last executing test programs: 7.428704253s ago: executing program 2 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="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"], 0x130c}}, 0x32008009) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f00000000c0)={0x8, 0x0, 0x4}, 0x0) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000002ec0)=""/4096, 0x1000) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x10000000000001dd) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040)=@int=0x84e, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffe, 0x78a00fca4f0372a1) ioctl$I2C_TIMEOUT(r8, 0x702, 0xffff2c18) ptrace(0x10, r7) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r11, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_xfrm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT], 0xb8}}, 0x0) 5.661260221s ago: executing program 3 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc823000"/2578], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffd93, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0xb0000) flock(r4, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000240)={{@hyper}, 0x1}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000100)={0x3, 0x1}) 4.993021612s ago: executing program 2 (id=1875): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x48079000) 4.983581498s ago: executing program 0 (id=1885): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_opts(r0, 0x29, 0x22, &(0x7f0000000080)=@srh={0x2, 0x0, 0x4, 0x0, 0x2, 0x0, 0x2}, 0x7f8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="000425bd7000ffdbdf250100000038000180060004004e2300000c0007000800000000000000060004004e23000008000b08006970000600020001000000080009002c000000080005006fbeff0f00001c000180090006006c626c6300000000090006006e6f6e65000000000c000280080007000700000028000180080009004c00000014000300ff020000010000000000000000000001070006007272000008000600060000000800060000006ffd6fbeb4b5cd"], 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x8040, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008700000000000000030000001850000010000002000000000000000018430000f9ffffff00000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7, 0x7c, &(0x7f0000000440)=""/124, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xc, 0x9}, {0x4, 0x5, 0x5, 0x3}, {0x2, 0x1, 0x2, 0x8}], 0x10, 0x200002}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="beee4adaba9e"}]}, 0x40}}, 0x0) 4.526101311s ago: executing program 3 (id=1877): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x15) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 4.343564163s ago: executing program 0 (id=1879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.058947173s ago: executing program 3 (id=1882): syz_clone(0x0, 0x0, 0x55, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 4.012577842s ago: executing program 2 (id=1883): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f00000001c0)='%pI4 \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@ptr]}, {0x0, [0x30, 0x0, 0x0, 0x0]}}, 0x0, 0x2a, 0x0, 0x1, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x8140aecc, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.963815117s ago: executing program 0 (id=1884): syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3.670414015s ago: executing program 0 (id=1888): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="1c5c47cc3add2aa79d38b9ded4daa4f4", 0x10) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fd4, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x47524247}}) sendto$l2tp6(r0, &(0x7f0000000080)="08c943d998c53bb4200100109d437becdb26e9102d6a0b1341ef9c21eb24681bf9d3ac83eeb799c6", 0x28, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x20) 3.543980393s ago: executing program 1 (id=1890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x60, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x60}}, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}}, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4143, 0x0) fcntl$setlease(r2, 0x400, 0x1) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc4382, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r7, r5, 0x0, 0x8a000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x4}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.543261269s ago: executing program 3 (id=1891): r0 = syz_io_uring_setup(0x52ba, &(0x7f0000000380)={0x0, 0x3906}, &(0x7f0000000340), 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x4, 0xe, 0x1, 0x0, 0x1ff, 0x0, 0x9, 0x1, 0x7, 0x9, 0x1b, 0x7, 0x0, 0x3, 0x8, 0x7ff], 0x2004, 0x269842}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x8c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000b00)=""/228, 0xe4}], 0x1}, 0x3}, {{&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/199, 0xc7}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f00000007c0)=""/34, 0x22}, {0x0}, {&(0x7f0000000880)=""/70, 0x46}], 0x8, &(0x7f0000000940)=""/244, 0xf4}, 0x7}], 0x2, 0x101, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebca17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) 2.950562739s ago: executing program 4 (id=1892): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x24, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.825806116s ago: executing program 0 (id=1893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2f, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setfsuid(0x0) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_flock_ev\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x3) 2.635784422s ago: executing program 4 (id=1894): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.531662968s ago: executing program 1 (id=1895): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x48079000) 2.389483394s ago: executing program 4 (id=1896): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100600}], 0x3a, 0x1400, 0x0, 0x3) 1.947546201s ago: executing program 3 (id=1897): open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000024001a8020"], 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x413}}}, 0x7) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xec}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x100) getgid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={r4, r5}, 0xc) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064ce, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000f71700010600000000000000001c140000fe000004000000000500130007000000"], 0x24}}, 0x0) 1.790479233s ago: executing program 2 (id=1898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup(r5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="91bb847881e879b81f3c99318a5eecd3f57ea2587a87f2544e1514d48c9682adffc1d8c5d45e201f13839d63a2787e5e7917b8440e4ba220ff716864ecd61a7e9143bb15d07be0d9ed14da9b5500ca64b2cc3707e2cd4e9af653e3f3f573153d51efe2193e9880b13d7d8808a05d006f0b96e0513f1fed6f28bd991fb4b886be2d19773acf8f8fa9194d56fd70370d12e72db649c9ce4e41da291b018ad12cdcb1", 0xa1}], 0x1}}], 0x1, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 1.634278761s ago: executing program 4 (id=1899): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000001"], 0x10}, 0x0) 1.4457704s ago: executing program 1 (id=1900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00ebff4400002000000000002f9078000000000000000000008100000c9078010000003d76df12058db4fe80cd67d1b50351a297e7b74e29f4a4b0ec75716e5157add5e9549fd73de8c5dd09"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x401, &(0x7f00000004c0)=0x0) timerfd_create(0x0, 0x0) io_submit(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0x90) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) r3 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000080000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x6c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) 1.444040441s ago: executing program 0 (id=1910): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="00e848"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.338070424s ago: executing program 4 (id=1901): syz_open_dev$admmidi(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000580)) r0 = openat$kvm(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000940)={0x0, 0x4, 0x0, 0x8000000000000000}) 947.181488ms ago: executing program 2 (id=1902): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x64842, 0x0) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 833.844447ms ago: executing program 4 (id=1903): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "0500"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc040480c, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) 597.54354ms ago: executing program 2 (id=1904): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 534.275599ms ago: executing program 3 (id=1905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="02fe"], 0x20}}, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000200)={r4, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280060003000000000006000e000000000004001200"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x500, 0x0, 0x4050}, 0x20040004) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 477.138857ms ago: executing program 1 (id=1906): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0xfe4d) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'sit0\x00', 0x600}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000080)=""/12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x4}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="042fff010000000000000108503fa507119223"], 0x102) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000039b00000000000eccadf88ae000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xca, &(0x7f0000000500)=""/202}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x28d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x1, 0x3d}, 0x48) 229.951462ms ago: executing program 1 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=1908): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): man_adv: batadv0: Adding interface: batadv_slave_0 [ 450.602394][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.668664][T12302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.719952][T12296] hsr_slave_0: entered promiscuous mode [ 450.739082][T12296] hsr_slave_1: entered promiscuous mode [ 450.755442][T12296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.785345][T12296] Cannot create hsr debugfs directory [ 450.948921][T12302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.980200][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.019514][T12302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.194215][ T2487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.312092][ T2487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.551907][ T2487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.592103][T12302] hsr_slave_0: entered promiscuous mode [ 451.612423][T12302] hsr_slave_1: entered promiscuous mode [ 451.631057][T12302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.648582][T12302] Cannot create hsr debugfs directory [ 451.790990][ T2487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.035823][ T2487] bridge_slave_1: left allmulticast mode [ 453.064441][ T2487] bridge_slave_1: left promiscuous mode [ 453.085024][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.129955][ T2487] bridge_slave_0: left allmulticast mode [ 453.135636][ T2487] bridge_slave_0: left promiscuous mode [ 453.150805][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.220760][ T2487] bridge_slave_1: left allmulticast mode [ 453.226459][ T2487] bridge_slave_1: left promiscuous mode [ 453.239547][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.299469][ T2487] bridge_slave_0: left allmulticast mode [ 453.316991][ T2487] bridge_slave_0: left promiscuous mode [ 453.338353][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.381497][ T2487] bridge_slave_1: left allmulticast mode [ 453.387214][ T2487] bridge_slave_1: left promiscuous mode [ 453.393586][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.430663][ T2487] bridge_slave_0: left allmulticast mode [ 453.436424][ T2487] bridge_slave_0: left promiscuous mode [ 453.476342][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.938750][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.985411][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.003085][ T2487] bond0 (unregistering): Released all slaves [ 456.499324][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.528375][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.565895][ T2487] bond0 (unregistering): Released all slaves [ 456.931630][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.985466][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.013359][ T2487] bond0 (unregistering): Released all slaves [ 457.708636][T12273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.738705][T12273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.819369][T12273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.963453][T12273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.907005][ T2487] hsr_slave_0: left promiscuous mode [ 458.921118][ T2487] hsr_slave_1: left promiscuous mode [ 458.934237][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.949227][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.979884][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.019274][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.032609][ T2487] hsr_slave_0: left promiscuous mode [ 459.084311][ T2487] hsr_slave_1: left promiscuous mode [ 459.092536][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.100456][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.136409][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.144085][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.168141][ T2487] hsr_slave_0: left promiscuous mode [ 459.259316][ T2487] hsr_slave_1: left promiscuous mode [ 459.289385][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.299098][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.309012][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.318905][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.418834][ T2487] veth1_macvtap: left promiscuous mode [ 459.424430][ T2487] veth0_macvtap: left promiscuous mode [ 459.430513][ T2487] veth1_vlan: left promiscuous mode [ 459.435866][ T2487] veth0_vlan: left promiscuous mode [ 459.518922][ T2487] veth1_macvtap: left promiscuous mode [ 459.524453][ T2487] veth0_macvtap: left promiscuous mode [ 459.549198][ T2487] veth1_vlan: left promiscuous mode [ 459.554491][ T2487] veth0_vlan: left promiscuous mode [ 459.579876][ T2487] veth1_macvtap: left promiscuous mode [ 459.585448][ T2487] veth0_macvtap: left promiscuous mode [ 459.597736][ T2487] veth1_vlan: left promiscuous mode [ 459.603950][ T2487] veth0_vlan: left promiscuous mode [ 461.791054][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 461.899880][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 464.229490][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 464.323124][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 466.576899][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 466.740870][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 468.564916][T12273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.729326][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.760413][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.767585][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.847248][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.854480][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.224998][T12302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.246176][T12302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.311881][T12302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.405523][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.590310][T12302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 469.794401][T12296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.848640][T12296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.901004][T12296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.922905][T12296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 470.115522][T12273] veth0_vlan: entered promiscuous mode [ 470.247782][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.307008][T12273] veth1_vlan: entered promiscuous mode [ 470.370778][T12302] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.451962][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.459149][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.538266][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.545406][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.699538][T12273] veth0_macvtap: entered promiscuous mode [ 470.707862][T12273] veth1_macvtap: entered promiscuous mode [ 470.819426][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.839233][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.867196][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.878380][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.899029][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.910239][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.962370][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.980936][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.994042][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.024749][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.038952][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.058856][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.072800][T12273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.130187][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.188096][T12302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.222074][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.247852][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.258410][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.285350][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.308695][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.319853][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.330921][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.341614][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.359256][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.370053][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.389808][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.400695][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.412301][T12273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.436643][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.456662][T12273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.466123][T12273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.478992][T12273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.487695][T12273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.530421][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.537513][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.580598][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.587780][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.625576][T12296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.645519][T12296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.901121][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.115277][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.127154][T12302] veth0_vlan: entered promiscuous mode [ 472.138451][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.248279][T12296] veth0_vlan: entered promiscuous mode [ 472.344408][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.355543][T12302] veth1_vlan: entered promiscuous mode [ 472.371099][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.385264][T12296] veth1_vlan: entered promiscuous mode [ 472.616766][T12455] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 472.617162][T12302] veth0_macvtap: entered promiscuous mode [ 472.626725][T12455] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 472.704560][T12296] veth0_macvtap: entered promiscuous mode [ 472.744409][T12296] veth1_macvtap: entered promiscuous mode [ 472.768340][T12302] veth1_macvtap: entered promiscuous mode [ 472.864675][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.879370][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.898745][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.918875][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.929600][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.940327][ T5275] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 472.948994][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.968653][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.979784][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.990180][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.001145][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.014981][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.028747][ T5280] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 473.029110][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.048903][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.082590][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.100237][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.148939][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 473.178268][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.230092][ T5275] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 473.238740][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.248997][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 473.252060][ T5275] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 473.254916][ T5227] Bluetooth: hci0: command 0x0406 tx timeout [ 473.264601][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.279963][ T5275] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 473.289448][ T5280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.301242][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.319727][ T5280] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.328561][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.339494][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.348574][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.357956][ T5280] usb 1-1: Product: syz [ 473.358820][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.362452][ T5280] usb 1-1: Manufacturer: syz [ 473.383317][ T5280] usb 1-1: SerialNumber: syz [ 473.383814][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.399075][ T5280] usb 1-1: config 0 descriptor?? [ 473.406453][T12461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 473.421761][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.431813][ T5275] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.441028][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.452019][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.460686][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.479006][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.491170][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.501764][ T5275] usb 2-1: config 0 descriptor?? [ 473.518624][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.532272][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.543125][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.558631][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.570322][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.581291][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.617544][T12302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.646517][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.666138][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.676868][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.689424][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.708696][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.732940][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.744680][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.755601][ T5275] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.766538][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.789642][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.800389][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.815839][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.826507][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.838232][T12302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.848948][T12302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.860841][T12302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.910697][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.932354][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.967658][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.979606][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.026780][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.040239][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.052507][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.063165][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.077858][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.088459][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.098655][T12462] vivid-002: disconnect [ 474.114221][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.115569][T12456] vivid-002: reconnect [ 474.124833][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.153667][ T5280] usb 1-1: USB disconnect, device number 35 [ 474.179466][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.190085][ T5281] usb 2-1: USB disconnect, device number 53 [ 474.190454][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.219150][ T5281] usblp1: removed [ 474.240522][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.251547][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.264228][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.285859][T12302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.299560][T12302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.308289][T12302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.317374][T12302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.351402][T12296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.376753][T12296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.385983][T12296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.395267][T12296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.696680][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.725079][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.738644][ T5280] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 474.870249][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.902354][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.919195][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.929691][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 474.929709][ T29] audit: type=1326 audit(1722623087.670:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 474.982613][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.999764][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.002615][ T29] audit: type=1326 audit(1722623087.670:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.056512][ T29] audit: type=1326 audit(1722623087.680:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.082308][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.095411][ T29] audit: type=1326 audit(1722623087.680:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.162457][ T5280] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice=18.00 [ 475.164834][ T29] audit: type=1326 audit(1722623087.680:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.207185][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.215532][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.228689][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.289600][ T5280] usb 1-1: config 0 descriptor?? [ 475.298707][ T29] audit: type=1326 audit(1722623087.680:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.421123][ T29] audit: type=1326 audit(1722623087.680:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.540727][ T29] audit: type=1326 audit(1722623087.730:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.715905][ T29] audit: type=1326 audit(1722623087.730:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.812784][ T5280] usbhid 1-1:0.0: can't add hid device: -71 [ 475.844970][ T5280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 475.873130][ T29] audit: type=1326 audit(1722623087.730:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 475.917701][ T5280] usb 1-1: USB disconnect, device number 36 [ 476.113562][T12494] [U] v3f"S/4:XTzWtlW= [ 476.152284][T12494] [U] J"e:" [ 476.199659][T12491] input: syz0 as /devices/virtual/input/input41 [ 476.441768][T12491] ALSA: mixer_oss: invalid OSS volume '' [ 477.241815][T12518] batadv_slave_1: entered promiscuous mode [ 477.288734][ T5298] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 477.508653][ T5298] usb 2-1: Using ep0 maxpacket: 16 [ 477.546592][ T5298] usb 2-1: unable to get BOS descriptor set [ 477.558669][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 477.589660][ T5298] usb 2-1: config 168 has an invalid interface number: 84 but max is 