffff8000]}, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @local, 0x5, 0x9e}, {0x0, @random="2d5869b40696", 0x8, 0x0, [0x7f, 0xfff]}, 0x3, 0xf}}})

3.959133773s ago: executing program 0 (id=12243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000200)=0x100000)

3.88046648s ago: executing program 2 (id=12245):
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [], [0x8000000000000000]})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) (fail_nth: 1)

3.728099533s ago: executing program 2 (id=12246):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x81, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff0700001400030000000000000000000000000000000000180012800800010070707000"], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.583825379s ago: executing program 2 (id=12247):
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [], [0x8000000000000000]})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0)

3.561848774s ago: executing program 0 (id=12248):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0x4140aecd, 0x0)

3.466274908s ago: executing program 2 (id=12250):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x3f, 0x1}, &(0x7f00000001c0)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000280)={{r1, r2+10000000}}, &(0x7f0000000400))
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000000)={0x1, 0x200, 0x6, 0x89f1, 0xffffffff, 0x8})
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)

3.455029526s ago: executing program 0 (id=12251):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3]})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xd33)

3.281071206s ago: executing program 0 (id=12255):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) (fail_nth: 1)

2.94125734s ago: executing program 0 (id=12257):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c0001000000000904"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x10, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r6, r7, 0x6, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0xfffd, 0x800, 0x0, 0x3, 0x0, 0x1ff, 0x2, 0x0, 0xffffffff, 0x40c, 0x1, "af33ff30427ca7d876f59fbec25b88ca6c0a9b32cf13babada39e64196a7399e"}})
syz_io_uring_setup(0x1864, &(0x7f0000000640)={0x0, 0x15c5, 0x0, 0xfffffffc, 0x0, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000080))
ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000000))

1.325742572s ago: executing program 2 (id=12267):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200030008000c00a80a000008000b00000000000c001000039a0000000000000600010007000000"], 0x40}}, 0x20)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r5, &(0x7f0000000200)='syz1\x00', 0x1ff)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000280)=@ethtool_cmd={0x2c, 0x5, 0x1, 0x8, 0xd, 0x2, 0x8, 0xf5, 0x5, 0x4, 0x1, 0x3, 0x22a, 0x3, 0x3, 0x9, [0x3, 0x80000001]}})
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x800000100008)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010100}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1c, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010102}}}})
ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x47524247}})
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000140)={0x5, 0x1c, 0xe, 0x1, "7fff313a05704af01abb35f0f6897d66d95cd50b597aa83c8bd8ea500c311bb2"})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046617210460d11208f820102030109021b0001000000000904"], 0x0)

1.218753531s ago: executing program 3 (id=12268):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x81, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.166414008s ago: executing program 3 (id=12269):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x1})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000200)=0x100000)

983.255744ms ago: executing program 3 (id=12270):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x87f]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, 0x0, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

309.525832ms ago: executing program 4 (id=12272):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0)

309.344375ms ago: executing program 4 (id=12273):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4000}, 0x0)
recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000380)=""/115, 0x73}], 0x2}, 0x5}], 0x1, 0x101, 0x0)

286.481018ms ago: executing program 4 (id=12274):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300"/24, @ANYRES32], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

252.272561ms ago: executing program 4 (id=12275):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x81, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

216.994186ms ago: executing program 4 (id=12276):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x498, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x474, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x2dc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x2ac, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

148.824817ms ago: executing program 1 (id=12277):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000000306010100000000000000000000000005000100070000000900020073797a3200"], 0x28}}, 0x0) (fail_nth: 1)

147.886855ms ago: executing program 4 (id=12278):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)={0x8000000000001ac})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xb9, 0x2, 0x2, 0x0, 0xf2})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x6, 0x80000000, 0x901, 0x10}})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001401)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket(0x1, 0x5, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00100000004000000000000000000000000000009878ff48ae8edf0ba97fca29a3f6e0db0197e6736814904deb08123f9ef94cec8ff392a03da27dc7e902e5259c407b0e383dbb66575630b1205ef866d148bd5bc847994786d37c9e97582902871485383735567bfbc1cef41b876b67c52186b395", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x2229c4, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r7=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r8, 0x540b, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000)
ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x20004000)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb1000000000088a8400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14)

