last executing test programs: 31.807401244s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000500)={'stack ', ':\x04~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7g\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xab \x00\x00\x00F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\x9a\x90\xf3-\xed\x80\fkt\xed\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x00\x00\x00\x00\x00\x00\x00'}, 0xb3) r6 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 29.393488884s ago: executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00'}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@mcast2={0x5}, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x228, 0x168, 0x358, 0x98, 0x2c0, 0x358, 0x168, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_route(0x10, 0x3, 0x0) 29.050399102s ago: executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000480)}}) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000000c0)=""/83, 0x53, 0x0) r1 = dup(r0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000001c0)=""/102, 0x66}], 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x52b242d) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) fcntl$setlease(r8, 0x400, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r10, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x4, 0x0, 0x4, 0x8b14c6a5df82cbe, 0x0, {0x0, r11}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) 28.330349175s ago: executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dce3) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x202) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x0, 0x3}, 0x1c) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x104}) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 27.977119474s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000480)='./control\x00', 0x0) r1 = inotify_init() mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x5000418) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0x240000a2) rmdir(&(0x7f0000000080)='./control\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000b70900000000000035090100000000009500000000000000bf91080000000000b70200000000000007000000000000e1b60000000000050095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$sock(r2, &(0x7f00000014c0)={&(0x7f0000001040)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000010c0)="ffe65b86dc5ab016b27aa050c186bd9fa41bb881df64de33f89dd5a4fb42d4e8d0f01ad6e10193cccc7415b4206864a48f2c8ed844d853a0723679632f92abd95820b36c8dfb299cf03a10b546a3926c12d7e4aa07cf8f8ff5cbbc2fca2b621c40848ff34ad1f2d7c1e46a880987c4aa74444cf165f9b72d4c8f229ca9941b67ff08bef4126eda5ddf55a178d7f1bfeb7a57886678af02ec96f6e1082cb8fe56fa8a1f177739aec7229d0c364a", 0xad}, {&(0x7f0000001180)="3acf5e59abd4fb6bc576f92f0ee4ab261f7a58eac0cb999a697e899942f05d9464e44d70e1d6c9967d6a3edc74af9f8c0134eb12023a4a7543e34f68381ed882c83c6758b84dd84d3263979c9d8df18977bc2f5a5d9ad28b5000bc82db4327f24ed8f16c8a098d5accb13a2380e485118894e8a470a43002a64c02f56944f8250f039c525523137d665c96c5c97868b12e271251fea7274974aeb5107a994d81e6a564abf3256ecf01d39cbc349dda926fcb", 0xb2}, {&(0x7f0000001240)="039f1701796249948cfe70bbac976dd6aef6c6e5b95758775fdb0dbb1939939da5afababe91f603f137bc3f5dcb11f51059823caa84a83dba221aa156ad8e0620ca4a5ff4800bfc0210b076f51f9610a420dfbd7f30b15b548d8d53f6ce3c5a490f56addead69a055510a84027c81c", 0x6f}, {&(0x7f00000012c0)="d1cc5d0a33e2486e285767d4f81095e860d6867689b7a355ad8670a86915f89dce5789fe802c14fe1e7d6770749dc1725a920696c00328c2c9dbcfa155e4ac158c2c0b75df222d3d077e97e44079564d3db700be265fdf12295df3470e3c485604d815df96d1b1465090a5fefe9104e2a1b24c49384be6d3d5a8fde749963c03464c68422b4006a43b204aa2245d43f13c7fae274da611543797b4d71d5e8b6975ce61d583796f697ac33afb6d77c0db046a3a4af27e6cf04622e2254d4ef3ebedd4e4a9483f1b7aa1885ddb5d91266d0e3381f915e0aff29b9971", 0xdb}], 0x4, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0xbc3e}}, @timestamping={{0x14, 0x1, 0x25, 0x800000}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x52, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) 27.721781345s ago: executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa8daab900dd00140600fe8000000000000000000000000000d490edaae971e9ec0000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r3, &(0x7f00000000c0)=""/29, 0x1d) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xe09) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8.089392256s ago: executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x400000000010001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.256152791s ago: executing program 0: socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5708, 0x200, 0x2, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{0x0, 0x81, 0x8, 0x8}, {0x8001, 0x1, 0x5d, 0x5}, {0x738a, 0x7, 0xa8, 0x80}]}) r4 = epoll_create1(0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2fc099239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000019640)=ANY=[@ANYBLOB="b031eadae0e9a42dac255cdda07fad8eca6a01000008021100d50c08021100a08a43b31a33eb5d6e841e7038aea23c0c4a9805fae8566e08da7fa8169934534ec630d37afeb9569fcc4ea85fe17c8ac9d65f0619d950906fa6a6e32a09e52a40f17cf9be73dfa0e70d50df1c3780eb66aaf46fc3ebaafe58b2e0f70e3a411bbbc0da03123c74d444152d263cd310c52019d894bc71ab5aadfe7ee5795eb051eeb297e840d55f00bdde70e21efb74e0c8eac72a04485ccc7efe8f82d34f38727c4b7b922380809f8830a07be88ecdd71b1036e595"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@ctrl_frame=@ba={{}, {0x7fe1}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x3, {0x5, 0xfc1}, "43f9ffffff2837c3"}, {0x0, 0x5, {0x5}, "3fbfce5e1cebb83f"}, {0x0, 0xb, {0x1, 0xd}, "dd18b6a198608d81"}, {0x0, 0x9, {0x6, 0x6}, "7576c20dce063a5a"}, {0x0, 0x5, {0x7, 0x8}, "838a0396bd9e8a32"}, {0x0, 0x2, {0x8, 0x81}, "8c57747b4c0f4006"}, {0x0, 0x3, {0x6, 0x6}, "ef1c44918288389a"}], {0x0, 0xb, {0x3, 0xf80}}}}, 0x72) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000200)={0x20000006}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006500000008000300", @ANYRES32=0x0, @ANYBLOB="20000e"], 0x3c}}, 0x0) io_uring_enter(r1, 0x83d, 0x91ab, 0xe, 0x0, 0x0) 5.522338595s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000ec0)={0x0, &(0x7f0000000e00)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000fc0)={r4, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128008000100736974003000028008000100", @ANYRES32=r5, @ANYBLOB="0500090000000000080014000000000014000b00ff0100000000000000000000000000010800040000100000316a5834acd88d66e583b27c752eb438cc22763a0e894acb28cd46eddf9801898da3ad8843db676518fc350f727a45880d6e29061e70e2adc8454017f7ae01119f3fdffa7a752976f94dbd230cac19424ee8f40585f1b59d39f2fc201519c99705de00a33b74a009b3d3236eb83deded8e20a1c87eeed28ef9757a1a76a749b93a3ddff431f2dd9a48340cfa47de1dd9a0eb56b0435a80107c1c915a9d3a2c6fb6b8c3bdcb12333a03af6ab2642b93c1a8346fc1ba611a3ccc3e62cdd2bc3f26e3cfba27bb5d3df64b"], 0x64}}, 0x0) 5.430093012s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xffff, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0xc3a0f000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000500)={'stack ', ':\x04~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7g\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xab \x00\x00\x00F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\x9a\x90\xf3-\xed\x80\fkt\xed\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x00\x00\x00\x00\x00\x00\x00'}, 0xb3) r5 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r5) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.178447111s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)="269afae1e3b0b9152d54659b36736e0320d3f1334265aa8434d08ef3d6e422ce2ebc564ee660f27ab54f3f846a84325299914aacc5133a9364fb09d81352de35bf90e217407ab0e4ad53fb99a2dccc9ab084bc7f429a4dc9c8e110daab150526f4216cca8b001017b5a7bf8e544f5c0a736d29ec4214434346ba6279c61428e0078711a3ed6de9b5a3cdfb12e84ae50321d77df6fe8b084f273c4946cbc97b387514b8e60d5e034b89febb2f295f13c9a92501115cc676af28589d", 0xbb}, {&(0x7f0000001400)="d1df00f1", 0x4}], 0x2}, 0x0) recvmmsg$unix(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000740)=""/99, 0x63}], 0x2}}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af04, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000800030003"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x4, {0x0, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45475144b47b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2d568d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d595b4fb369c2aab53751ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf53e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) socket(0x0, 0x0, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 4.820950078s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x2}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0xc) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000eaffffff00000000000000000000000108000000"], 0x38}, 0x1, 0xf00}, 0x0) 4.4456599s ago: executing program 4: io_setup(0x7, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001180)=""/102400, 0x19000}], 0x1, 0x0, 0xfffffff9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3908000000000000400012800c0001006d6163766c616e0030000280080001001000000010aa00000708000300000000000a000400aaaaaaaaaabb00000800050050df3c1cd16b8915071d9ccf0ed658ce897d133631ab0e6896400e54", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000000c0)=0x80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @private1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = io_uring_setup(0x717e, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, 0xae}) r6 = eventfd2(0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}, 0x1c) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="080100001600010000000000000000007f000001000000000000000000000000ac14140a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000003000000000000000000000000fe5d000008001e000000000008000c00"/190], 0x108}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x4, 0x5b80c435, 0x8, 0x9292, 0x8000000000000008, 0x94]}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.151834721s ago: executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = io_uring_setup(0x58ef, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) dup3(r2, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000100)=@keyring) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340), 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) 3.992063148s ago: executing program 2: syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e18050510"], 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.904354658s ago: executing program 2: write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b000000ff07000052cc00000900000006000000955cc98c0422b7540ebaf9364c6fe2724c4ee30837a3625afef3cf5496b378164733b5130078f24e6f67b8fe0b433e3b6f282e9de25a0f342e57b123f8ae1c82bcc94dce"], 0x1a3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.718769225s ago: executing program 4: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000004000180440003800c00028005e00000000000002c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000060002802c00018014000300fc00000000800000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0x98}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback}, 0x1c) syz_open_dev$media(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendto$inet6(r0, &(0x7f0000000040)="c5fb74e935b1a2f59b6713ba11b8020019", 0x11, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x100}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = dup(r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000040)=0x8) 3.616444986s ago: executing program 0: r0 = inotify_init1(0x0) dup(r0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000bc0)=""/210, 0xd2}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000040)=""/193, 0xfffffde4}], 0x10000000000001e2) 3.488074386s ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfff) r2 = inotify_init1(0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x40}) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r0, 0x8, r3) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) 3.402445051s ago: executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000480)}}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000001c0)=""/102, 0x66}], 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x6000004, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) fcntl$setlease(r7, 0x400, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x4, 0x0, 0x4, 0x8b14c6a5df82cbe}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000}) 3.376946915s ago: executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x400000000010001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.974005834s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x2}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000eaffffff00000000000000000000000108000000"], 0x38}, 0x1, 0xf00}, 0x0) 2.760550634s ago: executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa8daab900dd00140600fe8000000000000000000000000000d490edaae971e9ec0000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r3, &(0x7f00000000c0)=""/29, 0x1d) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xe09) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.736527253s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x20041}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000e7701213000000000095000000000000001bc1d39885800fe7a5862e6c428b0ce4c43bf3090067906a1e205f1714e67b821556245854a452c3ce719bc3b76799b73c594299d732a4a781e9f05d6f987c6097ed98386104f388617ee42bfc808fa40a46e64d38df47258459"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f0504000000090583"], 0x0) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x10, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000000)={r7}) 858.594649ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x20041}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000e7701213000000000095000000000000001bc1d39885800fe7a5862e6c428b0ce4c43bf3090067906a1e205f1714e67b821556245854a452c3ce719bc3b76799b73c594299d732a4a781e9f05d6f987c6097ed98386104f388617ee42bfc808fa40a46e64d38df47258459"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f0504000000090583"], 0x0) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}}}, 0x10, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x8a8, 0x4) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000000)={r7}) 553.170949ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c003ac0f8ff070004000800020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x9) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x5bfbe43f074f02f5, r1, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)=0x1) write$dsp(r1, &(0x7f0000000280)="4b1f558d5ca164a2b25425fa59a6eea0c54f439391053ed0d020252860bc038acd31063acba8e04a160a4de90caf3e9a0e0454e2ba64", 