1 [ 477.598048][ T5298] usb 2-1: config 168 has an invalid interface number: 245 but max is 1 [ 477.662826][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.687084][ T5298] usb 2-1: config 168 has an invalid interface number: 120 but max is 1 [ 477.708688][ T5298] usb 2-1: config 168 contains an unexpected descriptor of type 0x2, skipping [ 477.745790][ T5298] usb 2-1: config 168 has 3 interfaces, different from the descriptor's value: 2 [ 477.780575][ T5298] usb 2-1: config 168 has no interface number 0 [ 477.792829][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 477.809679][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 477.852557][T12507] batadv_slave_1: left promiscuous mode [ 477.868760][ T5298] usb 2-1: config 168 has no interface number 1 [ 477.875066][ T5298] usb 2-1: config 168 has no interface number 2 [ 477.890821][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00a8, bcdDevice=b9.47 [ 477.918683][ T5298] usb 2-1: too many endpoints for config 168 interface 245 altsetting 212: 151, using maximum allowed: 30 [ 477.932359][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.964492][ T25] usb 1-1: Product: syz [ 477.994987][ T5298] usb 2-1: config 168 interface 245 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 478.015105][ T25] usb 1-1: Manufacturer: syz [ 478.030911][ T25] usb 1-1: SerialNumber: syz [ 478.099827][ T25] usb 1-1: config 0 descriptor?? [ 478.105666][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 478.148644][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 478.154540][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.183030][ T25] dvb-usb: found a 'Terratec Cinergy S2 USB HD' in warm state. [ 478.229145][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 478.238440][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 478.287098][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 478.298309][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 478.350192][ T25] dvb-usb: Terratec Cinergy S2 USB HD error while loading driver (-22) [ 478.365280][ T5298] usb 2-1: config 168 interface 120 altsetting 13 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 478.438825][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0x42, changing to 0x2 [ 478.476294][ T5298] usb 2-1: config 168 interface 120 altsetting 13 endpoint 0x2 has invalid maxpacket 624, setting to 64 [ 478.523579][ T5298] usb 2-1: config 168 interface 120 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 16 [ 478.587009][ T5298] usb 2-1: config 168 interface 120 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 478.609408][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 478.631921][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.657125][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 478.683080][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 478.715623][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 478.767915][ T5298] usb 2-1: config 168 interface 120 altsetting 13 endpoint 0x87 has an invalid bInterval 158, changing to 7 [ 478.787463][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.797959][ T5280] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 478.849613][ T5227] Bluetooth: hci2: command 0x206a tx timeout [ 478.850040][ T5278] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 478.863818][ T5230] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 478.877028][ T5298] usb 2-1: config 168 interface 120 altsetting 13 endpoint 0x87 has invalid maxpacket 41970, setting to 1024 [ 478.970389][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 478.996461][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.007776][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.019009][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 479.030445][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.037973][ T5298] usb 2-1: config 168 interface 120 altsetting 13 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 479.055264][ T5298] usb 2-1: config 168 interface 245 has no altsetting 0 [ 479.063286][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.076730][ T5280] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 479.086130][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.098802][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 479.106520][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.118834][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.130420][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.137767][ T5298] usb 2-1: config 168 interface 120 has no altsetting 0 [ 479.151752][ T5298] usb 2-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=89.48 [ 479.163808][ T5280] usb 4-1: config 0 descriptor?? [ 479.169756][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.187298][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.212220][ T5280] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 479.221155][ T5298] usb 2-1: Product: 炢恋ꏷ킊섹㩑죁턮쪷䠴ِ糺⍾ᑐ懩辜悲鎽娂瞽岽㟀틪⏱혨➮쓜廵撨ﲶ遄靖毮㔏彽얬鯭磽뎹紕봬㻷統孋ꃺ㏏焂Ἷ駞枓䂆쩆說ꎓ첆찁㿓坂㊶㛆険ꑡ檻䖂坸齌漯鋱べ㙧了䴙ꄎ྽ꚥ럸諳ᦃ [ 479.251403][ T5298] usb 2-1: Manufacturer: К [ 479.258488][ T5298] usb 2-1: SerialNumber: syz [ 479.282895][ T5278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.338089][ T11] bridge_slave_1: left allmulticast mode [ 479.348351][ T11] bridge_slave_1: left promiscuous mode [ 479.354510][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.410007][ T11] bridge_slave_0: left allmulticast mode [ 479.415697][ T11] bridge_slave_0: left promiscuous mode [ 479.427585][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.458844][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.462956][ T5278] usb 3-1: Product: syz [ 479.584006][ T5278] usb 3-1: Manufacturer: syz [ 479.595770][ T5277] usb 4-1: USB disconnect, device number 49 [ 479.667394][ T5278] usb 3-1: SerialNumber: syz [ 479.820237][ T5298] usbhid 2-1:168.84: couldn't find an input interrupt endpoint [ 479.879798][ T5298] cdc_acm 2-1:168.245: skipping garbage [ 479.956783][ T5298] usb 2-1: USB disconnect, device number 54 [ 480.106008][T11839] usb 1-1: USB disconnect, device number 37 [ 480.240493][T12573] input: syz0 as /devices/virtual/input/input42 [ 481.011347][ T5278] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 481.028008][ T5278] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 481.054487][ T5278] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 481.249312][ T5227] Bluetooth: hci1: command tx timeout [ 481.790105][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.858937][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.905542][ T11] bond0 (unregistering): Released all slaves [ 482.388907][ T5278] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 482.527724][ T5278] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 482.545464][ T5275] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 482.701115][ T5278] usb 3-1: USB disconnect, device number 35 [ 482.720410][ T5278] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 482.759987][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.779515][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 482.861546][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 482.906072][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.970145][ T5275] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 483.016566][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.030149][ T5275] usb 2-1: Product: syz [ 483.035490][ T5275] usb 2-1: Manufacturer: syz [ 483.042972][ T5275] usb 2-1: SerialNumber: syz [ 483.056917][ T5275] usb 2-1: config 0 descriptor?? [ 483.067353][T12606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 483.150612][ T5275] rc_core: IR keymap rc-imon-rsc not found [ 483.158830][ T5275] Registered IR keymap rc-empty [ 483.185476][ T5275] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 483.226239][ T5275] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 483.318895][ T11] hsr_slave_0: left promiscuous mode [ 483.342320][ T5227] Bluetooth: hci1: command tx timeout [ 483.410998][ T11] hsr_slave_1: left promiscuous mode [ 483.511577][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.527624][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.587127][ T5278] usb 2-1: USB disconnect, device number 55 [ 483.626022][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.635370][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.752282][ T11] veth1_macvtap: left promiscuous mode [ 483.779788][ T11] veth0_macvtap: left promiscuous mode [ 483.799142][ T11] veth1_vlan: left promiscuous mode [ 483.815961][ T11] veth0_vlan: left promiscuous mode [ 483.838652][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 484.058838][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 484.072259][ T25] usb 4-1: unable to get BOS descriptor set [ 484.091755][ T25] usb 4-1: config 168 has an invalid interface number: 84 but max is 1 [ 484.118680][ T25] usb 4-1: config 168 has an invalid interface number: 245 but max is 1 [ 484.146883][ T25] usb 4-1: config 168 has an invalid interface number: 120 but max is 1 [ 484.158582][ T25] usb 4-1: config 168 contains an unexpected descriptor of type 0x2, skipping [ 484.169482][ T25] usb 4-1: config 168 has 3 interfaces, different from the descriptor's value: 2 [ 484.198604][ T25] usb 4-1: config 168 has no interface number 0 [ 484.204937][ T25] usb 4-1: config 168 has no interface number 1 [ 484.248584][ T25] usb 4-1: config 168 has no interface number 2 [ 484.254954][ T25] usb 4-1: too many endpoints for config 168 interface 245 altsetting 212: 151, using maximum allowed: 30 [ 484.328635][ T25] usb 4-1: config 168 interface 245 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 484.378960][ T25] usb 4-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 484.428738][ T25] usb 4-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 484.446153][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 484.508131][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 484.537203][ T25] usb 4-1: config 168 interface 120 altsetting 13 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 484.560845][ T25] usb 4-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0x42, changing to 0x2 [ 484.579018][ T25] usb 4-1: config 168 interface 120 altsetting 13 endpoint 0x2 has invalid maxpacket 624, setting to 64 [ 484.618709][ T25] usb 4-1: config 168 interface 120 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 16 [ 484.670873][ T25] usb 4-1: config 168 interface 120 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 484.681299][T11839] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 484.706986][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 484.731325][ T25] usb 4-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 484.762060][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 484.773938][ T25] usb 4-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 484.795588][ T25] usb 4-1: config 168 interface 120 altsetting 13 endpoint 0x87 has an invalid bInterval 158, changing to 7 [ 484.807371][ T25] usb 4-1: config 168 interface 120 altsetting 13 endpoint 0x87 has invalid maxpacket 41970, setting to 1024 [ 484.819337][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 484.830729][ T25] usb 4-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 484.851246][ T25] usb 4-1: config 168 interface 120 altsetting 13 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 484.867123][ T25] usb 4-1: config 168 interface 245 has no altsetting 0 [ 484.874213][ T25] usb 4-1: config 168 interface 120 has no altsetting 0 [ 484.883867][ T25] usb 4-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=89.48 [ 484.893767][T11839] usb 3-1: Using ep0 maxpacket: 32 [ 484.901925][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.910447][ T25] usb 4-1: Product: 炢恋ꏷ킊섹㩑죁턮쪷䠴ِ糺⍾ᑐ懩辜悲鎽娂瞽岽㟀틪⏱혨➮쓜廵撨ﲶ遄靖毮㔏彽얬鯭磽뎹紕봬㻷統孋ꃺ㏏焂Ἷ駞枓䂆쩆說ꎓ첆찁㿓坂㊶㛆険ꑡ檻䖂坸齌漯鋱べ㙧了䴙ꄎ྽ꚥ럸諳ᦃ [ 484.937305][T11839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.951107][T11839] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 484.977902][T11839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.988207][T11839] usb 3-1: Product: syz [ 485.005413][T11839] usb 3-1: Manufacturer: syz [ 485.011957][T11839] usb 3-1: SerialNumber: syz [ 485.033154][ T25] usb 4-1: Manufacturer: К [ 485.040256][ T25] usb 4-1: SerialNumber: syz [ 485.046031][T11839] usb 3-1: config 0 descriptor?? [ 485.156114][T11839] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 485.291637][ T63] usb 3-1: Failed to submit usb control message: -71 [ 485.292077][ T5226] usb 3-1: USB disconnect, device number 36 [ 485.301747][ T63] usb 3-1: unable to send the bmi data to the device: -71 [ 485.318785][ T63] usb 3-1: unable to get target info from device [ 485.325186][ T63] usb 3-1: could not get target info (-71) [ 485.343927][ T63] usb 3-1: could not probe fw (-71) [ 485.418765][ T5227] Bluetooth: hci1: command tx timeout [ 485.657871][ T11] team0 (unregistering): Port device team_slave_1 removed [ 485.679251][ T25] usbhid 4-1:168.84: couldn't find an input interrupt endpoint [ 485.712752][ T25] cdc_acm 4-1:168.245: skipping garbage [ 485.764817][ T25] usb 4-1: USB disconnect, device number 50 [ 485.835301][ T11] team0 (unregistering): Port device team_slave_0 removed [ 486.312149][T12663] binder: 12662:12663 ioctl 40046205 0 returned -22 [ 487.155339][T12564] chnl_net:caif_netlink_parms(): no params data found [ 487.498572][ T5227] Bluetooth: hci1: command tx timeout [ 487.807144][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.815944][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.828768][T12564] bridge_slave_0: entered allmulticast mode [ 487.847755][T12564] bridge_slave_0: entered promiscuous mode [ 487.882407][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.918739][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.938797][T12564] bridge_slave_1: entered allmulticast mode [ 487.988707][T12564] bridge_slave_1: entered promiscuous mode [ 487.988952][ T5278] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 488.289290][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 488.315819][ T5278] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 488.317268][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.353732][ T5278] usb 3-1: config 0 has no interface number 0 [ 488.381552][ T5278] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 488.415901][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.425382][ T5278] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 488.487729][ T5278] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 488.518595][ T5278] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 