last executing test programs: 6.108324705s ago: executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000100)) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b9740b00000f32ea0000000021000f019e6f750000b906030000b800500000ba000000000f300f0e0f01c466660f38305c311366baa10066b8001066efb805000000b9800000000f01d9f2ac", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.591977158s ago: executing program 3: unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, 0x0) 4.865411065s ago: executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000000)={{0x81, 0xfe}, 'port0\x00', 0x20, 0x11000, 0x781c, 0x800, 0x831, 0x3, 0x3, 0x0, 0x4, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x63c82737, 0x0, 0x0, 0x10004}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x3000000, @mcast1}}}, 0x88) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="be", 0x1}], 0x1}, 0x20048000) r5 = syz_io_uring_setup(0x6d09, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1868, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20000023896) 3.686555192s ago: executing program 3: r0 = memfd_secret(0x0) ftruncate(r0, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x270, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x244, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x220, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x77, 0x1, "1ee6d4b41c1c9b26785e2cbf30d4edcb515a0ed6b2d896c5fee8788fcfce812ddf13318f6ac670a0879c2266e6c548d12a6c4834f67a2c7e8818cf5774a2fc5b98c62c77b83cf0569043bda3bd96292fadd757fcdc9a46466d65229af9b64ef6dc513b77534c1d3a4bb01b15835bd1bbb0d10e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x101}]}, @NFTA_DATA_VALUE={0x57, 0x1, "08808a11b7abd221bb89f66c062b9bdca1f02c78b02274d6fad00bf6e1ca79c393355f1f7b7322a1c1cef8648402f81613f791d92bbd83748e4a0a30e05df4c65ea78503f707f6cbb770867f17a475888725ea"}, @NFTA_DATA_VALUE={0xf6, 0x1, "fe5bce94fa7ee72a62c4464b4da3130536c4ca7097308b4ff5586744d510f47c80aac8a6a86e53b3dbc9ff5167b3fc2ad23b7430979ddc51d74d35aa96b15cd7c86f447a2ada0b8f5349877c6b503ab9ba5d252c1c3821cc98e0dc27431e6c029f76047eb1088bb559c9342724224c849c5adb9007cc7cd2cf03eef1a7dccb410da5d9b5648e0e4fc9ac9d1eb233c5dc90189055904179271d06360d710e89a67c156d90c8790d9958499406dcfda1e7f06e556da637798834411252d42526d05bda1301db1383b452d9488d53e133bee7f4c3fc353960ce3a3dcc0e0dd1e2e90bfd831815bc12de4d4149de172250955356"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x2fc}}, 0x0) io_setup(0xff, 0x0) r3 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000001c0)="fbffffff", 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000001c0)={0x0, [[], [0x0, 0x100001], [0x91]]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000340)={0x0, 0x0, 0xe6, 0x4, 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc4c85512, &(0x7f00000006c0)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in6=@local}, {}, {}, 0x0, 0x40000000}, {{@in6=@remote}, 0x0, @in6=@local}}, 0x121) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.303938939s ago: executing program 0: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.162183962s ago: executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723adc18e3202d38"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.017079238s ago: executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x40000042) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r5, 0x33e26000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{}, {0x30, "81bf4d8f93afad17eb4918eab4f8c5ecda23d13e461f3049c6d43e41ecf3adc0369e77ce03571bae5dafbe54d0e21166512d74ddcbe8fea2d6193ba4af58bb35"}}}}, 0x47) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.918681469s ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) r3 = mq_open(&(0x7f0000001500)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa24\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfN\x95g\xc3vU\r\xa7\"\t\x1b\x9f\xf1f\x1foP\xc5\x13\x8fF\xf0\xa4 *n\x8e1\xb5;\xa2\x8b\xc4\xf9\x1a{\xe0\f\xd9\x89\xd2wg \xde78z\"(V0x0}) r4 = socket(0x10, 0x80002, 0x0) fcntl$setflags(r0, 0x2, 0x1) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32=r4], 0x44}}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x1006, 0x7}}) 2.593657s ago: executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x80402) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000440), &(0x7f0000000040)=0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x10132) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 2.481117512s ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000b80)="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", 0x145) creat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x6c}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0x8}, 0xfffffd27) 2.311976238s ago: executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00'}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50}) 2.299085298s ago: executing program 0: r0 = openat$iommufd(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x50}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sco\x00') preadv(r3, 0x0, 0x0, 0x75, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = epoll_create(0x1) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)) dup2(r8, r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x4d8, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x4}}}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x2, 0x36, 0x24, 0x48, 0xc, 0x6, 0x1, 0x4, 0x16, 0x60, 0x30, 0x24, 0x5, 0x60, 0x2]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0xa}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x2, 0xa}, {0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x5}, {0x0, 0x4}, {0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xa96, 0xdd, 0xff46, 0xff12, 0x40, 0xcf02, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x3ff, 0x5, 0x1, 0x9, 0x5, 0x6, 0xf2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x2}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x4}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x6}, {0x4}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x3}, {0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x4}, {0x3, 0x1}, {}, {0x7, 0x5}, {0x5, 0xa}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x401, 0x8001, 0x1, 0x1, 0x2, 0x20, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x0, 0x6b1d, 0x47b8, 0x4, 0x9, 0xe89]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x6, 0xb0, 0x3f, 0x9, 0x28, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x0, 0xfff7, 0x3f, 0x6, 0x7ff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8030, 0x0, 0x1, 0x200, 0xc13, 0x9, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x1}, {0x1, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x6}, {0x4, 0x4}, {0x3, 0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3f, 0x6, 0x63f, 0xfff7, 0x0, 0xfff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x2}, {0x2}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x2}, {0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8001, 0x3, 0x1000, 0x5, 0x5, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0x1, 0x101, 0x6, 0x5, 0x2, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x7fff, 0xe4, 0x5, 0x7, 0x5, 0x62f]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x2}, {0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {}, {0x4, 0x6}, {0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0xb, 0x5, 0x77, 0x48, 0x87618dbfc5a7c20b, 0x24, 0x6c, 0x1, 0x5, 0x0, 0x60, 0x0, 0x4, 0x9, 0xb, 0x18, 0x69, 0x24, 0x6c, 0x6c, 0x6c, 0x30, 0x1b, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x401, 0x20, 0x78, 0x40, 0x2, 0x785, 0x71ed]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x0, 0x0, 0x4a85, 0x5, 0xff, 0xc4a7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x6, 0x4c, 0x5, 0x1, 0x2, 0x1, 0x5, 0x6, 0xb, 0x36, 0x24, 0x6, 0x18, 0x1, 0x24, 0x74, 0x1b, 0x9, 0x3, 0xc, 0x18, 0x12, 0xb, 0x3, 0x6, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x0, 0x19}, {0x6, 0x2}, {0x1, 0x1}, {0x4}, {0x6}, {0x2, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0x6, 0x9, 0xffff, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6e, 0x7, 0x28, 0xff, 0x7, 0x9, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0xb, 0x4, 0xc, 0x9, 0x24, 0x0, 0x16, 0xa2c478d459b60069, 0x3, 0x30, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x7}, {0x2}, {0x0, 0x6}, {}, {}, {0x1, 0x2}, {}, {0x7}, {0x0, 0x8}, {0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x8, 0x7, 0x77e7, 0x0, 0x3f, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x10041804}, 0x20000011) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='\\'}) 2.123262673s ago: executing program 3: socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_usbip_server_init(0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x0, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000001800), 0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0xb, r2, {0x7, 0x28, 0x0, 0x980000, 0x91, 0x401, 0x10001, 0x321}}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x0, 0x7fffffff}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x6, 0x9, 0x7f, 0x4b}, {0x1229, 0x1, 0x1f, 0x1000}, {0x1f, 0xba, 0x9, 0x81}, {0x1, 0xff, 0x5, 0x4429e8e6}, {0x4, 0x2, 0x6d, 0x9}, {0x7a, 0x8, 0x2, 0xffffffff}, {0x80, 0x40, 0x4, 0x9}, {0x5, 0x1, 0x2, 0x81}, {0x0, 0x1f, 0x1, 0x8001}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.030507881s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) keyctl$restrict_keyring(0x6, 0xfffffffffffffffc, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x39, &(0x7f0000000000)='/proc/sys\x00net/\x00\x00v4\x00\x00s/\x92y\x03\xc0\xb8+\xab\xbbY\xcb\xf3nc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1\xeeu\x8b\x05\xb4\xa0'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/189, 0xbd}, {0x0}], 0x2) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x8, 0x400, 0x100}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r6, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000580)=ANY=[], 0x0) 1.977232987s ago: executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000180)}) 1.96494128s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x44}, 0x1, 0x4c00000000000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r1, r2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0) unshare(0x400) userfaultfd(0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f040e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='f2fs_update_extent_tree_range\x00', r8}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r9, 0x4010744d, 0x20000000) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc}) 1.909437728s ago: executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000000)={{0x81, 0xfe}, 'port0\x00', 0x20, 0x11000, 0x781c, 0x800, 0x831, 0x3, 0x3, 0x0, 0x4, 0x8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x63c82737, 0x0, 0x0, 0x10004}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x3000000, @mcast1}}}, 0x88) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="be", 0x1}], 0x1}, 0x20048000) r5 = syz_io_uring_setup(0x6d09, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1868, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100), &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20000023896) 1.818664887s ago: executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) r3 = mq_open(&(0x7f0000001500)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa24\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfN\x95g\xc3vU\r\xa7\"\t\x1b\x9f\xf1f\x1foP\xc5\x13\x8fF\xf0\xa4 *n\x8e1\xb5;\xa2\x8b\xc4\xf9\x1a{\xe0\f\xd9\x89\xd2wg \xde78z\"(V0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x10132) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 1.514693792s ago: executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000100)) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="b9740b00000f32ea0000000021000f019e6f750000b906030000b800500000ba000000000f300f0e0f01c466660f38305c311366baa10066b8001066efb805000000b9800000000f01d9f2ac", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.509372926s ago: executing program 0: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.241618425s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x2e}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdc9435e3ffe46", 0x3840, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 933.496593ms ago: executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00'}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50}) 928.151789ms ago: executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x40000042) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r5, 0x33e26000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{}, {0x30, "81bf4d8f93afad17eb4918eab4f8c5ecda23d13e461f3049c6d43e41ecf3adc0369e77ce03571bae5dafbe54d0e21166512d74ddcbe8fea2d6193ba4af58bb35"}}}}, 0x47) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 878.975824ms ago: executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r2 = signalfd4(r1, &(0x7f0000000240), 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10042, 0x0) pwrite64(r3, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r2, r3, 0x0, 0x1000000000006) close(0x3) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0x800}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) setresuid(r5, r6, r7) listen(r4, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) write$FUSE_OPEN(r0, 0x0, 0x0) 700.017117ms ago: executing program 4: syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) stat(&(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 561.50411ms ago: executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000b80)="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", 0x145) creat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/meminfo\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x6c}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0x8}, 0xfffffd27) 0s ago: executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r2 = signalfd4(r1, &(0x7f0000000240), 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10042, 0x0) pwrite64(r3, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r2, r3, 0x0, 0x1000000000006) close(0x3) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.030053][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.055161][T10960] bridge_slave_0: entered allmulticast mode [ 408.071868][T10960] bridge_slave_0: entered promiscuous mode [ 408.148312][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.175811][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.200096][T10960] bridge_slave_1: entered allmulticast mode [ 408.223199][T10960] bridge_slave_1: entered promiscuous mode [ 408.257985][ T51] hsr_slave_0: left promiscuous mode [ 408.264979][ T51] hsr_slave_1: left promiscuous mode [ 408.272107][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.279660][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.288802][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.297903][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.378303][ T51] veth1_macvtap: left promiscuous mode [ 408.378398][ T51] veth0_macvtap: left promiscuous mode [ 408.378611][ T51] veth1_vlan: left promiscuous mode [ 408.378750][ T51] veth0_vlan: left promiscuous mode [ 408.478394][T11087] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.682027][ T5118] Bluetooth: hci1: command tx timeout [ 409.401025][ T5118] Bluetooth: hci5: command tx timeout [ 409.780594][ T51] team0 (unregistering): Port device team_slave_1 removed [ 409.879509][ T51] team0 (unregistering): Port device team_slave_0 removed [ 410.520794][T11098] team0: entered promiscuous mode [ 410.526123][T11098] team_slave_0: entered promiscuous mode [ 410.539233][T11098] team_slave_1: entered promiscuous mode [ 410.650132][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.667461][T11097] team0: left promiscuous mode [ 410.672621][T11097] team_slave_0: left promiscuous mode [ 410.678163][T11097] team_slave_1: left promiscuous mode [ 410.752048][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.764088][ T5118] Bluetooth: hci1: command tx timeout [ 410.872094][ T5825] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 410.893115][T11103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.056422][T10960] team0: Port device team_slave_0 added [ 411.084970][ T5825] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 411.099185][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.120324][T10960] team0: Port device team_slave_1 added [ 411.140383][ T5825] usb 3-1: config 0 descriptor?? [ 411.233421][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.250137][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.293903][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.329254][T11051] chnl_net:caif_netlink_parms(): no params data found [ 411.369031][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.381208][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.424578][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.494946][ T5118] Bluetooth: hci5: command tx timeout [ 411.870583][T10960] hsr_slave_0: entered promiscuous mode [ 411.887002][T10960] hsr_slave_1: entered promiscuous mode [ 411.896650][T10960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.905932][T10960] Cannot create hsr debugfs directory [ 412.116880][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.140910][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.156933][T11051] bridge_slave_0: entered allmulticast mode [ 412.167748][T11051] bridge_slave_0: entered promiscuous mode [ 412.303958][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.334735][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.343418][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.353870][T11051] bridge_slave_1: entered allmulticast mode [ 412.384282][T11051] bridge_slave_1: entered promiscuous mode [ 412.570163][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.639495][T11051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.739552][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.770205][ T5825] pegasus 3-1:0.0: setup Pegasus II specific registers [ 412.840839][ T5118] Bluetooth: hci1: command tx timeout [ 412.842881][T11051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.943720][ T5825] pegasus 3-1:0.0: can't locate MII phy, using default [ 413.079453][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.222315][ T5825] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, e6:c9:c6:af:4e:57 [ 413.273099][ T5825] usb 3-1: USB disconnect, device number 39 [ 413.309990][T11051] team0: Port device team_slave_0 added [ 413.415880][T11051] team0: Port device team_slave_1 added [ 413.416957][ T5165] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 413.608173][T11051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.645331][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.695641][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.713204][T11051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.740820][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.751572][T11051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.758569][T11051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.763041][ T5165] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 413.784696][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.812132][ T5165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.829743][ T5165] usb 1-1: config 0 descriptor?? [ 413.852027][T11051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.957334][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.991584][ T5825] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 414.172440][ T5825] usb 3-1: device descriptor read/64, error -71 [ 414.256164][ T5165] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 414.275068][ T5165] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 414.318452][ T5165] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000B/input/input33 [ 414.380030][ T51] bridge_slave_1: left allmulticast mode [ 414.388257][ T5165] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 414.407814][ T51] bridge_slave_1: left promiscuous mode [ 414.418915][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.441617][ T5825] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 414.462291][ T51] bridge_slave_0: left allmulticast mode [ 414.468093][ T51] bridge_slave_0: left promiscuous mode [ 414.498140][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.641987][ T5825] usb 3-1: device descriptor read/64, error -71 [ 414.762611][ T5825] usb usb3-port1: attempt power cycle [ 414.930757][ T5118] Bluetooth: hci1: command tx timeout [ 415.154295][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.176408][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.182238][ T5825] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 415.197968][ T51] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 415.225868][ T51] bond0 (unregistering): Released all slaves [ 415.232647][ T5825] usb 3-1: device descriptor read/8, error -71 [ 415.267153][T11051] hsr_slave_0: entered promiscuous mode [ 415.294045][T11051] hsr_slave_1: entered promiscuous mode [ 415.314809][T11051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.334447][T11051] Cannot create hsr debugfs directory [ 415.501974][ T5825] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 415.560035][ T5825] usb 3-1: device descriptor read/8, error -71 [ 415.652442][ T784] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 415.692949][ T5825] usb usb3-port1: unable to enumerate USB device [ 415.814279][ T51] hsr_slave_0: left promiscuous mode [ 415.823111][ T51] hsr_slave_1: left promiscuous mode [ 415.829487][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.837843][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.846938][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.862415][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.903074][ T51] veth1_macvtap: left promiscuous mode [ 415.908698][ T51] veth0_macvtap: left promiscuous mode [ 415.921112][ T51] veth1_vlan: left promiscuous mode [ 415.926506][ T51] veth0_vlan: left promiscuous mode [ 416.689843][ T51] team0 (unregistering): Port device team_slave_1 removed [ 416.787000][ T51] team0 (unregistering): Port device team_slave_0 removed [ 417.290315][ T5113] usb 1-1: USB disconnect, device number 36 [ 417.451587][ T5216] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 417.653368][ T5216] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 417.684569][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.721094][ T5216] usb 3-1: config 0 descriptor?? [ 417.785478][T10960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.863610][T10960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.967457][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.001964][T10960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.024983][T10960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.501994][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.598664][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.754851][T11217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 418.762660][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.770146][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.798416][T11217] netlink: 199800 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.826242][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.833471][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.904725][T11051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.961747][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.992009][T11051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.039555][T11051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.108609][T11051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.148234][T10960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.279891][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.302317][ T5825] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 419.392748][ T5216] pegasus 3-1:0.0: setup Pegasus II specific registers [ 419.474239][ T5825] usb 4-1: device descriptor read/64, error -71 [ 419.479977][T10960] veth0_vlan: entered promiscuous mode [ 419.526880][ T5216] pegasus 3-1:0.0: can't locate MII phy, using default [ 419.536137][T11051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.559243][T10960] veth1_vlan: entered promiscuous mode [ 419.613170][ T5216] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 3e:a1:4f:c3:01:d0 [ 419.637458][ T5216] usb 3-1: USB disconnect, device number 44 [ 419.724326][T11051] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.757115][ T5825] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 419.797141][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.804413][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.836370][T11242] team0: entered promiscuous mode [ 419.843021][T11242] team_slave_0: entered promiscuous mode [ 419.849217][T11242] team_slave_1: entered promiscuous mode [ 419.856854][T11241] team0: left promiscuous mode [ 419.864968][T11241] team_slave_0: left promiscuous mode [ 419.873967][T11241] team_slave_1: left promiscuous mode [ 419.885810][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.893037][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.932090][ T5825] usb 4-1: device descriptor read/64, error -71 [ 419.950304][T10960] veth0_macvtap: entered promiscuous mode [ 420.023572][T10960] veth1_macvtap: entered promiscuous mode [ 420.052542][ T5825] usb usb4-port1: attempt power cycle [ 420.173864][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.188358][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.203695][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.216617][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.227745][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.242999][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.254754][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.268977][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.286491][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.334937][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.354349][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.367527][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.384171][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.396178][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.408321][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.420060][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.433174][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.445974][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.503401][ T5825] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 420.516616][T10960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.529170][T10960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.540178][T10960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.553177][ T5825] usb 4-1: device descriptor read/8, error -71 [ 420.559442][T10960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.675602][T11051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.716140][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.822124][ T5825] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 420.872710][ T5825] usb 4-1: device descriptor read/8, error -71 [ 421.001551][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.005008][ T5825] usb usb4-port1: unable to enumerate USB device [ 421.009546][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.077198][T11051] veth0_vlan: entered promiscuous mode [ 421.138083][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.143273][T11051] veth1_vlan: entered promiscuous mode [ 421.176827][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.229178][T11051] veth0_macvtap: entered promiscuous mode [ 421.308604][T11051] veth1_macvtap: entered promiscuous mode [ 421.512292][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.551884][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.576620][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.590040][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.600405][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.647695][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.660501][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.679518][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.689452][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.701733][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.760228][T11051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.769126][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.802523][T11277] team0: entered promiscuous mode [ 421.807642][T11277] team_slave_0: entered promiscuous mode [ 421.817063][T11277] team_slave_1: entered promiscuous mode [ 421.826820][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.838075][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.848547][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.859196][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.870214][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.881538][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.895820][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.906521][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.920597][T11051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.932145][ T785] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 421.939888][T11051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.953332][T11051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.972283][T11276] team0: left promiscuous mode [ 421.977122][T11276] team_slave_0: left promiscuous mode [ 421.983422][T11276] team_slave_1: left promiscuous mode [ 422.028487][T11051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.054758][T11051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.065002][T11051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.075130][T11051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.145973][ T785] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 422.188091][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.256534][ T785] usb 2-1: config 0 descriptor?? [ 422.369890][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.404902][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.496566][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.528369][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.767405][T11294] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 423.291143][ T5163] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 423.413492][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 423.508680][ T5163] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.531818][ T5163] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.551886][ T5163] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.568303][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.613512][T11303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 423.634321][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.678147][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.721538][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 423.771537][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.837821][T11303] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.849413][ T9] usb 3-1: config 0 descriptor?? [ 423.917916][ T785] pegasus 2-1:0.0: setup Pegasus II specific registers [ 423.955309][ T5163] usb 1-1: USB disconnect, device number 37 [ 424.085725][ T785] pegasus 2-1:0.0: can't locate MII phy, using default [ 424.106334][ T785] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, fa:98:28:55:52:5f [ 424.135427][ T785] usb 2-1: USB disconnect, device number 19 [ 424.322284][ T9] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 424.349556][ T9] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 424.375313][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000C/input/input34 [ 424.418597][ T9] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 424.444663][ T5166] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 424.544237][ T5216] usb 3-1: USB disconnect, device number 45 [ 424.632382][ T5166] usb 4-1: device descriptor read/64, error -71 [ 424.674740][T11322] team0: entered promiscuous mode [ 424.679887][T11322] team_slave_0: entered promiscuous mode [ 424.697899][T11322] team_slave_1: entered promiscuous mode [ 424.746507][T11321] team0: left promiscuous mode [ 424.759876][T11321] team_slave_0: left promiscuous mode [ 424.777039][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.782111][T11321] team_slave_1: left promiscuous mode [ 424.921704][ T5166] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 424.971999][T11330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.103517][ T5166] usb 4-1: device descriptor read/64, error -71 [ 425.221148][ T5166] usb usb4-port1: attempt power cycle [ 425.389508][T11350] fuse: Bad value for 'group_id' [ 425.651791][ T5166] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 425.659674][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 425.670243][T11357] team0: entered promiscuous mode [ 425.682260][T11357] team_slave_0: entered promiscuous mode [ 425.688162][T11357] team_slave_1: entered promiscuous mode [ 425.709666][ T5166] usb 4-1: device descriptor read/8, error -71 [ 425.717370][T11356] team0: left promiscuous mode [ 425.724654][T11356] team_slave_0: left promiscuous mode [ 425.730257][T11356] team_slave_1: left promiscuous mode [ 425.853093][ T9] usb 3-1: device descriptor read/64, error -71 [ 426.000810][ T29] audit: type=1326 audit(1718140513.660:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.025254][ T5166] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 426.071842][ T5166] usb 4-1: device descriptor read/8, error -71 [ 426.075358][ T29] audit: type=1326 audit(1718140513.660:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.140187][ T29] audit: type=1326 audit(1718140513.720:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.190905][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 426.199827][ T5166] usb usb4-port1: unable to enumerate USB device [ 426.223240][ T29] audit: type=1326 audit(1718140513.720:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.259578][ T29] audit: type=1326 audit(1718140513.720:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.287996][T11364] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.300491][T11364] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 426.313865][ T29] audit: type=1326 audit(1718140513.720:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.351261][ T9] usb 3-1: device descriptor read/64, error -71 [ 426.407569][ T29] audit: type=1326 audit(1718140513.730:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.487216][ T9] usb usb3-port1: attempt power cycle [ 426.506007][ T29] audit: type=1326 audit(1718140513.730:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.538657][ T29] audit: type=1326 audit(1718140513.730:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.582920][ T29] audit: type=1326 audit(1718140513.730:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 426.692824][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 426.951101][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 426.991564][ T9] usb 3-1: device descriptor read/8, error -71 [ 427.132267][T11388] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.207754][T11398] team0: entered promiscuous mode [ 427.234808][T11398] team_slave_0: entered promiscuous mode [ 427.242508][T11398] team_slave_1: entered promiscuous mode [ 427.249167][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 427.264073][T11395] team0: left promiscuous mode [ 427.266171][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 427.268883][T11395] team_slave_0: left promiscuous mode [ 427.269090][T11395] team_slave_1: left promiscuous mode [ 427.321651][ T9] usb 3-1: device descriptor read/8, error -71 [ 427.461327][ T9] usb usb3-port1: unable to enumerate USB device [ 427.594543][T11409] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.940248][T11415] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.952073][T11415] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 427.991028][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 428.148844][T11420] hsr0: entered promiscuous mode [ 428.157856][T11420] hsr0: left promiscuous mode [ 428.180816][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 428.205735][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 428.216403][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.229790][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.240743][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.251020][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.264129][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.277345][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.494359][ T9] usb 5-1: usb_control_msg returned -32 [ 428.520527][ T9] usbtmc 5-1:16.0: can't read capabilities [ 428.804394][T11434] hsr0: entered promiscuous mode [ 428.840548][T11434] hsr0: left promiscuous mode [ 428.862053][T11439] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 428.968715][T11438] team0: entered promiscuous mode [ 428.977229][T11438] team_slave_0: entered promiscuous mode [ 428.996245][T11438] team_slave_1: entered promiscuous mode [ 429.046795][T11437] team0: left promiscuous mode [ 429.071112][T11437] team_slave_0: left promiscuous mode [ 429.076680][T11437] team_slave_1: left promiscuous mode [ 429.891838][T11455] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 429.925694][T11455] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 430.577247][ T5216] usb 5-1: USB disconnect, device number 36 [ 430.707383][T11478] team0: entered promiscuous mode [ 430.748081][T11478] team_slave_0: entered promiscuous mode [ 430.767882][T11478] team_slave_1: entered promiscuous mode [ 430.792417][T11477] team0: left promiscuous mode [ 430.797255][T11477] team_slave_0: left promiscuous mode [ 430.823316][T11477] team_slave_1: left promiscuous mode [ 431.347808][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 431.347828][ T29] audit: type=1326 audit(1718140519.010:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.426131][ T29] audit: type=1326 audit(1718140519.050:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.498749][ T29] audit: type=1326 audit(1718140519.050:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.534527][ T29] audit: type=1326 audit(1718140519.050:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.575337][ T29] audit: type=1326 audit(1718140519.050:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.616243][T11493] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.681929][T11493] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 431.684862][ T29] audit: type=1326 audit(1718140519.050:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.767815][ T29] audit: type=1326 audit(1718140519.050:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.838283][ T29] audit: type=1326 audit(1718140519.050:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 431.948992][ T29] audit: type=1326 audit(1718140519.050:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 432.052794][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.070362][ T29] audit: type=1326 audit(1718140519.050:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 432.367692][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.702628][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.807365][T11518] team0: entered promiscuous mode [ 432.815146][T11518] team_slave_0: entered promiscuous mode [ 432.827676][T11518] team_slave_1: entered promiscuous mode [ 432.993003][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 433.064977][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.132360][T11517] team0: left promiscuous mode [ 433.137320][T11517] team_slave_0: left promiscuous mode [ 433.158311][T11517] team_slave_1: left promiscuous mode [ 433.272178][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.289989][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.299892][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.313879][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.337502][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 433.346659][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.749903][ T51] bridge_slave_1: left allmulticast mode [ 433.783192][ T51] bridge_slave_1: left promiscuous mode [ 433.789057][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.843514][ T51] bridge_slave_0: left allmulticast mode [ 433.849239][ T51] bridge_slave_0: left promiscuous mode [ 433.879528][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.894372][T11538] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.937308][T11538] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 434.860173][ T51] dvmrp1 (unregistering): left allmulticast mode [ 435.289549][ T5165] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 435.343313][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.364769][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.387192][ T51] bond0 (unregistering): Released all slaves [ 435.403530][ T5118] Bluetooth: hci0: command tx timeout [ 435.513491][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.572050][ T5165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.600979][ T5165] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.631240][ T5165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.653445][T11567] team0: entered promiscuous mode [ 435.662215][T11567] team_slave_0: entered promiscuous mode [ 435.673900][ T5165] usb 1-1: config 0 descriptor?? [ 435.691655][T11567] team_slave_1: entered promiscuous mode [ 435.723822][T11566] team0: left promiscuous mode [ 435.738697][T11566] team_slave_0: left promiscuous mode [ 435.771500][T11566] team_slave_1: left promiscuous mode [ 436.238233][T11592] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.308565][T11584] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.402525][T11584] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 436.426883][ T5165] usbhid 1-1:0.0: can't add hid device: -71 [ 436.435987][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 436.436007][ T29] audit: type=1326 audit(1718140524.100:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 436.467204][ T5165] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 436.490737][ T5165] usb 1-1: USB disconnect, device number 38 [ 436.521556][ T29] audit: type=1326 audit(1718140524.130:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 436.560444][ T29] audit: type=1326 audit(1718140524.140:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 436.624256][ T29] audit: type=1326 audit(1718140524.140:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 436.686000][T11592] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 436.763304][T11588] netlink: 176956 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.810448][T11588] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 436.843817][ T29] audit: type=1326 audit(1718140524.320:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 436.881304][T11592] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 436.980432][ T29] audit: type=1326 audit(1718140524.320:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 437.017406][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.153521][ T29] audit: type=1326 audit(1718140524.320:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 437.236867][ T29] audit: type=1326 audit(1718140524.330:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 437.351972][ T29] audit: type=1326 audit(1718140524.330:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 437.408604][ T29] audit: type=1326 audit(1718140524.340:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f67cea9 code=0x7ffc0000 [ 437.444282][ T51] hsr_slave_0: left promiscuous mode [ 437.474396][ T51] hsr_slave_1: left promiscuous mode [ 437.481975][ T5118] Bluetooth: hci0: command tx timeout [ 437.502042][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.511072][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.533177][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.541795][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.580661][ T51] veth1_macvtap: left promiscuous mode [ 437.588181][ T51] veth0_macvtap: left promiscuous mode [ 437.594996][ T51] veth1_vlan: left promiscuous mode [ 437.600537][ T51] veth0_vlan: left promiscuous mode [ 438.137857][ T51] pimreg (unregistering): left allmulticast mode [ 439.065988][ T51] team0 (unregistering): Port device team_slave_1 removed [ 439.139220][ T51] team0 (unregistering): Port device team_slave_0 removed [ 439.571148][ T5118] Bluetooth: hci0: command tx timeout [ 440.099909][T11535] chnl_net:caif_netlink_parms(): no params data found [ 440.528851][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.540746][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.734939][T11535] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.828430][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.866897][T11535] bridge_slave_0: entered allmulticast mode [ 440.878221][T11535] bridge_slave_0: entered promiscuous mode [ 440.913525][T11535] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.942646][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.985334][T11535] bridge_slave_1: entered allmulticast mode [ 440.997203][T11535] bridge_slave_1: entered promiscuous mode [ 441.099246][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.123520][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.419546][T11535] team0: Port device team_slave_0 added [ 441.483565][T11535] team0: Port device team_slave_1 added [ 