26.633102ms ago: executing program 3 (id=12279):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x81, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 3 (id=12280):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nterface with an up link
[ 1844.468212][T14719] team0: Port device team_slave_0 added
[ 1844.591489][T14719] team0: Port device team_slave_1 added
[ 1844.699087][T14810] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11413'.
[ 1844.717569][T14719] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1844.737416][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1844.765092][T14719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1844.788657][T19514] hsr_slave_0: left promiscuous mode
[ 1844.803867][T19514] hsr_slave_1: left promiscuous mode
[ 1844.815962][T19514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1844.829210][T19514] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1844.850341][T19514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1844.865152][T19514] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1844.915653][T19514] veth1_macvtap: left promiscuous mode
[ 1844.921225][T19514] veth0_macvtap: left promiscuous mode
[ 1844.937588][T19514] veth1_vlan: left promiscuous mode
[ 1844.944122][T19514] veth0_vlan: left promiscuous mode
[ 1845.379326][T22317] Bluetooth: hci1: command tx timeout
[ 1845.387074][ T9006] Bluetooth: hci2: command tx timeout
[ 1845.794981][T19514] team0 (unregistering): Port device team_slave_1 removed
[ 1845.864302][T19514] team0 (unregistering): Port device team_slave_0 removed
[ 1846.421108][T14810] netlink: 'syz.3.11413': attribute type 27 has an invalid length.
[ 1846.470189][T14810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1846.477487][T14810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1846.553888][T14810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1846.568748][T14810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1846.626667][T14810] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.637393][T14810] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.646444][T14810] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.655518][T14810] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.730792][T14719] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1846.740140][T14719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1846.772917][T14719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1846.838697][T14833] mac80211_hwsim hwsim382 wlan1: entered allmulticast mode
[ 1846.905837][T14844] mac80211_hwsim hwsim384 wlan1: entered allmulticast mode
[ 1847.078943][T14719] hsr_slave_0: entered promiscuous mode
[ 1847.093536][T14719] hsr_slave_1: entered promiscuous mode
[ 1847.105798][T14719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1847.121737][T14719] Cannot create hsr debugfs directory
[ 1847.238546][T14778] chnl_net:caif_netlink_parms(): no params data found
[ 1847.453497][T22317] Bluetooth: hci1: command tx timeout
[ 1847.458953][T22317] Bluetooth: hci2: command tx timeout
[ 1847.731247][T14778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.772734][T14778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.792800][T14778] bridge_slave_0: entered allmulticast mode
[ 1847.794230][ T9006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1847.826346][T14778] bridge_slave_0: entered promiscuous mode
[ 1847.839570][ T9006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1847.851865][ T9006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1847.865273][ T9006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1847.876450][ T9006] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1847.884906][ T9006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1847.886496][T14778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.903125][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11429'.
[ 1847.909150][T14778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1847.920238][T14778] bridge_slave_1: entered allmulticast mode
[ 1847.953521][T14778] bridge_slave_1: entered promiscuous mode
[ 1848.063514][   T25] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1848.107089][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1848.131114][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1848.252796][   T25] usb 3-1: Using ep0 maxpacket: 32
[ 1848.265960][   T25] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1848.293740][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.307548][   T25] usb 3-1: config 0 descriptor??
[ 1848.317978][   T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1848.422310][T14778] team0: Port device team_slave_0 added
[ 1848.441726][T14778] team0: Port device team_slave_1 added
[ 1848.653339][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1848.660323][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1848.699247][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1848.753192][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1848.760227][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1848.790283][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1848.973922][T14778] hsr_slave_0: entered promiscuous mode
[ 1848.985326][T14778] hsr_slave_1: entered promiscuous mode
[ 1849.002809][T14778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1849.010493][T14778] Cannot create hsr debugfs directory
[ 1849.140577][   T25] gspca_vc032x: reg_w err -71
[ 1849.182872][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.213197][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.218554][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.237913][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.246793][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.252333][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.258263][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.280534][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.313661][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.319033][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.342053][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.349095][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.354800][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.360117][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.366285][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.371710][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.377569][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.383112][   T25] gspca_vc032x: I2c Bus Busy Wait 00
[ 1849.388417][   T25] gspca_vc032x: Unknown sensor...
[ 1849.399339][   T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1849.419990][   T25] usb 3-1: USB disconnect, device number 90
[ 1849.439303][T14881] chnl_net:caif_netlink_parms(): no params data found
[ 1849.533282][ T9006] Bluetooth: hci2: command tx timeout
[ 1849.538737][ T9006] Bluetooth: hci1: command tx timeout
[ 1849.601779][T14719] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1849.662405][T14719] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1849.690654][T14719] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1849.700551][T14719] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1849.813597][T14881] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1849.820736][T14881] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1849.850394][T14881] bridge_slave_0: entered allmulticast mode
[ 1849.862841][T14881] bridge_slave_0: entered promiscuous mode
[ 1849.879968][T14881] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1849.887301][T14881] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1849.895671][T14881] bridge_slave_1: entered allmulticast mode
[ 1849.903638][T14881] bridge_slave_1: entered promiscuous mode
[ 1850.014873][ T9006] Bluetooth: hci4: command tx timeout
[ 1850.027257][T14881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1850.045442][T14881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1850.214203][T14881] team0: Port device team_slave_0 added
[ 1850.260837][T14881] team0: Port device team_slave_1 added
[ 1850.339505][T19514] bridge_slave_1: left allmulticast mode
[ 1850.360377][T19514] bridge_slave_1: left promiscuous mode
[ 1850.375455][T19514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.423847][T19514] bridge_slave_0: left allmulticast mode
[ 1850.443514][T19514] bridge_slave_0: left promiscuous mode
[ 1850.449295][T19514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.515470][T19514] bridge_slave_1: left allmulticast mode
[ 1850.521165][T19514] bridge_slave_1: left promiscuous mode
[ 1850.560345][T19514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.593285][T19514] bridge_slave_0: left allmulticast mode
[ 1850.598980][T19514] bridge_slave_0: left promiscuous mode
[ 1850.614629][T19514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.858829][T14952] input: syz0 as /devices/virtual/input/input151
[ 1851.543294][T19514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.553454][T19514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.563029][T19514] bond0 (unregistering): Released all slaves
[ 1851.620339][ T9006] Bluetooth: hci1: command tx timeout
[ 1851.756956][T19514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.767327][T19514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.779010][T19514] bond0 (unregistering): Released all slaves
[ 1851.805985][T14881] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1851.813886][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1851.848578][T14881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1852.015558][T14881] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1852.022548][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1852.112696][ T9006] Bluetooth: hci4: command tx timeout
[ 1852.116402][T14881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1852.230667][T14719] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1852.263538][T14719] 8021q: adding VLAN 0 to HW filter on device team0
[ 1852.448723][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1852.455903][T10561] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1852.575611][T10561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1852.582801][T10561] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1852.637080][T14881] hsr_slave_0: entered promiscuous mode
[ 1852.654647][T14881] hsr_slave_1: entered promiscuous mode
[ 1852.663393][T14881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1852.670998][T14881] Cannot create hsr debugfs directory
[ 1852.878923][T14997] input: syz0 as /devices/virtual/input/input152
[ 1853.039982][T19514] hsr_slave_0: left promiscuous mode
[ 1853.050039][T19514] hsr_slave_1: left promiscuous mode
[ 1853.062292][T19514] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1853.086463][T19514] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1853.104545][T19514] hsr_slave_0: left promiscuous mode
[ 1853.123215][T19514] hsr_slave_1: left promiscuous mode
[ 1853.129645][T19514] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1853.141018][T19514] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1853.381242][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.393347][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.845305][T19514] team0 (unregistering): Port device team_slave_1 removed
[ 1853.987000][T19514] team0 (unregistering): Port device team_slave_0 removed
[ 1854.184691][ T9006] Bluetooth: hci4: command tx timeout
[ 1855.121484][T19514] team0 (unregistering): Port device team_slave_1 removed
[ 1855.177764][T19514] team0 (unregistering): Port device team_slave_0 removed
[ 1855.866721][T14778] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1855.903302][T14778] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1855.930778][T14778] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1856.127452][T14778] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1856.253627][ T9006] Bluetooth: hci4: command tx timeout
[ 1856.308568][T14719] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1856.488489][T14719] veth0_vlan: entered promiscuous mode
[ 1856.622311][T22317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1856.632162][T22317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1856.640533][T22317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1856.662293][T22317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1856.681451][T22317] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1856.688970][T22317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1856.795031][T14719] veth1_vlan: entered promiscuous mode
[ 1857.033466][T14719] veth0_macvtap: entered promiscuous mode
[ 1857.067506][T14719] veth1_macvtap: entered promiscuous mode
[ 1857.101151][T14778] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1857.115788][T14881] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1857.183175][T14881] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1857.230817][T14778] 8021q: adding VLAN 0 to HW filter on device team0
[ 1857.244786][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1857.262993][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1857.283918][T14719] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1857.341488][T14881] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1857.351950][T14881] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1857.386682][T19513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1857.393841][T19513] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1857.416864][T19513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1857.424022][T19513] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1857.547835][T14719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1857.558527][T14719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1857.570347][T14719] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1857.682225][T14719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.701314][T14719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.711008][T14719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.720804][T14719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.762822][T15040] chnl_net:caif_netlink_parms(): no params data found
[ 1858.067804][T15040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1858.075139][T15040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1858.082331][T15040] bridge_slave_0: entered allmulticast mode
[ 1858.089544][T15040] bridge_slave_0: entered promiscuous mode
[ 1858.100964][T15040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1858.108169][T15040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1858.115528][T15040] bridge_slave_1: entered allmulticast mode
[ 1858.122428][T15040] bridge_slave_1: entered promiscuous mode
[ 1858.147575][T19514] bridge_slave_1: left allmulticast mode
[ 1858.153505][T19514] bridge_slave_1: left promiscuous mode
[ 1858.159217][T19514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1858.167624][T19514] bridge_slave_0: left allmulticast mode
[ 1858.174759][T19514] bridge_slave_0: left promiscuous mode
[ 1858.180427][T19514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1858.567339][T19514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1858.579227][T19514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1858.589118][T19514] bond0 (unregistering): Released all slaves
[ 1858.677601][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1858.720536][T14881] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1858.738417][T22317] Bluetooth: hci3: command tx timeout
[ 1858.760488][T14778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1858.780046][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1858.831755][T19513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1858.846245][T19513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1858.954605][T15040] team0: Port device team_slave_0 added
