last executing test programs: 10.00673263s ago: executing program 1 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20}, 0x90) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x10001, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e65"], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.735606698s ago: executing program 1 (id=1529): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0), 0x0) 9.540043602s ago: executing program 1 (id=1531): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300048c1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8.037867134s ago: executing program 1 (id=1546): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r3}, 0x10) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) 7.023110526s ago: executing program 1 (id=1550): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 6.751847353s ago: executing program 1 (id=1553): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b908c7f"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000400000406b1d010140000102030109025f0003010000000904000000010100000a2401000000020102090401000001020000090401010109000000090501090000000000072501000000000904020000010200000904020101010200000905"], 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$EVIOCGREP(r0, 0x40044591, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff990908"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/30, 0x1e) syz_usb_disconnect(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1}) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r8 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r9}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001d80)) sendmmsg$inet6(r4, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000440)="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", 0xfe}, {0x0}], 0x3, &(0x7f0000001880)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x4, 0x12, '\x00', [@pad1, @generic={0x6, 0x86, "4201d9eee3df885da7276b90dbb355fc5b2e939a49d40fb460b5289002be3456d143576af3dd33377d707553e877ff974e76bf08b7c02ed5155ec9527d7d546feada01d96ff225522133e35d7a890c1da5558e68dcd510b9a3db96fc6346d14c17070c1804278847fcc848ee8e69f5ab2d7aacecffbece6cb558774a4ee304766b5cef3fafcd"}, @enc_lim={0x4, 0x1, 0xfd}, @jumbo={0xc2, 0x4, 0x80}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x0, 0xe, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @local, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x410c85e239694986, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff2}, @jumbo={0xc2, 0x4, 0x1951}]}}}], 0x1b8}}, {{&(0x7f00000016c0)={0xa, 0x4e23, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001700)="cdd9230d925a615c56f3a1b2e9a905812814a95ac5ecdd8c2fa42dcd818958cd375eb31127b02178ec2c040e93e1f1f0104782285849050a8104ceca", 0x3c}, {&(0x7f0000001740)="fc84be2ed316979dfe55efcb541f764e71828fe5f1902e196ec66f217747e8a06d33ef8e5b0c575a5f0efa33b39c36f564d1c918bdd1602cf99461f714d7d163192dc7478a3ec97d3c91817f37ec23185c280e71ecb2301af1c5002e9e36682bb58f479075f4ef004090a86a1413b7f48ea0d83e2c89173b3010cb8f517a102a9669e9e9b77de1e474edb49c87ec8528e8c2c662973986e28c1a3830b4498740fe0b5da57ece1c4567d32af975909757fef08a7de7bb4be8021fc368ca04e5f23e560045216b239d253f96745c60fb66af6b59cf045f94c131bdd526f3ad69b25e", 0xe1}, {&(0x7f0000001a40)="7f1306f10a96b0209559675f5d8f850baf05990d3b4cf29a04041d575722c26b4c49cf47b3a88bcd954ea6614d7f290ed20e478f75663ec373db61772760666f6e4f385585fea2227674a21734087dc49e106c0d", 0x54}, {&(0x7f0000001ac0)="b868096d7a4ccec4a74bf54ed1a24d7d", 0x10}], 0x4, &(0x7f0000001b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x78, 0x29, 0x37, {0x5e, 0xb, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x81, [0x0]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @pad1, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x7f, [0x4]}}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x8, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x1, 0x0, [@private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3913}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xe44d}}], 0x170}}, {{&(0x7f0000001cc0)={0xa, 0x4e20, 0x2, @mcast2, 0x8001}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001d00)="a02d6fa4e66907f1ad1de0e39f3b09c0345a2cc585292b6fa4ffcc6f4e93bc8eeb4e31e5faaff41f4b49fa5d8a9451edff95fa5953a6", 0x36}], 0x1, &(0x7f0000001dc0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r9}}}, @hopopts={{0x130, 0x29, 0x36, {0x87, 0x22, '\x00', [@generic={0x10, 0xf7, "9bac481bf7d957481983b7e22a7a62182bfc1c24596a6c26ba42acb3a81477199e64bf5f0e206374f4244f60d794d9611e81fbc7bdf53f15a8e56861e2c9951de582e3ee3783a2dc8c61be901b328d9385daeaf3a36bd999e215fbb8dd34ba29ed812414490cdb12d20e1279e89374977cbda3f47fb7e3e7302de3ff4e17f91da77e0bc9715a7a5bd110e39d1029f51fc84db5ef8e649aa30a5bbf6f0c7e2e1d5cf43456ca76c09df31a38e25c9433b5d116509fcd36225ad36acfcb77085805382bc7acb9b3f92e876336f833da75fd8af95fedf4d3bcdc522d8d9eab9652656e56872fc9376365780b07760ffb7e51e9b7545651cf11"}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0xe0aa}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x1c8}}, {{&(0x7f0000001fc0)={0xa, 0x4e23, 0xdf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000002000)}, {&(0x7f0000002040)="a62952e86786679b831a6a6ace6379bdeb0985b24ad2e26dc1f6b50b5326210d7830a30ab3450dbf9e2170fc3bc0e5b76b2a79ffe59e76f6330a47f1da4dd6744ef60f8a7f0585864addb0dad15b74b8557e3acae81b5885b3594c", 0x5b}], 0x2, &(0x7f0000002180)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr={{0x38, 0x29, 0x39, {0x5e, 0x4, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}], 0x68}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002200)}, {&(0x7f0000002240)="05276243ee44f32d8627c950f2f5892a7c41e7851c7ee2275f0d7822a3536b687bdfefc8f0a4e5ed8ef503ae6f37c0be3d41d99399881413681559c7cc67e25734a0c86477581f90fdb560a982606ff71ef49c0243eed23092b543a5e638", 0x5e}], 0x2}}], 0x5, 0x80) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x52, 0x12, 0xff, {0xddde}, {0x2, 0xe8}, @period={0x5c, 0x2, 0x1, 0x0, 0x1d7, {0x3, 0x1, 0x80c, 0x5}, 0x1, &(0x7f0000000180)=[0xffc1]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) write$char_usb(r7, &(0x7f0000000040), 0x0) 6.344058456s ago: executing program 4 (id=1557): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300048c1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.836748205s ago: executing program 4 (id=1565): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0xa, 0x0) unshare(0x24020400) dup(r0) 3.664750582s ago: executing program 2 (id=1571): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001a40)={0x0, 0x0, 0x300, 0xffffffffffffffff, 0x5}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4062, 0x0, 0xfde}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.4595323s ago: executing program 4 (id=1574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/13, 0xd}], 0x1}, 0x8}], 0x1, 0x60018001, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x10) 3.076568296s ago: executing program 4 (id=1576): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 3.067588292s ago: executing program 3 (id=1577): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0)="788915dde61869f0af8ba94ed58d4454731ef892b0", 0x15) 2.740061931s ago: executing program 3 (id=1578): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.60889109s ago: executing program 2 (id=1579): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) syz_open_procfs(0x0, &(0x7f0000000080)='net/rpc\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='afs_file_error\x00', r0}, 0x10) syz_open_dev$vbi(&(0x7f00000010c0), 0x0, 0x2) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r3], 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.953598777s ago: executing program 0 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500)) 1.737146757s ago: executing program 0 (id=1582): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newchain={0x43c, 0x64, 0x108, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {0x8, 0x2}, {0x5, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x9, 0x8000, 0x40000000, 0x4, 0x8, 0x35cf5136, 0x7, 0x8000, 0x3, 0xa, 0xa, 0x100, 0x800, 0x69c, 0x7fff, 0x200, 0x200, 0x0, 0x8, 0x1, 0x80, 0x2, 0x6, 0x9, 0x8, 0x1, 0xfffffff2, 0x3, 0x3, 0x80000000, 0x7, 0x7, 0x5, 0x3400, 0x0, 0x7, 0x8d, 0x9, 0x9, 0x1, 0x2, 0x12000000, 0x4, 0x8, 0x0, 0x1000, 0x8, 0x82, 0x6, 0x0, 0x3ff, 0x10000, 0x7, 0x10, 0x6, 0x8, 0x101, 0x5380000, 0x1ff, 0x1, 0x0, 0x10001, 0x8, 0x81, 0x6, 0x5f, 0x6, 0x1fe9, 0x8, 0x4, 0x3, 0x48, 0x1000, 0x70d, 0x9, 0xb9e2, 0x2, 0x18000, 0x3, 0x5524cfb4, 0x2a3, 