441.503410][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 441.503431][ T29] audit: type=1326 audit(1718140529.150:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 441.588696][T11681] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 441.605021][T11681] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 441.610692][ T29] audit: type=1326 audit(1718140529.150:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 441.641431][ T5118] Bluetooth: hci0: command tx timeout [ 441.686550][T11535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.704753][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.733440][ T29] audit: type=1326 audit(1718140529.150:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 441.808966][T11535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.831741][ T29] audit: type=1326 audit(1718140529.150:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 441.911878][ T29] audit: type=1326 audit(1718140529.210:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 441.922373][T11535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.985208][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.044919][ T29] audit: type=1326 audit(1718140529.210:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 442.083566][T11535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.100239][ T29] audit: type=1326 audit(1718140529.210:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 442.165566][ T29] audit: type=1326 audit(1718140529.210:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 442.208357][T11701] fuse: Unknown parameter 'grou00000000000000000000' [ 442.259360][ T29] audit: type=1326 audit(1718140529.210:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 442.404754][ T29] audit: type=1326 audit(1718140529.210:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 442.554101][T11535] hsr_slave_0: entered promiscuous mode [ 442.614676][T11535] hsr_slave_1: entered promiscuous mode [ 444.302204][T11743] fuse: Unknown parameter 'grou00000000000000000000' [ 445.321237][ T5168] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 445.528499][T11535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.553193][ T5168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.570358][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 445.587064][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.598433][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 445.612800][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 445.624816][ T5168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.633088][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 445.633242][ T785] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 445.643770][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.652563][T11535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.668509][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 445.695088][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 445.719155][ T5168] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.737111][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 445.779900][T11535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.797726][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.831452][T11535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.838570][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 445.873084][ T5168] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 445.929707][ T5168] usb 4-1: string descriptor 0 read error: -22 [ 445.952625][ T5168] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 445.963950][ T785] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 446.004479][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.010569][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.075005][ T785] usb 1-1: config 0 descriptor?? [ 446.104082][ T5168] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 446.305186][T11535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.380254][T11535] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.391106][ T5165] usb 4-1: USB disconnect, device number 32 [ 446.484714][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.492088][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.555839][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.563124][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.875388][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 447.064299][T11535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.097654][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 447.173475][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.227721][ T9] usb 2-1: config 0 descriptor?? [ 447.359647][T11535] veth0_vlan: entered promiscuous mode [ 447.440201][T11535] veth1_vlan: entered promiscuous mode [ 447.639380][T11535] veth0_macvtap: entered promiscuous mode [ 447.679198][T11535] veth1_macvtap: entered promiscuous mode [ 447.765333][ T785] pegasus 1-1:0.0: setup Pegasus II specific registers [ 447.808153][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.843023][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.858146][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.869189][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.880061][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.891559][ T5113] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 447.914175][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.920496][ T785] pegasus 1-1:0.0: can't locate MII phy, using default [ 447.941255][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.958923][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.970267][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.989265][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.012417][T11535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.047054][ T785] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, f2:d3:8f:1f:5b:5a [ 448.064004][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.084106][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.100123][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.102498][ T785] usb 1-1: USB disconnect, device number 39 [ 448.112039][ T5113] usb 5-1: Using ep0 maxpacket: 8 [ 448.120404][ T5166] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 448.141529][ T5113] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 448.151887][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.165378][ T5113] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 448.177212][ T5113] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 448.187230][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.209260][ T5113] usb 5-1: config 250 has no interface number 0 [ 448.217188][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.228437][ T5113] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 448.249692][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.269285][ T5113] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 448.291578][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.311343][ T5113] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.323852][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.341833][ T5113] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 448.353330][ T5113] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 448.368444][ T5113] usb 5-1: config 250 interface 228 has no altsetting 0 [ 448.369740][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.379377][ T5113] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 448.400896][ T5166] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 448.420967][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.421310][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 448.458411][ T5113] usb 5-1: Product: syz [ 448.461783][T11535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.468549][ T5113] usb 5-1: SerialNumber: syz [ 448.477570][ T5166] usb 4-1: config 0 descriptor?? [ 448.527809][ T5113] hub 5-1:250.228: bad descriptor, ignoring hub [ 448.552610][ T5113] hub 5-1:250.228: probe with driver hub failed with error -5 [ 448.608315][T11535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.652225][T11535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.690296][T11535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.710354][T11535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.759271][ T5113] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 448.935609][ T9] pegasus 2-1:0.0: setup Pegasus II specific registers [ 449.071264][ T5168] usb 5-1: USB disconnect, device number 37 [ 449.105170][ T9] pegasus 2-1:0.0: can't locate MII phy, using default [ 449.117640][ T5168] usblp0: removed [ 449.227428][ T9] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, c2:f5:9c:8b:ee:7e [ 449.262615][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.275859][ T9] usb 2-1: USB disconnect, device number 20 [ 449.297038][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.432393][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.451858][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.632404][ T5113] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 449.648013][T11826] fuse: Unknown parameter 'grou00000000000000000000' [ 449.843673][ T5113] usb 1-1: Using ep0 maxpacket: 8 [ 449.891367][ T5113] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.927594][ T5113] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.945302][ T5113] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.968713][ T5113] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.992744][ T5113] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.008225][ T5113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.194429][ T5166] pegasus 4-1:0.0: setup Pegasus II specific registers [ 450.264859][ T5113] usb 1-1: GET_CAPABILITIES returned 0 [ 450.270438][ T5113] usbtmc 1-1:16.0: can't read capabilities [ 450.344781][ T5166] pegasus 4-1:0.0: can't locate MII phy, using default [ 450.392302][ T5166] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6a:24:2e:99:7c:5a [ 450.426656][ T5166] usb 4-1: USB disconnect, device number 33 [ 450.470992][T11818] usb 1-1: usbtmc_ioctl_clear_in_halt returned -32 [ 450.686378][T11853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 450.692931][T11853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.710886][T11853] vhci_hcd vhci_hcd.0: Device attached [ 450.783199][T11853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.854399][T11853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.930426][T11853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.946882][ T785] vhci_hcd: vhci_device speed not set [ 450.966459][T11840] delete_channel: no stack [ 450.988171][T11853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 451.065000][ T785] usb 13-1: new full-speed USB device number 7 using vhci_hcd [ 451.575023][T11854] vhci_hcd: connection reset by peer [ 451.602316][ T62] vhci_hcd: stop threads [ 451.627720][ T62] vhci_hcd: release socket [ 451.645656][ T62] vhci_hcd: disconnect device [ 452.176542][T11885] fuse: Unknown parameter 'group_i00000000000000000000' [ 452.428193][ T5113] usb 1-1: USB disconnect, device number 40 [ 452.876687][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 452.876708][ T29] audit: type=1326 audit(1718140540.540:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.060950][ T29] audit: type=1326 audit(1718140540.540:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.172695][ T29] audit: type=1326 audit(1718140540.590:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.223434][T11910] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 453.248244][T11910] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 453.295452][ T29] audit: type=1326 audit(1718140540.590:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.416547][ T29] audit: type=1326 audit(1718140540.590:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.516543][ T29] audit: type=1326 audit(1718140540.600:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.645090][ T29] audit: type=1326 audit(1718140540.600:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.705086][T11921] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 453.711660][T11921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 453.738759][ T29] audit: type=1326 audit(1718140540.600:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.763740][T11921] vhci_hcd vhci_hcd.0: Device attached [ 453.790521][T11928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 453.877862][T11921] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 453.913569][ T29] audit: type=1326 audit(1718140540.610:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 453.929691][T11928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 453.962063][T11908] delete_channel: no stack [ 453.980053][ T5168] vhci_hcd: vhci_device speed not set [ 454.002744][T11931] fuse: Unknown parameter 'group_i00000000000000000000' [ 454.038820][ T29] audit: type=1326 audit(1718140540.610:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822507cea9 code=0x7ffc0000 [ 454.065515][ T5168] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 454.108686][T11921] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.423211][T11944] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 454.733768][T11922] vhci_hcd: connection reset by peer [ 454.752423][ T51] vhci_hcd: stop threads [ 454.756793][ T51] vhci_hcd: release socket [ 454.781643][ T51] vhci_hcd: disconnect device [ 455.577980][T11967] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 455.584554][T11967] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 455.624558][T11976] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.652550][T11978] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 455.677040][T11967] vhci_hcd vhci_hcd.0: Device attached [ 455.709089][T11967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.767545][T11976] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.900999][ T5165] vhci_hcd: vhci_device speed not set [ 455.992449][ T5165] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 456.068171][T11984] input: syz1 as /devices/virtual/input/input35 [ 456.210865][ T785] vhci_hcd: vhci_device speed not set [ 456.289430][T11960] delete_channel: no stack [ 456.332855][T11970] vhci_hcd: connection reset by peer [ 456.340370][ T51] vhci_hcd: stop threads [ 456.374415][ T51] vhci_hcd: release socket [ 456.432938][ T51] vhci_hcd: disconnect device [ 456.814816][T12012] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 457.139685][ T5216] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 457.351742][ T5216] usb 4-1: Using ep0 maxpacket: 8 [ 457.368154][ T5216] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.387071][ T5216] usb 4-1: config 0 has no interface number 0 [ 457.396199][T12034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 457.400905][ T5216] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.402733][T12034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 457.431256][ T5216] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 457.452951][ T5216] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 457.469568][T12034] vhci_hcd vhci_hcd.0: Device attached [ 457.504120][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.511630][T12040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.524390][ T5216] usb 4-1: config 0 descriptor?? [ 457.535951][ T5216] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 457.617006][T12034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.671977][T12034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.691635][ T784] vhci_hcd: vhci_device speed not set [ 457.734643][T12016] iowarrior 4-1:0.1: Error -90 while submitting URB [ 457.749088][T12016] sock: sock_timestamping_bind_phc: sock not bind to device [ 457.773263][ T784] usb 11-1: new full-speed USB device number 6 using vhci_hcd [ 457.839982][T12016] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.960461][ T5216] usb 4-1: USB disconnect, device number 34 [ 458.014907][ T5216] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 458.203497][T12032] delete_channel: no stack [ 458.404754][T12035] vhci_hcd: connection reset by peer [ 458.438400][ T51] vhci_hcd: stop threads [ 458.456597][ T51] vhci_hcd: release socket [ 458.487541][ T51] vhci_hcd: disconnect device [ 459.161573][ T5168] vhci_hcd: vhci_device speed not set [ 459.190057][T12089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 459.196631][T12089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 459.231889][T12089] vhci_hcd vhci_hcd.0: Device attached [ 459.257970][T12089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.290547][T12089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.480827][ T5168] vhci_hcd: vhci_device speed not set [ 459.561547][ T5168] usb 9-1: device descriptor read/64, error -110 [ 459.831588][ T5168] vhci_hcd: vhci_device speed not set [ 459.911490][ T5168] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 459.974543][T12085] delete_channel: no stack [ 459.993050][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.016550][T12090] vhci_hcd: connection reset by peer [ 460.031209][T11010] vhci_hcd: stop threads [ 460.035546][T11010] vhci_hcd: release socket [ 460.040147][T11010] vhci_hcd: disconnect device [ 460.483499][T12128] loop0: detected capacity change from 0 to 7 [ 460.528998][T12128] Dev loop0: unable to read RDB block 7 [ 460.545175][T12128] loop0: unable to read partition table [ 460.559976][T12128] loop0: partition table beyond EOD, truncated [ 460.584569][T12128] loop_reread_partitions: partition scan of loop0 (ώθ’«xόŸΡψ ιΪ¬§½dΖ€΄ΰ–ƒέ‘―¨β·ϋ [ 460.584569][T12128] ) failed (rc=-5) [ 461.180992][ T5165] vhci_hcd: vhci_device speed not set [ 461.596415][ T51] bridge_slave_1: left allmulticast mode [ 461.620575][ T51] bridge_slave_1: left promiscuous mode [ 461.676658][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.734795][ T51] bridge_slave_0: left allmulticast mode [ 461.743805][ T51] bridge_slave_0: left promiscuous mode [ 461.763953][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.458603][T12151] delete_channel: no stack [ 462.797763][T12172] ALSA: seq fatal error: cannot create timer (-22) [ 463.001419][ T784] vhci_hcd: vhci_device speed not set [ 463.034712][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.110697][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.172283][ T51] bond0 (unregistering): Released all slaves [ 463.255626][T12160] team0: entered promiscuous mode [ 463.261773][T12160] team_slave_0: entered promiscuous mode [ 463.284878][T12160] team_slave_1: entered promiscuous mode [ 463.345917][T12164] bridge0: port 3(team0) entered blocking state [ 463.392589][T12164] bridge0: port 3(team0) entered disabled state [ 463.453614][T12164] team0: entered allmulticast mode [ 463.458799][T12164] team_slave_0: entered allmulticast mode [ 463.481055][T12164] team_slave_1: entered allmulticast mode [ 463.489906][T12164] team0: entered promiscuous mode [ 463.497451][T12164] team_slave_0: entered promiscuous mode [ 463.504261][T12164] team_slave_1: entered promiscuous mode [ 463.512838][T12164] bridge0: port 3(team0) entered blocking state [ 463.519262][T12164] bridge0: port 3(team0) entered forwarding state [ 463.602894][T12165] bridge0: port 3(team0) entered disabled state [ 463.659849][T12166] team_slave_0: left promiscuous mode [ 463.677321][T12166] team_slave_0: left allmulticast mode [ 463.737504][T12166] team0: Port device team_slave_0 removed [ 463.788266][T12160] team0: left promiscuous mode [ 463.797897][T12160] team_slave_0: left promiscuous mode [ 463.816131][T12160] team_slave_1: left promiscuous mode [ 463.843818][ T51] Κό: left promiscuous mode [ 464.027716][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 464.028332][T12200] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.046800][T12200] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.055974][T12200] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.064863][T12200] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.175779][ T51] tipc: Left network mode [ 464.184168][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.272703][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.600748][ T785] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 464.677831][ T51] hsr_slave_0: left promiscuous mode [ 464.702782][ T51] hsr_slave_1: left promiscuous mode [ 464.713848][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.724080][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.754330][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.764389][ T785] usb 4-1: device descriptor read/64, error -71 [ 464.801343][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.907156][ T51] veth1_macvtap: left promiscuous mode [ 464.956033][ T51] veth0_macvtap: left promiscuous mode [ 464.981580][ T51] veth1_vlan: left promiscuous mode [ 465.004224][ T51] veth0_vlan: left promiscuous mode [ 465.083778][ T5168] vhci_hcd: vhci_device speed not set [ 465.110813][ T785] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 465.302485][ T785] usb 4-1: device descriptor read/64, error -71 [ 465.452519][ T785] usb usb4-port1: attempt power cycle [ 465.900705][ T785] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 465.943972][ T785] usb 4-1: device descriptor read/8, error -71 [ 466.085523][ T51] team0 (unregistering): Port device team_slave_1 removed [ 466.142168][ T51] team0 (unregistering): Port device team_slave_0 removed [ 466.264308][ T785] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 466.317250][ T785] usb 4-1: device descriptor read/8, error -71 [ 466.447174][ T785] usb usb4-port1: unable to enumerate USB device [ 466.685280][T12232] bridge0: port 3(team0) entered blocking state [ 466.708895][T12232] bridge0: port 3(team0) entered disabled state [ 466.741003][T12232] team0: entered allmulticast mode [ 466.749231][T12232] team_slave_0: entered allmulticast mode [ 466.763130][T12232] team_slave_1: entered allmulticast mode [ 466.775791][T12232] team0: entered promiscuous mode [ 466.782152][T12232] team_slave_0: entered promiscuous mode [ 466.788784][T12232] team_slave_1: entered promiscuous mode [ 466.802480][T12232] bridge0: port 3(team0) entered blocking state [ 466.809032][T12232] bridge0: port 3(team0) entered forwarding state [ 466.842319][T12234] bridge0: port 3(team0) entered disabled state [ 466.863191][T12235] team_slave_0: left promiscuous mode [ 466.868836][T12235] team_slave_0: left allmulticast mode [ 466.889098][T12235] team0: Port device team_slave_0 removed [ 467.032279][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.055481][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.617395][ T51] IPVS: stop unused estimator thread 0... [ 468.031025][T11307] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 468.198639][T12269] team0: entered promiscuous mode [ 468.211078][T12269] team_slave_0: entered promiscuous mode [ 468.230996][T12269] team_slave_1: entered promiscuous mode [ 468.247736][T11307] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 468.261356][T12268] team0: left promiscuous mode [ 468.266319][T12268] team_slave_0: left promiscuous mode [ 468.290847][T11307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.297018][T12268] team_slave_1: left promiscuous mode [ 468.345478][T11307] usb 2-1: config 0 descriptor?? [ 468.506875][T12276] bridge0: port 3(team0) entered blocking state [ 468.519508][T12276] bridge0: port 3(team0) entered disabled state [ 468.547464][T12276] team0: entered allmulticast mode [ 468.561546][T12276] team_slave_0: entered allmulticast mode [ 468.590007][T12276] team_slave_1: entered allmulticast mode [ 468.619917][T12276] team0: entered promiscuous mode [ 468.637305][T12276] team_slave_0: entered promiscuous mode [ 468.665029][T12276] team_slave_1: entered promiscuous mode [ 468.673027][T12276] bridge0: port 3(team0) entered blocking state [ 468.679455][T12276] bridge0: port 3(team0) entered forwarding state [ 468.755429][T12277] bridge0: port 3(team0) entered disabled state [ 468.796265][T12278] team_slave_0: left promiscuous mode [ 468.804228][T12278] team_slave_0: left allmulticast mode [ 468.902833][T12278] team0: Port device team_slave_0 removed [ 469.182524][T12271] delete_channel: no stack [ 470.021123][T11307] pegasus 2-1:0.0: setup Pegasus II specific registers [ 470.101963][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 470.101982][ T29] audit: type=1326 audit(1718140557.750:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.173418][T12284] delete_channel: no stack [ 470.199269][ T29] audit: type=1326 audit(1718140557.760:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.205866][ T29] audit: type=1326 audit(1718140557.810:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.255956][ T29] audit: type=1326 audit(1718140557.810:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.258056][T12308] team0: entered promiscuous mode [ 470.279707][ T29] audit: type=1326 audit(1718140557.810:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.290312][T11307] pegasus 2-1:0.0: can't locate MII phy, using default [ 470.317333][ T29] audit: type=1326 audit(1718140557.810:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.343022][T12308] team_slave_0: entered promiscuous mode [ 470.349637][T12308] team_slave_1: entered promiscuous mode [ 470.357166][ T29] audit: type=1326 audit(1718140557.810:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.403919][T12307] team0: left promiscuous mode [ 470.408743][T12307] team_slave_0: left promiscuous mode [ 470.423921][T12307] team_slave_1: left promiscuous mode [ 470.433870][ T29] audit: type=1326 audit(1718140557.810:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.483653][T11307] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 72:a3:0e:1d:01:04 [ 470.519662][ T29] audit: type=1326 audit(1718140557.820:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.532751][T11307] usb 2-1: USB disconnect, device number 21 [ 470.621355][ T29] audit: type=1326 audit(1718140557.820:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 470.847222][T12305] netlink: 176956 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.891561][T12305] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 471.882169][ T785] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 471.935183][T12345] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 472.099312][T12327] delete_channel: no stack [ 472.141428][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 472.167472][ T785] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 472.296103][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.364534][ T785] usb 2-1: Product: syz [ 472.377398][ T785] usb 2-1: Manufacturer: syz [ 472.387513][ T785] usb 2-1: SerialNumber: syz [ 472.412885][T12358] fuse: Bad value for 'fd' [ 472.436144][ T785] usb 2-1: config 0 descriptor?? [ 472.508541][ T785] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 472.587693][T12361] input: syz1 as /devices/virtual/input/input36 [ 472.631730][T12363] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 472.962282][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.053438][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.314717][T12335] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.384459][ T785] gspca_stk1135: reg_w 0x5 err -71 [ 473.405616][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 473.426936][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.442310][ T785] gspca_stk1135: Sensor write failed [ 473.467286][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.485175][ T785] gspca_stk1135: Sensor write failed [ 473.503721][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.525449][ T785] gspca_stk1135: Sensor read failed [ 473.549247][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.582571][ T785] gspca_stk1135: Sensor read failed [ 473.599555][ T785] gspca_stk1135: Detected sensor type unknown (0x0) [ 473.607600][ T9] usb 1-1: device descriptor read/64, error -71 [ 473.624384][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.645589][ T785] gspca_stk1135: Sensor read failed [ 473.663904][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.676420][ T785] gspca_stk1135: Sensor read failed [ 473.691368][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.702294][ T785] gspca_stk1135: Sensor write failed [ 473.708412][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 473.715361][ T785] gspca_stk1135: Sensor write failed [ 473.728899][ T785] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 473.792553][ T785] usb 2-1: USB disconnect, device number 22 [ 473.890967][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 474.037935][T12411] fuse: Bad value for 'fd' [ 474.085177][ T9] usb 1-1: device descriptor read/64, error -71 [ 474.221164][ T9] usb usb1-port1: attempt power cycle [ 474.298848][T12422] input: syz1 as /devices/virtual/input/input37 [ 474.660926][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 474.738142][ T9] usb 1-1: device descriptor read/8, error -71 [ 475.034247][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 475.082954][ T9] usb 1-1: device descriptor read/8, error -71 [ 475.202508][T12448] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 475.211149][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.232935][ T9] usb usb1-port1: unable to enumerate USB device [ 475.424707][ T5216] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 475.438417][T12450] fuse: Bad value for 'fd' [ 475.621766][ T5216] usb 4-1: Using ep0 maxpacket: 16 [ 475.648638][ T5216] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 475.666924][ T5216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.686039][ T5216] usb 4-1: Product: syz [ 475.692898][ T5216] usb 4-1: Manufacturer: syz [ 475.725094][ T5216] usb 4-1: SerialNumber: syz [ 475.743601][ T5216] usb 4-1: config 0 descriptor?? [ 475.766594][ T5216] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 476.518445][T12463] input: syz1 as /devices/virtual/input/input38 [ 476.693045][T12446] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.731731][ T5216] gspca_stk1135: reg_w 0x5 err -71 [ 476.769453][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.811242][ T5216] gspca_stk1135: Sensor write failed [ 476.816618][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.838335][ T5216] gspca_stk1135: Sensor write failed [ 476.856057][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.880253][ T5216] gspca_stk1135: Sensor read failed [ 476.885889][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.893012][ T5216] gspca_stk1135: Sensor read failed [ 476.898256][ T5216] gspca_stk1135: Detected sensor type unknown (0x0) [ 476.905987][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.915413][ T5216] gspca_stk1135: Sensor read failed [ 476.926475][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.933513][ T5216] gspca_stk1135: Sensor read failed [ 476.938875][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 476.965579][ T5216] gspca_stk1135: Sensor write failed [ 476.987724][ T5216] gspca_stk1135: serial bus timeout: status=0x00 [ 477.002394][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 477.021227][ T5216] gspca_stk1135: Sensor write failed [ 477.027537][ T5216] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 477.034628][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 477.049857][ T5216] usb 4-1: USB disconnect, device number 39 [ 477.178923][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.338874][T12482] fuse: Bad value for 'fd' [ 477.473506][T12486] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 477.497100][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 477.558058][T12486] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.950811][ T5166] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 478.121286][ T5166] usb 2-1: device descriptor read/64, error -71 [ 478.412893][ T5166] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 478.633963][ T5166] usb 2-1: device descriptor read/64, error -71 [ 478.764850][T12520] fuse: Invalid rootmode [ 478.800981][ T5166] usb usb2-port1: attempt power cycle [ 478.998593][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 478.998614][ T29] audit: type=1326 audit(1718140566.660:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 479.126368][ T29] audit: type=1326 audit(1718140566.700:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 479.168326][ T29] audit: type=1326 audit(1718140566.700:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 479.219340][ T29] audit: type=1326 audit(1718140566.700:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 479.244137][ T5166] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 479.280118][ T29] audit: type=1326 audit(1718140566.700:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12523 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 479.313694][ T5166] usb 2-1: device descriptor read/8, error -71 [ 479.326553][T12530] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 479.342916][T12530] __nla_validate_parse: 1 callbacks suppressed [ 479.342936][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.610939][ T5166] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 479.662625][ T5166] usb 2-1: device descriptor read/8, error -71 [ 479.785998][ T5166] usb usb2-port1: unable to enumerate USB device [ 479.931999][T12549] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 479.938575][T12549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 479.954695][T12549] vhci_hcd vhci_hcd.0: Device attached [ 479.967788][T12549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 479.978443][T12549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 479.996258][T12550] vhci_hcd: connection closed [ 479.996539][ T761] vhci_hcd: stop threads [ 480.018635][ T761] vhci_hcd: release socket [ 480.032222][ T761] vhci_hcd: disconnect device [ 480.246682][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.260524][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.270567][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.290033][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.303506][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 480.313210][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.419955][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.475047][T12555] fuse: Invalid rootmode [ 480.630326][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.806580][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.061536][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 481.151514][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.300968][T12577] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 481.307168][T12553] chnl_net:caif_netlink_parms(): no params data found [ 481.316253][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.604181][ T11] bridge_slave_1: left allmulticast mode [ 481.610542][ T11] bridge_slave_1: left promiscuous mode [ 481.657304][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.694839][ T11] bridge_slave_0: left allmulticast mode [ 481.709256][ T11] bridge_slave_0: left promiscuous mode [ 481.727405][T12591] fuse: Invalid rootmode [ 481.733784][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.058435][T12595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 482.065110][T12595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 482.121737][T12595] vhci_hcd vhci_hcd.0: Device attached [ 482.158013][T12595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 482.187880][T12595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 482.313160][ T5216] vhci_hcd: vhci_device speed not set [ 482.362539][ T5115] Bluetooth: hci2: command tx timeout [ 482.395863][ T5216] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 482.552473][T12619] fuse: Bad value for 'rootmode' [ 482.874171][T12596] vhci_hcd: connection reset by peer [ 482.891128][T11010] vhci_hcd: stop threads [ 482.895420][T11010] vhci_hcd: release socket [ 482.920809][T11010] vhci_hcd: disconnect device [ 483.018138][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.048156][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.093978][ T11] bond0 (unregistering): Released all slaves [ 483.178701][T12632] tc_dump_action: action bad kind [ 483.209604][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.232934][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.247471][T12553] bridge_slave_0: entered allmulticast mode [ 483.280242][T12553] bridge_slave_0: entered promiscuous mode [ 483.313968][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.336891][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.360377][T12553] bridge_slave_1: entered allmulticast mode [ 483.368483][T12553] bridge_slave_1: entered promiscuous mode [ 483.561596][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 483.754478][T12553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.776816][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.805023][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.844077][T12553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.079156][T12553] team0: Port device team_slave_0 added [ 484.143078][ T11] hsr_slave_0: left promiscuous mode [ 484.157389][ T11] hsr_slave_1: left promiscuous mode [ 484.172642][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.194941][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.205045][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.221604][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.299773][ T11] veth1_macvtap: left promiscuous mode [ 484.324411][ T11] veth0_macvtap: left promiscuous mode [ 484.330296][ T11] veth1_vlan: left promiscuous mode [ 484.337613][ T11] veth0_vlan: left promiscuous mode [ 484.441037][ T5118] Bluetooth: hci2: command tx timeout [ 484.507714][T12673] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 484.514296][T12673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 484.522974][T12673] vhci_hcd vhci_hcd.0: Device attached [ 484.531445][T12673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 484.542318][T12673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 484.714278][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.727013][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.741642][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.752840][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.762679][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.770199][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.911468][T12684] fuse: Bad value for 'user_id' [ 485.088578][T12689] tipc: Can't bind to reserved service type 0 [ 485.220063][T12692] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 485.339947][T12674] vhci_hcd: connection closed [ 485.340193][T11010] vhci_hcd: stop threads [ 485.349990][T11010] vhci_hcd: release socket [ 485.355512][T11010] vhci_hcd: disconnect device [ 485.503594][ T11] team0 (unregistering): Port device team_slave_1 removed [ 485.555636][ T11] team0 (unregistering): Port device team_slave_0 removed [ 486.080289][T12553] team0: Port device team_slave_1 added [ 486.399118][T12553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.429700][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.524394][T12553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.537618][ T5118] Bluetooth: hci2: command tx timeout [ 486.547345][T12553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.554438][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.581101][T12553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.695931][T12712] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 486.705900][T12712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 486.851763][ T5118] Bluetooth: hci4: command tx timeout [ 486.863861][T12553] hsr_slave_0: entered promiscuous mode [ 486.911782][T12553] hsr_slave_1: entered promiscuous mode [ 486.939523][T12553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.971560][T12553] Cannot create hsr debugfs directory [ 487.149294][T12729] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 487.170032][T12733] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 487.176635][T12733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 487.192867][T12733] vhci_hcd vhci_hcd.0: Device attached [ 487.293404][T12737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 487.321781][T12737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 487.390920][ T785] vhci_hcd: vhci_device speed not set [ 487.500757][ T785] usb 13-1: new full-speed USB device number 8 using vhci_hcd [ 487.571292][ T5216] vhci_hcd: vhci_device speed not set [ 487.837939][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.864818][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.958068][T12681] chnl_net:caif_netlink_parms(): no params data found [ 488.062157][T12734] vhci_hcd: connection reset by peer [ 488.076860][ T2413] vhci_hcd: stop threads [ 488.083754][ T2413] vhci_hcd: release socket [ 488.088471][ T2413] vhci_hcd: disconnect device [ 488.177378][T12768] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 488.201836][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.214082][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.225499][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.377054][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.417677][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.611384][ T5118] Bluetooth: hci2: command tx timeout [ 488.798593][T12787] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 488.814135][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.825167][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.921385][ T5118] Bluetooth: hci4: command tx timeout [ 489.022707][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 489.035062][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.047349][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.059329][T12681] bridge_slave_0: entered allmulticast mode [ 489.074527][T12681] bridge_slave_0: entered promiscuous mode [ 489.096740][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.123915][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.131720][T12681] bridge_slave_1: entered allmulticast mode [ 489.139291][T12681] bridge_slave_1: entered promiscuous mode [ 489.204136][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.223607][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.373231][T12681] team0: Port device team_slave_0 added [ 489.392387][T12681] team0: Port device team_slave_1 added [ 489.428479][ T11] bridge0: port 3(team0) entered disabled state [ 489.439013][ T11] bridge_slave_1: left allmulticast mode [ 489.446186][ T11] bridge_slave_1: left promiscuous mode [ 489.452724][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.464352][ T11] bridge_slave_0: left allmulticast mode [ 489.470056][ T11] bridge_slave_0: left promiscuous mode [ 489.476517][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.054589][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.076925][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.089475][ T11] bond0 (unregistering): Released all slaves [ 490.229341][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.237904][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.311332][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.325365][T12553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.402395][T12803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 490.405936][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.408930][T12803] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 490.439690][T12803] vhci_hcd vhci_hcd.0: Device attached [ 490.462875][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.500540][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.545723][T12806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 490.574697][T12553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 490.609667][T12806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 490.642790][T12553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 490.742767][T12553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.001514][ T5118] Bluetooth: hci4: command tx timeout [ 491.085587][ T11] hsr_slave_0: left promiscuous mode [ 491.105614][ T11] hsr_slave_1: left promiscuous mode [ 491.139281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.157016][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.176066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.199327][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.277781][ T11] veth1_macvtap: left promiscuous mode [ 491.287832][T12804] vhci_hcd: connection closed [ 491.288188][ T51] vhci_hcd: stop threads [ 491.294714][ T11] veth0_macvtap: left promiscuous mode [ 491.315699][ T51] vhci_hcd: release socket [ 491.325832][ T11] veth1_vlan: left promiscuous mode [ 491.338320][ T51] vhci_hcd: disconnect device [ 491.361629][ T11] veth0_vlan: left promiscuous mode [ 491.394289][T12830] input: syz1 as /devices/virtual/input/input43 [ 492.336709][ T11] team_slave_1 (unregistering): left promiscuous mode [ 492.346370][ T11] team_slave_1 (unregistering): left allmulticast mode [ 492.359987][ T11] team0 (unregistering): Port device team_slave_1 removed [ 492.605695][ T785] vhci_hcd: vhci_device speed not set [ 492.893609][T12681] hsr_slave_0: entered promiscuous mode [ 492.900328][T12681] hsr_slave_1: entered promiscuous mode [ 492.913706][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.921612][T12681] Cannot create hsr debugfs directory [ 493.081764][ T5118] Bluetooth: hci4: command tx timeout [ 493.169172][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 493.328932][T12856] fuse: Unknown parameter 'use00000000000000000000' [ 493.398652][T12858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 