0x36) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000fc02"], 0x110) syz_emit_ethernet(0xd2, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f100070402fc020000000000000000000000000000ff020000000000000000000000000001"], 0x0) write$dsp(r1, &(0x7f0000000200)="254ed655d7672c1336eebfca44adfe2dade09079646aadeac641c0167c", 0x1d) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x8}) 432.677742ms ago: executing program 0: io_setup(0x7, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001180)=""/102400, 0x19000}], 0x1, 0x0, 0xfffffff9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3908000000000000400012800c0001006d6163766c616e0030000280080001001000000010aa00000708000300000000000a000400aaaaaaaaaabb00000800050050df3c1cd16b8915071d9ccf0ed658ce897d133631ab0e6896400e54", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000000c0)=0x80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @private1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = io_uring_setup(0x717e, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, 0xae}) r6 = eventfd2(0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}, 0x1c) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="080100001600010000000000000000007f000001000000000000000000000000ac14140a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000003000000000000000000000000fe5d000008001e000000000008000c00"/190], 0x108}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x4, 0x5b80c435, 0x8, 0x9292, 0x8000000000000008, 0x94]}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 240.528174ms ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x7fffec1f}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x38}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 74.193192ms ago: executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa8daab900dd00140600fe8000000000000000000000000000d490edaae971e9ec0000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/29, 0x1d) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRESDEC], 0x0, 0x3a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8, 0x1014}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x5b16, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 0s ago: executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x200, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7b, &(0x7f0000000300)=0xa) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x138, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}], @NL80211_ATTR_CSA_IES={0xf4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x2, 0x180]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x4, 0x4, 0x4, 0x3, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x2]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc3, 0x80, [@fast_bss_trans={0x37, 0x68, {0x18, 0x1, "94b0c220aa368b9aca3a0634161e0f9c", "ac26014ff187400b9ef5a7119e7cb7d76f8564a9541180a9e710d9f04b978335", "695d1b79dd8deff586251a8f85ec1e87e9a3dbec5c0f303f79f439e181c3168a", [{0x4, 0x14, "40272ea7a03dbebed9b6aa9480375a5572b13139"}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x7, 0x3f, @broadcast, 0x0, 0x4, 0x3}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @dsss={0x3, 0x1, 0x78}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x4, @broadcast, 0x1, @value=@device_b, 0x5, 0xac, @broadcast, 0x9}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xad}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): 51.657091][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.669747][ T7096] bridge_slave_1: entered allmulticast mode [ 151.681350][ T7096] bridge_slave_1: entered promiscuous mode [ 151.980436][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.041288][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.156588][ T5111] Bluetooth: hci2: command tx timeout [ 152.298279][ T7096] team0: Port device team_slave_0 added [ 152.349170][ T7096] team0: Port device team_slave_1 added [ 152.486877][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.499302][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.525225][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.561022][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.583527][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.590639][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.616727][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.639742][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.674179][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.691005][ T5166] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.717651][ T7206] xfrm1: entered promiscuous mode [ 152.723228][ T7206] xfrm1: entered allmulticast mode [ 152.809876][ T7096] hsr_slave_0: entered promiscuous mode [ 152.827193][ T7096] hsr_slave_1: entered promiscuous mode [ 152.838342][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.852832][ T7096] Cannot create hsr debugfs directory [ 152.875176][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.909956][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.943750][ T5166] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.987332][ T5166] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.005200][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.016070][ T5166] usb 2-1: config 0 descriptor?? [ 153.211108][ T785] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.221130][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.424812][ T45] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 153.443467][ T5166] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 153.452953][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.467232][ T5166] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 153.476367][ T45] usb 4-1: Product: syz [ 153.479292][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.488975][ T45] usb 4-1: Manufacturer: syz [ 153.503525][ T5166] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 153.511972][ T45] usb 4-1: SerialNumber: syz [ 153.528509][ T45] usb 4-1: config 0 descriptor?? [ 153.536177][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.550237][ T785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.589250][ T785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.605186][ T5166] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 153.617707][ T785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1040, setting to 1024 [ 153.617744][ T785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 153.622091][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.725578][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.797634][ T5166] usb 4-1: USB disconnect, device number 16 [ 153.873146][ T6855] udevd[6855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.944129][ T9] usb 2-1: USB disconnect, device number 18 [ 154.231356][ T5111] Bluetooth: hci2: command tx timeout [ 154.344580][ T7096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.408057][ T785] cdc_ncm 3-1:1.0: bind() failure [ 154.432530][ T7096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.445043][ T785] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 154.471421][ T785] cdc_ncm 3-1:1.1: bind() failure [ 154.486972][ T7096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.511580][ T785] usb 3-1: USB disconnect, device number 13 [ 154.574601][ T7096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.666289][ T29] audit: type=1326 audit(1719122291.062:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14287d0a9 code=0x0 [ 154.851523][ T5163] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.871490][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.958568][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.063146][ T5163] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.080325][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.094612][ T9] usb 2-1: config 0 has no interfaces? [ 155.103065][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 155.118379][ T5163] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.156019][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.163234][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.172477][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.196712][ T5163] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.216603][ T9] usb 2-1: config 0 descriptor?? [ 155.233989][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.258127][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.265345][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.278341][ T5163] usb 4-1: config 0 descriptor?? [ 155.295261][ T5163] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 155.483087][ T5163] usb 2-1: USB disconnect, device number 19 [ 155.562330][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.583971][ T7274] xt_l2tp: v2 doesn't support IP mode [ 155.620438][ T29] audit: type=1326 audit(1719122292.012:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14287d0a9 code=0x0 [ 155.694629][ T7096] veth0_vlan: entered promiscuous mode [ 155.744169][ T7096] veth1_vlan: entered promiscuous mode [ 155.806501][ T7096] veth0_macvtap: entered promiscuous mode [ 155.830162][ T7096] veth1_macvtap: entered promiscuous mode [ 155.890261][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.911242][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.931107][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.960954][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.982626][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.001060][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.033448][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.055650][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.093096][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.118322][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.145555][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.168209][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.188753][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.199568][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.221108][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.245431][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.268226][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.290434][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.335689][ T7096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.358197][ T7096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.390662][ T7096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.434044][ T7096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.788242][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.807863][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.918351][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.936640][ T5166] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.945369][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.121151][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.135986][ T5166] usb 5-1: Using ep0 maxpacket: 16 [ 157.164086][ T5166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.204056][ T5166] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.234115][ T5166] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.270051][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.289591][ T5166] usb 5-1: Product: І [ 157.296859][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.311067][ T5166] usb 5-1: Manufacturer: ࠠ [ 157.317426][ T5166] usb 5-1: SerialNumber: 썏潺޲ [ 157.335373][ T45] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 157.367956][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.395663][ T45] usb 3-1: Product: syz [ 157.420124][ T45] usb 3-1: Manufacturer: syz [ 157.441017][ T25] usb 4-1: USB disconnect, device number 17 [ 157.471456][ T45] usb 3-1: SerialNumber: syz [ 157.532322][ T45] usb 3-1: config 0 descriptor?? [ 157.877453][ T25] usb 3-1: USB disconnect, device number 14 [ 158.282785][ T5166] usb 5-1: 0:2 : does not exist [ 158.324603][ T5166] usb 5-1: USB disconnect, device number 11 [ 158.382003][ T785] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.431821][ T29] audit: type=1326 audit(1719122294.832:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.454576][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.517984][ T29] audit: type=1326 audit(1719122294.862:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.541741][ T29] audit: type=1326 audit(1719122294.862:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.569015][ T29] audit: type=1326 audit(1719122294.862:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.593580][ T29] audit: type=1326 audit(1719122294.862:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.616366][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.631475][ T29] audit: type=1326 audit(1719122294.872:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.632657][ T785] usb 4-1: Using ep0 maxpacket: 8 [ 158.654290][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.671439][ T5104] udevd[5104]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.704760][ T7355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.805102][ T29] audit: type=1326 audit(1719122294.872:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.840647][ T29] audit: type=1326 audit(1719122294.872:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.873657][ T785] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.906568][ T785] usb 4-1: config 0 has no interface number 0 [ 158.915239][ T785] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 252, changing to 11 [ 158.932188][ T7345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.944049][ T785] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.953380][ T29] audit: type=1326 audit(1719122294.872:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 158.978912][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.988060][ T29] audit: type=1326 audit(1719122294.872:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 159.019991][ T785] usb 4-1: config 0 descriptor?? [ 159.040078][ T7345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.050841][ T785] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 159.237611][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.247807][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.258365][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 159.267919][ T45] usb 4-1: USB disconnect, device number 18 [ 159.277315][ T45] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 159.491731][ T5166] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 159.681155][ T5166] usb 5-1: Using ep0 maxpacket: 16 [ 159.690369][ T5166] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 