0x5, 0x7, 0x3, 0x9, 0x7, 0x7f, 0x1000, 0x3, 0x8, 0xa, 0x5, 0x6, 0xffffffc0, 0x5, 0x97, 0xffffffff, 0xfffffc01, 0x3, 0x7, 0xf5, 0xfffffffe, 0x0, 0x9, 0xffff, 0x8, 0x0, 0xff, 0x10, 0x6, 0x6, 0x1, 0xfff, 0xffffffff, 0x5, 0xe1c3, 0x8, 0x9, 0x7, 0x75, 0x8, 0x7, 0x7f, 0xc6c, 0xfffffff5, 0x974, 0x17743dc8, 0x5, 0x0, 0x79, 0x3, 0xb, 0xf, 0x1, 0x400, 0x8, 0x7, 0x101, 0x6, 0x34d, 0x0, 0xff, 0x7f, 0x2, 0x0, 0x2, 0x7, 0x7fffffff, 0x70b, 0x7, 0x7, 0x2, 0x425b897c, 0xfffffff9, 0x6, 0x0, 0x5, 0xa, 0x4, 0x14, 0x3, 0x529a70af, 0x2, 0xffff, 0x7, 0x4, 0x1, 0x200, 0x6, 0x0, 0xffffffff, 0x8, 0x7ff, 0x9, 0x401, 0x0, 0x7f, 0xb, 0x200, 0x7, 0x8, 0x4e, 0x5, 0x7, 0xffffffff, 0xf52, 0x1, 0x7, 0xa, 0x4f, 0x80000001, 0x6, 0x6, 0x200, 0x0, 0x1, 0x10001, 0x7ff, 0xd6e, 0x6, 0x1, 0x0, 0x40, 0x7, 0xe64f, 0x4acc, 0x4, 0x8, 0x0, 0x3, 0x7, 0x80000000, 0x4, 0xfc6, 0x4, 0xaa3, 0x2, 0xb6c6, 0xc16, 0x9, 0xfffffff7, 0xc, 0x3, 0x101, 0x4, 0x55, 0x10001, 0x7, 0x7, 0xffff, 0x6, 0x40, 0xfffffffc, 0x18f1, 0x7, 0x7, 0x1ff, 0xffffffff, 0x9, 0x1ff, 0x4, 0x4, 0x4, 0x7fffffff, 0xb1, 0x1, 0x6, 0x181f, 0x3, 0x3, 0x4, 0x2, 0x5, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x48081) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x80) 1.604397995s ago: executing program 0 (id=1583): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) 1.512127545s ago: executing program 0 (id=1584): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 1.412425559s ago: executing program 0 (id=1585): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) 886.962328ms ago: executing program 4 (id=1586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20}, 0x90) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x10001, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) mlockall(0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e65"], 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 886.766672ms ago: executing program 2 (id=1587): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f00000002c0)="788915dde61869f0af8ba94ed58d4454731ef892b0", 0x15) 886.34044ms ago: executing program 3 (id=1588): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="18", 0x1}], 0x1) 836.006674ms ago: executing program 0 (id=1589): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x300048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 636.854004ms ago: executing program 4 (id=1590): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 570.743127ms ago: executing program 2 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 530.43299ms ago: executing program 3 (id=1592): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newchain={0x43c, 0x64, 0x108, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {0x8, 0x2}, {0x5, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x9, 0x8000, 0x40000000, 0x4, 0x8, 0x35cf5136, 0x7, 0x8000, 0x3, 0xa, 0xa, 0x100, 0x800, 0x69c, 0x7fff, 0x200, 0x200, 0x0, 0x8, 0x1, 0x80, 0x2, 0x6, 0x9, 0x8, 0x1, 0xfffffff2, 0x3, 0x3, 0x80000000, 0x7, 0x7, 0x5, 0x3400, 0x0, 0x7, 0x8d, 0x9, 0x9, 0x1, 0x2, 0x12000000, 0x4, 0x8, 0x0, 0x1000, 0x8, 0x82, 0x6, 0x0, 0x3ff, 0x10000, 0x7, 0x10, 0x6, 0x8, 0x101, 0x5380000, 0x1ff, 0x1, 0x0, 0x10001, 0x8, 0x81, 0x6, 0x5f, 0x6, 0x1fe9, 0x8, 0x4, 0x3, 0x48, 0x1000, 0x70d, 0x9, 0xb9e2, 0x2, 0x18000, 0x3, 0x5524cfb4, 0x2a3, 0x5, 0x7, 0x3, 0x9, 0x7, 0x7f, 0x1000, 0x3, 0x8, 0xa, 0x5, 0x6, 0xffffffc0, 0x5, 0x97, 0xffffffff, 0xfffffc01, 0x3, 0x7, 0xf5, 0xfffffffe, 0x0, 0x9, 0xffff, 0x8, 0x0, 0xff, 0x10, 0x6, 0x6, 0x1, 0xfff, 0xffffffff, 0x5, 0xe1c3, 0x8, 0x9, 0x7, 0x75, 0x8, 0x7, 0x7f, 0xc6c, 0xfffffff5, 0x974, 0x17743dc8, 0x5, 0x0, 0x79, 0x3, 0xb, 0xf, 0x1, 0x400, 0x8, 0x7, 0x101, 0x6, 0x34d, 0x0, 0xff, 0x7f, 0x2, 0x0, 0x2, 0x7, 0x7fffffff, 0x70b, 0x7, 0x7, 0x2, 0x425b897c, 0xfffffff9, 0x6, 0x0, 0x5, 0xa, 0x4, 0x14, 0x3, 0x529a70af, 0x2, 0xffff, 0x7, 0x4, 0x1, 0x200, 0x6, 0x0, 0xffffffff, 0x8, 0x7ff, 0x9, 0x401, 0x0, 0x7f, 0xb, 0x200, 0x7, 0x8, 0x4e, 0x5, 0x7, 0xffffffff, 0xf52, 0x1, 0x7, 0xa, 0x4f, 0x80000001, 0x6, 0x6, 0x200, 0x0, 0x1, 0x10001, 0x7ff, 0xd6e, 0x6, 0x1, 0x0, 0x40, 0x7, 0xe64f, 0x4acc, 0x4, 0x8, 0x0, 0x3, 0x7, 0x80000000, 0x4, 0xfc6, 0x4, 0xaa3, 0x2, 0xb6c6, 0xc16, 0x9, 0xfffffff7, 0xc, 0x3, 0x101, 0x4, 0x55, 0x10001, 0x7, 0x7, 0xffff, 0x6, 0x40, 0xfffffffc, 0x18f1, 0x7, 0x7, 0x1ff, 0xffffffff, 0x9, 0x1ff, 0x4, 0x4, 0x4, 0x7fffffff, 0xb1, 0x1, 0x6, 0x181f, 0x3, 0x3, 0x4, 0x2, 0x5, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x48081) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x80) 272.045668ms ago: executing program 3 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x934, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x90c, 0x70, [@NL80211_MESH_SETUP_IE={0x905, 0x3, "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"}]}]}, 0x934}}, 0x0) 245.231651ms ago: executing program 2 (id=1594): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) 61.040669ms ago: executing program 3 (id=1595): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001100)={&(0x7f0000000100)=[{0x7, 0x42f5, 0x0, 0x0}], 0x1}) 0s ago: executing program 2 (id=1596): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) kernel console output (not intermixed with test programs): T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.840921][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.856468][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.868905][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.887145][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.895358][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.904786][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.340593][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.401326][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.442084][ T152] bond0 (unregistering): Released all slaves [ 249.728830][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 249.959741][ T5243] Bluetooth: hci0: command tx timeout [ 250.308438][ T8205] capability: warning: `syz.3.794' uses deprecated v2 capabilities in a way that may be insecure [ 250.418232][ T152] hsr_slave_0: left promiscuous mode [ 250.437604][ T152] hsr_slave_1: left promiscuous mode [ 250.456128][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.496777][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.537761][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.560559][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.615533][ T152] veth1_macvtap: left promiscuous mode [ 250.631502][ T152] veth0_macvtap: left promiscuous mode [ 250.653320][ T152] veth1_vlan: left promiscuous mode [ 250.666970][ T152] veth0_vlan: left promiscuous mode [ 250.985761][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.001026][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.010574][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.036971][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.047421][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.055761][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.422455][ T5236] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 251.645448][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 251.653101][ T5236] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.674618][ T5236] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.713550][ T5236] usb 4-1: config 1 interface 0 has no altsetting 0 [ 251.746456][ T5236] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.40 [ 251.762044][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.786755][ T5236] usb 4-1: Product: syz [ 251.791013][ T5236] usb 4-1: Manufacturer: syz [ 251.802103][ T5236] usb 4-1: SerialNumber: syz [ 252.043758][ T4623] Bluetooth: hci0: command tx timeout [ 252.076864][ T5236] usbhid 4-1:1.0: can't add hid device: -71 [ 252.082957][ T5236] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 252.112148][ T152] team0 (unregistering): Port device team_slave_1 removed [ 252.146461][ T5236] usb 4-1: USB disconnect, device number 7 [ 252.245753][ T152] team0 (unregistering): Port device team_slave_0 removed [ 253.157037][ T4623] Bluetooth: hci3: command tx timeout [ 253.395344][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 253.527598][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.112493][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.128114][ T4623] Bluetooth: hci0: command tx timeout [ 254.136889][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.158830][ T8151] bridge_slave_0: entered allmulticast mode [ 254.194253][ T8151] bridge_slave_0: entered promiscuous mode [ 254.344187][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.387033][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.440336][ T8151] bridge_slave_1: entered allmulticast mode [ 254.511321][ T8151] bridge_slave_1: entered promiscuous mode [ 254.657879][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.678977][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.789906][ T8151] team0: Port device team_slave_0 added [ 254.830033][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 254.875022][ T8151] team0: Port device team_slave_1 added [ 255.105439][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.119642][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.146562][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.187628][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.199516][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.226344][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.256694][ T4623] Bluetooth: hci3: command tx timeout [ 255.388082][ T5236] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 255.454417][ T152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.544315][ T8151] hsr_slave_0: entered promiscuous mode [ 255.577411][ T8151] hsr_slave_1: entered promiscuous mode [ 255.593263][ T8151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.597471][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 255.609914][ T8151] Cannot create hsr debugfs directory [ 255.640043][ T5236] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 255.657881][ T5236] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 255.724248][ T5236] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 255.744098][ T5236] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 255.776036][ T5236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.802881][ T5236] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 255.833776][ T5236] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 255.845200][ T152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.858153][ T5236] usb 3-1: Product: syz [ 255.862364][ T5236] usb 3-1: Manufacturer: syz [ 255.881555][ T5236] usb 3-1: SerialNumber: syz [ 255.923532][ T5236] usb 3-1: config 0 descriptor?? [ 255.949120][ T5236] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.001557][ T5236] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.039875][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046530][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.048230][ T8302] warning: `syz.3.819' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 256.148372][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.189839][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.197153][ T4623] Bluetooth: hci0: command tx timeout [ 256.239894][ T8224] bridge_slave_0: entered allmulticast mode [ 256.294556][ T947] usb 3-1: USB disconnect, device number 20 [ 256.332249][ T8224] bridge_slave_0: entered promiscuous mode [ 256.337719][ T947] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 256.388878][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.450972][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.461603][ T8224] bridge_slave_1: entered allmulticast mode [ 256.476032][ T8224] bridge_slave_1: entered promiscuous mode [ 256.520722][ T152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.648297][ T152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.726789][ T5283] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 256.738644][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.765855][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.924689][ T8224] team0: Port device team_slave_0 added [ 256.956989][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 256.987093][ T5283] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 257.016302][ T5283] usb 4-1: config 0 has no interface number 0 [ 257.024772][ T5283] usb 4-1: config 0 interface 182 has no altsetting 0 [ 257.059858][ T5283] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 257.086822][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.106382][ T8224] team0: Port device team_slave_1 added [ 257.122294][ T5283] usb 4-1: Product: syz [ 257.126522][ T5283] usb 4-1: Manufacturer: syz [ 257.156683][ T5283] usb 4-1: SerialNumber: syz [ 257.170554][ T5283] usb 4-1: config 0 descriptor?? [ 257.198967][ T5283] usb-storage 4-1:0.182: USB Mass Storage device detected [ 257.241045][ T5283] usb-storage 4-1:0.182: Quirks match for vid 07cf pid 1001: a [ 257.302764][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.310215][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.338398][ T947] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.338542][ T4623] Bluetooth: hci3: command tx timeout [ 257.366805][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.459296][ T5283] usb 4-1: USB disconnect, device number 8 [ 257.500669][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.509795][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.544057][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.546557][ T947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.606152][ T947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.628651][ T947] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.638632][ T947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.650761][ T947] usb 3-1: config 0 descriptor?? [ 257.752526][ T152] bridge_slave_1: left allmulticast mode [ 257.760215][ T152] bridge_slave_1: left promiscuous mode [ 257.766011][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.777053][ T152] bridge_slave_0: left allmulticast mode [ 257.782741][ T152] bridge_slave_0: left promiscuous mode [ 257.790782][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.109791][ T947] hid (null): bogus close delimiter [ 258.300998][ T947] usb 3-1: language id specifier not provided by device, defaulting to English [ 258.737948][ T947] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input5 [ 258.861451][ T947] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input6 [ 259.030347][ T5236] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.064944][ T947] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input7 [ 259.145159][ T947] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input8 [ 259.226855][ T5236] usb 4-1: Using ep0 maxpacket: 8 [ 259.247254][ T947] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 259.272723][ T5236] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.297772][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.335339][ T5236] usb 4-1: Product: syz [ 259.342285][ T5236] usb 4-1: Manufacturer: syz [ 259.349716][ T947] usb 3-1: USB disconnect, device number 21 [ 259.353516][ T5236] usb 4-1: SerialNumber: syz [ 259.390471][ T5236] usb 4-1: config 0 descriptor?? [ 259.397405][ T4623] Bluetooth: hci3: command tx timeout [ 259.591521][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.620739][ T5236] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.672645][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.733281][ T152] bond0 (unregistering): Released all slaves [ 260.081811][ T8224] hsr_slave_0: entered promiscuous mode [ 260.100018][ T8224] hsr_slave_1: entered promiscuous mode [ 260.110423][ T947] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 260.118802][ T8224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.126423][ T8224] Cannot create hsr debugfs directory [ 260.316743][ T947] usb 3-1: Using ep0 maxpacket: 8 [ 260.336918][ T947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.355304][ T947] usb 3-1: config 0 has no interfaces? [ 260.381611][ T947] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.394301][ T947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.417146][ T947] usb 3-1: config 0 descriptor?? [ 260.443882][ T152] hsr_slave_0: left promiscuous mode [ 260.467130][ T152] hsr_slave_1: left promiscuous mode [ 260.507055][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.514526][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.545918][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.564420][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.615674][ T152] veth1_macvtap: left promiscuous mode [ 260.621415][ T152] veth0_macvtap: left promiscuous mode [ 260.637085][ T152] veth1_vlan: left promiscuous mode [ 260.652777][ T152] veth0_vlan: left promiscuous mode [ 261.080565][ T5236] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 261.134237][ T5236] usb 4-1: USB disconnect, device number 9 [ 261.975460][ T152] team0 (unregistering): Port device team_slave_1 removed [ 262.051591][ T152] team0 (unregistering): Port device team_slave_0 removed [ 263.036826][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 263.045931][ T8365] bridge_slave_1: left allmulticast mode [ 263.082661][ T8365] bridge_slave_1: left promiscuous mode [ 263.089879][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.105401][ T8367] netlink: 272 bytes leftover after parsing attributes in process `syz.2.829'. [ 263.256176][ T5289] usb 3-1: USB disconnect, device number 22 [ 263.552465][ T8151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.751501][ T8151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.808336][ T8151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.929530][ T8151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.485132][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.700805][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.745828][ T8224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.777118][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.784363][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.797860][ T8224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.825665][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.832942][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.885400][ T8224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.909545][ T8224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.962914][ T8399] netlink: 'syz.0.841': attribute type 20 has an invalid length. [ 264.986102][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 265.095566][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.277377][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.498288][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.672116][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.834541][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.945589][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.978564][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.994706][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.004602][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.014198][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.027835][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 266.035680][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.213046][ T53] bridge_slave_1: left allmulticast mode [ 266.227046][ T53] bridge_slave_1: left promiscuous mode [ 266.243207][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.265540][ T53] bridge_slave_0: left allmulticast mode [ 266.286848][ T53] bridge_slave_0: left promiscuous mode [ 266.292783][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.285914][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.303974][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.333854][ T53] bond0 (unregistering): Released all slaves [ 267.398594][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.460195][ T8151] veth0_vlan: entered promiscuous mode [ 267.491870][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.499068][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.678509][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.685715][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.833730][ T8151] veth1_vlan: entered promiscuous mode [ 267.855118][ T8450] mac80211_hwsim hwsim53 : renamed from wlan1 (while UP) [ 268.120639][ T4623] Bluetooth: hci4: command tx timeout [ 268.331539][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 268.423631][ T53] hsr_slave_0: left promiscuous mode [ 268.443164][ T53] hsr_slave_1: left promiscuous mode [ 268.455559][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.465146][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.483697][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.502115][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.556953][ T53] veth1_macvtap: left promiscuous mode [ 268.573580][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 268.583769][ T53] veth0_macvtap: left promiscuous mode [ 268.592176][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 268.610994][ T53] veth1_vlan: left promiscuous mode [ 268.616357][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.647112][ T53] veth0_vlan: left promiscuous mode [ 268.657878][ T47] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.695610][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 268.706089][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.745587][ T47] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.778188][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 268.786055][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.797561][ T47] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.828465][ T47] usb 4-1: string descriptor 0 read error: -22 [ 268.835071][ T47] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.856715][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.888048][ T47] adutux 4-1:168.0: interrupt endpoints not found [ 269.180325][ T47] usb 4-1: USB disconnect, device number 10 [ 269.209349][ T8476] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.859'. [ 269.534820][ T53] team0 (unregistering): Port device team_slave_1 removed [ 269.586038][ T53] team0 (unregistering): Port device team_slave_0 removed [ 270.199479][ T4623] Bluetooth: hci4: command tx timeout [ 270.271150][ T8482] vhci_hcd: invalid port number 0 [ 270.744872][ T8151] veth0_macvtap: entered promiscuous mode [ 270.853046][ T8488] syz.3.862 uses obsolete (PF_INET,SOCK_PACKET) [ 270.862042][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.908880][ T8151] veth1_macvtap: entered promiscuous mode [ 270.950430][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 271.131643][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.153848][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.175373][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.227856][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.265202][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.307223][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.378018][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.404643][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.444586][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.481055][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.518512][ T8151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.540190][ T8151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.569022][ T8151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.586805][ T8151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.659363][ T8503] kernel profiling enabled (shift: 0) [ 271.834595][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.842106][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.850362][ T8426] bridge_slave_0: entered allmulticast mode [ 271.860088][ T8426] bridge_slave_0: entered promiscuous mode [ 271.923375][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.953300][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.971627][ T8426] bridge_slave_1: entered allmulticast mode [ 271.983186][ T8426] bridge_slave_1: entered promiscuous mode [ 272.136169][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.224891][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.277263][ T4623] Bluetooth: hci4: command tx timeout [ 272.405242][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.436951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.527781][ T8426] team0: Port device team_slave_0 added [ 272.547304][ T4623] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 272.601334][ T8426] team0: Port device team_slave_1 added [ 272.786472][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.807166][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.833206][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.857504][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.949253][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.982907][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.063145][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.157029][ T8539] usb usb8: usbfs: process 8539 (syz.3.871) did not claim interface 0 before use [ 273.165953][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.178452][ T8224] veth0_vlan: entered promiscuous mode [ 273.188074][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.332048][ T8503] syz.0.865: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 