493.405229][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 493.468149][T12858] vhci_hcd vhci_hcd.0: Device attached [ 493.522137][T12864] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.575991][T12858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 493.683147][ T5168] vhci_hcd: vhci_device speed not set [ 493.761372][ T5168] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 493.827750][T12553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.886298][T12553] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.913364][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.920544][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.985372][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.992740][T11307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.179489][T12859] vhci_hcd: connection reset by peer [ 494.188570][T12553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.223332][ T1104] vhci_hcd: stop threads [ 494.229914][ T1104] vhci_hcd: release socket [ 494.235208][T12681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.272101][T12681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 494.287974][ T1104] vhci_hcd: disconnect device [ 494.368678][T12681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 494.439887][T12681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.516487][T12553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.852708][T12553] veth0_vlan: entered promiscuous mode [ 494.969891][T12553] veth1_vlan: entered promiscuous mode [ 495.056825][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.185755][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.214157][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.247774][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.255041][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.297186][T12553] veth0_macvtap: entered promiscuous mode [ 495.319362][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.326627][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.359552][T12553] veth1_macvtap: entered promiscuous mode [ 495.475167][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.506571][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.538387][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.568424][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.579681][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.604090][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.620064][T12553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.656259][T12681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.701675][T12681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.744253][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.778680][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.833088][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.856578][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.868864][T12915] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 495.890572][T12553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.921330][T12553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.943303][T12553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.004571][T12553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.041464][T12553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.060712][T12553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.077961][T12553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.097626][T12923] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 496.355120][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.506236][ T761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.522992][ T761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.537359][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.758266][T12945] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.882219][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.902328][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.948240][T12681] veth0_vlan: entered promiscuous mode [ 497.009810][T12681] veth1_vlan: entered promiscuous mode [ 497.479916][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 497.601767][T12681] veth0_macvtap: entered promiscuous mode [ 497.636432][T12681] veth1_macvtap: entered promiscuous mode [ 497.713657][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.737378][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.760278][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.787384][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.806829][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.819265][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.833099][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.849816][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.903637][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.940507][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.956341][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.972404][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.992196][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.018090][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.033787][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.050261][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.067846][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.085072][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.147665][T12681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.206352][T12681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.235632][T12681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.244942][T12973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 498.244976][T12973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 498.245128][T12973] vhci_hcd vhci_hcd.0: Device attached [ 498.299513][T12982] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 498.319627][T12681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.346178][T12982] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 498.586580][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.594983][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.677907][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.689817][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.915309][T12974] vhci_hcd: connection reset by peer [ 498.928404][ T11] vhci_hcd: stop threads [ 498.933847][ T11] vhci_hcd: release socket [ 498.954883][ T11] vhci_hcd: disconnect device [ 499.032356][ T5168] vhci_hcd: vhci_device speed not set [ 499.095879][T13005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.106262][ T784] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 499.324756][ T784] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 499.336776][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.359603][ T784] usb 4-1: config 0 descriptor?? [ 499.369368][ T784] gspca_main: spca508-2.14.0 probing 8086:0110 [ 499.569722][T13015] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 499.579209][ T784] gspca_spca508: reg_read err -32 [ 499.591580][ T784] gspca_spca508: reg_read err -32 [ 499.601450][ T784] gspca_spca508: reg_read err -32 [ 499.638618][T13015] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 499.815314][T12992] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.896731][T12992] Κό: entered promiscuous mode [ 499.946241][ T784] gspca_spca508: reg_read err -71 [ 499.962708][ T784] gspca_spca508: reg write: error -71 [ 499.968232][ T784] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 499.996776][ T784] usb 4-1: USB disconnect, device number 40 [ 500.021194][T13031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 500.027750][T13031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 500.052280][T13031] vhci_hcd vhci_hcd.0: Device attached [ 500.118910][T13036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 500.138188][T13037] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 500.150554][T13036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 500.251571][ T5168] vhci_hcd: vhci_device speed not set [ 500.331705][ T5168] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 500.516842][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 500.679088][ T29] audit: type=1326 audit(1718140588.340:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 500.708157][ T29] audit: type=1326 audit(1718140588.340:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 500.779281][ T29] audit: type=1326 audit(1718140588.370:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 500.830736][ T29] audit: type=1326 audit(1718140588.370:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 500.878410][T13032] vhci_hcd: connection reset by peer [ 500.896149][T11010] vhci_hcd: stop threads [ 500.910385][T11010] vhci_hcd: release socket [ 500.918580][T11010] vhci_hcd: disconnect device [ 500.942842][ T29] audit: type=1326 audit(1718140588.370:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 500.984237][ T29] audit: type=1326 audit(1718140588.380:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 501.021178][ T29] audit: type=1326 audit(1718140588.380:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 501.107008][ T29] audit: type=1326 audit(1718140588.380:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 501.131587][ T29] audit: type=1326 audit(1718140588.380:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 501.154626][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.162030][ T29] audit: type=1326 audit(1718140588.380:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13052 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 501.269590][T13055] netlink: 176956 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.298202][T13055] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 501.768077][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.792104][T13091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 501.798678][T13091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 501.837688][T13091] vhci_hcd vhci_hcd.0: Device attached [ 501.914796][T13091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.947708][T13091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 501.968843][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.975497][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.483717][T13110] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 502.636127][T13092] vhci_hcd: connection closed [ 502.636485][ T51] vhci_hcd: stop threads [ 502.646057][ T51] vhci_hcd: release socket [ 502.653902][ T51] vhci_hcd: disconnect device [ 503.338692][T13138] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 503.435138][T13132] netlink: 176956 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.458359][T13132] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 503.832522][T13151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 503.839093][T13151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 503.891647][T13151] vhci_hcd vhci_hcd.0: Device attached [ 503.955662][T13151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 503.993659][T13151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 504.090760][ T5166] vhci_hcd: vhci_device speed not set [ 504.128934][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 504.183666][ T5166] usb 11-1: new full-speed USB device number 7 using vhci_hcd [ 504.619238][T13152] vhci_hcd: connection reset by peer [ 504.639783][ T35] vhci_hcd: stop threads [ 504.668141][ T35] vhci_hcd: release socket [ 504.733633][ T35] vhci_hcd: disconnect device [ 504.871872][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.491389][ T5168] vhci_hcd: vhci_device speed not set [ 506.045352][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 506.045369][ T29] audit: type=1326 audit(1718140593.700:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaa047cea9 code=0x0 [ 506.242069][T13223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 506.248647][T13223] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 506.292507][ T29] audit: type=1326 audit(1718140593.950:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.341449][T13223] vhci_hcd vhci_hcd.0: Device attached [ 506.387379][T13223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 506.390726][ T29] audit: type=1326 audit(1718140593.950:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.413482][T13223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 506.438826][ T29] audit: type=1326 audit(1718140593.990:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.514423][ T29] audit: type=1326 audit(1718140593.990:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.592825][ T29] audit: type=1326 audit(1718140593.990:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.644445][ T5168] vhci_hcd: vhci_device speed not set [ 506.701268][ T29] audit: type=1326 audit(1718140593.990:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.732933][ T5168] usb 13-1: new full-speed USB device number 10 using vhci_hcd [ 506.818459][ T29] audit: type=1326 audit(1718140593.990:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.857237][ T29] audit: type=1326 audit(1718140593.990:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 506.938122][ T29] audit: type=1326 audit(1718140593.990:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13229 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd227cea9 code=0x7ffc0000 [ 507.016027][T13230] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 507.051640][T13230] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 507.107612][T13226] vhci_hcd: connection reset by peer [ 507.134570][ T1104] vhci_hcd: stop threads [ 507.160478][ T1104] vhci_hcd: release socket [ 507.185036][ T1104] vhci_hcd: disconnect device [ 507.403795][T13251] geneve1: entered allmulticast mode [ 507.511850][T13251] geneve1: entered promiscuous mode [ 507.532545][T13251] team0: Port device geneve1 added [ 508.530829][T13288] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 508.537387][T13288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.641648][T13293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.650021][T13288] vhci_hcd vhci_hcd.0: Device attached [ 508.713457][T13288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.864285][T11307] vhci_hcd: vhci_device speed not set [ 508.984161][T11307] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 509.226205][T13308] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 509.321251][ T5166] vhci_hcd: vhci_device speed not set [ 509.428403][T13289] vhci_hcd: connection reset by peer [ 509.445203][ T62] vhci_hcd: stop threads [ 509.477853][ T62] vhci_hcd: release socket [ 509.499547][ T62] vhci_hcd: disconnect device [ 509.839178][T13326] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 509.854393][T13326] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 510.425059][T13342] input: syz1 as /devices/virtual/input/input50 [ 510.467307][T13341] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 510.602454][T13344] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 510.609030][T13344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 510.622307][T13344] vhci_hcd vhci_hcd.0: Device attached [ 510.683688][T13349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.732443][T13349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 