159.731024][ T5166] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 159.740342][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.761945][ T5166] usb 5-1: config 0 descriptor?? [ 159.779886][ T5166] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 160.294037][ T4532] bcm5974 5-1:0.0: could not read from device [ 160.326016][ T4532] bcm5974 5-1:0.0: could not read from device [ 160.976188][ T7389] kvm: emulating exchange as write [ 161.013980][ T7389] input: syz1 as /devices/virtual/input/input12 [ 161.085241][ T7397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.490077][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.642467][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.744226][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.802349][ T5166] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.813238][ T7423] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.033365][ T5166] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 162.062751][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.086955][ T5166] usb 4-1: config 0 descriptor?? [ 162.106522][ T5166] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 163.106860][ T7411] mmap: syz-executor.3 (7411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.195276][ T7437] input: syz1 as /devices/virtual/input/input13 [ 163.795010][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.804941][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.815650][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.910115][ T5166] gspca_stv06xx: I2C: Read error writing address: -71 [ 163.933659][ T5166] usb 4-1: USB disconnect, device number 19 [ 164.191006][ T58] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.383453][ T58] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.394691][ T58] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.411622][ T58] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.465325][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.499602][ T7466] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 164.926713][ T25] usb 1-1: USB disconnect, device number 13 [ 165.002031][ T58] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.098109][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.107801][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.118089][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.161021][ T5163] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.211264][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 165.225093][ T58] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.237821][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.248591][ T58] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.276201][ T58] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.290002][ T58] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.299291][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.341324][ T5163] usb 3-1: Using ep0 maxpacket: 8 [ 165.361834][ T5163] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 165.374898][ T5163] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.388367][ T5163] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.398507][ T5163] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.408936][ T5163] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.426096][ T5163] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.436319][ T7383] bcm5974 5-1:0.0: could not read from device [ 165.461378][ T4532] bcm5974 5-1:0.0: could not read from device [ 165.471001][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.498462][ T45] usb 5-1: USB disconnect, device number 12 [ 165.507757][ T4532] bcm5974 5-1:0.0: could not read from device [ 165.527539][ T58] usb 2-1: GET_CAPABILITIES returned 0 [ 165.550718][ T58] usbtmc 2-1:16.0: can't read capabilities [ 165.552476][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 165.552491][ T29] audit: type=1326 audit(1719122301.952:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a7a7d0a9 code=0x0 [ 165.591716][ T4532] bcm5974 5-1:0.0: could not read from device [ 165.695765][ T5163] usb 3-1: usb_control_msg returned -32 [ 165.695815][ T5163] usbtmc 3-1:16.0: can't read capabilities [ 165.750455][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.750486][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.750595][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.769782][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.876724][ T7501] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 165.876724][ T7501] The task syz-executor.3 (7501) triggered the difference, watch for misbehavior. [ 166.555968][ T7508] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 167.101378][ T29] audit: type=1400 audit(1719122303.502:300): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=7493 comm="syz-executor.4" [ 167.977520][ T7525] __nla_validate_parse: 1 callbacks suppressed [ 167.977534][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.020545][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.031781][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.331079][ T785] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 168.442410][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.571181][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 168.592979][ T785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.637596][ T785] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.665115][ T785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.681110][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.689251][ T785] usb 4-1: Product: syz [ 168.698657][ T785] usb 4-1: Manufacturer: syz [ 168.704617][ T785] usb 4-1: SerialNumber: syz [ 168.769116][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.778632][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.787830][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.802398][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.810545][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.818178][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.932826][ T2403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.950993][ T785] usblp 4-1:1.0: usblp2: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.084675][ T2403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.143199][ T7550] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 169.254916][ T2403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.357224][ T2403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.401296][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 169.594362][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.617645][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.632820][ T7546] bridge_slave_0: entered allmulticast mode [ 169.651427][ T7546] bridge_slave_0: entered promiscuous mode [ 169.703248][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.710713][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.724275][ T7546] bridge_slave_1: entered allmulticast mode [ 169.733055][ T7546] bridge_slave_1: entered promiscuous mode [ 169.764538][ T2403] bridge_slave_1: left allmulticast mode [ 169.779627][ T2403] bridge_slave_1: left promiscuous mode [ 169.794007][ T2403] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.817507][ T2403] bridge_slave_0: left allmulticast mode [ 169.827606][ T2403] bridge_slave_0: left promiscuous mode [ 169.848931][ T2403] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.376581][ T2403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.389364][ T2403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.404514][ T2403] bond0 (unregistering): Released all slaves [ 170.493973][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.524039][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.666323][ T7546] team0: Port device team_slave_0 added [ 170.701141][ T7546] team0: Port device team_slave_1 added [ 170.797751][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.805172][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.831943][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.871664][ T5111] Bluetooth: hci1: command tx timeout [ 170.904385][ T2403] hsr_slave_0: left promiscuous mode [ 170.910714][ T2403] hsr_slave_1: left promiscuous mode [ 170.918803][ T2403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.926801][ T2403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.935719][ T2403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.943890][ T2403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.971753][ T2403] veth1_macvtap: left promiscuous mode [ 170.977550][ T2403] veth0_macvtap: left promiscuous mode [ 170.983934][ T2403] veth1_vlan: left promiscuous mode [ 170.989297][ T2403] veth0_vlan: left promiscuous mode [ 171.111782][ T7505] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 171.151730][ T8] usb 2-1: USB disconnect, device number 20 [ 171.175041][ T785] usb 4-1: USB disconnect, device number 20 [ 171.227649][ T785] usblp2: removed [ 171.246572][ T5163] usb 3-1: USB disconnect, device number 15 [ 171.470427][ T7572] delete_channel: no stack [ 171.581421][ T7589] fuse: Bad value for 'fd' [ 172.494533][ T2403] team0 (unregistering): Port device team_slave_1 removed [ 172.604485][ T2403] team0 (unregistering): Port device team_slave_0 removed [ 172.701021][ T58] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.917181][ T58] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 172.936875][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.969766][ T5111] Bluetooth: hci1: command tx timeout [ 172.978312][ T58] usb 1-1: Product: syz [ 172.984290][ T58] usb 1-1: Manufacturer: syz [ 172.989174][ T58] usb 1-1: SerialNumber: syz [ 173.020731][ T58] usb 1-1: config 0 descriptor?? [ 173.238053][ T58] usb 1-1: USB disconnect, device number 14 [ 173.544709][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.578241][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.629743][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.651022][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.666945][ T7582] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 173.679681][ T7582] batman_adv: batadv2: Removing interface: netdevsim0 [ 173.692462][ T7582] batman_adv: batadv3: Adding interface: netdevsim0 [ 173.718687][ T7582] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.749241][ T7582] batman_adv: batadv3: Interface activated: netdevsim0 [ 173.997508][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.094219][ T7627] futex_wake_op: syz-executor.0 tries to shift op by 144; fix this program [ 174.122430][ T7546] hsr_slave_0: entered promiscuous mode [ 174.163115][ T7546] hsr_slave_1: entered promiscuous mode [ 174.191024][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.198633][ T7546] Cannot create hsr debugfs directory [ 174.222435][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.252191][ T29] audit: type=1326 audit(1719122310.652:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a7a7d0a9 code=0x0 [ 175.031223][ T5111] Bluetooth: hci1: command tx timeout [ 175.435130][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.503606][ T7659] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 175.510721][ T7659] batman_adv: batadv1: Removing interface: netdevsim0 [ 175.515524][ T7663] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 175.538974][ T7659] batman_adv: batadv2: Adding interface: netdevsim0 [ 175.556411][ T7659] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.610752][ T7659] batman_adv: batadv2: Interface activated: netdevsim0 [ 175.771607][ T5163] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.949133][ T7546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.996238][ T5163] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 176.002760][ T7546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.025077][ T5163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.048371][ T7546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.053880][ T5163] usb 1-1: Product: syz [ 176.077861][ T5163] usb 1-1: Manufacturer: syz [ 176.091608][ T7546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.098877][ T5163] usb 1-1: SerialNumber: syz [ 176.160725][ T5163] usb 1-1: config 0 descriptor?? [ 176.425721][ T5166] usb 1-1: USB disconnect, device number 15 [ 176.525632][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.616189][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.678772][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.686034][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.739039][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.790580][ T7696] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 176.826512][ T7696] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 176.842728][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.865422][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.872598][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.111751][ T5111] Bluetooth: hci1: command tx timeout [ 177.139088][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.208723][ T7546] veth0_vlan: entered promiscuous mode [ 177.226326][ T7546] veth1_vlan: entered promiscuous mode [ 177.356104][ T7546] veth0_macvtap: entered promiscuous mode [ 177.401457][ T7546] veth1_macvtap: entered promiscuous mode [ 177.478512][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.526921][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.550736][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.584548][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.618289][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.649513][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.691475][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.724255][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.759120][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.784247][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.918167][ T7728] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 177.940322][ T7728] batman_adv: batadv2: Removing interface: netdevsim0 [ 177.977329][ T7728] batman_adv: batadv3: Adding interface: netdevsim0 [ 177.993637][ T7728] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.045449][ T7728] batman_adv: batadv3: Interface activated: netdevsim0 [ 178.088003][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.138702][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.178068][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.194396][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.237685][ T7546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.287677][ T7546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.386436][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.474324][ T7546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.508408][ T7546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.570610][ T7546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.618878][ T7546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.939134][ T2403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.980661][ T2403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.162585][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.190550][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.536051][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.568669][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 179.615479][ T29] audit: type=1400 audit(1719122316.012:302): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=7764 comm="syz-executor.3" [ 179.635713][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.779152][ T25] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 179.813954][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.826106][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.863561][ T25] usb 3-1: Product: syz [ 179.875739][ T25] usb 3-1: Manufacturer: syz [ 179.901172][ T25] usb 3-1: SerialNumber: syz [ 179.916435][ T25] usb 3-1: config 0 descriptor?? [ 180.170673][ T25] usb 3-1: USB disconnect, device number 16 [ 180.831031][ T5162] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.060330][ T5162] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 181.086704][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.113025][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 181.123717][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 181.134175][ T53] Bluetooth: hci2: hardware error 0x00 [ 181.155088][ T5162] usb 1-1: Product: syz [ 181.159298][ T5162] usb 1-1: Manufacturer: syz [ 181.164038][ T5162] usb 1-1: SerialNumber: syz [ 181.174795][ T5162] usb 1-1: config 0 descriptor?? [ 181.447709][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 181.596381][ T45] usb 1-1: USB disconnect, device number 16 [ 181.615077][ T7844] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.646602][ T7841] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 181.658395][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.670003][ T7841] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.762223][ T7842] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 181.801094][ T7842] batman_adv: batadv2: Removing interface: netdevsim0 [ 181.828070][ T7842] batman_adv: batadv3: Adding interface: netdevsim0 [ 181.858622][ T7842] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.884304][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.896047][ T7842] batman_adv: batadv3: Interface activated: netdevsim0 [ 181.923593][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.297167][ T2823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.401205][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.484855][ T2823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.603361][ T8] usb 3-1: config index 0 descriptor too short (expected 68, got 36) [ 182.633538][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.678328][ T2823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.686178][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.762648][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 182.763585][ T2823] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 182.799666][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.860251][ T8] usb 3-1: config 0 descriptor?? [ 182.883938][ T2823] batman_adv: batadv3: Removing interface: netdevsim0 [ 182.886514][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 182.917931][ T2823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.107291][ T5111] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 183.107392][ T5111] Bluetooth: hci3: Malformed LE Event: 0x0d [ 183.143218][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.271154][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 183.367097][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.377851][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.405164][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.413908][ T58] usb 3-1: USB disconnect, device number 17 [ 183.420993][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.430242][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.446774][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.485591][ T2823] bridge_slave_1: left allmulticast mode [ 183.501929][ T2823] bridge_slave_1: left promiscuous mode [ 183.525078][ T2823] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.563106][ T2823] bridge_slave_0: left allmulticast mode [ 183.598895][ T2823] bridge_slave_0: left promiscuous mode [ 183.617516][ T2823] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.191478][ T5266] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 184.401113][ T5266] usb 4-1: Using ep0 maxpacket: 8 [ 184.421525][ T5266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.449614][ T5266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.468437][ T5266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 184.537623][ T5266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 184.571097][ T5266] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 184.580486][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.601560][ T5266] hub 4-1:1.0: bad descriptor, ignoring hub [ 184.607492][ T5266] hub 4-1:1.0: probe with driver hub failed with error -5 [ 184.632796][ T5266] cdc_wdm 4-1:1.0: skipping garbage [ 184.650964][ T5266] cdc_wdm 4-1:1.0: skipping garbage [ 184.694344][ T5266] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 184.706515][ T2823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.715317][ T5266] cdc_wdm 4-1:1.0: Unknown control protocol [ 184.731843][ T2823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.785189][ T2823] bond0 (unregistering): Released all slaves [ 184.822497][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.867182][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.874100][ T7894] batman_adv: batadv1: Adding interface: netdevsim0 [ 184.912423][ T7894] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.914701][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.938112][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.023312][ T7894] batman_adv: batadv1: Interface activated: netdevsim0 [ 185.101883][ T7912] fuse: Bad value for 'fd' [ 185.131525][ T5266] usb 4-1: USB disconnect, device number 21 [ 185.255045][ T29] audit: type=1400 audit(1719122321.642:303): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=7895 comm="syz-executor.4" [ 185.351409][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.512189][ T5111] Bluetooth: hci0: command tx timeout [ 185.596735][ T2823] hsr_slave_0: left promiscuous mode [ 185.625598][ T2823] hsr_slave_1: left promiscuous mode [ 185.644319][ T2823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.670207][ T2823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.704411][ T2823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.765858][ T2823] veth1_macvtap: left promiscuous mode [ 185.804225][ T2823] veth0_macvtap: left promiscuous mode [ 185.820502][ T2823] veth1_vlan: left promiscuous mode [ 185.838246][ T2823] veth0_vlan: left promiscuous mode [ 186.394309][ T7948] x_tables: unsorted underflow at hook 2 [ 186.691152][ T45] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 186.903262][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.918666][ T45] usb 3-1: config 179 has no interface number 0 [ 186.928835][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 186.951416][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 186.971084][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 186.996649][ T45] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 187.027821][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 187.041104][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.092351][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.092818][ T7948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.117762][ T7948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.194455][ T45] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 187.293280][ T4532] input input14: unable to receive magic message: -110 [ 187.313823][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 187.361833][ T4532] input input14: unable to receive magic message: -32 [ 187.386340][ T4532] input input14: unable to receive magic message: -32 [ 187.396131][ T4532] input input14: unable to receive magic message: -32 [ 187.463795][ T4532] input input14: unable to receive magic message: -32 [ 187.488460][ T5162] usb 3-1: USB disconnect, device number 18 [ 187.488570][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.503389][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.506663][ T5162] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 187.560398][ T2823] team0 (unregistering): Port device team_slave_1 removed [ 187.581205][ T58] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 187.596543][ T5111] Bluetooth: hci0: command tx timeout [ 187.625704][ T2823] team0 (unregistering): Port device team_slave_0 removed [ 187.762971][ T58] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 187.772948][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.785027][ T58] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 187.798394][ T58] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 187.819614][ T58] usb 4-1: Manufacturer: syz [ 187.838009][ T58] usb 4-1: config 0 descriptor?? [ 187.961207][ T58] rc_core: IR keymap rc-hauppauge not found [ 187.967177][ T58] Registered IR keymap rc-empty [ 187.980293][ T58] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 187.993759][ T58] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 188.158879][ T5162] usb 4-1: USB disconnect, device number 22 [ 188.672914][ T7975] tipc: Started in network mode [ 188.688382][ T7975] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 188.734799][ T7975] tipc: Enabled bearer , priority 10 [ 188.763519][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 188.855576][ T58] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.981614][ T5162] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.996754][ T29] audit: type=1326 audit(1719122325.392:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad2887d0a9 code=0x0 [ 189.018991][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.051885][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 189.069839][ T58] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.084963][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.096658][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 189.109020][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 189.121619][ T58] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.133456][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.171556][ T58] hub 1-1:1.0: bad descriptor, ignoring hub [ 189.178998][ T58] hub 1-1:1.0: probe with driver hub failed with error -5 [ 189.196147][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 189.199376][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 189.201830][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 189.219785][ T58] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 189.226459][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.234043][ T58] cdc_wdm 1-1:1.0: Unknown control protocol [ 189.243237][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.260346][ T5162] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.279178][ T7889] bridge_slave_0: entered allmulticast mode [ 189.289774][ T5162] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.303344][ T7889] bridge_slave_0: entered promiscuous mode [ 189.335119][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.354993][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 189.374585][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.401581][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 189.419986][ T7889] bridge_slave_1: entered allmulticast mode [ 189.438857][ T5162] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.470809][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.475441][ T7889] bridge_slave_1: entered promiscuous mode [ 189.523001][ T5162] hub 5-1:1.0: bad descriptor, ignoring hub [ 189.538243][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.557190][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.602220][ T5162] hub 5-1:1.0: probe with driver hub failed with error -5 [ 189.640387][ T5162] cdc_wdm 5-1:1.0: skipping garbage [ 189.653408][ T5162] cdc_wdm 5-1:1.0: skipping garbage [ 189.669099][ T5162] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 189.675298][ T53] Bluetooth: hci0: command tx timeout [ 189.683739][ T5162] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.756777][ T58] usb 1-1: USB disconnect, device number 17 [ 189.772137][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.793840][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.812588][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.832495][ T45] tipc: Node number set to 15444650 [ 189.853003][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.980649][ T7889] team0: Port device team_slave_0 added [ 190.018887][ T7889] team0: Port device team_slave_1 added [ 190.115915][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.128302][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.140588][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.148204][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.160317][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.186725][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.257378][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.272031][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.382847][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.664447][ T7889] hsr_slave_0: entered promiscuous mode [ 190.690517][ T7889] hsr_slave_1: entered promiscuous mode [ 190.986974][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.999043][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.009659][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.019228][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.032602][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.040037][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.140779][ T29] audit: type=1400 audit(1719122327.492:305): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=8017 comm="syz-executor.2" [ 191.675862][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 191.777368][ T5111] Bluetooth: hci0: command tx timeout [ 192.242440][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 192.270853][ T7889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.310827][ T7889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.363122][ T7889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.403139][ T7889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.719685][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.729118][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.769074][ T8034] bridge_slave_0: entered allmulticast mode [ 192.779212][ T8034] bridge_slave_0: entered promiscuous mode [ 192.833034][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.840195][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.865401][ T8034] bridge_slave_1: entered allmulticast mode [ 192.886146][ T8034] bridge_slave_1: entered promiscuous mode [ 193.017022][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.074749][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.113410][ T5111] Bluetooth: hci4: command tx timeout [ 193.286504][ T8034] team0: Port device team_slave_0 added [ 193.324470][ T8034] team0: Port device team_slave_1 added [ 193.464002][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.482188][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.549869][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.598087][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.635832][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.671470][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.708394][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.719104][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.728552][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.739133][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.748292][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.768610][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.779367][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.972384][ T7972] cdc_wdm 1-1:1.0: Error autopm - -16 [ 194.048566][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.102387][ T8034] hsr_slave_0: entered promiscuous mode [ 194.117182][ T8034] hsr_slave_1: entered promiscuous mode [ 194.138796][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.157753][ T8034] Cannot create hsr debugfs directory [ 194.171894][ T45] usb 5-1: USB disconnect, device number 13 [ 194.324662][ T2896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.491532][ T8103] use of bytesused == 0 is deprecated and will be removed in the future, [ 194.500753][ T8103] use the actual size instead. [ 194.567634][ T2896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.663779][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.671005][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.677150][ T8115] x_tables: unsorted underflow at hook 2 [ 194.716435][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.717354][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.723338][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.729877][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.853538][ T2896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.934863][ T8103] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 194.980730][ T5162] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 195.073318][ T2896] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 195.114261][ T2896] batman_adv: batadv3: Removing interface: netdevsim0 [ 195.163031][ T2896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.183393][ T5162] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 195.192143][ T5117] Bluetooth: hci4: command tx timeout [ 195.199181][ T5162] usb 1-1: config 179 has no interface number 0 [ 195.207663][ T5162] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 195.219334][ T5162] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 195.244429][ T5162] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 195.278802][ T5162] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.341609][ T5162] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 195.382334][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.408483][ T8115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.421134][ T8115] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.463034][ T5162] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 195.554332][ T4532] input input16: unable to receive magic message: -110 [ 195.634972][ T4532] input input16: unable to receive magic message: -32 [ 195.693312][ T4532] input input16: unable to receive magic message: -32 [ 195.765206][ T25] usb 1-1: USB disconnect, device number 18 [ 195.765351][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.779513][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.792305][ T25] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 195.831716][ T5117] Bluetooth: hci3: command tx timeout [ 195.862059][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.894484][ T8034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.069901][ T8034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.198553][ T8034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.246197][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 196.282531][ T8034] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 196.331516][ T8034] batman_adv: batadv3: Removing interface: netdevsim0 [ 196.363262][ T8034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.471489][ T2896] gretap0: left allmulticast mode [ 196.482039][ T2896] gretap0: left promiscuous mode [ 196.487213][ T2896] bridge0: port 3(gretap0) entered disabled state [ 196.527579][ T2896] bridge_slave_1: left allmulticast mode [ 196.552999][ T2896] bridge_slave_1: left promiscuous mode [ 196.558811][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.575130][ T2896] bridge_slave_0: left allmulticast mode [ 196.582350][ T2896] bridge_slave_0: left promiscuous mode [ 196.602457][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.634857][ T2896] tipc: Resetting bearer [ 197.014155][ T2896] tipc: Disabling bearer [ 197.281280][ T5117] Bluetooth: hci4: command tx timeout [ 197.317842][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.329847][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.342612][ T2896] bond0 (unregistering): Released all slaves [ 197.401109][ T8148] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.487291][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.519191][ T2896] tipc: Left network mode [ 197.619859][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.911408][ T5117] Bluetooth: hci3: command tx timeout [ 197.958004][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.007398][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.019209][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.034453][ T8091] bridge_slave_0: entered allmulticast mode [ 198.051513][ T8091] bridge_slave_0: entered promiscuous mode [ 198.085013][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.101067][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.123111][ T8091] bridge_slave_1: entered allmulticast mode [ 198.151543][ T8091] bridge_slave_1: entered promiscuous mode [ 198.223231][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.251930][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.260467][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.277471][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.295510][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.309630][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.340325][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.522910][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.575298][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.610257][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.638334][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.735200][ T2896] hsr_slave_0: left promiscuous mode [ 198.752427][ T2896] hsr_slave_1: left promiscuous mode [ 198.759568][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.782291][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.798804][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.811182][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.851944][ T2896] veth1_macvtap: left promiscuous mode [ 198.857496][ T2896] veth0_macvtap: left promiscuous mode [ 198.863763][ T2896] veth1_vlan: left promiscuous mode [ 198.869096][ T2896] veth0_vlan: left promiscuous mode [ 199.351272][ T5117] Bluetooth: hci4: command tx timeout [ 199.450052][ T2896] team0 (unregistering): Port device team_slave_1 removed [ 199.505951][ T2896] team0 (unregistering): Port device team_slave_0 removed [ 199.991303][ T5117] Bluetooth: hci3: command tx timeout [ 200.083074][ T8091] team0: Port device team_slave_0 added [ 200.195404][ T8091] team0: Port device team_slave_1 added [ 200.239288][ T7889] veth0_vlan: entered promiscuous mode [ 200.349227][ T7889] veth1_vlan: entered promiscuous mode [ 200.377935][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.391253][ T5111] Bluetooth: hci1: command tx timeout [ 200.404469][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.431392][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.464483][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.480226][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.509519][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.637080][ T29] audit: type=1400 audit(1719122337.022:306): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=8192 comm="syz-executor.0" [ 201.031420][ T8091] hsr_slave_0: entered promiscuous mode [ 201.040709][ T8091] hsr_slave_1: entered promiscuous mode [ 201.053887][ T8091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.064819][ T8091] Cannot create hsr debugfs directory [ 201.078737][ T7889] veth0_macvtap: entered promiscuous mode [ 201.123601][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 201.208086][ T7889] veth1_macvtap: entered promiscuous mode [ 201.451797][ T8218] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(125644927801169) <= P.seqno(0) <= S.SWH(125644927801243)) and (P.ackno exists or LAWL(81696900423227) <= P.ackno(81696900423229) <= S.AWH(81696900423229), sending SYNC... [ 201.580456][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.630458][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.642968][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.658803][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.669432][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.686504][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.697924][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.712665][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.775296][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.841141][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.855226][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.866473][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.877612][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.887528][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.897979][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.909444][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.920772][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.929076][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.937200][ T8177] bridge_slave_0: entered allmulticast mode [ 201.946613][ T8177] bridge_slave_0: entered promiscuous mode [ 202.001344][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.019599][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.027222][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.036863][ T8177] bridge_slave_1: entered allmulticast mode [ 202.052685][ T8177] bridge_slave_1: entered promiscuous mode [ 202.071329][ T5111] Bluetooth: hci3: command tx timeout [ 202.141961][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.178878][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.219778][ T7889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.229036][ T7889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.250975][ T7889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.259758][ T7889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.261304][ T8228] x_tables: unsorted underflow at hook 2 [ 202.296008][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.387786][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.471938][ T5111] Bluetooth: hci1: command tx timeout [ 202.573212][ T5266] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 202.598560][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.613251][ T8177] team0: Port device team_slave_0 added [ 202.632588][ T8177] team0: Port device team_slave_1 added [ 202.818445][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.825672][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.834762][ T5266] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.843134][ T5266] usb 1-1: config 179 has no interface number 0 [ 202.849428][ T5266] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 202.873993][ T5266] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 202.885587][ T5266] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 202.887693][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.897702][ T5266] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.915877][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.918048][ T5266] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 202.955000][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.961500][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.976988][ T8228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.985822][ T8228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.004265][ T5266] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17 [ 203.051410][ T4532] input input17: unable to receive magic message: -110 [ 203.062678][ T4532] input input17: unable to receive magic message: -32 [ 203.073459][ T4532] input input17: unable to receive magic message: -32 [ 203.084187][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 203.094078][ T4532] input input17: unable to receive magic message: -32 [ 203.184404][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.197020][ T5809] input input17: unable to receive magic message: -32 [ 203.201840][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.231269][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.235852][ T5164] usb 1-1: USB disconnect, device number 19 [ 203.241830][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.241875][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 203.278747][ T5164] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 