488.538956][ T5278] usb 3-1: Product: syz [ 488.553733][ T5278] usb 3-1: Manufacturer: syz [ 488.581816][ T5278] usb 3-1: SerialNumber: syz [ 488.618376][ T5278] usb 3-1: config 0 descriptor?? [ 488.647704][ T5278] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 488.694617][ T5278] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 488.716164][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 488.740224][ T5278] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 488.765462][ T5278] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 488.776746][T12564] team0: Port device team_slave_0 added [ 488.811518][ T5278] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 488.838842][T12564] team0: Port device team_slave_1 added [ 488.884899][ T5278] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 488.939726][ T5278] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 488.966661][ T5278] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 489.012846][ T5278] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 489.060711][ T5278] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 489.081561][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.129050][ T5278] usb 3-1: USB disconnect, device number 37 [ 489.131595][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.261243][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.281133][ T5278] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 489.323310][ T5278] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 489.365516][ T5278] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 489.405271][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.429041][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.431609][ T5278] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 489.535249][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.559345][ T5278] keyspan 3-1:0.107: device disconnected [ 489.589550][T12719] macsec0: entered promiscuous mode [ 489.988993][T12564] hsr_slave_0: entered promiscuous mode [ 490.023749][T12564] hsr_slave_1: entered promiscuous mode [ 490.329721][T12737] program syz.0.1702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.584722][T12737] bond0: entered promiscuous mode [ 490.590295][T12737] bond_slave_0: entered promiscuous mode [ 490.628444][T12737] bond_slave_1: entered promiscuous mode [ 490.772050][T12755] fuse: Bad value for 'fd' [ 491.128655][ T5278] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 491.358672][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 491.376287][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.396495][ T5278] usb 3-1: config 0 has no interfaces? [ 491.410975][ T5278] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 491.458698][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.502553][ T5226] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 491.513787][ T5278] usb 3-1: Product: syz [ 491.530933][ T5278] usb 3-1: Manufacturer: syz [ 491.548808][ T5278] usb 3-1: SerialNumber: syz [ 491.571329][ T5278] usb 3-1: config 0 descriptor?? [ 491.633624][ T2486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.699967][ T5226] usb 1-1: Using ep0 maxpacket: 16 [ 491.723128][ T5226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.750672][ T5226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.779100][ T5226] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 491.788425][ T5226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.853308][ T5226] usb 1-1: config 0 descriptor?? [ 491.983453][ T2486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.290457][ T2486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.342235][ T5226] kye 0003:0458:5005.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 492.375279][ T5226] kye 0003:0458:5005.001E: unknown main item tag 0x0 [ 492.405649][ T5226] kye 0003:0458:5005.001E: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0 [ 492.448408][ T5226] kye 0003:0458:5005.001E: tablet-enabling feature report not found [ 492.467811][ T5226] kye 0003:0458:5005.001E: tablet enabling failed [ 492.492235][ T2486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.578063][ T5226] usb 1-1: USB disconnect, device number 38 [ 492.705849][T12564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 492.759969][T12564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 492.794814][T12564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 492.872794][T12564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 492.890283][T11839] usb 3-1: USB disconnect, device number 38 [ 493.056959][ T2486] bridge_slave_1: left allmulticast mode [ 493.077654][ T2486] bridge_slave_1: left promiscuous mode [ 493.086520][ T2486] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.121565][ T2486] bridge_slave_0: left allmulticast mode [ 493.138725][ T2486] bridge_slave_0: left promiscuous mode [ 493.146292][ T2486] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.738679][ T5230] Bluetooth: hci2: command 0x206a tx timeout [ 494.066809][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.090796][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.124866][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.135713][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.146419][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 494.156139][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.273121][T12804] futex_wake_op: syz.3.1716 tries to shift op by 35; fix this program [ 494.648744][ T5298] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 494.858628][ T5298] usb 4-1: Using ep0 maxpacket: 8 [ 494.876402][ T5298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.897094][ T5298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 494.925591][ T5298] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.959621][ T5298] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 494.978578][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.030991][ T5298] hub 4-1:1.0: bad descriptor, ignoring hub [ 495.036965][ T5298] hub 4-1:1.0: probe with driver hub failed with error -5 [ 495.075660][ T5298] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 495.090708][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 495.343331][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.372376][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.480158][ T2486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.520012][ T2486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.544849][ T5279] usb 4-1: USB disconnect, device number 51 [ 495.556608][ T2486] bond0 (unregistering): Released all slaves [ 496.066549][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.210390][ T5230] Bluetooth: hci4: command tx timeout [ 496.471236][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.566300][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.573547][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.611255][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.618829][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.791496][T12805] chnl_net:caif_netlink_parms(): no params data found [ 496.885085][ T2486] hsr_slave_0: left promiscuous mode [ 496.918040][ T2486] hsr_slave_1: left promiscuous mode [ 496.939440][ T2486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.958732][T11839] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 496.967700][ T2486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.988619][ T2486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.018641][ T2486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.098288][ T2486] veth1_macvtap: left promiscuous mode [ 497.104147][ T2486] veth0_macvtap: left promiscuous mode [ 497.118218][ T2486] veth1_vlan: left promiscuous mode [ 497.130146][ T2486] veth0_vlan: left promiscuous mode [ 497.163270][T11839] usb 3-1: config 0 has no interfaces? [ 497.190110][T11839] usb 3-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 497.199510][T11839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.227479][T11839] usb 3-1: Product: syz [ 497.231831][T11839] usb 3-1: Manufacturer: syz [ 497.236450][T11839] usb 3-1: SerialNumber: syz [ 497.275743][T11839] usb 3-1: config 0 descriptor?? [ 497.580797][T12843] QAT: failed to copy from user cfg_data. [ 497.602805][T12843] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1721'. [ 497.638909][T12843] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 497.696214][ T5278] usb 3-1: USB disconnect, device number 39 [ 497.763279][T12842] dccp_close: ABORT with 548 bytes unread [ 498.289822][ T5227] Bluetooth: hci4: command tx timeout [ 498.627051][ T2486] team0 (unregistering): Port device team_slave_1 removed [ 498.819697][ T2486] team0 (unregistering): Port device team_slave_0 removed [ 498.858849][ T5227] Bluetooth: hci5: command 0x206a tx timeout [ 498.859248][ T5230] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 500.241361][T12854] batadv_slave_1: entered promiscuous mode [ 500.280993][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 500.298261][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 500.373050][ T5230] Bluetooth: hci4: command tx timeout [ 500.420958][T12859] batadv_slave_1: left promiscuous mode [ 500.654689][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.682797][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.730015][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.737297][T12805] bridge_slave_0: entered allmulticast mode [ 500.779032][T12805] bridge_slave_0: entered promiscuous mode [ 500.853244][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.879636][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.898804][T12805] bridge_slave_1: entered allmulticast mode [ 500.913556][T12805] bridge_slave_1: entered promiscuous mode [ 501.193382][T12805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.263211][T12805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.442731][T12564] veth0_vlan: entered promiscuous mode [ 501.466190][T12564] veth1_vlan: entered promiscuous mode [ 501.512657][T12805] team0: Port device team_slave_0 added [ 501.532438][T12805] team0: Port device team_slave_1 added [ 501.647141][T12805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.665453][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.729786][T12805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.780209][T12805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.798768][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.870207][T12805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.893150][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.903370][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.067086][T12805] hsr_slave_0: entered promiscuous mode [ 502.094930][T12805] hsr_slave_1: entered promiscuous mode [ 502.108947][T12805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.116550][T12805] Cannot create hsr debugfs directory [ 502.141403][T12564] veth0_macvtap: entered promiscuous mode [ 502.366284][T12564] veth1_macvtap: entered promiscuous mode [ 502.449365][ T5230] Bluetooth: hci4: command tx timeout [ 502.630939][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.678690][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.704410][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.728931][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.748603][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.788566][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.798428][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.838558][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.858610][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.878603][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.888468][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.920343][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.940230][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.978584][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.011032][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.153802][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.178976][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.198675][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.248831][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.270526][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.298566][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.318659][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.338602][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.348467][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.378700][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.408825][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.423420][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.448673][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.468708][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.479999][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.707210][T12564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.720384][T12564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.740767][T12564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.750157][T12564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.141387][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.165939][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.240102][ T2516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.258940][ T2516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.453264][T12805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 504.551777][T12805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.659560][T12805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.768343][T12805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.062022][T12936] futex_wake_op: syz.2.1728 tries to shift op by 35; fix this program [ 505.438744][ T5281] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 505.619650][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.676937][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 505.689991][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.736791][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 505.764169][ T5281] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.790351][T12942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1730'. [ 505.830271][ T5281] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 505.854438][T12805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.861873][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.908104][ T5281] hub 3-1:1.0: bad descriptor, ignoring hub [ 505.932133][ T5281] hub 3-1:1.0: probe with driver hub