[ 1859.038062][T15040] team0: Port device team_slave_1 added
[ 1859.131124][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1859.155481][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1859.206138][T14881] 8021q: adding VLAN 0 to HW filter on device team0
[ 1859.241027][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1859.251907][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1859.281101][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1859.338327][T19514] hsr_slave_0: left promiscuous mode
[ 1859.357160][T19514] hsr_slave_1: left promiscuous mode
[ 1859.377022][T19514] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1859.392965][T19514] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1860.078055][T19514] team0 (unregistering): Port device team_slave_1 removed
[ 1860.142962][T19514] team0 (unregistering): Port device team_slave_0 removed
[ 1860.706982][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1860.717563][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1860.748270][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1860.764523][T15119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1860.771762][T15119] IPv6: NLM_F_CREATE should be set when creating new route
[ 1860.781347][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1860.788466][T10561] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1860.798928][T10561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1860.806091][T10561] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1860.812829][T22317] Bluetooth: hci3: command tx timeout
[ 1860.822458][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11490'.
[ 1860.976624][T15040] hsr_slave_0: entered promiscuous mode
[ 1861.007670][T15040] hsr_slave_1: entered promiscuous mode
[ 1861.027330][T15040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1861.058393][T15040] Cannot create hsr debugfs directory
[ 1861.096395][T15127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1861.107210][T15131] netlink: 'syz.2.11493': attribute type 29 has an invalid length.
[ 1861.132349][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11492'.
[ 1861.234535][T15131] netlink: 'syz.2.11493': attribute type 29 has an invalid length.
[ 1861.275021][T15134] netlink: 'syz.2.11493': attribute type 29 has an invalid length.
[ 1861.296202][T14778] veth0_vlan: entered promiscuous mode
[ 1861.338153][T15141] netlink: 'syz.1.11494': attribute type 30 has an invalid length.
[ 1861.479501][T14778] veth1_vlan: entered promiscuous mode
[ 1861.509839][T15149] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1861.637145][T15153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1861.704578][T14778] veth0_macvtap: entered promiscuous mode
[ 1861.726273][T14881] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1861.762875][T14778] veth1_macvtap: entered promiscuous mode
[ 1861.927862][T15163] netlink: 'syz.1.11502': attribute type 30 has an invalid length.
[ 1861.974237][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1861.997096][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.022388][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.040486][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.064256][T14778] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1862.092458][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1862.122729][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.126857][T15176] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1862.142776][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1862.156511][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.167705][T14778] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1862.201153][T14778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.210441][T14778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.221105][T14778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.242692][T14778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1862.301026][T14881] veth0_vlan: entered promiscuous mode
[ 1862.390257][T14881] veth1_vlan: entered promiscuous mode
[ 1862.427079][T15040] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1862.455470][T15040] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1862.478612][T15040] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1862.490641][T15040] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1862.603543][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.640381][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1862.665954][T14881] veth0_macvtap: entered promiscuous mode
[ 1862.721343][T14881] veth1_macvtap: entered promiscuous mode
[ 1862.741498][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11509'.
[ 1862.769940][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.780354][T15040] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1862.793285][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1862.829148][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.853499][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.871955][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.902794][T22317] Bluetooth: hci3: command tx timeout
[ 1862.916516][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.953406][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1863.000674][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.049553][T14881] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1863.096035][T15040] 8021q: adding VLAN 0 to HW filter on device team0
[ 1863.121763][T19514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1863.128935][T19514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1863.159034][T19514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1863.166242][T19514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1863.188170][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.205499][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.227724][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.239614][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.262734][T14881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.293519][T14881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.310155][T14881] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1863.403201][T14881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.411946][T14881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.446903][T14881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.478599][T14881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.707729][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1863.767031][T10561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1863.804594][T10561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1863.881005][T15247] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[ 1863.981169][T19513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.008978][T15040] veth0_vlan: entered promiscuous mode
[ 1864.042646][T19513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.062766][T15040] veth1_vlan: entered promiscuous mode
[ 1864.157052][T15040] veth0_macvtap: entered promiscuous mode
[ 1864.167570][T15040] veth1_macvtap: entered promiscuous mode
[ 1864.206244][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1864.217569][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.228704][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1864.253509][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.289490][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1864.349040][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.379116][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1864.402653][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.424028][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1864.444260][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1864.467072][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.492894][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1864.512668][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.522524][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1864.552698][ T5298] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1864.552756][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.582877][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1864.594304][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1864.624633][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1864.658142][T15040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.703143][T15040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.723357][ T5298] usb 3-1: Using ep0 maxpacket: 32
[ 1864.723497][T15040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.742853][ T5298] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1864.762684][T15040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1864.769254][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.806616][ T5298] usb 3-1: config 0 descriptor??
[ 1864.836957][ T5298] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1864.952532][T19513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.973472][T22317] Bluetooth: hci3: command tx timeout
[ 1864.977496][T19513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1865.019304][T10561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1865.048850][T10561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1865.563387][T15309] netlink: 'syz.1.11546': attribute type 10 has an invalid length.
[ 1865.636937][ T5298] gspca_vc032x: reg_w err -71
[ 1865.641676][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.665012][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.677340][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.698950][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.706115][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.711538][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.720761][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.726581][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.732013][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.739104][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.744815][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.750196][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.756013][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.761447][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.787196][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.792528][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.812285][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.819522][ T5298] gspca_vc032x: I2c Bus Busy Wait 00
[ 1865.837274][ T5298] gspca_vc032x: Unknown sensor...
[ 1865.848562][ T5298] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[ 1865.895261][ T5298] usb 3-1: USB disconnect, device number 91
[ 1866.746484][T10561] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1867.101520][T10561] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1867.123882][T15356] input: syz0 as /devices/virtual/input/input153
[ 1867.212489][ T9006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1867.223785][ T9006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1867.231985][ T9006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1867.239964][ T5281] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1867.255545][ T9006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1867.283498][ T9006] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1867.301819][ T9006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1867.350757][T10561] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1867.442751][ T5281] usb 5-1: Using ep0 maxpacket: 32
[ 1867.450082][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1867.466924][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1867.478105][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1867.493622][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1867.515584][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1867.534069][T10561] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1867.546276][ T5281] usb 5-1: config 0 descriptor??
[ 1867.864681][T15368] chnl_net:caif_netlink_parms(): no params data found
[ 1867.900533][T10561] bridge_slave_1: left allmulticast mode
[ 1867.922160][T10561] bridge_slave_1: left promiscuous mode
[ 1867.944392][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1867.980541][ T5281] usbhid 5-1:0.0: can't add hid device: -71
[ 1867.997436][T10561] bridge_slave_0: left allmulticast mode
[ 1868.011573][ T5281] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1868.022529][T10561] bridge_slave_0: left promiscuous mode
[ 1868.029101][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1868.057139][ T5281] usb 5-1: USB disconnect, device number 21
[ 1868.089063][T15390] fuse: Invalid rootmode
[ 1869.037002][T15420] input: syz0 as /devices/virtual/input/input154
[ 1869.171927][T10561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1869.183447][T10561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1869.195056][T10561] bond0 (unregistering): Released all slaves
[ 1869.378947][ T9006] Bluetooth: hci3: command tx timeout
[ 1869.509608][T15434] netlink: zone id is out of range
[ 1869.517325][T15434] netlink: set zone limit has 8 unknown bytes
[ 1869.538243][T15437] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1869.550030][T15368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1869.572745][T15368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1869.579972][T15368] bridge_slave_0: entered allmulticast mode
[ 1869.599069][T15368] bridge_slave_0: entered promiscuous mode
[ 1869.642811][T15368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1869.650013][T15368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1869.674123][T15368] bridge_slave_1: entered allmulticast mode
[ 1869.704494][T15368] bridge_slave_1: entered promiscuous mode
[ 1869.985355][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1870.046408][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1870.173945][T10561] hsr_slave_0: left promiscuous mode
[ 1870.223009][T10561] hsr_slave_1: left promiscuous mode
[ 1870.300305][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1870.326659][T10561] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1870.355888][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1870.377280][T10561] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1870.454475][T10561] veth1_macvtap: left promiscuous mode
[ 1870.460035][T10561] veth0_macvtap: left promiscuous mode
[ 1870.486597][T10561] veth1_vlan: left promiscuous mode
[ 1870.506171][T10561] veth0_vlan: left promiscuous mode
[ 1871.470603][ T9006] Bluetooth: hci3: command tx timeout
[ 1871.769257][T15519] netlink: 'syz.2.11619': attribute type 11 has an invalid length.
[ 1872.095600][T10561] team0 (unregistering): Port device team_slave_1 removed
[ 1872.219002][T10561] team0 (unregistering): Port device team_slave_0 removed
[ 1873.396690][T15368] team0: Port device team_slave_0 added
[ 1873.408118][T15368] team0: Port device team_slave_1 added
[ 1873.532807][ T9006] Bluetooth: hci3: command tx timeout
[ 1873.547948][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1873.580040][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1873.710350][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1873.759516][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1873.808412][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1873.886347][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1873.938351][T15567] netlink: 'syz.2.11636': attribute type 4 has an invalid length.
[ 1873.997277][T15565] netlink: 'syz.2.11636': attribute type 4 has an invalid length.
[ 1874.396544][T15368] hsr_slave_0: entered promiscuous mode
[ 1874.437322][T15368] hsr_slave_1: entered promiscuous mode
[ 1874.461620][T15368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1874.479309][T15368] Cannot create hsr debugfs directory
[ 1874.674009][T15589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11641'.