203.300194][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.307545][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.326094][ T51] bridge_slave_1: left allmulticast mode [ 203.332211][ T51] bridge_slave_1: left promiscuous mode [ 203.338337][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.347344][ T51] bridge_slave_0: left allmulticast mode [ 203.353550][ T51] bridge_slave_0: left promiscuous mode [ 203.359373][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.735355][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.747847][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.765636][ T51] bond0 (unregistering): Released all slaves [ 203.788686][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.803053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.903361][ T8177] hsr_slave_0: entered promiscuous mode [ 203.918362][ T8177] hsr_slave_1: entered promiscuous mode [ 203.925326][ T8177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.952425][ T8177] Cannot create hsr debugfs directory [ 203.979948][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.990273][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.279416][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.304229][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.314827][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.432169][ T51] hsr_slave_0: left promiscuous mode [ 204.455106][ T51] hsr_slave_1: left promiscuous mode [ 204.465384][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.473316][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.491909][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.499378][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.544018][ T51] veth1_macvtap: left promiscuous mode [ 204.549613][ T51] veth0_macvtap: left promiscuous mode [ 204.555714][ T5111] Bluetooth: hci1: command tx timeout [ 204.558441][ T51] veth1_vlan: left promiscuous mode [ 204.569117][ T51] veth0_vlan: left promiscuous mode [ 204.911124][ T5266] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 205.122447][ T5266] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.156206][ T5266] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.169464][ T5266] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.188464][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.214943][ T8260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.475725][ T51] team0 (unregistering): Port device team_slave_1 removed [ 205.545608][ T5266] usb 1-1: USB disconnect, device number 20 [ 205.580920][ T51] team0 (unregistering): Port device team_slave_0 removed [ 206.074733][ T8091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.202302][ T8091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.248685][ T8091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.269727][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.339882][ T8091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.631344][ T5111] Bluetooth: hci1: command tx timeout [ 206.638947][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.954216][ T29] audit: type=1400 audit(1719122343.352:307): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=8273 comm="syz-executor.1" [ 207.057587][ T8034] veth0_vlan: entered promiscuous mode [ 207.181285][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.273473][ T8177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.336988][ T8177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.398257][ T8034] veth1_vlan: entered promiscuous mode [ 207.423078][ T8177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.456325][ T8177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.508578][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.628056][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.635243][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.743628][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.750761][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.838985][ T8034] veth0_macvtap: entered promiscuous mode [ 207.907783][ T8091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.919042][ T8091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.956599][ T8034] veth1_macvtap: entered promiscuous mode [ 208.086231][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.101814][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.116933][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.128956][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.155253][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.184656][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.209196][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.275117][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.301170][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.329457][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.363885][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.398290][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.435019][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.446937][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.448727][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.493712][ T8034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.509747][ T8034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.552222][ T8034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.583171][ T8034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.733880][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.852266][ T8313] hsr0: entered promiscuous mode [ 208.877076][ T8313] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 209.234340][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.308697][ T2403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.343329][ T2403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.375223][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.409113][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.416320][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.487735][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.499661][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.506876][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.536685][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.547094][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.602707][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.628902][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.657637][ T8091] veth0_vlan: entered promiscuous mode [ 209.772133][ T8091] veth1_vlan: entered promiscuous mode [ 209.974457][ T8091] veth0_macvtap: entered promiscuous mode [ 210.049749][ T8091] veth1_macvtap: entered promiscuous mode [ 210.119655][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.269282][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.311573][ T29] audit: type=1400 audit(1719122346.672:308): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=8344 comm="syz-executor.3" [ 210.339924][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.369350][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.409533][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.441634][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.471715][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.494996][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.509203][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.524376][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.603568][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.646758][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.682008][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.699225][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.732785][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.767675][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.787962][ T8091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.801543][ T8091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.847357][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.894803][ T8177] veth0_vlan: entered promiscuous mode [ 210.968308][ T8177] veth1_vlan: entered promiscuous mode [ 210.990069][ T8091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.018118][ T8091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.033163][ T8091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.071170][ T8091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.134755][ T8177] veth0_macvtap: entered promiscuous mode [ 211.202565][ T8177] veth1_macvtap: entered promiscuous mode [ 211.374953][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.399077][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.420667][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.445730][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.468268][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.489053][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.509714][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.539648][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.553391][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.577394][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.589977][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.663329][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.681654][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.699301][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.714027][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.730967][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.741583][ T29] audit: type=1326 audit(1719122348.142:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.743011][ T29] audit: type=1326 audit(1719122348.142:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.794228][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.808124][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.819159][ T29] audit: type=1326 audit(1719122348.192:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.847044][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.858572][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.869539][ T29] audit: type=1326 audit(1719122348.222:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.884567][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.917238][ T29] audit: type=1326 audit(1719122348.222:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.918731][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.964387][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.967114][ T29] audit: type=1326 audit(1719122348.222:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 211.983175][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.084105][ T8177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.088748][ T29] audit: type=1326 audit(1719122348.222:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 212.101258][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 212.132038][ T8177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.145951][ T29] audit: type=1326 audit(1719122348.222:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1387d0a9 code=0x7ffc0000 [ 212.150018][ T8177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.182399][ T29] audit: type=1326 audit(1719122348.222:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d1387bca0 code=0x7ffc0000 [ 212.210830][ T8177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.215919][ T29] audit: type=1326 audit(1719122348.222:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.248340][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.264996][ T29] audit: type=1326 audit(1719122348.222:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.280239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.288703][ T29] audit: type=1326 audit(1719122348.232:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.324196][ T29] audit: type=1326 audit(1719122348.232:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.377728][ T29] audit: type=1326 audit(1719122348.352:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.400444][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 212.400501][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.433326][ T29] audit: type=1326 audit(1719122348.432:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d1387ce0b code=0x7ffc0000 [ 212.435762][ T45] usb 1-1: New USB device found, idVendor=04fc, idProduct=7333, bcdDevice=4a.6e [ 212.502848][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.521838][ T45] usb 1-1: Product: syz [ 212.531639][ T45] usb 1-1: Manufacturer: syz [ 212.542817][ T45] usb 1-1: SerialNumber: syz [ 212.545775][ T8421] fuse: Bad value for 'fd' [ 212.593170][ T45] usb 1-1: config 0 descriptor?? [ 212.637765][ T45] gspca_main: spca500-2.14.0 probing 04fc:7333 [ 212.715003][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.743337][ T2823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.770708][ T2823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.829893][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.870252][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.887848][ T8429] x_tables: unsorted underflow at hook 2 [ 212.905432][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.942164][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.958492][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.999948][ T45] usb 1-1: USB disconnect, device number 21 [ 213.191736][ T5266] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 213.382354][ T5266] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.405673][ T5266] usb 4-1: config 179 has no interface number 0 [ 213.437005][ T5266] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 213.477692][ T5266] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 213.532123][ T5266] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 213.567801][ T5266] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.591692][ T5266] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 213.609737][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.639659][ T8429] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 213.651989][ T8429] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 213.689122][ T5266] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input18 [ 213.811214][ T4532] input input18: unable to receive magic message: -110 [ 213.855391][ T4532] input input18: unable to receive magic message: -32 [ 213.945536][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.953956][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.980582][ T5266] usb 4-1: USB disconnect, device number 23 [ 213.989193][ T5266] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 214.689699][ T8469] fuse: Bad value for 