failed with error -5 [ 505.954441][T12805] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.964012][ T5281] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 506.190261][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.213505][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.236287][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.469020][ T5226] usb 3-1: USB disconnect, device number 40 [ 506.530712][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.537882][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.682121][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.742610][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 506.788196][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.795445][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.841007][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.861737][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.877301][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.886720][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.896461][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 506.908447][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.300907][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.632478][T12805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.914697][T12805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.158404][T12994] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 508.215569][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 508.223284][ T5230] Bluetooth: Wrong link type (-22) [ 508.230774][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 508.238291][ T5230] Bluetooth: Wrong link type (-22) [ 508.243504][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 508.250330][ T5230] Bluetooth: Wrong link type (-22) [ 508.255448][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 508.263210][ T5230] Bluetooth: Wrong link type (-22) [ 508.268388][ T5230] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 508.274950][ T5230] Bluetooth: Wrong link type (-22) [ 508.280483][ T5230] Bluetooth: hci3: link tx timeout [ 508.285946][ T5230] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 508.434845][T12994] input: syz0 as /devices/virtual/input/input44 [ 508.564237][ T35] bridge_slave_1: left allmulticast mode [ 508.595202][ T35] bridge_slave_1: left promiscuous mode [ 508.621076][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.752593][ T35] bridge_slave_0: left allmulticast mode [ 508.779466][ T35] bridge_slave_0: left promiscuous mode [ 508.808729][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.009213][ T5230] Bluetooth: hci2: command tx timeout [ 510.382589][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 510.457936][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.472925][ T35] bond_slave_0: left promiscuous mode [ 510.499528][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.509223][ T35] bond_slave_1: left promiscuous mode [ 510.518446][ T35] bond0 (unregistering): Released all slaves [ 510.625937][T12805] veth0_vlan: entered promiscuous mode [ 510.676957][T13016] macsec0: entered promiscuous mode [ 510.906418][T13039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.946268][T12968] chnl_net:caif_netlink_parms(): no params data found [ 511.018106][T12805] veth1_vlan: entered promiscuous mode [ 511.103368][ T5230] Bluetooth: hci2: command tx timeout [ 511.517562][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 511.517580][ T29] audit: type=1326 audit(1722623124.270:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.2.1751" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 511.678810][T13064] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 511.773823][ T35] hsr_slave_0: left promiscuous mode [ 511.860219][ T35] hsr_slave_1: left promiscuous mode [ 511.869023][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.888193][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.911383][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.931343][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.021269][ T35] veth1_macvtap: left promiscuous mode [ 512.037347][ T35] veth0_macvtap: left promiscuous mode [ 512.049719][ T35] veth1_vlan: left promiscuous mode [ 512.069903][T11839] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 512.090578][ T35] veth0_vlan: left promiscuous mode [ 512.289282][T11839] usb 5-1: Using ep0 maxpacket: 8 [ 512.301989][T11839] usb 5-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe [ 512.341769][T11839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.371852][T11839] usb 5-1: Product: syz [ 512.376077][T11839] usb 5-1: Manufacturer: syz [ 512.397625][T11839] usb 5-1: SerialNumber: syz [ 512.410996][T11839] usb 5-1: config 0 descriptor?? [ 512.421815][T11839] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 512.528751][ T5275] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 512.702938][T11839] usb 5-1: qt2_attach - failed to power on unit: -71 [ 512.718884][T11839] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 512.749018][T11839] usb 5-1: USB disconnect, device number 43 [ 512.760479][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.779725][ T5298] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 512.782717][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 512.819434][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.862445][ T5275] usb 3-1: config 0 descriptor?? [ 512.888970][ T5275] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 512.989090][ T5298] usb 1-1: Using ep0 maxpacket: 32 [ 513.022976][ T5298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.059197][ T5298] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 513.098952][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.107244][ T5298] usb 1-1: Product: syz [ 513.128595][ T5298] usb 1-1: Manufacturer: syz [ 513.133272][ T5298] usb 1-1: SerialNumber: syz [ 513.152538][ T5298] usb 1-1: config 0 descriptor?? [ 513.168909][ T5230] Bluetooth: hci2: command tx timeout [ 513.200590][ T5275] usb 3-1: USB disconnect, device number 41 [ 513.226198][ T5298] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 513.708862][ T63] usb 1-1: Failed to submit usb control message: -71 [ 513.709273][ T5298] usb 1-1: USB disconnect, device number 39 [ 513.716184][ T63] usb 1-1: unable to send the bmi data to the device: -71 [ 513.789520][ T63] usb 1-1: unable to get target info from device [ 513.808797][ T5275] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 513.822842][ T63] usb 1-1: could not get target info (-71) [ 513.837073][ T63] usb 1-1: could not probe fw (-71) [ 513.946969][T13092] ptrace attach of "./syz-executor exec"[12564] was attempted by "./syz-executor exec"[13092] [ 514.011199][ T5275] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 34, changing to 9 [ 514.029034][ T35] team0 (unregistering): Port device team_slave_1 removed [ 514.039373][ T5275] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.063532][ T5275] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.064067][T13094] netlink: 'syz.4.1760': attribute type 9 has an invalid length. [ 514.096985][ T5275] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.145465][T13094] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1760'. [ 514.147698][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.195787][ T35] team0 (unregistering): Port device team_slave_0 removed [ 514.212157][ T5275] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.234401][ T5275] usb 3-1: invalid MIDI out EP 0 [ 514.417666][ T5275] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 514.452118][ T5275] usb 3-1: USB disconnect, device number 42 [ 514.712990][T12460] udevd[12460]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.259455][ T5230] Bluetooth: hci2: command tx timeout [ 515.689907][ T5298] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 515.867710][T12968] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.918912][ T5298] usb 1-1: Using ep0 maxpacket: 32 [ 515.936466][T12968] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.947785][ T5298] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 515.973868][T12968] bridge_slave_0: entered allmulticast mode [ 515.977405][ T5298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.000026][T12968] bridge_slave_0: entered promiscuous mode [ 516.020543][ T5298] usb 1-1: Product: syz [ 516.028826][ T5298] usb 1-1: Manufacturer: syz [ 516.033515][T13095] netlink: 'syz.4.1760': attribute type 9 has an invalid length. [ 516.042003][ T5298] usb 1-1: SerialNumber: syz [ 516.048341][T12968] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.050050][ T5298] usb 1-1: config 0 descriptor?? [ 516.061551][T13095] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1760'. [ 516.078766][T12968] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.102825][T12968] bridge_slave_1: entered allmulticast mode [ 516.117558][ T5298] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 516.138976][T12968] bridge_slave_1: entered promiscuous mode [ 516.158729][T11839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 516.380109][T11839] usb 3-1: Using ep0 maxpacket: 16 [ 516.399988][T11839] usb 3-1: unable to get BOS descriptor set [ 516.411128][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.416004][T11839] usb 3-1: config 168 has an invalid interface number: 84 but max is 1 [ 516.443352][T12805] veth0_macvtap: entered promiscuous mode [ 516.486193][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.492326][T11839] usb 3-1: config 168 has an invalid interface number: 245 but max is 1 [ 516.538606][T11839] usb 3-1: config 168 has an invalid interface number: 120 but max is 1 [ 516.593579][T13105] netlink: 'syz.0.1764': attribute type 3 has an invalid length. [ 516.608092][T11839] usb 3-1: config 168 contains an unexpected descriptor of type 0x2, skipping [ 516.644464][T11839] usb 3-1: config 168 has 3 interfaces, different from the descriptor's value: 2 [ 516.654655][T11839] usb 3-1: config 168 has no interface number 0 [ 516.661236][T11839] usb 3-1: config 168 has no interface number 1 [ 516.667926][T11839] usb 3-1: config 168 has no interface number 2 [ 516.672417][T12805] veth1_macvtap: entered promiscuous mode [ 516.674737][T11839] usb 3-1: too many endpoints for config 168 interface 245 altsetting 212: 151, using maximum allowed: 30 [ 516.692071][ T5298] gspca_stk1135: reg_w 0x2 err -110 [ 516.698292][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.709467][ T5298] gspca_stk1135: Sensor write failed [ 516.714814][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.721825][T11839] usb 3-1: config 168 interface 245 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 516.742207][ T5298] gspca_stk1135: Sensor write failed [ 516.765090][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.778740][T11839] usb 3-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 516.790431][ T5298] gspca_stk1135: Sensor read failed [ 516.795684][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.811221][T11839] usb 3-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 516.829989][ T5298] gspca_stk1135: Sensor read failed [ 516.835424][ T5298] gspca_stk1135: Detected sensor type unknown (0x0) [ 516.846566][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 516.868716][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.891413][T12968] team0: Port device team_slave_0 added [ 516.917226][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.941845][ T5298] gspca_stk1135: Sensor read failed [ 516.947111][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 516.953614][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 516.990504][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.998007][ T5278] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 517.008253][ T5298] gspca_stk1135: Sensor read failed [ 517.014004][T11839] usb 3-1: config 168 interface 120 altsetting 13 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 517.025438][T13122] QAT: Device 0 not found [ 517.043036][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 517.068975][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.076746][ T5278] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 517.079592][ T5298] gspca_stk1135: Sensor write failed [ 517.094601][T11839] usb 3-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0x42, changing to 0x2 [ 517.110736][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.145037][T11839] usb 3-1: config 168 interface 120 altsetting 13 endpoint 0x2 has invalid maxpacket 624, setting to 64 [ 517.160946][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 517.167311][ T5298] gspca_stk1135: Sensor write failed [ 517.178897][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.198735][T11839] usb 3-1: config 168 interface 120 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 16 [ 517.210589][ T5298] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 517.227618][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.242499][T11839] usb 3-1: config 168 interface 120 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 517.277373][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.308100][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 517.331866][T11839] usb 3-1: config 168 interface 120 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 517.338594][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.376606][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 517.411811][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.413986][T11839] usb 3-1: config 168 interface 120 altsetting 13 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 517.448683][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.464703][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.492947][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.517294][T11839] usb 3-1: config 168 interface 120 altsetting 13 endpoint 0x87 has an invalid bInterval 158, changing to 7 [ 517.528642][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.551889][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.562491][T11839] usb 3-1: config 168 interface 120 altsetting 13 endpoint 0x87 has invalid maxpacket 41970, setting to 1024 [ 517.600880][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 517.617994][T12805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.666685][T11839] usb 3-1: config 168 interface 120 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 517.671925][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.732751][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.744406][T11839] usb 3-1: config 