273.410102][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.0.865 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 273.420872][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 273.431059][ T8503] Call Trace: [ 273.434352][ T8503] [ 273.437298][ T8503] dump_stack_lvl+0x241/0x360 [ 273.441998][ T8503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.447209][ T8503] ? __pfx__printk+0x10/0x10 [ 273.451903][ T8503] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 273.458442][ T8503] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 273.464972][ T8503] warn_alloc+0x278/0x410 [ 273.469411][ T8503] ? __pfx_warn_alloc+0x10/0x10 [ 273.474283][ T8503] ? profile_init+0xb1/0x100 [ 273.478891][ T8503] ? __get_vm_area_node+0x23d/0x270 [ 273.484116][ T8503] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 273.490021][ T8503] ? _printk+0xd5/0x120 [ 273.494221][ T8503] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.500560][ T8503] ? rcu_is_watching+0x15/0xb0 [ 273.505346][ T8503] ? rcu_is_watching+0x15/0xb0 [ 273.510138][ T8503] ? profile_init+0xb1/0x100 [ 273.514740][ T8503] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.519958][ T8503] vzalloc_noprof+0x79/0x90 [ 273.524551][ T8503] ? profile_init+0xb1/0x100 [ 273.529162][ T8503] profile_init+0xb1/0x100 [ 273.533610][ T8503] profiling_store+0x6c/0xf0 [ 273.538225][ T8503] kernfs_fop_write_iter+0x3a1/0x500 [ 273.543536][ T8503] vfs_write+0xa72/0xc90 [ 273.547797][ T8503] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.553668][ T8503] ? __pfx_vfs_write+0x10/0x10 [ 273.558478][ T8503] ? do_futex+0x33b/0x560 [ 273.562851][ T8503] ksys_write+0x1a0/0x2c0 [ 273.567216][ T8503] ? __pfx_ksys_write+0x10/0x10 [ 273.572094][ T8503] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.578699][ T8503] ? lockdep_hardirqs_on+0x99/0x150 [ 273.583924][ T8503] __do_fast_syscall_32+0xb4/0x110 [ 273.589055][ T8503] ? exc_page_fault+0x590/0x8c0 [ 273.593927][ T8503] do_fast_syscall_32+0x34/0x80 [ 273.598804][ T8503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.605155][ T8503] RIP: 0023:0xf742d579 [ 273.609241][ T8503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.628863][ T8503] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 273.637297][ T8503] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000280 [ 273.645306][ T8503] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.653286][ T8503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.661267][ T8503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.669242][ T8503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.677264][ T8503] [ 273.685588][ T8426] hsr_slave_0: entered promiscuous mode [ 273.714415][ T8426] hsr_slave_1: entered promiscuous mode [ 273.755561][ T8224] veth1_vlan: entered promiscuous mode [ 273.839960][ T8503] Mem-Info: [ 273.843149][ T8503] active_anon:4134 inactive_anon:0 isolated_anon:0 [ 273.843149][ T8503] active_file:1667 inactive_file:38276 isolated_file:0 [ 273.843149][ T8503] unevictable:768 dirty:84 writeback:0 [ 273.843149][ T8503] slab_reclaimable:8891 slab_unreclaimable:93041 [ 273.843149][ T8503] mapped:21630 shmem:1250 pagetables:659 [ 273.843149][ T8503] sec_pagetables:0 bounce:0 [ 273.843149][ T8503] kernel_misc_reclaimable:0 [ 273.843149][ T8503] free:1343433 free_pcp:667 free_cma:0 [ 274.016582][ T8224] veth0_macvtap: entered promiscuous mode [ 274.026534][ T8503] Node 0 active_anon:16736kB inactive_anon:0kB active_file:6512kB inactive_file:153036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86400kB dirty:336kB writeback:0kB shmem:3464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9932kB pagetables:2736kB sec_pagetables:0kB all_unreclaimable? no [ 274.071826][ T8224] veth1_macvtap: entered promiscuous mode [ 274.160822][ T8503] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 274.243736][ T8503] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.292147][ T8503] lowmem_reserve[]: 0 2467 2468 0 0 [ 274.305536][ T8503] Node 0 DMA32 free:1406552kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16712kB inactive_anon:0kB active_file:6512kB inactive_file:152220kB unevictable:1536kB writepending:356kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2144kB local_pcp:1068kB free_cma:0kB [ 274.357863][ T4623] Bluetooth: hci4: command tx timeout [ 274.373794][ T8503] lowmem_reserve[]: 0 0 0 0 0 [ 274.379440][ T8503] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 274.457897][ T8503] lowmem_reserve[]: 0 0 0 0 0 [ 274.462813][ T8503] Node 1 Normal free:3949688kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.530301][ T4623] Bluetooth: hci1: hardware error 0x20 [ 274.573640][ T8503] lowmem_reserve[]: 0 0 0 0 0 [ 274.595412][ T8503] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.645752][ T8503] Node 0 DMA32: 5*4kB (UME) 200*8kB (ME) 142*16kB (ME) 140*32kB (ME) 115*64kB (ME) 50*128kB (UME) 9*256kB (ME) 5*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 333*4096kB (M) = 1398132kB [ 274.695989][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.733760][ T8503] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 274.756324][ T8503] Node 1 Normal: 10*4kB (UM) 10*8kB (UM) 12*16kB (UM) 14*32kB (UM) 6*64kB (UM) 6*128kB (UM) 5*256kB (UM) 2*512kB (U) 3*1024kB (U) 5*2048kB (UM) 960*4096kB (UM) = 3949688kB [ 274.767043][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.793305][ T8503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.816056][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.822405][ T8503] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.833229][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.857543][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.864249][ T8503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.876732][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.903069][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.908817][ T8503] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.933299][ T8503] 41195 total pagecache pages [ 274.948011][ T8503] 0 pages in swap cache [ 274.974511][ T8503] Free swap = 124408kB [ 274.982574][ T8503] Total swap = 124996kB [ 274.993099][ T8503] 2097051 pages RAM [ 274.995894][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.022090][ T8503] 0 pages HighMem/MovableOnly [ 275.032506][ T8503] 426967 pages reserved [ 275.035603][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.051815][ T8503] 0 pages cma reserved [ 275.072877][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.146892][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.186749][ T8224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.243044][ T8224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.285877][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.344487][ T8224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.398420][ T8224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.436746][ T8224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.462004][ T8224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.476002][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 275.965666][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.996601][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.094718][ T5286] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.273794][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.302667][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.310451][ T8426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.331568][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 276.352025][ T8426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.369525][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 276.392067][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.421525][ T5286] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.447824][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.475840][ T8426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.528210][ T5286] usb 5-1: config 0 descriptor?? [ 276.534070][ T8584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.551592][ T8426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.600596][ T4623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 276.996488][ T5286] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x3 [ 277.031043][ T5286] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x7 [ 277.062546][ T5286] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 277.085999][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.123339][ T5286] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 277.214992][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.287831][ T5286] usb 5-1: USB disconnect, device number 7 [ 277.305025][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.312297][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.370760][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 277.430478][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 277.542351][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.549722][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.918832][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.127215][ T8426] veth0_vlan: entered promiscuous mode [ 278.167124][ T8426] veth1_vlan: entered promiscuous mode [ 278.331026][ T8426] veth0_macvtap: entered promiscuous mode [ 278.371961][ T8426] veth1_macvtap: entered promiscuous mode [ 278.478720][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.516700][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.578829][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.665914][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.696727][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.744832][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.796760][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.826904][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.884720][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.935583][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.971926][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.014464][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.047820][ T5289] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 279.053025][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.095843][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.132655][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.163063][ T8426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.205355][ T8426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.238342][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.271805][ T5289] usb 4-1: config index 0 descriptor too short (expected 25183, got 18) [ 279.296443][ T5289] usb 4-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 279.325714][ T8426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.373080][ T8426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.393147][ T5289] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 279.428925][ T5289] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 279.432718][ T8426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.480230][ T5289] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 279.509152][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.523778][ T8426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.616723][ T5289] usb 4-1: Product: syz [ 279.637395][ T5289] usb 4-1: Manufacturer: syz [ 279.642063][ T5289] usb 4-1: SerialNumber: syz [ 279.966083][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.040912][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.228518][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.376765][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.637469][ T5289] usb 4-1: USB disconnect, device number 11 [ 280.852134][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.843'. [ 281.369918][ T8671] pim6reg1: entered promiscuous mode [ 281.403350][ T8671] pim6reg1: entered allmulticast mode [ 281.816820][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 282.037101][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 282.057905][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 282.083136][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.125147][ T8] usb 2-1: config 0 descriptor?? [ 282.152412][ T8] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 282.207174][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.237364][ T8] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 282.254495][ T8] usb 2-1: media controller created [ 282.321771][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.377904][ T8] usb 2-1: selecting invalid altsetting 1 [ 282.396156][ T8] set interface failed [ 282.397838][ T8] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 282.419356][ T8] error writing reg: 0xff, val: 0x00 [ 282.527020][ T8] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 282.574019][ T8] usb 2-1: USB disconnect, device number 17 [ 282.917408][ T5289] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 283.133147][ T5289] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 283.152373][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.169547][ T5289] usb 3-1: Product: syz [ 283.173909][ T5289] usb 3-1: Manufacturer: syz [ 283.182660][ T5289] usb 3-1: SerialNumber: syz [ 283.207731][ T5289] usb 3-1: config 0 descriptor?? [ 283.247099][ T5289] as10x_usb: device has been detected [ 283.255380][ T5289] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 283.361658][ T5289] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 283.506798][ T5289] as10x_usb: error during firmware upload part1 [ 283.520999][ T5289] Registered device Elgato EyeTV DTT Deluxe [ 283.524191][ T5289] usb 3-1: USB disconnect, device number 23 [ 283.658773][ T5289] Unregistered device Elgato EyeTV DTT Deluxe [ 283.677307][ T5289] as10x_usb: device has been disconnected [ 283.879189][ T29] audit: type=1326 audit(1725836387.944:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 283.900959][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.965512][ T29] audit: type=1326 audit(1725836387.944:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.006210][ T29] audit: type=1326 audit(1725836387.994:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.091928][ T29] audit: type=1326 audit(1725836387.994:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.120049][ T29] audit: type=1326 audit(1725836387.994:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.149552][ T29] audit: type=1326 audit(1725836387.994:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.261969][ T29] audit: type=1326 audit(1725836387.994:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.283722][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.309709][ T29] audit: type=1326 audit(1725836387.994:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.331456][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.350843][ T29] audit: type=1326 audit(1725836387.994:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.383623][ T8734] usb usb8: usbfs: process 8734 (syz.1.916) did not claim interface 17 before use [ 284.393106][ T29] audit: type=1326 audit(1725836387.994:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 284.414884][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.696738][ T5289] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.908008][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 284.927146][ T5289] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 284.957433][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.995758][ T5289] usb 1-1: config 0 descriptor?? [ 285.031551][ T5289] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 285.051490][ T5289] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.079209][ T5289] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 285.085912][ T5289] usb 1-1: media controller created [ 285.181747][ T5289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.287086][ T5289] usb 1-1: selecting invalid altsetting 1 [ 285.292881][ T5289] set interface failed [ 285.292909][ T5289] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 285.356919][ T5289] error writing reg: 0xff, val: 0x00 [ 285.436503][ T5289] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 285.472471][ T5289] usb 1-1: USB disconnect, device number 5 [ 287.031776][ T5286] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 287.266901][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 287.297624][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.329892][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.346868][ T5282] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 287.366729][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.426818][ T5286] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 287.435966][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.489251][ T5286] usb 4-1: config 0 descriptor?? [ 287.548540][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.576779][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.601359][ T5282] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 287.626560][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.670524][ T5282] usb 1-1: config 0 descriptor?? [ 288.109364][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 288.138206][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 288.173039][ T5282] usb 1-1: USB disconnect, device number 6 [ 288.324599][ T8835] hub 6-0:1.0: USB hub found [ 288.352968][ T8835] hub 6-0:1.0: 1 port detected [ 289.536095][ T5286] usbhid 4-1:0.0: can't add hid device: -71 [ 289.553584][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 289.593682][ T5286] usb 4-1: USB disconnect, device number 12 [ 290.280989][ T8862] fuse: Bad value for 'group_id' [ 290.286002][ T8862] fuse: Bad value for 'group_id' [ 290.467045][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 290.686818][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 290.704089][ T8] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 290.713505][ T5282] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 290.737023][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.757241][ T8] usb 5-1: Product: syz [ 290.768093][ T8] usb 5-1: Manufacturer: syz [ 290.780650][ T8] usb 5-1: SerialNumber: syz [ 290.812120][ T8] usb 5-1: config 0 descriptor?? [ 290.834840][ T8] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 290.941460][ T5282] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 290.959615][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.978954][ T5282] usb 4-1: Product: syz [ 290.984670][ T5282] usb 4-1: Manufacturer: syz [ 290.990324][ T5282] usb 4-1: SerialNumber: syz [ 291.001881][ T5282] usb 4-1: config 0 descriptor?? [ 291.016335][ T5282] as10x_usb: device has been detected [ 291.043454][ T5282] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 291.107994][ T5282] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 291.161220][ T5282] as10x_usb: error during firmware upload part1 [ 291.197443][ T5282] Registered device Elgato EyeTV DTT Deluxe [ 291.324741][ T5282] usb 4-1: USB disconnect, device number 13 [ 291.381245][ T5282] Unregistered device Elgato EyeTV DTT Deluxe [ 291.389305][ T5282] as10x_usb: device has been disconnected [ 291.559909][ T8886] fuse: Bad value for 'group_id' [ 291.565707][ T8886] fuse: Bad value for 'group_id' [ 292.396871][ T5283] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 292.595162][ T5283] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.626520][ T5283] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 292.646674][ T5283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.655727][ T5283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 292.696749][ T5283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 292.729074][ T5283] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.746724][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.759396][ T5283] usb 1-1: Product: syz [ 292.769264][ T5283] usb 1-1: Manufacturer: syz [ 292.820042][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 292.839380][ T5283] cdc_wdm 1-1:1.0: skipping garbage [ 292.860294][ T5283] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 292.881336][ T5283] cdc_wdm 1-1:1.0: Unknown control protocol [ 293.062123][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.068982][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.075609][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.082259][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.088607][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.095232][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.101535][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.108173][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.114463][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.121088][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.127451][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.134073][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.140517][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.147164][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.153440][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.160066][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.166374][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.172999][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.179294][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.185917][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.212572][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.221600][ T5283] usb 1-1: USB disconnect, device number 7 [ 293.815163][ T8921] fuse: Bad value for 'group_id' [ 293.828283][ T8921] fuse: Bad value for 'group_id' [ 294.023148][ T5236] usb 5-1: USB disconnect, device number 8 [ 294.774286][ T8948] random: crng reseeded on system resumption [ 297.237009][ T5282] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 297.359439][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 297.359460][ T29] audit: type=1326 audit(1725836401.424:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.469636][ T29] audit: type=1326 audit(1725836401.424:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.536828][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 297.546415][ T29] audit: type=1326 audit(1725836401.424:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.546675][ T5282] usb 4-1: config 0 has no interfaces? [ 297.581480][ T29] audit: type=1326 audit(1725836401.424:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.610829][ T5282] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.621422][ T29] audit: type=1326 audit(1725836401.424:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.647813][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.658034][ T29] audit: type=1326 audit(1725836401.424:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.681537][ T5282] usb 4-1: config 0 descriptor?? [ 297.690255][ T29] audit: type=1326 audit(1725836401.424:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.733828][ T29] audit: type=1326 audit(1725836401.424:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.762869][ T29] audit: type=1326 audit(1725836401.424:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 297.861124][ T29] audit: type=1326 audit(1725836401.424:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 298.371399][ T9005] ptrace attach of "./syz-executor exec"[7749] was attempted by "./syz-executor exec"[9005] [ 298.745038][ T8] usb 4-1: USB disconnect, device number 14 [ 299.225563][ T9017] hub 6-0:1.0: USB hub found [ 299.277678][ T9017] hub 6-0:1.0: 1 port detected [ 299.816100][ T9024] ptrace attach of "./syz-executor exec"[6652] was attempted by "./syz-executor exec"[9024] [ 301.676761][ T9054] sch_fq: defrate 0 ignored. [ 303.133984][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 303.326896][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 303.337237][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 303.356987][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.388363][ T8] usb 4-1: config 0 descriptor?? [ 303.404949][ T8] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 303.445003][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.464445][ T8] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 303.489876][ T8] usb 4-1: media controller created [ 303.541847][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.606859][ T8] usb 4-1: selecting invalid altsetting 1 [ 303.637224][ T8] set interface failed [ 303.637263][ T8] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 303.663197][ T8] error writing reg: 0xff, val: 0x00 [ 303.758158][ T8] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 303.814775][ T8] usb 4-1: USB disconnect, device number 15 [ 304.996909][ T9103] ptrace attach of "./syz-executor exec"[8151] was attempted by "./syz-executor exec"[9103] [ 305.326809][ T5286] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 305.502995][ T5286] usb 4-1: device descriptor read/64, error -71 [ 305.786831][ T5286] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 305.963453][ T5286] usb 4-1: device descriptor read/64, error -71 [ 306.117003][ T5286] usb usb4-port1: attempt power cycle [ 306.526732][ T5286] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 306.567381][ T5286] usb 4-1: device descriptor read/8, error -71 [ 306.838319][ T5286] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 306.897443][ T5286] usb 4-1: device descriptor read/8, error -71 [ 307.027623][ T5286] usb