[ 1875.110705][T15610] syz_tun: left allmulticast mode
[ 1875.123995][T15610] syz_tun: left promiscuous mode
[ 1875.149530][T15610] bridge0: port 3(syz_tun) entered disabled state
[ 1875.187015][T15610] bridge_slave_0: left allmulticast mode
[ 1875.220927][T15610] bridge_slave_0: left promiscuous mode
[ 1875.231252][T15610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1875.254067][T15610] bridge_slave_1: left allmulticast mode
[ 1875.261302][T15610] bridge_slave_1: left promiscuous mode
[ 1875.285046][T15610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1875.305884][T15610] bond0: (slave bond_slave_0): Releasing backup interface
[ 1875.330394][T15610] bond0: (slave bond_slave_1): Releasing backup interface
[ 1875.429680][T15610] team0: Port device team_slave_0 removed
[ 1875.462258][T15610] team0: Port device team_slave_1 removed
[ 1875.479004][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1875.499928][T15610] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1875.519324][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1875.552799][T15610] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1875.612753][ T9006] Bluetooth: hci3: command tx timeout
[ 1876.369679][T15368] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1876.390541][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1876.417346][T15368] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1876.465629][T15368] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1876.497113][T15368] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1876.515508][T15671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11663'.
[ 1876.661838][T15368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1876.709876][T15368] 8021q: adding VLAN 0 to HW filter on device team0
[ 1876.741965][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1876.749158][ T2549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1876.787441][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1876.794601][ T2549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1876.854348][T15368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1876.864961][T15368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1876.894207][T15368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1876.925995][T15368] veth0_vlan: entered promiscuous mode
[ 1876.940834][T15368] veth1_vlan: entered promiscuous mode
[ 1877.020394][T15368] veth0_macvtap: entered promiscuous mode
[ 1877.038803][T15368] veth1_macvtap: entered promiscuous mode
[ 1877.054595][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1877.065491][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.075633][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1877.086234][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.096144][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1877.107181][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.118720][T15368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1877.129232][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1877.140023][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.150463][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1877.161177][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.171312][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1877.182180][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1877.193818][T15368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1877.232012][T15368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1877.244446][T15368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1877.254305][T15368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1877.266756][T15368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1877.460087][T19514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1877.487454][T19514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1877.637437][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1877.666242][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1877.846182][T15723] fuse: Unknown parameter 'grou00000000000000000000'
[ 1878.402911][   T29] kauditd_printk_skb: 30 callbacks suppressed
[ 1878.402929][   T29] audit: type=1326 audit(1727455188.142:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1878.562723][   T29] audit: type=1326 audit(1727455188.142:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1878.666908][   T29] audit: type=1326 audit(1727455188.142:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1878.750811][   T29] audit: type=1326 audit(1727455188.142:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1878.806874][T15767] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11688'.
[ 1878.842067][   T29] audit: type=1326 audit(1727455188.142:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1878.939249][   T29] audit: type=1326 audit(1727455188.142:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1879.018462][   T29] audit: type=1326 audit(1727455188.142:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1879.087364][   T29] audit: type=1326 audit(1727455188.142:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1879.144103][   T29] audit: type=1326 audit(1727455188.142:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1879.177907][   T29] audit: type=1326 audit(1727455188.142:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.3.11685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1879.385275][T15804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1880.005432][T15851] netlink: 'syz.2.11713': attribute type 8 has an invalid length.
[ 1881.042172][T15899] syz.4.11726 (15899): drop_caches: 2
[ 1881.244388][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1881.304968][T22317] Bluetooth: hci3: command 0x0405 tx timeout
[ 1881.589031][T15944] bond_slave_0: entered promiscuous mode
[ 1881.594801][T15944] bond_slave_1: entered promiscuous mode
[ 1881.602387][T15944] macvlan2: entered promiscuous mode
[ 1881.609235][T15944] bond0: entered promiscuous mode
[ 1881.615670][T15944] macvlan2: entered allmulticast mode
[ 1881.621326][T15944] bond0: entered allmulticast mode
[ 1881.627140][T15944] bond_slave_0: entered allmulticast mode
[ 1881.633298][T15944] bond_slave_1: entered allmulticast mode
[ 1881.657942][T15944] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1881.855594][T15957] netlink: 'syz.1.11752': attribute type 8 has an invalid length.
[ 1881.879101][ T5281] IPVS: starting estimator thread 0...
[ 1881.900032][T15955] syz.0.11753 (15955): drop_caches: 2
[ 1881.992731][T15960] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1882.045136][T15970] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1882.212913][ T5298] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1882.235768][T15976] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11761'.
[ 1882.366693][T13617] IPVS: starting estimator thread 0...
[ 1882.373032][ T5298] usb 2-1: Using ep0 maxpacket: 8
[ 1882.387291][ T5298] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1882.401398][ T5298] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1882.444188][ T5298] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1882.471161][ T5298] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1882.482307][ T5298] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1882.492350][T15988] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1882.500881][ T5298] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1882.514093][ T9819] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1882.523315][ T5298] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1882.541945][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.583295][ T5298] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[ 1882.617597][T15992] syz.3.11767 (15992): drop_caches: 2
[ 1882.672745][ T9819] usb 3-1: Using ep0 maxpacket: 16
[ 1882.699152][ T9819] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24
[ 1882.722997][ T9819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1882.731042][ T9819] usb 3-1: Product: syz
[ 1882.754897][ T9819] usb 3-1: Manufacturer: syz
[ 1882.759635][ T9819] usb 3-1: SerialNumber: syz
[ 1882.771592][ T9819] usb 3-1: config 0 descriptor??
[ 1882.782516][ T9819] gspca_main: conex-2.14.0 probing 0572:0041
[ 1882.919504][T16009] bridge_slave_0: default FDB implementation only supports local addresses
[ 1883.078397][ T9819] usb 3-1: USB disconnect, device number 92
[ 1883.291055][T16024] tipc: Started in network mode
[ 1883.296718][T16024] tipc: Node identity ac1414bb, cluster identity 4711
[ 1883.304134][T16024] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1883.467755][T16033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11784'.
[ 1883.844599][T16054] tipc: Started in network mode
[ 1883.850585][T16054] tipc: Node identity ac1414bb, cluster identity 4711
[ 1883.858283][T16054] tipc: New replicast peer: 172.30.1.4
[ 1883.865505][T16054] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1884.076918][T16064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11795'.
[ 1884.098396][T16068] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1884.303272][ T5281] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1884.445572][T16086] bridge_slave_0: default FDB implementation only supports local addresses
[ 1884.454460][ T5281] usb 3-1: device descriptor read/64, error -71
[ 1884.526189][T16090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11809'.
[ 1884.566942][T16092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11810'.
[ 1884.573362][T26087] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1884.617520][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11811'.
[ 1884.692723][ T5281] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1884.745388][T26087] usb 4-1: Using ep0 maxpacket: 8
[ 1884.756170][T26087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1884.774338][T16101] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11814'.
[ 1884.775050][T26087] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1884.789648][T16101] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[ 1884.795387][T26087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1884.809904][T26087] usb 4-1: Product: syz
[ 1884.815139][T26087] usb 4-1: Manufacturer: syz
[ 1884.820020][T26087] usb 4-1: SerialNumber: syz
[ 1884.824809][ T5281] usb 3-1: device descriptor read/64, error -71
[ 1884.833754][T26087] usb 4-1: config 0 descriptor??
[ 1884.858313][T26087] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1884.943036][ T5281] usb usb3-port1: attempt power cycle
[ 1884.957808][T16107] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11817'.
[ 1884.968120][T16107] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1884.981612][ T5298] usb 2-1: USB disconnect, device number 16
[ 1884.999756][T13617] tipc: Node number set to 2886997179
[ 1885.209370][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11821'.
[ 1885.302920][ T5281] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1885.338457][ T5281] usb 3-1: device descriptor read/8, error -71
[ 1885.592821][ T5281] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1885.613609][ T5281] usb 3-1: device descriptor read/8, error -71
[ 1885.713110][T13617] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1885.723729][ T5281] usb usb3-port1: unable to enumerate USB device
[ 1885.875361][T13617] usb 2-1: Using ep0 maxpacket: 32
[ 1885.885801][T13617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1885.910789][T13617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1885.921379][T13617] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1885.934704][ T5298] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1885.943239][T13617] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1885.954517][T13617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1885.973377][T13617] usb 2-1: config 0 descriptor??
[ 1886.102753][ T5298] usb 5-1: Using ep0 maxpacket: 8
[ 1886.125441][ T5298] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1886.147890][ T5298] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1886.172776][ T5298] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1886.195080][ T5298] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1886.217945][T26087] usb 4-1: USB disconnect, device number 108
[ 1886.223285][ T5298] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1886.235226][ T5298] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1886.248333][ T5298] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1886.257729][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1886.332353][ T5298] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[ 1886.525304][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11833'.
[ 1886.591976][T13617] usbhid 2-1:0.0: can't add hid device: -71
[ 1886.598473][T13617] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1886.621833][T13617] usb 2-1: USB disconnect, device number 17
[ 1887.039110][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1887.152757][T13617] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1887.313464][T13617] usb 4-1: Using ep0 maxpacket: 8
[ 1887.335920][T13617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1887.366617][T13617] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1887.389261][T13617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1887.420495][T13617] usb 4-1: Product: syz
[ 1887.426022][T13617] usb 4-1: Manufacturer: syz
[ 1887.430987][T13617] usb 4-1: SerialNumber: syz
[ 1887.451812][T13617] usb 4-1: config 0 descriptor??
[ 1887.467358][T13617] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1887.806769][T16201] __nla_validate_parse: 2 callbacks suppressed
[ 1887.806782][T16201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11860'.
[ 1887.832874][ T5281] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1887.992927][ T5281] usb 3-1: Using ep0 maxpacket: 32
[ 1888.008633][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1888.030708][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1888.047487][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1888.060697][ T5281] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1888.070052][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1888.089268][ T5281] usb 3-1: config 0 descriptor??
[ 1888.547762][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0072/input/input155
[ 1888.608990][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11871'.
[ 1888.632157][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0072/input/input156
[ 1888.728226][T13617] usb 5-1: USB disconnect, device number 22
[ 1888.768092][ T5281] kye 0003:0458:5011.0072: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1889.022817][ T5281] usb 3-1: USB disconnect, device number 97
[ 1889.120718][T26087] usb 4-1: USB disconnect, device number 109
[ 1889.921188][T16274] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11893'.
[ 1889.950538][T16274] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1889.992779][ T5298] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1890.152983][ T5298] usb 4-1: Using ep0 maxpacket: 8
[ 1890.159521][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1890.171884][ T5298] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1890.184177][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1890.193307][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11897'.
[ 1890.212744][ T5298] usb 4-1: Product: syz
[ 1890.219073][ T5298] usb 4-1: Manufacturer: syz
[ 1890.240945][ T5298] usb 4-1: SerialNumber: syz
[ 1890.262949][ T5298] usb 4-1: config 0 descriptor??
[ 1890.279499][ T5298] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1890.292746][T13617] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1890.614482][T13617] usb 3-1: Using ep0 maxpacket: 32