168 interface 120 altsetting 13 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 517.759803][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.793181][T11839] usb 3-1: config 168 interface 245 has no altsetting 0 [ 517.820813][T11839] usb 3-1: config 168 interface 120 has no altsetting 0 [ 517.827006][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.849174][T11839] usb 3-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=89.48 [ 517.858211][T11839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.890975][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.946696][T11839] usb 3-1: Product: 炢恋ꏷ킊섹㩑죁턮쪷䠴ِ糺⍾ᑐ懩辜悲鎽娂瞽岽㟀틪⏱혨➮쓜廵撨ﲶ遄靖毮㔏彽얬鯭磽뎹紕봬㻷統孋ꃺ㏏焂Ἷ駞枓䂆쩆說ꎓ첆찁㿓坂㊶㛆険ꑡ檻䖂坸齌漯鋱べ㙧了䴙ꄎ྽ꚥ럸諳ᦃ [ 517.949588][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.028770][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.039589][T11839] usb 3-1: Manufacturer: К [ 518.049020][T11839] usb 3-1: SerialNumber: syz [ 518.069753][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.086154][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.098823][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.154513][T13139] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.172661][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 518.179240][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.179262][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.179279][T12805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.179292][T12805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.180903][T12805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.190888][ T5227] Bluetooth: Wrong link type (-22) [ 518.237627][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 518.244284][ T5227] Bluetooth: Wrong link type (-22) [ 518.249694][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 518.256242][ T5227] Bluetooth: Wrong link type (-22) [ 518.261468][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 518.268009][ T5227] Bluetooth: Wrong link type (-22) [ 518.274761][ T5227] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 518.281329][ T5227] Bluetooth: Wrong link type (-22) [ 518.483456][T12968] team0: Port device team_slave_1 added [ 518.588399][T12805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.628766][T12805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.658637][T12805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.686122][T13137] input: syz0 as /devices/virtual/input/input45 [ 518.702509][T12805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.793013][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.793247][T11839] usbhid 3-1:168.84: couldn't find an input interrupt endpoint [ 518.807741][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.833677][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.865504][T11839] cdc_acm 3-1:168.245: skipping garbage [ 518.893116][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.924233][T11839] usb 3-1: USB disconnect, device number 43 [ 519.041806][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.091699][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.117639][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.136812][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.334047][ T5227] Bluetooth: hci5: command 0x206a tx timeout [ 519.377838][T12968] hsr_slave_0: entered promiscuous mode [ 519.398784][ T5281] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 519.421193][T12968] hsr_slave_1: entered promiscuous mode [ 519.434570][T12968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.443791][T12968] Cannot create hsr debugfs directory [ 519.580788][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.618050][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.643878][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.651791][ T5281] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 519.651823][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.692020][ T5281] usb 5-1: config 0 descriptor?? [ 519.770937][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.980357][ T5226] usb 1-1: USB disconnect, device number 40 [ 520.047596][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.072936][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.124861][ T5281] asus 0003:0B05:1866.0020: unknown main item tag 0x0 [ 520.155387][ T5281] asus 0003:0B05:1866.0020: unknown main item tag 0x0 [ 520.169284][ T5281] asus 0003:0B05:1866.0020: unknown main item tag 0x0 [ 520.179611][ T5281] asus 0003:0B05:1866.0020: unknown main item tag 0x0 [ 520.227815][ T5281] asus 0003:0B05:1866.0020: unknown main item tag 0x0 [ 520.240046][ T5281] asus 0003:0B05:1866.0020: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.4-1/input0 [ 520.261703][ T5281] asus 0003:0B05:1866.0020: Asus input not registered [ 520.294821][ T5281] asus 0003:0B05:1866.0020: probe with driver asus failed with error -12 [ 520.346550][ T5281] usb 5-1: USB disconnect, device number 44 [ 520.412464][ T29] audit: type=1326 audit(1722623133.160:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.2.1774" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 520.558884][ T5278] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 520.719965][T13170] xt_HMARK: spi-set and port-set can't be combined [ 520.772670][ T5278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.813896][ T5278] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.868958][ T5278] usb 1-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 520.938595][ T5278] usb 1-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 520.946996][ T5278] usb 1-1: Product: syz [ 521.009038][ T5278] usb 1-1: Manufacturer: syz [ 521.013694][ T5278] usb 1-1: SerialNumber: syz [ 521.048722][T13173] netlink: 'syz.1.1776': attribute type 10 has an invalid length. [ 521.097276][ T5278] cdc_acm 1-1:1.0: skipping garbage [ 521.131192][ T5278] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 521.160127][T13173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 521.381346][ T5298] usb 1-1: USB disconnect, device number 41 [ 521.486744][T12968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.555365][T12968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.600488][T12968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.713139][T12968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.899983][ T5298] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 522.102011][T12968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.132787][ T5298] usb 2-1: config 0 has no interfaces? [ 522.138292][ T5298] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 522.179883][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.214274][T12968] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.214347][ T5298] usb 2-1: config 0 descriptor?? [ 522.254599][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.261732][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.270736][ T5279] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 522.351609][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.358847][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.471466][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 522.481905][ T5279] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff60, bcdDevice=99.8b [ 522.505140][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.547896][ T5279] usb 3-1: config 0 descriptor?? [ 522.591817][ T5279] option 3-1:0.0: GSM modem (1-port) converter detected [ 522.834766][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.849512][ T5278] usb 2-1: USB disconnect, device number 56 [ 522.999689][ T5275] usb 3-1: USB disconnect, device number 44 [ 523.006765][ T5275] option 3-1:0.0: device disconnected [ 523.032782][T13219] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 523.039349][T13219] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 523.069543][T12968] veth0_vlan: entered promiscuous mode [ 523.082118][T13219] vhci_hcd vhci_hcd.0: Device attached [ 523.123341][T12968] veth1_vlan: entered promiscuous mode [ 523.245208][T12968] veth0_macvtap: entered promiscuous mode [ 523.267823][T12968] veth1_macvtap: entered promiscuous mode [ 523.314688][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.359887][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.398753][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.426736][T13223] vhci_hcd: connection closed [ 523.428675][ T5226] usb 18-1: SetAddress Request (2) to port 0 [ 523.439632][ T11] vhci_hcd: stop threads [ 523.448578][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.457236][ T11] vhci_hcd: release socket [ 523.463189][ T5226] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 523.474359][ T11] vhci_hcd: disconnect device [ 523.475800][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.508610][ T5226] usb 18-1: enqueue for inactive port 0 [ 523.524749][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.578586][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.599597][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.609619][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.658347][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.738916][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.783315][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.802164][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.823061][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.844319][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.892374][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.918711][ T29] audit: type=1326 audit(1722623136.670:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.0.1786" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x0 [ 523.925446][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.953112][ T5226] usb usb18-port1: attempt power cycle [ 524.039839][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.086830][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.148632][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.183272][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.231338][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.266508][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.301115][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.366810][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.412867][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.446457][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.476921][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.513428][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.548042][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.571730][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.607603][T12968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.630151][ T5226] usb usb18-port1: unable to enumerate USB device [ 524.646382][T12968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.702850][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.762077][T12968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.819637][T12968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.876999][T12968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.901871][T12968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.127373][T13274] QAT: Device 0 not found [ 525.135397][ T5279] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 525.161785][ T5279] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 525.181465][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 525.257020][ T2487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.284798][ T2487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.490539][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.514944][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.947141][T13289] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 525.970085][ T5230] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 525.979063][ T5230] Bluetooth: hci1: Injecting HCI hardware error event [ 525.988067][ T5230] Bluetooth: hci1: hardware error 0x00 [ 526.440721][ T29] audit: type=1326 audit(1722623139.190:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.1.1805" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 526.462198][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.121523][T13321] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1814'. [ 527.626064][ T5279] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 527.796037][ T29] audit: type=1326 audit(1722623140.550:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 527.898898][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 527.900246][ T29] audit: type=1326 audit(1722623140.580:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 527.935532][ T5279] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 528.004250][ T29] audit: type=1326 audit(1722623140.600:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.035449][ T5279] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.088873][ T29] audit: type=1326 audit(1722623140.730:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.162639][ T29] audit: type=1326 audit(1722623140.730:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.166125][ T5279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.214343][ T5230] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 528.303711][ T29] audit: type=1326 audit(1722623140.730:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.343939][ T5279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.387947][ T5279] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.432526][ T29] audit: type=1326 audit(1722623140.890:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.475572][ T5279] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.495446][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.516805][ T29] audit: type=1326 audit(1722623140.910:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 528.604999][ T29] audit: type=1326 audit(1722623140.920:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 529.041151][ T5278] usb 3-1: USB disconnect, device number 45 [ 529.458799][ T5281] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 529.668712][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 529.702188][ T5281] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 529.735474][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.796141][ T5281] usb 1-1: Product: syz [ 529.825052][ T5281] usb 1-1: Manufacturer: syz [ 529.853145][ T5281] usb 1-1: SerialNumber: syz [ 529.878106][ T5281] usb 1-1: config 0 descriptor?? [ 530.214761][ T5281] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 530.242349][ T5230] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 