'fd' [ 214.711609][ T5166] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.765405][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.921660][ T5166] usb 3-1: Using ep0 maxpacket: 16 [ 214.949109][ T5166] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 214.995695][ T5166] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 215.012245][ T5164] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 215.028254][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.043341][ T5166] usb 3-1: config 0 descriptor?? [ 215.068917][ T5166] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 215.210922][ T5164] usb 5-1: Using ep0 maxpacket: 32 [ 215.248772][ T5164] usb 5-1: New USB device found, idVendor=04fc, idProduct=7333, bcdDevice=4a.6e [ 215.258343][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.266631][ T5164] usb 5-1: Product: syz [ 215.272296][ T5164] usb 5-1: Manufacturer: syz [ 215.277113][ T5164] usb 5-1: SerialNumber: syz [ 215.298155][ T5164] usb 5-1: config 0 descriptor?? [ 215.330774][ T5164] gspca_main: spca500-2.14.0 probing 04fc:7333 [ 215.501705][ T5266] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 215.657287][ T4532] bcm5974 3-1:0.0: could not read from device [ 215.701685][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.718678][ T5266] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 215.753831][ T5266] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 215.778513][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.810165][ T5266] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 215.810656][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.865761][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 215.867564][ T8] usb 5-1: USB disconnect, device number 14 [ 215.921221][ T5266] usb 1-1: Manufacturer: syz [ 215.979207][ T5266] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 216.207058][ T8] usb 1-1: USB disconnect, device number 22 [ 216.830359][ T8492] x_tables: unsorted underflow at hook 2 [ 216.984485][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.115680][ T5166] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 217.191747][ T5266] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.313731][ T5166] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.323747][ T5166] usb 1-1: config 179 has no interface number 0 [ 217.330147][ T5166] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 217.341837][ T5166] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 217.362228][ T5166] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 217.393381][ T5266] usb 5-1: Using ep0 maxpacket: 8 [ 217.403457][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.421065][ T5166] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.435848][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.446577][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 217.457109][ T5166] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 217.468526][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.476751][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.495351][ T5266] usb 5-1: config 0 descriptor?? [ 217.513134][ T8492] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.522057][ T8492] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.543300][ T5166] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20 [ 217.801374][ T5254] input input20: unable to receive magic message: -71 [ 217.816796][ T8] usb 1-1: USB disconnect, device number 23 [ 217.816927][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.831099][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.840850][ T8] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 217.942428][ T5266] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 217.958869][ T5266] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0 [ 218.573424][ T8507] netlink: 200836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.606262][ T8507] openvswitch: netlink: Duplicate key (type 0). [ 219.052824][ T8511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.055294][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 220.055311][ T29] audit: type=1326 audit(1719122356.452:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.084287][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.123416][ T29] audit: type=1326 audit(1719122356.492:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.123608][ T8] usb 5-1: USB disconnect, device number 15 [ 220.158259][ T29] audit: type=1326 audit(1719122356.492:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.249142][ T29] audit: type=1326 audit(1719122356.492:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.330730][ T8526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.342972][ T29] audit: type=1326 audit(1719122356.502:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.396473][ T29] audit: type=1326 audit(1719122356.502:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.453888][ T29] audit: type=1326 audit(1719122356.502:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.493773][ T29] audit: type=1326 audit(1719122356.502:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.518211][ T29] audit: type=1326 audit(1719122356.502:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.544612][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.577517][ T29] audit: type=1326 audit(1719122356.502:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99487d0a9 code=0x7ffc0000 [ 220.600352][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.639164][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.722397][ T8475] bcm5974 3-1:0.0: could not read from device [ 220.741066][ T5809] bcm5974 3-1:0.0: could not read from device [ 220.761656][ T4532] bcm5974 3-1:0.0: could not read from device [ 220.779072][ T4532] bcm5974 3-1:0.0: could not read from device [ 220.787081][ T58] usb 3-1: USB disconnect, device number 19 [ 220.801016][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.841014][ T5166] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 220.944324][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.006809][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 221.019159][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.041030][ T5166] usb 1-1: Using ep0 maxpacket: 8 [ 221.042890][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 221.047890][ T5166] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.056710][ T8] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 221.075307][ T8] usb 5-1: Manufacturer: syz [ 221.088307][ T5166] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.104434][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 221.121059][ T5166] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.160754][ T5166] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.175039][ T5166] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.190005][ T5166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.307377][ T5266] usb 5-1: USB disconnect, device number 16 [ 221.407036][ T5166] usb 1-1: GET_CAPABILITIES returned 0 [ 221.412944][ T58] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 221.420622][ T5166] usbtmc 1-1:16.0: can't read capabilities [ 221.604771][ T58] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.616208][ T58] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.626353][ T58] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.636081][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.654637][ T8540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.673353][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.684106][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.693208][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.702291][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.711856][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.724882][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.734121][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.743148][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.752174][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.761196][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.770228][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.779261][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.832315][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.841433][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.850522][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.966438][ T58] usb 3-1: USB disconnect, device number 20 [ 221.982344][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.991470][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.001264][ T5111] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 222.010132][ T5111] Bluetooth: hci4: Injecting HCI hardware error event [ 222.019448][ T5117] Bluetooth: hci4: hardware error 0x00 [ 222.118795][ T8] usb 1-1: USB disconnect, device number 24 [ 222.186440][ T8548] netlink: 203276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.225780][ T8551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.256600][ T8548] openvswitch: netlink: Duplicate key (type 0). [ 222.824763][ T8563] ip6tnl0: entered promiscuous mode [ 222.835102][ T5266] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 223.038278][ T5266] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 223.075855][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.091241][ T5266] usb 1-1: Product: syz [ 223.101450][ T5266] usb 1-1: Manufacturer: syz [ 223.106086][ T5266] usb 1-1: SerialNumber: syz [ 223.145033][ T5266] usb 1-1: config 0 descriptor?? [ 223.167536][ T8570] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 223.392113][ T5266] usb 1-1: USB disconnect, device number 25 [ 223.522529][ T5162] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 223.753366][ T5162] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 223.764146][ T5162] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.783502][ T5162] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 223.793059][ T5162] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 223.802865][ T5162] usb 4-1: Manufacturer: syz [ 223.825691][ T5162] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.989252][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 224.000455][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.027080][ T5164] usb 4-1: USB disconnect, device number 24 [ 224.071499][ T5117] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 224.441360][ T58] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 224.713541][ T58] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.748409][ T58] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.782165][ T58] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.815319][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.852369][ T8584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.873835][ T5117] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 224.883471][ T5117] Bluetooth: hci3: Injecting HCI hardware error event [ 224.892025][ T5111] Bluetooth: hci3: hardware error 0x00 [ 225.145423][ T58] usb 1-1: USB disconnect, device number 26 [ 225.465524][ T5164] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.516028][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 225.697370][ T5164] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 225.720452][ T5164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.731347][ T5164] usb 4-1: Product: syz [ 225.762553][ T5164] usb 4-1: Manufacturer: syz [ 225.774370][ T5164] usb 4-1: SerialNumber: syz [ 225.800352][ T5164] usb 4-1: config 0 descriptor?? [ 226.032799][ T58] usb 4-1: USB disconnect, device number 25 [ 226.163861][ T5164] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 226.371247][ T5164] usb 3-1: Using ep0 maxpacket: 32 [ 226.394745][ T5164] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 226.408340][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.429675][ T5164] usb 3-1: config 0 descriptor?? [ 226.441617][ T5164] gspca_main: sq930x-2.14.0 probing 041e:403c [ 226.728205][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 226.840245][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.031096][ T5111] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 227.271106][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.487891][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.534069][ T5164] gspca_sq930x: ucbus_write failed -71 [ 227.569037][ T5164] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 227.577569][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.621151][ T5164] usb 3-1: USB disconnect, device number 21 [ 227.630947][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.683460][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.709702][ T8652] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.742105][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.754096][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.770112][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.986891][ T5162] usb 1-1: USB disconnect, device number 27 [ 228.276395][ T8677] x_tables: unsorted underflow at hook 2 [ 228.560998][ T58] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 228.745948][ T58] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.771182][ T58] usb 5-1: config 179 has no interface number 0 [ 228.777729][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 228.790191][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 228.802336][ T58] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 228.814137][ T58] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 228.828231][ T58] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 228.838435][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.856861][ T8677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.874732][ T8677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.888307][ T58] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 228.942084][ T4532] input input21: unable to receive magic message: -110 [ 228.981562][ T4532] input input21: unable to receive magic message: -32 [ 228.996347][ T4532] input input21: unable to receive magic message: -32 [ 229.008969][ T4532] input input21: unable to receive magic message: -32 [ 229.054417][ T5809] input input21: unable to receive magic message: -32 [ 229.066051][ T4532] input input21: unable to receive magic message: -32 [ 229.090602][ T4532] input input21: unable to receive magic message: -32 [ 229.100424][ T4532] input input21: unable to receive magic message: -32 [ 229.121603][ T58] usb 5-1: USB disconnect, device number 17 [ 229.127564][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 