[ 1890.686411][T13617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1890.697425][T13617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1890.707269][T13617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1890.720503][T13617] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1890.730073][T13617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1890.752819][ T5281] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1890.760307][T13617] usb 3-1: config 0 descriptor??
[ 1890.922702][ T5281] usb 5-1: Using ep0 maxpacket: 32
[ 1890.948696][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1890.999749][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1891.052962][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1891.109154][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1891.159549][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1891.213598][ T5281] usb 5-1: config 0 descriptor??
[ 1891.450146][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1891.596173][T13617] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0073/input/input157
[ 1891.628896][ T5281] hid (null): invalid report_size 28520
[ 1891.779511][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0074/input/input159
[ 1891.814279][T13617] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0073/input/input158
[ 1891.843628][ T5281] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0074/input/input160
[ 1892.130054][T13617] kye 0003:0458:5011.0073: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1892.130823][ T5281] kye 0003:0458:5011.0074: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1892.312970][T13617] usb 3-1: USB disconnect, device number 98
[ 1892.420773][ T5281] usb 5-1: USB disconnect, device number 23
[ 1892.749328][ T5281] usb 4-1: USB disconnect, device number 110
[ 1892.948756][T16324] fuse: Bad value for 'fd'
[ 1893.100974][T16331] input: syz0 as /devices/virtual/input/input161
[ 1893.402221][T16341] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1893.662819][T13617] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1893.842798][T13617] usb 3-1: device descriptor read/64, error -71
[ 1893.874347][   T29] kauditd_printk_skb: 60 callbacks suppressed
[ 1893.874361][   T29] audit: type=1326 audit(1727455203.612:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1893.902996][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1893.952173][   T29] audit: type=1326 audit(1727455203.642:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1893.962676][T18957] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1894.032745][   T29] audit: type=1326 audit(1727455203.652:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1894.089578][   T29] audit: type=1326 audit(1727455203.652:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1894.113281][   T29] audit: type=1326 audit(1727455203.652:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1894.142840][T18957] usb 4-1: Using ep0 maxpacket: 8
[ 1894.145582][T13617] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1894.149907][T18957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1894.157904][   T29] audit: type=1326 audit(1727455203.662:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe915b7c8d0 code=0x7ffc0000
[ 1894.174837][T18957] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1894.194679][T16357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11924'.
[ 1894.216006][T18957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1894.222715][   T29] audit: type=1326 audit(1727455203.662:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe915b7db3b code=0x7ffc0000
[ 1894.228999][T18957] usb 4-1: Product: syz
[ 1894.257954][T18957] usb 4-1: Manufacturer: syz
[ 1894.264871][T18957] usb 4-1: SerialNumber: syz
[ 1894.285229][T18957] usb 4-1: config 0 descriptor??
[ 1894.287194][   T29] audit: type=1326 audit(1727455203.662:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe915b7db3b code=0x7ffc0000
[ 1894.298281][T18957] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1894.342684][T13617] usb 3-1: device descriptor read/64, error -71
[ 1894.355471][   T29] audit: type=1326 audit(1727455203.662:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe915b7db3b code=0x7ffc0000
[ 1894.379881][   T29] audit: type=1326 audit(1727455203.662:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16350 comm="syz.0.11921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe915b7db3b code=0x7ffc0000
[ 1894.464932][T13617] usb usb3-port1: attempt power cycle
[ 1894.812909][T13617] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1894.856917][T13617] usb 3-1: device descriptor read/8, error -71
[ 1895.113420][T13617] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1895.155830][T13617] usb 3-1: device descriptor read/8, error -71
[ 1895.273388][T13617] usb usb3-port1: unable to enumerate USB device
[ 1895.992788][ T5281] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1896.154512][ T5281] usb 2-1: Using ep0 maxpacket: 8
[ 1896.170827][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1896.190789][ T5281] usb 2-1: config 0 has no interfaces?
[ 1896.204861][ T5281] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1896.222943][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.235640][ T5281] usb 2-1: Product: syz
[ 1896.239848][ T5281] usb 2-1: Manufacturer: syz
[ 1896.254842][ T5281] usb 2-1: SerialNumber: syz
[ 1896.271135][ T5281] usb 2-1: config 0 descriptor??
[ 1896.487886][T13617] usb 2-1: USB disconnect, device number 18
[ 1896.566531][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11952'.
[ 1896.716427][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1896.759464][ T9819] usb 4-1: USB disconnect, device number 111
[ 1896.822875][ T5281] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1896.883599][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1897.002813][ T5281] usb 3-1: Using ep0 maxpacket: 16
[ 1897.043057][ T5281] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1897.051121][ T5281] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1897.076842][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1897.092903][ T5281] usb 3-1: config 0 has no interface number 0
[ 1897.099065][ T5281] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1897.133965][ T5281] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1897.154633][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1897.167345][ T5281] usb 3-1: Product: syz
[ 1897.176383][ T5281] usb 3-1: SerialNumber: syz
[ 1897.192948][ T9819] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1897.198473][ T5281] usb 3-1: config 0 descriptor??
[ 1897.235828][ T5281] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[ 1897.255925][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1897.286260][T22317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1897.302398][T22317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1897.313893][T22317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1897.324002][T22317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1897.333286][T22317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1897.342040][T22317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1897.352832][ T9819] usb 4-1: device descriptor read/64, error -71
[ 1897.511248][   T11] bridge_slave_1: left allmulticast mode
[ 1897.523218][   T11] bridge_slave_1: left promiscuous mode
[ 1897.529040][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1897.547038][   T11] bridge_slave_0: left allmulticast mode
[ 1897.605304][   T11] bridge_slave_0: left promiscuous mode
[ 1897.629852][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1897.663037][ T9819] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1897.803431][ T9819] usb 4-1: device descriptor read/64, error -71
[ 1897.878725][T14327] usb 3-1: USB disconnect, device number 103
[ 1897.973193][ T9819] usb usb4-port1: attempt power cycle
[ 1898.290361][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1898.304348][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1898.314677][ T9819] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1898.325706][   T11] bond0 (unregistering): Released all slaves
[ 1898.355936][ T9819] usb 4-1: device descriptor read/8, error -71
[ 1898.605744][   T11] tipc: Left network mode
[ 1898.622821][ T9819] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1898.643201][ T9819] usb 4-1: device descriptor read/8, error -71
[ 1898.723154][T16444] chnl_net:caif_netlink_parms(): no params data found
[ 1898.770017][ T9819] usb usb4-port1: unable to enumerate USB device
[ 1899.453025][T22317] Bluetooth: hci1: command tx timeout
[ 1899.484597][T16444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1899.493193][T16444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1899.500964][T16444] bridge_slave_0: entered allmulticast mode
[ 1899.509011][T16444] bridge_slave_0: entered promiscuous mode
[ 1899.522419][T16444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1899.529984][T16444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1899.537869][T16444] bridge_slave_1: entered allmulticast mode
[ 1899.545343][T16444] bridge_slave_1: entered promiscuous mode
[ 1899.581738][   T11] hsr_slave_0: left promiscuous mode
[ 1899.589070][   T11] hsr_slave_1: left promiscuous mode
[ 1899.603480][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1899.610897][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1899.637387][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1899.652916][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1899.685347][   T11] veth1_macvtap: left promiscuous mode
[ 1899.691077][   T11] veth0_macvtap: left promiscuous mode
[ 1899.698424][   T11] veth1_vlan: left promiscuous mode
[ 1899.705101][   T11] veth0_vlan: left promiscuous mode
[ 1899.976434][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11975'.
[ 1900.354119][ T9819] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1900.532706][ T9819] usb 3-1: Using ep0 maxpacket: 16
[ 1900.558797][ T9819] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1900.578779][ T9819] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1900.635356][ T9819] usb 3-1: config 0 has no interface number 0
[ 1900.648981][ T9819] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1900.806504][ T9819] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1900.829794][ T9819] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1900.863262][ T9819] usb 3-1: Product: syz
[ 1900.867476][ T9819] usb 3-1: SerialNumber: syz
[ 1900.893725][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1900.912877][ T9819] usb 3-1: config 0 descriptor??
[ 1900.920862][ T9819] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[ 1901.109246][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1901.542344][ T9006] Bluetooth: hci1: command tx timeout
[ 1902.295286][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1902.349814][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1902.514387][ T5281] usb 3-1: USB disconnect, device number 104
[ 1902.546819][T16444] team0: Port device team_slave_0 added
[ 1902.585292][T16444] team0: Port device team_slave_1 added
[ 1902.870855][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1902.891365][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1902.917808][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1902.971136][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1902.987431][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1903.020554][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1903.157253][T16444] hsr_slave_0: entered promiscuous mode
[ 1903.178023][T16444] hsr_slave_1: entered promiscuous mode
[ 1903.208184][T16444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1903.238197][T16444] Cannot create hsr debugfs directory
[ 1903.614163][ T9006] Bluetooth: hci1: command tx timeout
[ 1903.856311][   T29] kauditd_printk_skb: 67 callbacks suppressed
[ 1903.856330][   T29] audit: type=1326 audit(1727455213.592:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1903.995358][   T29] audit: type=1326 audit(1727455213.592:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.048859][   T29] audit: type=1326 audit(1727455213.622:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.157926][   T29] audit: type=1326 audit(1727455213.622:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.222049][   T29] audit: type=1326 audit(1727455213.642:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.287139][   T29] audit: type=1326 audit(1727455213.842:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.367718][   T29] audit: type=1326 audit(1727455213.842:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.11999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe915b7df39 code=0x7ffc0000
[ 1904.722464][T16444] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1904.765070][T16444] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1904.788196][T16444] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1904.811096][T16444] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1904.934543][   T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1904.972773][T18957] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1905.023354][T16600] xt_TCPMSS: Only works on TCP SYN packets
[ 1905.107913][   T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1905.146053][T18957] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1905.184852][T18957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1905.213959][T18957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1905.242957][T18957] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1905.276153][T18957] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1905.286559][T18957] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1905.322768][T18957] usb 4-1: Manufacturer: syz
[ 1905.341809][T18957] usb 4-1: config 0 descriptor??
[ 1905.358552][   T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1905.470484][T16444] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1905.631119][   T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1905.693354][ T9006] Bluetooth: hci1: command tx timeout
[ 1905.721189][T16444] 8021q: adding VLAN 0 to HW filter on device team0
[ 1905.793215][T18957] appleir 0003:05AC:8243.0075: unknown main item tag 0x0
[ 1905.805545][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1905.812708][T10561] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1905.824056][T18957] appleir 0003:05AC:8243.0075: No inputs registered, leaving
[ 1905.844020][T22317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1905.848896][T18957] appleir 0003:05AC:8243.0075: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1905.872330][T22317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1905.884176][T22317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1905.894733][T22317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1905.906522][T22317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1905.920179][T22317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1906.000397][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1906.007572][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1906.060130][T14327] usb 4-1: USB disconnect, device number 116
[ 1906.244147][   T61] bridge_slave_1: left allmulticast mode
[ 1906.249843][   T61] bridge_slave_1: left promiscuous mode
[ 1906.280185][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1906.305045][   T61] bridge_slave_0: left allmulticast mode
[ 1906.333161][   T61] bridge_slave_0: left promiscuous mode
[ 1906.338909][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1907.157026][   T29] audit: type=1326 audit(1727455216.892:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.3.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1907.205733][   T29] audit: type=1326 audit(1727455216.892:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.3.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1907.283599][   T29] audit: type=1326 audit(1727455216.892:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.3.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1907.688651][T16658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1907.743473][T18957] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1907.800123][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1907.830864][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1907.853878][   T61] bond0 (unregistering): Released all slaves