510.850815][ T784] vhci_hcd: vhci_device speed not set [ 510.891588][T13363] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 510.926854][ T784] usb 15-1: new full-speed USB device number 6 using vhci_hcd [ 511.045709][T13367] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.063472][T13367] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 511.077308][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 511.077328][ T29] audit: type=1326 audit(1718140598.740:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.160156][ T29] audit: type=1326 audit(1718140598.740:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.240265][ T29] audit: type=1326 audit(1718140598.740:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.292401][ T29] audit: type=1326 audit(1718140598.740:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.324071][ T29] audit: type=1326 audit(1718140598.740:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.356052][ T29] audit: type=1326 audit(1718140598.740:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.394709][T13345] vhci_hcd: connection reset by peer [ 511.433750][ T62] vhci_hcd: stop threads [ 511.439230][ T62] vhci_hcd: release socket [ 511.451246][ T62] vhci_hcd: disconnect device [ 511.459016][ T29] audit: type=1326 audit(1718140598.740:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8507cea9 code=0x7ffc0000 [ 511.509218][ T29] audit: type=1326 audit(1718140598.740:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe850a82b5 code=0x7ffc0000 [ 511.551755][ T29] audit: type=1326 audit(1718140598.750:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe850a82b5 code=0x7ffc0000 [ 511.603504][ T29] audit: type=1326 audit(1718140598.750:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe850a82b5 code=0x7ffc0000 [ 511.843051][T13383] input: syz1 as /devices/virtual/input/input51 [ 511.881534][ T5168] vhci_hcd: vhci_device speed not set [ 511.954568][T13386] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 512.699498][ T9] ------------[ cut here ]------------ [ 512.700585][ T9] [ 512.700595][ T9] ====================================================== [ 512.700604][ T9] WARNING: possible circular locking dependency detected [ 512.700613][ T9] 6.10.0-rc3-syzkaller #0 Not tainted [ 512.700625][ T9] ------------------------------------------------------ [ 512.700634][ T9] kworker/0:1/9 is trying to acquire lock: [ 512.700645][ T9] ffffffff8e328140 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 512.700715][ T9] [ 512.700715][ T9] but task is already holding lock: [ 512.700722][ T9] ffffffff94ad1d18 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x10e/0x320 [ 512.700784][ T9] [ 512.700784][ T9] which lock already depends on the new lock. [ 512.700784][ T9] [ 512.700792][ T9] [ 512.700792][ T9] the existing dependency chain (in reverse order) is: [ 512.700800][ T9] [ 512.700800][ T9] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 512.700827][ T9] lock_acquire+0x1ed/0x550 [ 512.700850][ T9] _raw_spin_lock_irqsave+0xd5/0x120 [ 512.700878][ T9] serial8250_console_write+0x1a8/0x1770 [ 512.700899][ T9] console_flush_all+0x867/0xfd0 [ 512.700927][ T9] console_unlock+0x13b/0x4d0 [ 512.700954][ T9] vprintk_emit+0x5a6/0x770 [ 512.700979][ T9] _printk+0xd5/0x120 [ 512.700999][ T9] register_console+0x722/0xce0 [ 512.701028][ T9] univ8250_console_init+0x49/0x50 [ 512.701056][ T9] console_init+0x1b8/0x6f0 [ 512.701079][ T9] start_kernel+0x2d3/0x500 [ 512.701100][ T9] x86_64_start_reservations+0x2a/0x30 [ 512.701128][ T9] x86_64_start_kernel+0x99/0xa0 [ 512.701155][ T9] common_startup_64+0x13e/0x147 [ 512.701176][ T9] [ 512.701176][ T9] -> #0 (console_owner){-.-.}-{0:0}: [ 512.701202][ T9] validate_chain+0x18e0/0x5900 [ 512.701227][ T9] __lock_acquire+0x1346/0x1fd0 [ 512.701247][ T9] lock_acquire+0x1ed/0x550 [ 512.701267][ T9] console_flush_all+0x810/0xfd0 [ 512.701294][ T9] console_unlock+0x13b/0x4d0 [ 512.701320][ T9] vprintk_emit+0x5a6/0x770 [ 512.701347][ T9] _printk+0xd5/0x120 [ 512.701367][ T9] report_bug+0x346/0x500 [ 512.701387][ T9] handle_bug+0x3e/0x70 [ 512.701411][ T9] exc_invalid_op+0x1a/0x50 [ 512.701435][ T9] asm_exc_invalid_op+0x1a/0x20 [ 512.701458][ T9] uart_write+0x2b0/0x320 [ 512.701486][ T9] n_hdlc_send_frames+0x354/0xa90 [ 512.701515][ T9] process_scheduled_works+0xa2c/0x1830 [ 512.701537][ T9] worker_thread+0x86d/0xd70 [ 512.701557][ T9] kthread+0x2f0/0x390 [ 512.701580][ T9] ret_from_fork+0x4b/0x80 [ 512.701607][ T9] ret_from_fork_asm+0x1a/0x30 [ 512.701636][ T9] [ 512.701636][ T9] other info that might help us debug this: [ 512.701636][ T9] [ 512.701644][ T9] Possible unsafe locking scenario: [ 512.701644][ T9] [ 512.701649][ T9] CPU0 CPU1 [ 512.701655][ T9] ---- ---- [ 512.701662][ T9] lock(&port_lock_key); [ 512.701677][ T9] lock(console_owner); [ 512.701692][ T9] lock(&port_lock_key); [ 512.701707][ T9] lock(console_owner); [ 512.701720][ T9] [ 512.701720][ T9] *** DEADLOCK *** [ 512.701720][ T9] [ 512.701725][ T9] 5 locks held by kworker/0:1/9: [ 512.701747][ T9] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 512.701787][ T9] #1: ffffc900000e7d00 ((work_completion)(&n_hdlc->write_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 512.701825][ T9] #2: ffffffff94ad1d18 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x10e/0x320 [ 512.701869][ T9] #3: ffffffff8e20fa60 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 512.701906][ T9] #4: ffffffff8e20f690 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 512.701949][ T9] [ 512.701949][ T9] stack backtrace: [ 512.701960][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc3-syzkaller #0 [ 512.701976][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 512.701988][ T9] Workqueue: events n_hdlc_tty_write_work [ 512.702007][ T9] Call Trace: [ 512.702015][ T9] [ 512.702022][ T9] dump_stack_lvl+0x241/0x360 [ 512.702049][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.702074][ T9] ? print_circular_bug+0x130/0x1a0 [ 512.702098][ T9] check_noncircular+0x36a/0x4a0 [ 512.702123][ T9] ? __pfx_check_noncircular+0x10/0x10 [ 512.702145][ T9] ? lockdep_lock+0x123/0x2b0 [ 512.702163][ T9] ? add_lock_to_list+0x1de/0x2e0 [ 512.702189][ T9] validate_chain+0x18e0/0x5900 [ 512.702221][ T9] ? __pfx_validate_chain+0x10/0x10 [ 512.702244][ T9] ? sprintf+0xda/0x120 [ 512.702268][ T9] ? vsnprintf+0x1cc3/0x1da0 [ 512.702297][ T9] ? info_print_prefix+0x204/0x310 [ 512.702317][ T9] ? mark_lock+0x9a/0x350 [ 512.702338][ T9] __lock_acquire+0x1346/0x1fd0 [ 512.702363][ T9] lock_acquire+0x1ed/0x550 [ 512.702381][ T9] ? console_flush_all+0x152/0xfd0 [ 512.702408][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 512.702425][ T9] ? __pfx_lock_release+0x10/0x10 [ 512.702442][ T9] ? do_raw_spin_lock+0x14f/0x370 [ 512.702470][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 512.702495][ T9] ? console_flush_all+0x3a8/0xfd0 [ 512.702529][ T9] console_flush_all+0x810/0xfd0 [ 512.702553][ T9] ? console_flush_all+0x152/0xfd0 [ 512.702578][ T9] ? console_flush_all+0x152/0xfd0 [ 512.702606][ T9] ? __pfx_console_flush_all+0x10/0x10 [ 512.702631][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 512.702650][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.702674][ T9] ? mark_lock+0x9a/0x350 [ 512.702695][ T9] console_unlock+0x13b/0x4d0 [ 512.702719][ T9] ? __pfx_console_unlock+0x10/0x10 [ 512.702741][ T9] ? _printk+0xd5/0x120 [ 512.702758][ T9] ? _printk+0xd5/0x120 [ 512.702776][ T9] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 512.702801][ T9] ? ip6_finish_output2+0x109f/0x1670 [ 512.702831][ T9] vprintk_emit+0x5a6/0x770 [ 512.702854][ T9] ? __pfx_vprintk_emit+0x10/0x10 [ 512.702876][ T9] ? __lock_acquire+0x1346/0x1fd0 [ 512.702900][ T9] _printk+0xd5/0x120 [ 512.702923][ T9] ? report_bug+0x25e/0x500 [ 512.702940][ T9] ? __pfx__printk+0x10/0x10 [ 512.702961][ T9] ? find_bug+0xa3/0x390 [ 512.702976][ T9] ? uart_write+0x2b0/0x320 [ 512.702999][ T9] ? mark_lock+0x9a/0x350 [ 512.703025][ T9] report_bug+0x346/0x500 [ 512.703042][ T9] ? uart_write+0x2b0/0x320 [ 512.703068][ T9] handle_bug+0x3e/0x70 [ 512.703088][ T9] exc_invalid_op+0x1a/0x50 [ 512.703110][ T9] asm_exc_invalid_op+0x1a/0x20 [ 512.703133][ T9] RIP: 0010:uart_write+0x2b0/0x320 [ 512.703181][ T9] Code: 74 08 48 89 df e8 10 c6 c1 fc 48 83 3b 00 74 74 e8 95 01 5c fc eb 97 e8 8e 01 5c fc 45 31 e4 eb 08 e8 84 01 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 73 01 5c fc 45 31 f6 eb 84 e8 69 01 5c [ 512.703201][ T9] RSP: 0000:ffffc900000e7ac0 EFLAGS: 00010046 [ 512.703216][ T9] RAX: ffffffff853a2572 RBX: dffffc0000000000 RCX: ffff8880172c0000 [ 512.703230][ T9] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900000e79a0 [ 512.703243][ T9] RBP: ffff88801f9f0f48 R08: 0000000000000003 R09: fffff5200001cf34 [ 512.703255][ T9] R10: dffffc0000000000 R11: fffff5200001cf34 R12: 0000000000000000 [ 512.703268][ T9] R13: 0000000000000246 R14: ffff88801f9f0be8 R15: ffffffff94ad1d00 [ 512.703285][ T9] ? uart_write+0x2a2/0x320 [ 512.703315][ T9] ? __pfx_uart_write+0x10/0x10 [ 512.703341][ T9] n_hdlc_send_frames+0x354/0xa90 [ 512.703364][ T9] ? process_scheduled_works+0x945/0x1830 [ 512.703382][ T9] process_scheduled_works+0xa2c/0x1830 [ 512.703412][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.703435][ T9] ? assign_work+0x364/0x3d0 [ 512.703454][ T9] worker_thread+0x86d/0xd70 [ 512.703477][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 512.703509][ T9] ? __kthread_parkme+0x169/0x1d0 [ 512.703530][ T9] ? __pfx_worker_thread+0x10/0x10 [ 512.703549][ T9] kthread+0x2f0/0x390 [ 512.703570][ T9] ? __pfx_worker_thread+0x10/0x10 [ 512.703588][ T9] ? __pfx_kthread+0x10/0x10 [ 512.703610][ T9] ret_from_fork+0x4b/0x80 [ 512.703632][ T9] ? __pfx_kthread+0x10/0x10 [ 512.703654][ T9] ret_from_fork_asm+0x1a/0x30 [ 512.703685][ T9] [ 513.518134][ T9] WARNING: CPU: 0 PID: 9 at drivers/tty/serial/serial_core.c:625 uart_write+0x2b0/0x320 [ 513.527871][ T9] Modules linked in: [ 513.531777][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc3-syzkaller #0 [ 513.539940][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 513.550085][ T9] Workqueue: events n_hdlc_tty_write_work [ 513.555816][ T9] RIP: 0010:uart_write+0x2b0/0x320 [ 513.560955][ T9] Code: 74 08 48 89 df e8 10 c6 c1 fc 48 83 3b 00 74 74 e8 95 01 5c fc eb 97 e8 8e 01 5c fc 45 31 e4 eb 08 e8 84 01 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 73 01 5c fc 45 31 f6 eb 84 e8 69 01 5c [ 513.580586][ T9] RSP: 0000:ffffc900000e7ac0 EFLAGS: 00010046 [ 513.586679][ T9] RAX: ffffffff853a2572 RBX: dffffc0000000000 RCX: ffff8880172c0000 [ 513.594659][ T9] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900000e79a0 [ 513.602634][ T9] RBP: ffff88801f9f0f48 R08: 0000000000000003 R09: fffff5200001cf34 [ 513.610627][ T9] R10: dffffc0000000000 R11: fffff5200001cf34 R12: 0000000000000000 [ 513.618637][ T9] R13: 0000000000000246 R14: ffff88801f9f0be8 R15: ffffffff94ad1d00 [ 513.626646][ T9] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 513.635670][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.642341][ T9] CR2: 0000001b2e536000 CR3: 0000000066ecc000 CR4: 00000000003526f0 [ 513.650310][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.658282][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 513.666253][ T9] Call Trace: [ 513.669567][ T9] [ 513.672502][ T9] ? __warn+0x163/0x4e0 [ 513.676664][ T9] ? uart_write+0x2b0/0x320 [ 513.681203][ T9] ? report_bug+0x2b3/0x500 [ 513.685705][ T9] ? uart_write+0x2b0/0x320 [ 513.690212][ T9] ? handle_bug+0x3e/0x70 [ 513.694546][ T9] ? exc_invalid_op+0x1a/0x50 [ 513.699227][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 513.704260][ T9] ? uart_write+0x2a2/0x320 [ 513.708785][ T9] ? uart_write+0x2b0/0x320 [ 513.713387][ T9] ? __pfx_uart_write+0x10/0x10 [ 513.718243][ T9] n_hdlc_send_frames+0x354/0xa90 [ 513.723281][ T9] ? process_scheduled_works+0x945/0x1830 [ 513.729003][ T9] process_scheduled_works+0xa2c/0x1830 [ 513.734560][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.740545][ T9] ? assign_work+0x364/0x3d0 [ 513.745167][ T9] worker_thread+0x86d/0xd70 [ 513.749760][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 513.755661][ T9] ? __kthread_parkme+0x169/0x1d0 [ 513.760696][ T9] ? __pfx_worker_thread+0x10/0x10 [ 513.765847][ T9] kthread+0x2f0/0x390 [ 513.769921][ T9] ? __pfx_worker_thread+0x10/0x10 [ 513.775035][ T9] ? __pfx_kthread+0x10/0x10 [ 513.779633][ T9] ret_from_fork+0x4b/0x80 [ 513.784062][ T9] ? __pfx_kthread+0x10/0x10 [ 513.788839][ T9] ret_from_fork_asm+0x1a/0x30 [ 513.793623][ T9] [ 513.796656][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.803931][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-rc3-syzkaller #0 [ 513.812086][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 513.822319][ T9] Workqueue: events n_hdlc_tty_write_work [ 513.828166][ T9] Call Trace: [ 513.831454][ T9] [ 513.834409][ T9] dump_stack_lvl+0x241/0x360 [ 513.839097][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.844304][ T9] ? __pfx__printk+0x10/0x10 [ 513.848903][ T9] ? vscnprintf+0x5d/0x90 [ 513.853242][ T9] panic+0x349/0x860 [ 513.857149][ T9] ? __warn+0x172/0x4e0 [ 513.861415][ T9] ? __pfx_panic+0x10/0x10 [ 513.865854][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 513.870818][ T9] __warn+0x346/0x4e0 [ 513.874825][ T9] ? uart_write+0x2b0/0x320 [ 513.879358][ T9] report_bug+0x2b3/0x500 [ 513.883710][ T9] ? uart_write+0x2b0/0x320 [ 513.888233][ T9] handle_bug+0x3e/0x70 [ 513.892397][ T9] exc_invalid_op+0x1a/0x50 [ 513.896922][ T9] asm_exc_invalid_op+0x1a/0x20 [ 513.901780][ T9] RIP: 0010:uart_write+0x2b0/0x320 [ 513.906904][ T9] Code: 74 08 48 89 df e8 10 c6 c1 fc 48 83 3b 00 74 74 e8 95 01 5c fc eb 97 e8 8e 01 5c fc 45 31 e4 eb 08 e8 84 01 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 73 01 5c fc 45 31 f6 eb 84 e8 69 01 5c [ 513.926518][ T9] RSP: 0000:ffffc900000e7ac0 EFLAGS: 00010046 [ 513.932594][ T9] RAX: ffffffff853a2572 RBX: dffffc0000000000 RCX: ffff8880172c0000 [ 513.940568][ T9] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900000e79a0 [ 513.948546][ T9] RBP: ffff88801f9f0f48 R08: 0000000000000003 R09: fffff5200001cf34 [ 513.956517][ T9] R10: dffffc0000000000 R11: fffff5200001cf34 R12: 0000000000000000 [ 513.964518][ T9] R13: 0000000000000246 R14: ffff88801f9f0be8 R15: ffffffff94ad1d00 [ 513.972587][ T9] ? uart_write+0x2a2/0x320 [ 513.977110][ T9] ? __pfx_uart_write+0x10/0x10 [ 513.981976][ T9] n_hdlc_send_frames+0x354/0xa90 [ 513.987017][ T9] ? process_scheduled_works+0x945/0x1830 [ 513.992748][ T9] process_scheduled_works+0xa2c/0x1830 [ 513.998319][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.004310][ T9] ? assign_work+0x364/0x3d0 [ 514.008906][ T9] worker_thread+0x86d/0xd70 [ 514.013527][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 514.019434][ T9] ? __kthread_parkme+0x169/0x1d0 [ 514.024463][ T9] ? __pfx_worker_thread+0x10/0x10 [ 514.029577][ T9] kthread+0x2f0/0x390 [ 514.033656][ T9] ? __pfx_worker_thread+0x10/0x10 [ 514.038953][ T9] ? __pfx_kthread+0x10/0x10 [ 514.043546][ T9] ret_from_fork+0x4b/0x80 [ 514.047975][ T9] ? __pfx_kthread+0x10/0x10 [ 514.052582][ T9] ret_from_fork_asm+0x1a/0x30 [ 514.057366][ T9] [ 514.060703][ T9] Kernel Offset: disabled [ 514.065024][ T9] Rebooting in 86400 seconds..