229.127607][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.182783][ T58] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 229.243442][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 229.447023][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 229.462797][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 229.486948][ T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 229.503568][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.520548][ T9] usb 1-1: config 0 descriptor?? [ 229.576171][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.585777][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.600440][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.681568][ T5164] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 229.901409][ T5164] usb 4-1: Using ep0 maxpacket: 32 [ 229.935558][ T5164] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 229.965232][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.989611][ T5164] usb 4-1: config 0 descriptor?? [ 230.011043][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.020548][ T5164] gspca_main: sq930x-2.14.0 probing 041e:403c [ 230.033195][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.082033][ T9] hid (null): report_id 2838798905 is invalid [ 230.111137][ T9] hid (null): unknown global tag 0xc [ 230.139083][ T9] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 230.151055][ T9] hid-generic 0003:0158:0100.0005: unexpected long global item [ 230.181653][ T9] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 230.377547][ T8] usb 1-1: USB disconnect, device number 28 [ 230.605330][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 230.605350][ T29] audit: type=1400 audit(1719122367.002:536): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A057E142D901405 pid=8714 comm="syz-executor.2" [ 230.741192][ T45] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 230.924220][ T45] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.945829][ T45] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.985463][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.016754][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.053499][ T5164] gspca_sq930x: ucbus_write failed -71 [ 231.059181][ T5164] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 231.061446][ T8722] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.117551][ T5164] usb 4-1: USB disconnect, device number 26 [ 232.136239][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.210376][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.285066][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.326016][ T8752] x_tables: unsorted underflow at hook 2 [ 232.611052][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 232.861903][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 232.887336][ T9] usb 3-1: config 179 has no interface number 0 [ 232.904190][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 232.943217][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 232.968397][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 232.980821][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.997637][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 233.010250][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.095960][ T8752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.116920][ T8752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.222570][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22 [ 233.361211][ T4532] input input22: unable to receive magic message: -110 [ 233.467067][ T4532] input input22: unable to receive magic message: -32 [ 233.477277][ T45] usb 5-1: USB disconnect, device number 18 [ 233.558171][ T4532] input input22: unable to receive magic message: -71 [ 233.568773][ T58] usb 3-1: USB disconnect, device number 22 [ 233.568931][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 233.575054][ T8765] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 233.583155][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 233.637080][ T58] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 233.680112][ T8765] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 233.836132][ T8761] Cannot find add_set index 0 as target [ 234.271463][ T29] audit: type=1400 audit(1719122370.652:537): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A047E142D901405 pid=8757 comm="syz-executor.0" [ 235.065311][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.081849][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.091574][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.381396][ T58] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 235.624847][ T58] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.662145][ T58] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.683263][ T58] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.696873][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.719313][ T8804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.755382][ T8813] x_tables: unsorted underflow at hook 2 [ 236.050996][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 236.282332][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.295607][ T9] usb 5-1: config 179 has no interface number 0 [ 236.321502][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 236.356328][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 236.392989][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 236.432341][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.475362][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 236.510959][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.553918][ T8813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.572829][ T8813] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.630439][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23 [ 236.721203][ T4532] input input23: unable to receive magic message: -110 [ 236.745116][ T4532] input input23: unable to receive magic message: -32 [ 236.776152][ T4532] input input23: unable to receive magic message: -32 [ 236.817623][ T4532] input input23: unable to receive magic message: -32 [ 236.843500][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.843502][ T58] usb 5-1: USB disconnect, device number 19 [ 236.851911][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.948388][ T58] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.550401][ T8824] x_tables: unsorted underflow at hook 2 [ 237.861376][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 238.058709][ T5166] usb 4-1: USB disconnect, device number 27 [ 238.102977][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.162485][ T9] usb 5-1: config 179 has no interface number 0 [ 238.181435][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 238.210990][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 238.236540][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 238.262196][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.318206][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 238.343060][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.366545][ T8824] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.376079][ T8824] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.385402][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.401367][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24 [ 238.417606][ T11] ------------[ cut here ]------------ [ 238.423621][ T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 238.434052][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 [ 238.443981][ T11] Modules linked in: [ 238.447935][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 238.458112][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 2024/06/23 05:59:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 238.468259][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 238.474619][ T11] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 238.480938][ T11] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 9f e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 cf 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 238.500714][ T11] RSP: 0018:ffffc900001074c0 EFLAGS: 00010246 [ 238.503809][ T4532] input input24: unable to receive magic message: -110 [ 238.506893][ T11] RAX: e23b42301a6d5d00 RBX: 000000000000000c RCX: ffff8880172c3c00 [ 238.522026][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.530146][ T11] RBP: ffff88801f08c028 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 238.538244][ T11] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 238.546329][ T11] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 238.554455][ T11] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 238.563488][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.570124][ T11] CR2: 00007fd994ae0300 CR3: 00000000613fa000 CR4: 00000000003526f0 [ 238.578172][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.586263][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.594333][ T11] Call Trace: [ 238.597704][ T11] [ 238.600657][ T11] ? __warn+0x163/0x4e0 [ 238.604923][ T11] ? __rate_control_send_low+0x659/0x890 [ 238.610589][ T11] ? report_bug+0x2b3/0x500 [ 238.615186][ T11] ? __rate_control_send_low+0x659/0x890 [ 238.620913][ T11] ? handle_bug+0x3e/0x70 [ 238.625303][ T11] ? exc_invalid_op+0x1a/0x50 [ 238.630016][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 238.635196][ T11] ? __warn_printk+0x292/0x360 [ 238.640022][ T11] ? __rate_control_send_low+0x659/0x890 [ 238.645753][ T11] rate_control_send_low+0x1a8/0x770 [ 238.651100][ T11] ? __lock_acquire+0x1346/0x1fd0 [ 238.656186][ T11] rate_control_get_rate+0x20e/0x5e0 [ 238.661654][ T11] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 238.664262][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.667341][ T11] ? __pfx_validate_chain+0x10/0x10 [ 238.667394][ T11] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 238.667433][ T11] invoke_tx_handlers_late+0xb3/0x18e0 [ 238.693578][ T11] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 238.699523][ T11] ieee80211_tx+0x2e3/0x470 [ 238.704143][ T11] ? __pfx_ieee80211_tx+0x10/0x10 [ 238.709213][ T11] ? ieee80211_xmit+0x30f/0x3f0 [ 238.714159][ T11] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 238.720207][ T11] __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 238.726124][ T11] ieee80211_handle_roc_started+0x267/0x440 [ 238.732089][ T11] ? ieee80211_handle_roc_started+0x14f/0x440 [ 238.738231][ T11] _ieee80211_start_next_roc+0x7a1/0xb00 [ 238.743994][ T11] cfg80211_wiphy_work+0x221/0x260 [ 238.749186][ T11] ? process_scheduled_works+0x945/0x1830 [ 238.755017][ T11] process_scheduled_works+0xa2c/0x1830 [ 238.760655][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.766734][ T11] ? assign_work+0x364/0x3d0 [ 238.771482][ T11] worker_thread+0x86d/0xd70 [ 238.776127][ T11] ? __kthread_parkme+0x169/0x1d0 [ 238.781260][ T11] ? __pfx_worker_thread+0x10/0x10 [ 238.786498][ T11] kthread+0x2f0/0x390 [ 238.790631][ T11] ? __pfx_worker_thread+0x10/0x10 [ 238.795862][ T11] ? __pfx_kthread+0x10/0x10 [ 238.800490][ T11] ret_from_fork+0x4b/0x80 [ 238.805021][ T11] ? __pfx_kthread+0x10/0x10 [ 238.809640][ T11] ret_from_fork_asm+0x1a/0x30 [ 238.814537][ T11] [ 238.817650][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.824989][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 238.835072][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.845149][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 238.851430][ T11] Call Trace: [ 238.854738][ T11] [ 238.857686][ T11] dump_stack_lvl+0x241/0x360 [ 238.862399][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.867632][ T11] ? __pfx__printk+0x10/0x10 [ 238.872261][ T11] ? vscnprintf+0x5d/0x90 [ 238.876625][ T11] panic+0x349/0x860 [ 238.880560][ T11] ? __warn+0x172/0x4e0 [ 238.884755][ T11] ? __pfx_panic+0x10/0x10 [ 238.889219][ T11] ? ret_from_fork_asm+0x1a/0x30 [ 238.894197][ T11] __warn+0x346/0x4e0 [ 238.898207][ T11] ? __rate_control_send_low+0x659/0x890 [ 238.903870][ T11] report_bug+0x2b3/0x500 [ 238.908228][ T11] ? __rate_control_send_low+0x659/0x890 [ 238.913891][ T11] handle_bug+0x3e/0x70 [ 238.918076][ T11] exc_invalid_op+0x1a/0x50 [ 238.922611][ T11] asm_exc_invalid_op+0x1a/0x20 [ 238.927494][ T11] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 238.933757][ T11] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 9f e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 cf 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 238.953473][ T11] RSP: 0018:ffffc900001074c0 EFLAGS: 00010246 [ 238.959574][ T11] RAX: e23b42301a6d5d00 RBX: 000000000000000c RCX: ffff8880172c3c00 [ 238.967568][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.975562][ T11] RBP: ffff88801f08c028 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 238.983557][ T11] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 238.991551][ T11] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 238.999553][ T11] ? __warn_printk+0x292/0x360 [ 239.004375][ T11] rate_control_send_low+0x1a8/0x770 [ 239.009679][ T11] ? __lock_acquire+0x1346/0x1fd0 [ 239.014724][ T11] rate_control_get_rate+0x20e/0x5e0 [ 239.020042][ T11] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 239.025701][ T11] ? __pfx_validate_chain+0x10/0x10 [ 239.030932][ T11] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 239.037038][ T11] invoke_tx_handlers_late+0xb3/0x18e0 [ 239.042526][ T11] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 239.048369][ T11] ieee80211_tx+0x2e3/0x470 [ 239.052897][ T11] ? __pfx_ieee80211_tx+0x10/0x10 [ 239.057958][ T11] ? ieee80211_xmit+0x30f/0x3f0 [ 239.062828][ T11] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 239.068828][ T11] __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 239.074671][ T11] ieee80211_handle_roc_started+0x267/0x440 [ 239.080594][ T11] ? ieee80211_handle_roc_started+0x14f/0x440 [ 239.086691][ T11] _ieee80211_start_next_roc+0x7a1/0xb00 [ 239.092373][ T11] cfg80211_wiphy_work+0x221/0x260 [ 239.097514][ T11] ? process_scheduled_works+0x945/0x1830 [ 239.103258][ T11] process_scheduled_works+0xa2c/0x1830 [ 239.108861][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.114882][ T11] ? assign_work+0x364/0x3d0 [ 239.119536][ T11] worker_thread+0x86d/0xd70 [ 239.124170][ T11] ? __kthread_parkme+0x169/0x1d0 [ 239.129219][ T11] ? __pfx_worker_thread+0x10/0x10 [ 239.134357][ T11] kthread+0x2f0/0x390 [ 239.138447][ T11] ? __pfx_worker_thread+0x10/0x10 [ 239.143582][ T11] ? __pfx_kthread+0x10/0x10 [ 239.148195][ T11] ret_from_fork+0x4b/0x80 [ 239.152629][ T11] ? __pfx_kthread+0x10/0x10 [ 239.157241][ T11] ret_from_fork_asm+0x1a/0x30 [ 239.162041][ T11] [ 239.165220][ T11] Kernel Offset: disabled [ 239.169648][ T11] Rebooting in 86400 seconds..