530.299267][T13372] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 530.391787][T13374] input: syz1 as /devices/virtual/input/input46 [ 530.484680][ T5230] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 530.491766][ T5230] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 530.520087][T13372] team0: Failed to send options change via netlink (err -105) [ 530.532010][T13372] team0: Port device netdevsim0 added [ 530.570807][T13375] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 530.603260][ T5227] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 530.629165][ T5279] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 530.667146][T13375] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 530.767692][T13375] team0: Failed to send options change via netlink (err -105) [ 530.781053][T13375] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 530.818739][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1832'. [ 530.890596][ T5279] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 530.901745][ T5279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.913823][T13375] team0: Port device netdevsim0 removed [ 530.930868][ T5281] gspca_ov534_9: reg_w failed -110 [ 530.951446][T13375] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 530.978826][ T5279] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.004538][ T5279] usb 2-1: config 1 has no interface number 1 [ 531.019222][ T5279] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 531.040848][ T5279] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.076752][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.110439][ T5279] usb 2-1: Product: syz [ 531.130726][ T5279] usb 2-1: Manufacturer: syz [ 531.135369][ T5279] usb 2-1: SerialNumber: syz [ 531.445722][T13382] binder: 13381:13382 ioctl c018620c 200003c0 returned -22 [ 531.448585][ T5281] gspca_ov534_9: Unknown sensor 0000 [ 531.453056][ T5281] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 531.529145][T13299] syz.3.1804 (13299): drop_caches: 1 [ 531.598766][ T5279] usb 2-1: USB disconnect, device number 57 [ 531.901937][T12559] udevd[12559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.576113][ T2487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.881883][ T2487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.906959][ T5281] usb 1-1: USB disconnect, device number 42 [ 533.181865][ T2487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.280762][ T2487] bond0: (slave netdevsim0): Releasing backup interface [ 533.372618][ T2487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.488651][ T5281] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 533.755955][ T5281] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 533.800090][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.863852][ T5281] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 533.955075][ T5281] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 533.965691][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.969837][ T2487] bridge_slave_1: left allmulticast mode [ 533.974768][ T5281] usb 1-1: Manufacturer: syz [ 533.992465][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 534.002895][ T5281] usb 1-1: config 0 descriptor?? [ 534.007946][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 534.008849][ T2487] bridge_slave_1: left promiscuous mode [ 534.055978][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 534.098731][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 534.118309][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.127434][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.200184][ T2487] bridge_slave_0: left allmulticast mode [ 534.206119][ T2487] bridge_slave_0: left promiscuous mode [ 534.208961][ T5281] rc_core: IR keymap rc-hauppauge not found [ 534.226936][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.229015][ T5281] Registered IR keymap rc-empty [ 534.295440][ T5281] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 534.381033][ T5281] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 534.461964][ T5281] usb 1-1: USB disconnect, device number 43 [ 535.261273][T13443] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1854'. [ 535.623709][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.665551][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.699206][ T2487] bond0 (unregistering): Released all slaves [ 536.288919][ T5230] Bluetooth: hci3: command tx timeout [ 536.478801][ T2487] hsr_slave_0: left promiscuous mode [ 536.583419][ T2487] hsr_slave_1: left promiscuous mode [ 536.602677][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.625557][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.673755][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.688984][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.766476][ T2487] veth1_macvtap: left promiscuous mode [ 536.788902][ T2487] veth0_macvtap: left promiscuous mode [ 536.794637][ T2487] veth1_vlan: left promiscuous mode [ 536.823670][ T2487] veth0_vlan: left promiscuous mode [ 538.320048][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 538.380161][ T5230] Bluetooth: hci3: command tx timeout [ 538.448826][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 539.864019][T13426] chnl_net:caif_netlink_parms(): no params data found [ 540.121416][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.168740][T13426] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.175951][T13426] bridge_slave_0: entered allmulticast mode [ 540.257287][T13426] bridge_slave_0: entered promiscuous mode [ 540.320236][T13426] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.327478][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.358800][T13426] bridge_slave_1: entered allmulticast mode [ 540.376811][T13426] bridge_slave_1: entered promiscuous mode [ 540.448948][ T5230] Bluetooth: hci3: command tx timeout [ 540.561160][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.592462][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.772715][T13426] team0: Port device team_slave_0 added [ 540.839344][T13426] team0: Port device team_slave_1 added [ 540.953803][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.981682][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.010472][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.025543][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.058004][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.090525][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.223700][T13426] hsr_slave_0: entered promiscuous mode [ 541.251714][T13426] hsr_slave_1: entered promiscuous mode [ 541.278650][T13426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.286222][T13426] Cannot create hsr debugfs directory [ 542.528655][ T5230] Bluetooth: hci3: command tx timeout [ 542.593469][T13426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.622029][T13426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 542.665066][T13426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 542.682941][T13426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.110355][T13426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.167476][T13426] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.293752][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.300995][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.330643][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.337820][T11839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.495252][T13426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.585864][T13426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.786056][T13426] veth0_vlan: entered promiscuous mode [ 543.859935][T13426] veth1_vlan: entered promiscuous mode [ 544.020506][T13426] veth0_macvtap: entered promiscuous mode [ 544.084542][T13426] veth1_macvtap: entered promiscuous mode [ 544.170761][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.209550][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.238757][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.268883][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.308611][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.347415][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.369637][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.398681][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.448873][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.468564][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.480230][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.503248][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.513494][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.537330][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.547685][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.558426][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.580442][T13426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.602083][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.623531][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.633456][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.643975][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.658610][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.669201][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.679146][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.692649][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.703008][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.713967][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.724259][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.748587][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.758780][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.771053][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.781209][T13426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.815260][T13426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.850607][T13426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.939762][T13426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.978787][T13426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.987690][T13426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.999891][T13426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.225341][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.250665][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.321574][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.358676][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.828667][ T5278] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 545.919873][ T5281] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 546.040750][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.076937][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.118882][ T5278] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 546.138890][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 546.157124][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.169123][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.198343][ T5278] usb 4-1: config 0 descriptor?? [ 546.213827][ T5281] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 546.238915][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.267803][ T5281] usb 3-1: config 0 descriptor?? [ 546.572031][ T5281] usb 3-1: USB disconnect, device number 46 [ 546.701610][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.728738][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.748936][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.755867][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.792993][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.813272][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.853860][ T5278] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 546.886404][ T5278] wacom 0003:056A:0000.0022: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 546.947487][ T5278] wacom 0003:056A:0000.0022: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 546.996257][ T5278] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0022/input/input48 [ 547.219325][ T5278] usb 4-1: USB disconnect, device number 52 [ 547.374109][T13579] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1857'. [ 547.407947][T13579] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 547.980166][ T5278] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 548.185685][ T5278] usb 2-1: Using ep0 maxpacket: 8 [ 548.219401][ T5278] usb 2-1: config index 0 descriptor too short (expected 45257, got 36) [ 548.258598][ T5278] usb 2-1: config 68 has too many interfaces: 49, using maximum allowed: 32 [ 548.292774][ T5278] usb 2-1: config 68 has an invalid descriptor of length 161, skipping remainder of the config [ 548.347923][ T5278] usb 2-1: config 68 has 0 interfaces, different from the descriptor's value: 49 [ 548.380759][ T5278] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 548.418741][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.599031][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 548.739288][ T5281] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 548.836119][ T5278] usb 2-1: string descriptor 0 read error: -71 [ 548.868588][ T5278] usb 2-1: USB disconnect, device number 58 [ 548.989264][ T5281] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 549.038764][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.070374][ T5281] usb 5-1: config 0 descriptor?? [ 549.100169][ T5281] cp210x 5-1:0.0: cp210x converter detected [ 549.398760][T13628] Failed to get privilege flags for destination (handle=0x0:0x0) [ 549.555873][ T5281] usb 5-1: cp210x converter now attached to ttyUSB0 [ 549.867352][ T5281] usb 5-1: USB disconnect, device number 45 [ 549.897528][ T5281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 549.940198][ T5281] cp210x 5-1:0.0: device disconnected [ 550.186572][T13649] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 550.203913][T13649] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 550.297466][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 550.383512][T13655] input: syz1 as /devices/virtual/input/input51 [ 550.960567][T13676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.068823][T11839] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 551.313287][T11839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.353425][T11839] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.370667][T13692] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 551.386820][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 