[ 1907.925436][T18957] usb 3-1: config 0 has no interfaces?
[ 1907.930976][T18957] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1907.984032][T18957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1907.995570][T18957] usb 3-1: config 0 descriptor??
[ 1908.013635][ T9006] Bluetooth: hci4: command tx timeout
[ 1908.092425][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1908.284011][ T5281] usb 3-1: USB disconnect, device number 105
[ 1908.365877][   T61] hsr_slave_0: left promiscuous mode
[ 1908.376831][   T61] hsr_slave_1: left promiscuous mode
[ 1908.386328][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1908.406377][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1908.420144][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1908.442873][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1908.488113][   T61] veth1_macvtap: left promiscuous mode
[ 1908.497667][   T61] veth0_macvtap: left promiscuous mode
[ 1908.506466][   T61] veth1_vlan: left promiscuous mode
[ 1908.511815][   T61] veth0_vlan: left promiscuous mode
[ 1909.489886][   T61] team0 (unregistering): Port device team_slave_1 removed
[ 1909.572842][   T61] team0 (unregistering): Port device team_slave_0 removed
[ 1909.765732][T16704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1910.104339][T22317] Bluetooth: hci4: command tx timeout
[ 1910.229658][T16613] chnl_net:caif_netlink_parms(): no params data found
[ 1910.248362][T16444] veth0_vlan: entered promiscuous mode
[ 1910.333842][T16444] veth1_vlan: entered promiscuous mode
[ 1910.591655][T16444] veth0_macvtap: entered promiscuous mode
[ 1910.601481][T16444] veth1_macvtap: entered promiscuous mode
[ 1910.616142][T16444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1910.626746][T16444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1910.636672][T16444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1910.647205][T16444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1910.658375][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1910.688297][T16613] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1910.734011][T16613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1910.756609][T16613] bridge_slave_0: entered allmulticast mode
[ 1910.807090][T16613] bridge_slave_0: entered promiscuous mode
[ 1910.844311][T16613] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1910.871757][T16613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1910.908662][T16613] bridge_slave_1: entered allmulticast mode
[ 1910.949170][T16613] bridge_slave_1: entered promiscuous mode
[ 1910.980161][T16444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1910.991602][T16444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1911.036431][T16444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1911.074907][T16444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1911.149113][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1911.307870][T16444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.323211][T16444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.331943][T16444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.362174][T16444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.396734][T16613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1911.481154][T16613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1911.522769][T26087] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1911.604066][T16613] team0: Port device team_slave_0 added
[ 1911.645981][T16613] team0: Port device team_slave_1 added
[ 1911.682825][T26087] usb 3-1: Using ep0 maxpacket: 8
[ 1911.697664][T26087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1911.716997][T26087] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1911.753779][T26087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1911.761899][T26087] usb 3-1: Product: syz
[ 1911.773316][T26087] usb 3-1: Manufacturer: syz
[ 1911.778101][T26087] usb 3-1: SerialNumber: syz
[ 1911.786782][T19514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1911.792450][T16613] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1911.803436][T19514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1911.809222][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1911.840148][T26087] usb 3-1: config 0 descriptor??
[ 1911.854893][T26087] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1911.871847][T16613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1911.917841][T16613] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1911.931831][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1911.967536][T16613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1912.001118][T19514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1912.023214][T19514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1912.067580][T16613] hsr_slave_0: entered promiscuous mode
[ 1912.099403][T16613] hsr_slave_1: entered promiscuous mode
[ 1912.140839][T16613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1912.159288][T16613] Cannot create hsr debugfs directory
[ 1912.173206][T22317] Bluetooth: hci4: command tx timeout
[ 1912.256718][T16764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1913.170665][T16794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12037'.
[ 1913.187492][T16613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1913.220183][T16613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1913.237950][T16613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1913.328814][T16613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1913.482317][T16613] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1913.578534][T16613] 8021q: adding VLAN 0 to HW filter on device team0
[ 1913.821884][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1913.923993][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1913.931136][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1913.980735][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1913.987906][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1914.150837][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1914.268201][T22317] Bluetooth: hci4: command tx timeout
[ 1914.323206][ T9006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1914.343499][ T9006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1914.355993][ T9006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1914.366772][T14327] usb 3-1: USB disconnect, device number 106
[ 1914.383086][T18957] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1914.400025][ T9006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1914.408844][ T9006] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1914.420230][ T9006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1914.476543][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1914.543442][T18957] usb 5-1: Using ep0 maxpacket: 16
[ 1914.554347][T18957] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1914.562519][T18957] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1914.574989][T18957] usb 5-1: config 0 has no interface number 0
[ 1914.581197][T18957] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1914.596527][T16840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1914.626140][T18957] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1914.637049][T18957] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1914.645328][T18957] usb 5-1: Product: syz
[ 1914.649580][T18957] usb 5-1: SerialNumber: syz
[ 1914.685857][T18957] usb 5-1: config 0 descriptor??
[ 1914.694245][T18957] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[ 1914.717673][   T11] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1914.782489][T16613] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1914.814077][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.820572][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.956453][T16613] veth0_vlan: entered promiscuous mode
[ 1914.990701][T16613] veth1_vlan: entered promiscuous mode
[ 1915.109164][T16837] chnl_net:caif_netlink_parms(): no params data found
[ 1915.304574][T26087] usb 5-1: USB disconnect, device number 24
[ 1915.347100][   T11] bridge_slave_1: left allmulticast mode
[ 1915.362109][   T11] bridge_slave_1: left promiscuous mode
[ 1915.368256][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1915.377928][   T11] bridge_slave_0: left allmulticast mode
[ 1915.384307][   T11] bridge_slave_0: left promiscuous mode
[ 1915.390861][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1916.297710][   T29] kauditd_printk_skb: 84 callbacks suppressed
[ 1916.297729][   T29] audit: type=1326 audit(1727455226.032:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.348999][   T29] audit: type=1326 audit(1727455226.072:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.403415][   T29] audit: type=1326 audit(1727455226.072:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.429136][   T29] audit: type=1326 audit(1727455226.072:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.453623][   T29] audit: type=1326 audit(1727455226.072:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.480921][   T29] audit: type=1326 audit(1727455226.072:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.514108][T22317] Bluetooth: hci2: command tx timeout
[ 1916.542658][   T29] audit: type=1326 audit(1727455226.072:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.588352][   T29] audit: type=1326 audit(1727455226.072:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.652620][   T29] audit: type=1326 audit(1727455226.072:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.709050][   T29] audit: type=1326 audit(1727455226.072:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.4.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b0f7df39 code=0x7ffc0000
[ 1916.750652][   T11] bond0 (unregistering): left allmulticast mode
[ 1916.757250][   T11] bond_slave_0: left allmulticast mode
[ 1916.769891][   T11] bond_slave_1: left allmulticast mode
[ 1916.777488][   T11] bond0 (unregistering): left promiscuous mode
[ 1916.790664][   T11] bond_slave_0: left promiscuous mode
[ 1916.798093][   T11] bond_slave_1: left promiscuous mode
[ 1916.846676][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1916.862412][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1916.875684][   T11] bond0 (unregistering): Released all slaves
[ 1916.905064][T16613] veth0_macvtap: entered promiscuous mode
[ 1917.046509][T16613] veth1_macvtap: entered promiscuous mode
[ 1917.129947][T16837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1917.149287][T16837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1917.159469][T16837] bridge_slave_0: entered allmulticast mode
[ 1917.170550][T16837] bridge_slave_0: entered promiscuous mode
[ 1917.186200][T16837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1917.202309][T16837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1917.214843][T16837] bridge_slave_1: entered allmulticast mode
[ 1917.228273][T16837] bridge_slave_1: entered promiscuous mode
[ 1917.265386][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.299172][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.329558][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.360561][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.381420][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.393200][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.409328][T16613] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1917.480482][T16892] fuse: Bad value for 'group_id'
[ 1917.496996][T16892] fuse: Bad value for 'group_id'
[ 1917.637599][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1917.681499][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1917.705226][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.727933][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.745953][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.762179][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.790520][T16613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.807527][T16613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.820440][T16613] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1917.904718][T16613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1917.926759][T16613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1917.938619][T16613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1917.951689][T16613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1918.008782][   T11] hsr_slave_0: left promiscuous mode
[ 1918.023882][   T11] hsr_slave_1: left promiscuous mode
[ 1918.038297][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1918.046143][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1918.063645][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1918.071070][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1918.138543][   T11] veth1_macvtap: left promiscuous mode
[ 1918.152722][   T11] veth0_macvtap: left promiscuous mode
[ 1918.158356][   T11] veth1_vlan: left promiscuous mode
[ 1918.200438][   T11] veth0_vlan: left promiscuous mode
[ 1918.222713][T18957] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1918.410513][T18957] usb 4-1: Using ep0 maxpacket: 8
[ 1918.419403][T18957] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1918.450170][T18957] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1918.465908][T18957] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1918.476098][T18957] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1918.491747][T18957] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1918.520641][T18957] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1918.547415][T18957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1918.580261][T22317] Bluetooth: hci2: command tx timeout
[ 1918.587226][T18957] usbtmc 4-1:16.0: bulk endpoints not found
[ 1918.997532][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1919.058934][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1919.671742][T16837] team0: Port device team_slave_0 added
[ 1919.737941][T16837] team0: Port device team_slave_1 added
[ 1919.868665][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1919.898181][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1919.933786][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1919.952953][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1919.960882][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1920.006327][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1920.042746][   T25] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1920.112103][T16837] hsr_slave_0: entered promiscuous mode
[ 1920.134742][T16837] hsr_slave_1: entered promiscuous mode
[ 1920.141063][T16837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1920.155412][T16837] Cannot create hsr debugfs directory
[ 1920.194287][T19514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1920.218208][T19514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1920.226284][   T25] usb 3-1: Using ep0 maxpacket: 32
[ 1920.247513][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1920.272965][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1920.309318][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1920.330408][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1920.346751][T10561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1920.364896][   T25] usb 3-1: config 0 descriptor??
[ 1920.373765][T10561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1920.398001][   T25] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1920.408005][   T25] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1920.421984][   T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1920.653219][T22317] Bluetooth: hci2: command tx timeout