551.412756][T11839] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.457607][T11839] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.474376][T11839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.486475][T13692] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1888'. [ 551.496006][T11839] usb 3-1: Product: syz [ 551.509041][T11839] usb 3-1: Manufacturer: syz [ 551.529335][T11839] usb 3-1: SerialNumber: syz [ 551.578366][T11839] hub 3-1:1.0: bad descriptor, ignoring hub [ 551.619536][T11839] hub 3-1:1.0: probe with driver hub failed with error -5 [ 551.783415][T11839] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 552.248917][ T8] usb 3-1: USB disconnect, device number 47 [ 552.282803][ T8] usblp0: removed [ 552.288421][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 552.288437][ T29] audit: type=1326 audit(1722623165.040:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.316895][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.447073][ T29] audit: type=1326 audit(1722623165.050:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.563680][ T29] audit: type=1326 audit(1722623165.050:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.723483][ T29] audit: type=1326 audit(1722623165.050:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.788693][ T29] audit: type=1326 audit(1722623165.070:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.841075][ T29] audit: type=1326 audit(1722623165.070:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 552.938628][ T29] audit: type=1326 audit(1722623165.070:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 553.038793][ T29] audit: type=1326 audit(1722623165.090:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 553.158819][ T29] audit: type=1326 audit(1722623165.090:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 553.229623][ T29] audit: type=1326 audit(1722623165.090:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.1893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1579 code=0x7ffc0000 [ 553.509970][T13739] input: syz1 as /devices/virtual/input/input52 [ 553.638798][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 553.793702][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 553.841362][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.878998][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.939113][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 553.996717][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.044480][ T8] usb 1-1: config 0 descriptor?? [ 554.257193][ T5281] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 554.435013][T13755] veth1_macvtap: left promiscuous mode [ 554.461249][T13755] macsec0: entered allmulticast mode [ 554.472272][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.495409][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.547241][T13756] binder: 13754:13756 ioctl 400c620e 20000200 returned -22 [ 554.558712][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.601108][ T5281] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 554.615675][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.654692][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.663273][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.681034][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.701194][ T5281] usb 5-1: config 0 descriptor?? [ 554.706297][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.728725][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.742023][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.749973][ T8] wacom 0003:056A:0000.0023: unknown main item tag 0x0 [ 554.784721][ T8] wacom 0003:056A:0000.0023: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 554.824333][ T8] wacom 0003:056A:0000.0023: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 554.861527][ T8] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.0023/input/input53 [ 554.921244][T13763] ------------[ cut here ]------------ [ 554.927279][T13763] WARNING: CPU: 0 PID: 13763 at include/net/mac80211.h:6993 minstrel_ht_update_caps+0x44a/0x17e0 [ 554.937878][T13763] Modules linked in: [ 554.941813][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.1.1908 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 554.952632][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 554.962724][T13763] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 554.969124][T13763] Code: da e8 aa d8 a2 f9 e9 24 ff ff ff e8 e0 4d 4c f6 eb 17 e8 d9 4d 4c f6 eb 14 e8 d2 4d 4c f6 49 c1 fd 38 eb 0c e8 c7 4d 4c f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 554.988857][T13763] RSP: 0018:ffffc9000926ef60 EFLAGS: 00010283 [ 554.994983][T13763] RAX: ffffffff8b4718a9 RBX: 000000000000000c RCX: 0000000000040000 [ 555.003027][T13763] RDX: ffffc9000f3d6000 RSI: 0000000000001431 RDI: 0000000000001432 [ 555.011065][T13763] RBP: 0000000000000000 R08: ffffffff8b4717c5 R09: 0000000000000000 [ 555.019101][T13763] R10: ffff888065208008 R11: ffffed100ca41549 R12: 1ffff1100d2e061c [ 555.027090][T13763] R13: 0b00000000000000 R14: ffff8880697030e0 R15: 0100000000000000 [ 555.035124][T13763] FS: 0000000000000000(0000) GS:ffff8880b9200000(0063) knlGS:00000000f5745b40 [ 555.044113][T13763] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 555.050742][T13763] CR2: 0000000033f1bff8 CR3: 0000000060f9a000 CR4: 00000000003506f0 [ 555.058757][T13763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.066772][T13763] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 555.074803][T13763] Call Trace: [ 555.078094][T13763] [ 555.081064][T13763] ? __warn+0x163/0x4e0 [ 555.085226][T13763] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 555.090992][T13763] ? report_bug+0x2b3/0x500 [ 555.095505][T13763] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 555.101296][T13763] ? handle_bug+0x3e/0x70 [ 555.105691][T13763] ? exc_invalid_op+0x1a/0x50 [ 555.110411][T13763] ? asm_exc_invalid_op+0x1a/0x20 [ 555.115447][T13763] ? minstrel_ht_update_caps+0x365/0x17e0 [ 555.121211][T13763] ? minstrel_ht_update_caps+0x449/0x17e0 [ 555.126946][T13763] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 555.132709][T13763] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.138107][T13763] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 555.143960][T13763] rate_control_rate_init+0x3cf/0x5f0 [ 555.149375][T13763] ? rate_control_rate_init+0xe3/0x5f0 [ 555.154852][T13763] sta_apply_auth_flags+0x1b6/0x410 [ 555.160093][T13763] sta_apply_parameters+0xe23/0x1550 [ 555.165389][T13763] ieee80211_add_station+0x3da/0x630 [ 555.170715][T13763] rdev_add_station+0x11b/0x2b0 [ 555.175578][T13763] nl80211_new_station+0x1d53/0x2550 [ 555.180974][T13763] ? __pfx_nl80211_new_station+0x10/0x10 [ 555.186673][T13763] ? netdev_run_todo+0xf88/0x1000 [ 555.191765][T13763] genl_rcv_msg+0xb14/0xec0 [ 555.196272][T13763] ? mark_lock+0x9a/0x350 [ 555.200642][T13763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.205685][T13763] ? __pfx_lock_acquire+0x10/0x10 [ 555.210742][T13763] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 555.216119][T13763] ? __pfx_nl80211_new_station+0x10/0x10 [ 555.221780][T13763] ? __pfx_nl80211_post_doit+0x10/0x10 [ 555.227241][T13763] ? __pfx___might_resched+0x10/0x10 [ 555.232562][T13763] netlink_rcv_skb+0x1e3/0x430 [ 555.237361][T13763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.242454][T13763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.247756][T13763] ? __netlink_deliver_tap+0x77e/0x7c0 [ 555.253253][T13763] genl_rcv+0x28/0x40 [ 555.257232][T13763] netlink_unicast+0x7f0/0x990 [ 555.262119][T13763] ? __pfx_netlink_unicast+0x10/0x10 [ 555.267406][T13763] ? __virt_addr_valid+0x183/0x530 [ 555.272547][T13763] ? __check_object_size+0x49c/0x900 [ 555.277830][T13763] ? bpf_lsm_netlink_send+0x9/0x10 [ 555.282978][T13763] netlink_sendmsg+0x8e4/0xcb0 [ 555.287754][T13763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.293078][T13763] ? aa_sock_msg_perm+0x91/0x160 [ 555.298017][T13763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.303336][T13763] ? security_socket_sendmsg+0x87/0xb0 [ 555.308842][T13763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.314137][T13763] __sock_sendmsg+0x221/0x270 [ 555.318850][T13763] ____sys_sendmsg+0x525/0x7d0 [ 555.323625][T13763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.328946][T13763] __sys_sendmsg+0x2b0/0x3a0 [ 555.333541][T13763] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.338688][T13763] ? security_bpf+0x87/0xb0 [ 555.343219][T13763] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 555.349853][T13763] ? lockdep_hardirqs_on+0x99/0x150 [ 555.355059][T13763] __do_fast_syscall_32+0xb4/0x110 [ 555.360206][T13763] ? exc_page_fault+0x590/0x8c0 [ 555.365071][T13763] do_fast_syscall_32+0x34/0x80 [ 555.369981][T13763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.376313][T13763] RIP: 0023:0xf7fb5579 [ 555.380438][T13763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 555.400091][T13763] RSP: 002b:00000000f574557c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 555.408569][T13763] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001080 [ 555.416562][T13763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.424565][T13763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.432563][T13763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.440563][T13763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.448592][T13763] [ 555.451626][T13763] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 555.458891][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.1.1908 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 555.469644][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 555.479683][T13763] Call Trace: [ 555.482944][T13763] [ 555.485859][T13763] dump_stack_lvl+0x241/0x360 [ 555.490528][T13763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.495710][T13763] ? __pfx__printk+0x10/0x10 [ 555.500286][T13763] ? vscnprintf+0x5d/0x90 [ 555.504598][T13763] panic+0x349/0x860 [ 555.508578][T13763] ? __warn+0x172/0x4e0 [ 555.512733][T13763] ? __pfx_panic+0x10/0x10 [ 555.517142][T13763] __warn+0x346/0x4e0 [ 555.521108][T13763] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 555.526816][T13763] report_bug+0x2b3/0x500 [ 555.531133][T13763] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 555.536839][T13763] handle_bug+0x3e/0x70 [ 555.540984][T13763] exc_invalid_op+0x1a/0x50 [ 555.545481][T13763] asm_exc_invalid_op+0x1a/0x20 [ 555.550319][T13763] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 555.556637][T13763] Code: da e8 aa d8 a2 f9 e9 24 ff ff ff e8 e0 4d 4c f6 eb 17 e8 d9 4d 4c f6 eb 14 e8 d2 4d 4c f6 49 c1 fd 38 eb 0c e8 c7 4d 4c f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 555.576229][T13763] RSP: 0018:ffffc9000926ef60 EFLAGS: 00010283 [ 555.582296][T13763] RAX: ffffffff8b4718a9 RBX: 000000000000000c RCX: 0000000000040000 [ 555.590255][T13763] RDX: ffffc9000f3d6000 RSI: 0000000000001431 RDI: 0000000000001432 [ 555.598216][T13763] RBP: 0000000000000000 R08: ffffffff8b4717c5 R09: 0000000000000000 [ 555.606169][T13763] R10: ffff888065208008 R11: ffffed100ca41549 R12: 1ffff1100d2e061c [ 555.614129][T13763] R13: 0b00000000000000 R14: ffff8880697030e0 R15: 0100000000000000 [ 555.622092][T13763] ? minstrel_ht_update_caps+0x365/0x17e0 [ 555.627803][T13763] ? minstrel_ht_update_caps+0x449/0x17e0 [ 555.633521][T13763] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.638884][T13763] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 555.644668][T13763] rate_control_rate_init+0x3cf/0x5f0 [ 555.650028][T13763] ? rate_control_rate_init+0xe3/0x5f0 [ 555.655479][T13763] sta_apply_auth_flags+0x1b6/0x410 [ 555.660681][T13763] sta_apply_parameters+0xe23/0x1550 [ 555.666001][T13763] ieee80211_add_station+0x3da/0x630 [ 555.671296][T13763] rdev_add_station+0x11b/0x2b0 [ 555.676141][T13763] nl80211_new_station+0x1d53/0x2550 [ 555.681422][T13763] ? __pfx_nl80211_new_station+0x10/0x10 [ 555.687064][T13763] ? netdev_run_todo+0xf88/0x1000 [ 555.692180][T13763] genl_rcv_msg+0xb14/0xec0 [ 555.696670][T13763] ? mark_lock+0x9a/0x350 [ 555.700991][T13763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.706013][T13763] ? __pfx_lock_acquire+0x10/0x10 [ 555.711033][T13763] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 555.716597][T13763] ? __pfx_nl80211_new_station+0x10/0x10 [ 555.722227][T13763] ? __pfx_nl80211_post_doit+0x10/0x10 [ 555.727699][T13763] ? __pfx___might_resched+0x10/0x10 [ 555.733003][T13763] netlink_rcv_skb+0x1e3/0x430 [ 555.737767][T13763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.742779][T13763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.748058][T13763] ? __netlink_deliver_tap+0x77e/0x7c0 [ 555.753525][T13763] genl_rcv+0x28/0x40 [ 555.757496][T13763] netlink_unicast+0x7f0/0x990 [ 555.762255][T13763] ? __pfx_netlink_unicast+0x10/0x10 [ 555.767530][T13763] ? __virt_addr_valid+0x183/0x530 [ 555.772632][T13763] ? __check_object_size+0x49c/0x900 [ 555.777911][T13763] ? bpf_lsm_netlink_send+0x9/0x10 [ 555.783011][T13763] netlink_sendmsg+0x8e4/0xcb0 [ 555.787772][T13763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.793047][T13763] ? aa_sock_msg_perm+0x91/0x160 [ 555.797972][T13763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.803242][T13763] ? security_socket_sendmsg+0x87/0xb0 [ 555.808701][T13763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.814005][T13763] __sock_sendmsg+0x221/0x270 [ 555.818675][T13763] ____sys_sendmsg+0x525/0x7d0 [ 555.823427][T13763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.828702][T13763] __sys_sendmsg+0x2b0/0x3a0 [ 555.833277][T13763] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.838381][T13763] ? security_bpf+0x87/0xb0 [ 555.842891][T13763] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 555.849493][T13763] ? lockdep_hardirqs_on+0x99/0x150 [ 555.854730][T13763] __do_fast_syscall_32+0xb4/0x110 [ 555.859877][T13763] ? exc_page_fault+0x590/0x8c0 [ 555.864722][T13763] do_fast_syscall_32+0x34/0x80 [ 555.869566][T13763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.875896][T13763] RIP: 0023:0xf7fb5579 [ 555.879946][T13763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 555.899728][T13763] RSP: 002b:00000000f574557c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 555.908219][T13763] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001080 [ 555.916181][T13763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.924154][T13763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.932119][T13763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.940080][T13763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.948046][T13763] [ 555.951455][T13763] Kernel Offset: disabled [ 555.956028][T13763] Rebooting in 86400 seconds..