[ 1920.836360][T16965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12080'.
[ 1921.039488][ T5281] usb 4-1: USB disconnect, device number 117
[ 1921.185915][T16983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1921.218644][T16837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1921.241374][T16837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1921.268626][T16837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1921.289409][T16837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1921.460025][T16837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1921.511275][T16837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1921.539339][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1921.546597][ T2549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1921.583018][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1921.590227][ T2549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1921.629083][T16837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1921.639594][T16837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1921.687705][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1921.756638][T16837] veth0_vlan: entered promiscuous mode
[ 1921.782306][T16837] veth1_vlan: entered promiscuous mode
[ 1921.898714][T16837] veth0_macvtap: entered promiscuous mode
[ 1921.926922][T16837] veth1_macvtap: entered promiscuous mode
[ 1921.965979][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1921.989366][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.024368][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1922.062725][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.091999][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1922.122111][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.147182][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1922.171839][T17012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12092'.
[ 1922.214364][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1922.263907][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.290312][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1922.310358][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.333372][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1922.357667][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.382295][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1922.425109][T16837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.449321][T16837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.472712][T16837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.491728][T16837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1922.733583][T22317] Bluetooth: hci2: command tx timeout
[ 1922.805974][ T2549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1922.820559][ T2549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1922.873177][T26087] usb 3-1: USB disconnect, device number 107
[ 1922.922288][ T2549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1922.942713][ T2549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.173521][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12102'.
[ 1923.293326][T17050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12103'.
[ 1923.867439][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12112'.
[ 1924.943219][T17097] netlink: zone id is out of range
[ 1924.952791][T17097] netlink: set zone limit has 4 unknown bytes
[ 1925.245957][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12124'.
[ 1926.423580][T17131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12132'.
[ 1926.729483][T17140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12135'.
[ 1927.539471][T17162] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0
[ 1927.634104][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12144'.
[ 1927.757368][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12146'.
[ 1927.949461][T17177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12148'.
[ 1927.982713][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12151'.
[ 1928.316076][T17194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12157'.
[ 1928.335648][T17196] xt_TCPMSS: Only works on TCP SYN packets
[ 1928.357067][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12158'.
[ 1928.412836][ T5284] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1928.573581][ T5284] usb 5-1: Using ep0 maxpacket: 32
[ 1928.583948][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1928.602054][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1928.632761][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1928.642297][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1928.665758][ T5284] usb 5-1: config 0 descriptor??
[ 1928.675382][ T5284] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1928.681412][ T5284] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1928.696846][ T5284] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1928.742092][T17212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12164'.
[ 1928.772243][ T5298] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1928.945304][ T5298] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3
[ 1928.969131][ T5298] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1928.993789][ T5298] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[ 1929.008664][ T5298] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0
[ 1929.017383][ T5298] usb 4-1: Manufacturer: syz
[ 1929.112750][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12170'.
[ 1929.267073][ T5298] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[ 1929.307012][ T5298] usb 4-1: USB disconnect, device number 118
[ 1929.827363][T17257] program syz.2.12179 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1929.878536][   T29] kauditd_printk_skb: 11 callbacks suppressed
[ 1929.878556][   T29] audit: type=1326 audit(1727455239.612:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1929.948211][   T29] audit: type=1326 audit(1727455239.612:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.002654][   T29] audit: type=1326 audit(1727455239.672:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.067732][   T29] audit: type=1326 audit(1727455239.672:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.112106][   T29] audit: type=1326 audit(1727455239.672:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.168607][   T29] audit: type=1326 audit(1727455239.672:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.259128][   T29] audit: type=1326 audit(1727455239.672:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.289474][   T29] audit: type=1326 audit(1727455239.672:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.318481][   T29] audit: type=1326 audit(1727455239.672:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.357224][   T29] audit: type=1326 audit(1727455239.672:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17263 comm="syz.3.12181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798317df39 code=0x7ffc0000
[ 1930.633343][T18957] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1930.761831][T17287] xt_TCPMSS: Only works on TCP SYN packets
[ 1930.783115][T18957] usb 3-1: Using ep0 maxpacket: 16
[ 1930.797481][T18957] usb 3-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[ 1930.818074][T18957] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1930.857588][T18957] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[ 1930.878903][T18957] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[ 1930.896294][T18957] usb 3-1: Product: syz
[ 1930.905391][T18957] usb 3-1: Manufacturer: syz
[ 1930.915654][T18957] usb 3-1: SerialNumber: syz
[ 1930.930333][T18957] usb 3-1: config 0 descriptor??
[ 1931.149690][T18957] usb 3-1: NFC: intf ffff888143f26000 id ffffffff8f3199e0
[ 1931.188471][T18957] usb 3-1: USB disconnect, device number 108
[ 1931.277458][T17303] FAULT_INJECTION: forcing a failure.
[ 1931.277458][T17303] name failslab, interval 1, probability 0, space 0, times 0
[ 1931.306953][ T5298] usb 5-1: USB disconnect, device number 25
[ 1931.322729][T17303] CPU: 0 UID: 0 PID: 17303 Comm: syz.4.12194 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[ 1931.333275][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1931.343351][T17303] Call Trace:
[ 1931.346644][T17303]  <TASK>
[ 1931.349591][T17303]  dump_stack_lvl+0x241/0x360
[ 1931.354306][T17303]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1931.359524][T17303]  ? __pfx__printk+0x10/0x10
[ 1931.364144][T17303]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[ 1931.370151][T17303]  ? __pfx___might_resched+0x10/0x10
[ 1931.375470][T17303]  should_fail_ex+0x3b0/0x4e0
[ 1931.380214][T17303]  should_failslab+0xac/0x100
[ 1931.384916][T17303]  ? __alloc_skb+0x1c3/0x440
[ 1931.389531][T17303]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 1931.395365][T17303]  __alloc_skb+0x1c3/0x440
[ 1931.399815][T17303]  ? __pfx___alloc_skb+0x10/0x10
[ 1931.404779][T17303]  ? rcu_is_watching+0x15/0xb0
[ 1931.409565][T17303]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 1931.414955][T17303]  ? kmem_cache_alloc_noprof+0x185/0x2a0
[ 1931.420618][T17303]  audit_log_start+0x186/0xa30
[ 1931.425412][T17303]  ? __pfx_audit_log_start+0x10/0x10
[ 1931.430715][T17303]  ? migrate_enable+0x395/0x510
[ 1931.435598][T17303]  ? __pfx_migrate_enable+0x10/0x10
[ 1931.440824][T17303]  ? __pfx___cant_migrate+0x10/0x10
[ 1931.446052][T17303]  audit_seccomp+0x63/0x1f0
[ 1931.450579][T17303]  __seccomp_filter+0xb38/0x1fe0
[ 1931.455547][T17303]  ? __pfx_lock_release+0x10/0x10
[ 1931.460601][T17303]  ? vfs_write+0x7bf/0xc90
[ 1931.465041][T17303]  ? kmem_cache_free+0x1a2/0x420
[ 1931.470002][T17303]  ? __pfx___seccomp_filter+0x10/0x10
[ 1931.475407][T17303]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1931.481061][T17303]  ? __pfx_vfs_write+0x10/0x10
[ 1931.485854][T17303]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1931.491849][T17303]  ? __fget_files+0x3f3/0x470
[ 1931.496561][T17303]  ? __secure_computing+0x125/0x370
[ 1931.501786][T17303]  syscall_trace_enter+0xa8/0x150
[ 1931.506836][T17303]  do_syscall_64+0xcc/0x230
[ 1931.511365][T17303]  ? clear_bhb_loop+0x35/0x90
[ 1931.516063][T17303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1931.521980][T17303] RIP: 0033:0x7fb8b0f7df39
[ 1931.526414][T17303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1931.546044][T17303] RSP: 002b:00007fb8b1df2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1931.554489][T17303] RAX: ffffffffffffffda RBX: 00007fb8b1135f80 RCX: 00007fb8b0f7df39
[ 1931.562570][T17303] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000020000300
[ 1931.570557][T17303] RBP: 00007fb8b1df2090 R08: 0000000020048000 R09: 0000000020000000
[ 1931.578549][T17303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1931.586545][T17303] R13: 0000000000000000 R14: 00007fb8b1135f80 R15: 00007fb8b125fa28
[ 1931.594559][T17303]  </TASK>
[ 1932.253642][ T9006] Bluetooth: hci0: command 0x0406 tx timeout
[ 1932.442708][T18957] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1932.602765][T18957] usb 2-1: Using ep0 maxpacket: 32
[ 1932.615743][T18957] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1932.632641][T18957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1932.656956][T18957] usb 2-1: config 0 descriptor??
[ 1932.680349][T18957] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1933.299177][T17357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1933.341684][T17357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1933.478649][T18957] gspca_vc032x: reg_w err -71
[ 1933.490476][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.502735][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.514186][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.526174][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.537492][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.549742][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.556226][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.561624][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.567266][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.572689][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.572786][ T5284] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1933.578228][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.601445][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.606911][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.612485][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.621430][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.629870][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.637493][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.645287][T18957] gspca_vc032x: I2c Bus Busy Wait 00
[ 1933.654672][T18957] gspca_vc032x: Unknown sensor...
[ 1933.665443][T18957] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[ 1933.690784][T18957] usb 2-1: USB disconnect, device number 19
[ 1933.742676][ T5284] usb 5-1: Using ep0 maxpacket: 16
[ 1933.751918][ T5284] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1933.765380][T17301] dccp_close: ABORT with 192 bytes unread
[ 1933.782427][ T5284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1933.808666][ T5284] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1933.831394][ T5284] usb 5-1: config 1 has no interface number 1
[ 1933.851669][ T5284] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1933.872737][ T5284] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1933.887869][ T5284] usb 5-1: config 1 interface 2 has no altsetting 0
[ 1933.911572][ T5284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1933.922630][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1933.930658][ T5284] usb 5-1: Product: syz
[ 1933.952617][ T5284] usb 5-1: Manufacturer: syz
[ 1933.957250][ T5284] usb 5-1: SerialNumber: syz
[ 1934.193966][ T5284] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1934.219170][ T5284] usb 5-1: 2:1 : format type 39 is not supported yet
[ 1934.252762][ T5284] usb 5-1: selecting invalid altsetting 0
[ 1934.314359][ T5284] usb 5-1: USB disconnect, device number 26
[ 1934.369206][ T9724] udevd[9724]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1935.962458][T17422] __nla_validate_parse: 1 callbacks suppressed
[ 1935.962477][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12236'.
[ 1935.982724][T18957] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1936.101864][T17428] Invalid logical block size (48858)
[ 1936.142710][T18957] usb 2-1: Using ep0 maxpacket: 8
[ 1936.157751][T18957] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1936.178709][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1936.201758][T18957] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1936.219954][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1936.231493][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1936.249966][T18957] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1936.262711][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1936.274082][T18957] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1936.285967][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1936.297386][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1936.309599][T26087] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1936.338744][T18957] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1936.346070][T17442] FAULT_INJECTION: forcing a failure.
[ 1936.346070][T17442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1936.346385][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1936.359785][T17442] CPU: 0 UID: 0 PID: 17442 Comm: syz.2.12245 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[ 1936.370939][T18957] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1936.380873][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1936.380892][T17442] Call Trace:
[ 1936.380901][T17442]  <TASK>
[ 1936.380911][T17442]  dump_stack_lvl+0x241/0x360
[ 1936.380944][T17442]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1936.380975][T17442]  ? __pfx__printk+0x10/0x10
[ 1936.380999][T17442]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1936.381016][T17442]  ? __pfx_lock_release+0x10/0x10
[ 1936.381046][T17442]  should_fail_ex+0x3b0/0x4e0
[ 1936.381073][T17442]  _copy_from_user+0x2f/0xe0
[ 1936.381096][T17442]  __se_sys_landlock_create_ruleset+0x28d/0x460
[ 1936.381120][T17442]  ? __pfx___se_sys_landlock_create_ruleset+0x10/0x10
[ 1936.381143][T17442]  ? do_syscall_64+0x100/0x230
[ 1936.381162][T17442]  ? do_syscall_64+0xb6/0x230
[ 1936.381182][T17442]  do_syscall_64+0xf3/0x230
[ 1936.393162][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1936.402818][T17442]  ? clear_bhb_loop+0x35/0x90
[ 1936.402845][T17442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1936.402871][T17442] RIP: 0033:0x7f2a98d7df39
[ 1936.402890][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1936.402905][T17442] RSP: 002b:00007f2a99ae9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc
[ 1936.402926][T17442] RAX: ffffffffffffffda RBX: 00007f2a98f35f80 RCX: 00007f2a98d7df39
[ 1936.402940][T17442] RDX: 0000000000000000 RSI: 000000000000004a RDI: 0000000020000040
[ 1936.402953][T17442] RBP: 00007f2a99ae9090 R08: 0000000000000000 R09: 0000000000000000
[ 1936.402970][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1936.402982][T17442] R13: 0000000000000000 R14: 00007f2a98f35f80 R15: 00007f2a9905fa28
[ 1936.403005][T17442]  </TASK>
[ 1936.500501][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12246'.
[ 1936.519372][T18957] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1936.598507][T18957] usb 2-1: string descriptor 0 read error: -22
[ 1936.604880][T18957] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1936.615326][T18957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1936.640479][T18957] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1936.652902][T26087] usb 4-1: device descriptor read/64, error -71
[ 1936.893135][T26087] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1936.964386][T17468] FAULT_INJECTION: forcing a failure.
[ 1936.964386][T17468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1936.980456][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.0.12255 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[ 1936.990972][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1937.001024][T17468] Call Trace:
[ 1937.004301][T17468]  <TASK>
[ 1937.007237][T17468]  dump_stack_lvl+0x241/0x360
[ 1937.012012][T17468]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1937.017216][T17468]  ? __pfx__printk+0x10/0x10
[ 1937.021811][T17468]  ? __pfx_lock_release+0x10/0x10
[ 1937.026839][T17468]  should_fail_ex+0x3b0/0x4e0
[ 1937.031517][T17468]  _copy_from_user+0x2f/0xe0
[ 1937.036102][T17468]  __sys_bpf+0x1a4/0x810
[ 1937.040342][T17468]  ? __pfx___sys_bpf+0x10/0x10
[ 1937.045118][T17468]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1937.051096][T17468]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1937.057422][T17468]  ? do_syscall_64+0x100/0x230
[ 1937.062180][T17468]  __x64_sys_bpf+0x7c/0x90
[ 1937.066590][T17468]  do_syscall_64+0xf3/0x230
[ 1937.071084][T17468]  ? clear_bhb_loop+0x35/0x90
[ 1937.075754][T17468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1937.081649][T17468] RIP: 0033:0x7f684977df39
[ 1937.086057][T17468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1937.105679][T17468] RSP: 002b:00007f684a60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1937.114113][T17468] RAX: ffffffffffffffda RBX: 00007f6849935f80 RCX: 00007f684977df39
[ 1937.122089][T17468] RDX: 0000000000000020 RSI: 0000000020000600 RDI: 0000000000000001
[ 1937.130147][T17468] RBP: 00007f684a60a090 R08: 0000000000000000 R09: 0000000000000000
[ 1937.138117][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1937.146085][T17468] R13: 0000000000000000 R14: 00007f6849935f80 R15: 00007f6849a5fa28
[ 1937.154061][T17468]  </TASK>
[ 1937.159452][T26087] usb 4-1: device descriptor read/64, error -71
[ 1937.222723][T18957] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1937.272901][T26087] usb usb4-port1: attempt power cycle
[ 1937.372837][T18957] usb 3-1: Using ep0 maxpacket: 32
[ 1937.380508][T18957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1937.391619][T18957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1937.412697][T18957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1937.432666][T18957] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1937.441736][T18957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.461215][T18957] usb 3-1: config 0 descriptor??
[ 1937.612889][T26087] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1937.643414][T26087] usb 4-1: device descriptor read/8, error -71
[ 1937.882735][T26087] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1937.905288][T18957] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0076/input/input163
[ 1937.933073][T26087] usb 4-1: device descriptor read/8, error -71
[ 1938.053019][T26087] usb usb4-port1: unable to enumerate USB device
[ 1938.065164][T18957] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0076/input/input164
[ 1938.090752][T18957] kye 0003:0458:5011.0076: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1938.343643][T17495] xt_TCPMSS: Only works on TCP SYN packets
[ 1938.351059][T14327] usb 3-1: USB disconnect, device number 109
[ 1939.261792][T17511] input: syz0 as /devices/virtual/input/input165
[ 1939.295088][T26087] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1939.452811][T26087] usb 3-1: Using ep0 maxpacket: 16
[ 1939.460183][T26087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1939.478688][T26087] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1939.488850][T26087] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f
[ 1939.503345][T26087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1939.511468][T26087] usb 3-1: Product: syz
[ 1939.520286][T26087] usb 3-1: Manufacturer: syz
[ 1939.526190][T26087] usb 3-1: SerialNumber: syz
[ 1939.536690][T26087] usb 3-1: config 0 descriptor??
[ 1939.545806][T26087] kobil_sct 3-1:0.0: required endpoints missing
[ 1939.751998][ T5284] usb 3-1: USB disconnect, device number 110
[ 1940.015707][ T5284] usb 2-1: USB disconnect, device number 20
[ 1940.164674][T17526] 
[ 1940.167040][T17526] ======================================================
[ 1940.174063][T17526] WARNING: possible circular locking dependency detected
[ 1940.181091][T17526] 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 Not tainted
[ 1940.187860][T17526] ------------------------------------------------------
[ 1940.194884][T17526] syz.4.12278/17526 is trying to acquire lock:
[ 1940.201040][T17526] ffff88803df27858 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0
[ 1940.211780][T17526] 
[ 1940.211780][T17526] but task is already holding lock:
[ 1940.219150][T17526] ffff88802430f398 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[ 1940.229180][T17526] 
[ 1940.229180][T17526] which lock already depends on the new lock.
[ 1940.229180][T17526] 
[ 1940.239571][T17526] 
[ 1940.239571][T17526] the existing dependency chain (in reverse order) is:
[ 1940.248570][T17526] 
[ 1940.248570][T17526] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[ 1940.256119][T17526]        lock_acquire+0x1ed/0x550
[ 1940.261140][T17526]        down_read_killable+0xca/0xd30
[ 1940.266586][T17526]        mmap_read_lock_killable+0x1d/0x70
[ 1940.272381][T17526]        lock_mm_and_find_vma+0x29c/0x2f0
[ 1940.278102][T17526]        exc_page_fault+0x1bf/0x8c0
[ 1940.283296][T17526]        asm_exc_page_fault+0x26/0x30
[ 1940.288665][T17526]        fault_in_readable+0x165/0x2b0
[ 1940.294114][T17526]        fault_in_iov_iter_readable+0x229/0x280
[ 1940.300341][T17526]        generic_perform_write+0x259/0x6d0
[ 1940.306147][T17526]        shmem_file_write_iter+0xf9/0x120
[ 1940.311854][T17526]        vfs_write+0xa6d/0xc90
[ 1940.316613][T17526]        ksys_write+0x183/0x2b0
[ 1940.321454][T17526]        do_syscall_64+0xf3/0x230
[ 1940.326466][T17526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.332876][T17526] 
[ 1940.332876][T17526] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[ 1940.341558][T17526]        validate_chain+0x18ef/0x5920
[ 1940.346919][T17526]        __lock_acquire+0x1384/0x2050
[ 1940.352283][T17526]        lock_acquire+0x1ed/0x550
[ 1940.357297][T17526]        down_write+0x99/0x220
[ 1940.362046][T17526]        process_measurement+0x439/0x1fb0
[ 1940.367750][T17526]        ima_file_mmap+0x13d/0x2b0
[ 1940.372847][T17526]        security_mmap_file+0x7e7/0xa40
[ 1940.378388][T17526]        __se_sys_remap_file_pages+0x6e6/0xa50
[ 1940.384530][T17526]        do_syscall_64+0xf3/0x230
[ 1940.389540][T17526]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.395947][T17526] 
[ 1940.395947][T17526] other info that might help us debug this:
[ 1940.395947][T17526] 
[ 1940.406159][T17526]  Possible unsafe locking scenario:
[ 1940.406159][T17526] 
[ 1940.413590][T17526]        CPU0                    CPU1
[ 1940.418934][T17526]        ----                    ----
[ 1940.424284][T17526]   lock(&mm->mmap_lock);
[ 1940.428606][T17526]                                lock(&sb->s_type->i_mutex_key#12);
[ 1940.436583][T17526]                                lock(&mm->mmap_lock);
[ 1940.443421][T17526]   lock(&sb->s_type->i_mutex_key#12);
[ 1940.448873][T17526] 
[ 1940.448873][T17526]  *** DEADLOCK ***
[ 1940.448873][T17526] 
[ 1940.456998][T17526] 1 lock held by syz.4.12278/17526:
[ 1940.462178][T17526]  #0: ffff88802430f398 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[ 1940.472613][T17526] 
[ 1940.472613][T17526] stack backtrace:
[ 1940.478490][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.4.12278 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[ 1940.488976][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1940.499018][T17526] Call Trace:
[ 1940.502296][T17526]  <TASK>
[ 1940.505215][T17526]  dump_stack_lvl+0x241/0x360
[ 1940.509891][T17526]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1940.515081][T17526]  ? __pfx__printk+0x10/0x10
[ 1940.519684][T17526]  print_circular_bug+0x13a/0x1b0
[ 1940.524724][T17526]  check_noncircular+0x36a/0x4a0
[ 1940.529666][T17526]  ? __pfx_check_noncircular+0x10/0x10
[ 1940.535119][T17526]  ? lockdep_lock+0x123/0x2b0
[ 1940.539789][T17526]  ? mark_lock+0x9a/0x360
[ 1940.544105][T17526]  validate_chain+0x18ef/0x5920
[ 1940.548950][T17526]  ? __pfx_validate_chain+0x10/0x10
[ 1940.554135][T17526]  ? mark_lock+0x9a/0x360
[ 1940.558450][T17526]  ? __lock_acquire+0x1384/0x2050
[ 1940.563468][T17526]  ? look_up_lock_class+0x77/0x170
[ 1940.568573][T17526]  ? register_lock_class+0x102/0x980
[ 1940.573852][T17526]  ? __pfx_register_lock_class+0x10/0x10
[ 1940.579475][T17526]  ? mark_lock+0x9a/0x360
[ 1940.583790][T17526]  ? ima_match_policy+0x115/0x22f0
[ 1940.588897][T17526]  __lock_acquire+0x1384/0x2050
[ 1940.593760][T17526]  lock_acquire+0x1ed/0x550
[ 1940.598255][T17526]  ? process_measurement+0x439/0x1fb0
[ 1940.603625][T17526]  ? __pfx_lock_acquire+0x10/0x10
[ 1940.608641][T17526]  ? __pfx___might_resched+0x10/0x10
[ 1940.613917][T17526]  ? ima_match_policy+0x115/0x22f0
[ 1940.619017][T17526]  ? __pfx_ima_match_policy+0x10/0x10
[ 1940.624378][T17526]  ? __pfx___schedule+0x10/0x10
[ 1940.629223][T17526]  down_write+0x99/0x220
[ 1940.633453][T17526]  ? process_measurement+0x439/0x1fb0
[ 1940.638813][T17526]  ? __pfx_down_write+0x10/0x10
[ 1940.643648][T17526]  ? ima_get_action+0x75/0xb0
[ 1940.648313][T17526]  process_measurement+0x439/0x1fb0
[ 1940.653504][T17526]  ? __pfx_process_measurement+0x10/0x10
[ 1940.659122][T17526]  ? __pfx_lock_acquire+0x10/0x10
[ 1940.664137][T17526]  ? aa_file_perm+0x137/0xf50
[ 1940.668811][T17526]  ? mtree_load+0x8a1/0x9c0
[ 1940.673305][T17526]  ? apparmor_current_getsecid_subj+0xde/0x1b0
[ 1940.679453][T17526]  ima_file_mmap+0x13d/0x2b0
[ 1940.684032][T17526]  ? __pfx_mtree_load+0x10/0x10
[ 1940.688874][T17526]  ? __pfx_ima_file_mmap+0x10/0x10
[ 1940.693977][T17526]  ? end_current_label_crit_section+0x151/0x180
[ 1940.700204][T17526]  ? common_file_perm+0x1a6/0x210
[ 1940.705216][T17526]  security_mmap_file+0x7e7/0xa40
[ 1940.710233][T17526]  __se_sys_remap_file_pages+0x6e6/0xa50
[ 1940.715857][T17526]  ? __pfx_do_futex+0x10/0x10
[ 1940.720523][T17526]  ? __pfx___se_sys_remap_file_pages+0x10/0x10
[ 1940.726674][T17526]  ? __secure_computing+0x125/0x370
[ 1940.731865][T17526]  ? __x64_sys_remap_file_pages+0x20/0xc0
[ 1940.737577][T17526]  do_syscall_64+0xf3/0x230
[ 1940.742067][T17526]  ? clear_bhb_loop+0x35/0x90
[ 1940.746730][T17526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.752617][T17526] RIP: 0033:0x7fb8b0f7df39
[ 1940.757019][T17526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1940.776614][T17526] RSP: 002b:00007fb8b1df2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[ 1940.785016][T17526] RAX: ffffffffffffffda RBX: 00007fb8b1135f80 RCX: 00007fb8b0f7df39
[ 1940.792973][T17526] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000
[ 1940.800932][T17526] RBP: 00007fb8b0ff0216 R08: 0000000000010000 R09: 0000000000000000
[ 1940.808894][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1940.816852][T17526] R13: 0000000000000000 R14: 00007fb8b1135f80 R15: 00007fb8b125fa28
[ 1940.824816][T17526]  </TASK>
[ 1940.833980][T17532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1940.836503][T17534] FAULT_INJECTION: forcing a failure.
[ 1940.836503][T17534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1940.848917][    C0] IPv4: Oversized IP packet from 172.20.20.24
[ 1940.855427][T17534] CPU: 1 UID: 0 PID: 17534 Comm: syz.1.12277 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0
[ 1940.871914][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1940.881968][T17534] Call Trace:
[ 1940.885238][T17534]  <TASK>
[ 1940.888162][T17534]  dump_stack_lvl+0x241/0x360
[ 1940.892842][T17534]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1940.898047][T17534]  ? __pfx__printk+0x10/0x10
[ 1940.902653][T17534]  ? __pfx_lock_release+0x10/0x10
[ 1940.907678][T17534]  ? rcu_is_watching+0x15/0xb0
[ 1940.912431][T17534]  ? lock_release+0xbf/0xa30
[ 1940.917012][T17534]  should_fail_ex+0x3b0/0x4e0
[ 1940.921679][T17534]  _copy_from_user+0x2f/0xe0
[ 1940.926260][T17534]  copy_msghdr_from_user+0xae/0x680
[ 1940.931447][T17534]  ? lock_release+0xbf/0xa30
[ 1940.936027][T17534]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1940.941823][T17534]  __sys_sendmsg+0x22d/0x380
[ 1940.946417][T17534]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1940.951531][T17534]  ? __pfx_vfs_write+0x10/0x10
[ 1940.956312][T17534]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1940.962640][T17534]  ? rcu_is_watching+0x15/0xb0
[ 1940.967399][T17534]  ? rcu_is_watching+0x15/0xb0
[ 1940.972175][T17534]  do_syscall_64+0xf3/0x230
[ 1940.976670][T17534]  ? clear_bhb_loop+0x35/0x90
[ 1940.981331][T17534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1940.987217][T17534] RIP: 0033:0x7f4bebd7df39
[ 1940.991617][T17534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1941.011216][T17534] RSP: 002b:00007f4becc65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1941.019622][T17534] RAX: ffffffffffffffda RBX: 00007f4bebf35f80 RCX: 00007f4bebd7df39
[ 1941.027581][T17534] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 1941.035538][T17534] RBP: 00007f4becc65090 R08: 0000000000000000 R09: 0000000000000000
[ 1941.043496][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1941.051454][T17534] R13: 0000000000000000 R14: 00007f4bebf35f80 R15: 00007f4bec05fa28
[ 1941.059420][T17534]  </TASK>
[ 1941.082765][T17532] misc raw-gadget: fail, usb_gadget_register_driver returned -16