usb4-port1: unable to enumerate USB device [ 309.392374][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 309.567216][ T47] usb 1-1: device descriptor read/64, error -71 [ 309.867003][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 310.036935][ T47] usb 1-1: device descriptor read/64, error -71 [ 310.167242][ T47] usb usb1-port1: attempt power cycle [ 310.196722][ T9183] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1091'. [ 310.606759][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 310.650223][ T47] usb 1-1: device descriptor read/8, error -71 [ 310.936803][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 311.017471][ T47] usb 1-1: device descriptor read/8, error -71 [ 311.152671][ T47] usb usb1-port1: unable to enumerate USB device [ 312.229616][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 314.241426][ T9247] fuse: Unknown parameter 'grou00000000000000000000' [ 314.766780][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.936928][ T8] usb 4-1: device descriptor read/64, error -71 [ 315.216721][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 315.336811][ T5282] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 315.386911][ T8] usb 4-1: device descriptor read/64, error -71 [ 315.547536][ T8] usb usb4-port1: attempt power cycle [ 315.616774][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 315.661078][ T5282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.685663][ T5282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.699778][ T5282] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 315.709504][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.719856][ T5282] usb 3-1: Product: syz [ 315.724053][ T5282] usb 3-1: Manufacturer: syz [ 315.731284][ T5282] usb 3-1: SerialNumber: syz [ 315.914589][ T9279] fuse: Unknown parameter 'group_i00000000000000000000' [ 315.986844][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 316.057538][ T8] usb 4-1: device descriptor read/8, error -71 [ 316.178915][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.201592][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.367415][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 316.456533][ T8] usb 4-1: device descriptor read/8, error -71 [ 316.496034][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.514470][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.550289][ T5282] hid (null): report_id 2668810406 is invalid [ 316.567841][ T5282] asus 0003:0B05:19B6.0004: report_id 2668810406 is invalid [ 316.579328][ T5282] asus 0003:0B05:19B6.0004: item 0 4 1 8 parsing failed [ 316.587362][ T8] usb usb4-port1: unable to enumerate USB device [ 316.601244][ T5282] asus 0003:0B05:19B6.0004: Asus hid parse failed: -22 [ 316.610827][ T5282] asus 0003:0B05:19B6.0004: probe with driver asus failed with error -22 [ 316.686754][ T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 316.794419][ T8] usb 3-1: USB disconnect, device number 24 [ 316.897187][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.916845][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.944341][ T47] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 316.966678][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.987442][ T47] usb 2-1: config 0 descriptor?? [ 317.428827][ T47] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 317.483590][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.490295][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.651832][ T47] usb 2-1: USB disconnect, device number 18 [ 317.753911][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 317.753932][ T29] audit: type=1326 audit(1725836421.814:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 317.839874][ T29] audit: type=1326 audit(1725836421.814:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 317.888851][ T29] audit: type=1326 audit(1725836421.854:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 317.946735][ T29] audit: type=1326 audit(1725836421.854:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.006694][ T29] audit: type=1326 audit(1725836421.884:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.071724][ T29] audit: type=1326 audit(1725836421.884:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.133574][ T29] audit: type=1326 audit(1725836421.884:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.164831][ T29] audit: type=1326 audit(1725836421.884:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.210777][ T9306] fuse: Unknown parameter 'group_i00000000000000000000' [ 318.223827][ T29] audit: type=1326 audit(1725836421.884:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.316682][ T29] audit: type=1326 audit(1725836421.884:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 318.656798][ T5289] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 318.866918][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 318.884126][ T5289] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 318.913708][ T5289] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 318.972324][ T5289] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.035476][ T5289] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.075514][ T5289] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.109357][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.361593][ T5289] usb 2-1: GET_CAPABILITIES returned 0 [ 319.376745][ T5289] usbtmc 2-1:16.0: can't read capabilities [ 319.579210][ T5289] usb 2-1: USB disconnect, device number 19 [ 320.403032][ T9343] fuse: Unknown parameter 'group_i00000000000000000000' [ 321.013599][ T9356] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1158'. [ 321.030504][ T9356] bridge_slave_1: left allmulticast mode [ 321.056929][ T9356] bridge_slave_1: left promiscuous mode [ 321.066283][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.089717][ T9356] bridge_slave_0: left allmulticast mode [ 321.095848][ T9356] bridge_slave_0: left promiscuous mode [ 321.103281][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.624053][ T9370] fuse: Unknown parameter 'group_id00000000000000000000' [ 322.679520][ T9399] fuse: Unknown parameter 'group_id00000000000000000000' [ 322.767941][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 323.744352][ T9431] fuse: Unknown parameter 'group_id00000000000000000000' [ 323.939025][ T9435] netlink: 'syz.0.1183': attribute type 10 has an invalid length. [ 323.983396][ T9435] syz_tun: entered promiscuous mode [ 324.110452][ T9435] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 325.338138][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.376098][ T9460] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.508753][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.668095][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.940052][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.992366][ T9469] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 326.035941][ T9469] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 326.142419][ T9469] netlink: 'syz.1.1209': attribute type 29 has an invalid length. [ 326.377045][ T63] bridge_slave_1: left allmulticast mode [ 326.400816][ T63] bridge_slave_1: left promiscuous mode [ 326.411405][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.427678][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.437304][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.462754][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.470454][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.484262][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.488131][ T63] bridge_slave_0: left allmulticast mode [ 326.497714][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.566967][ T63] bridge_slave_0: left promiscuous mode [ 326.613182][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.651713][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.663846][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.676528][ T63] bond0 (unregistering): Released all slaves [ 327.714100][ T9504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1218'. [ 328.256756][ T5236] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 328.335115][ T9510] delete_channel: no stack [ 328.437105][ T5236] usb 1-1: device descriptor read/64, error -71 [ 328.596942][ T5243] Bluetooth: hci4: command tx timeout [ 328.716814][ T5236] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 328.916853][ T5236] usb 1-1: device descriptor read/64, error -71 [ 329.003358][ T63] hsr_slave_0: left promiscuous mode [ 329.034725][ T63] hsr_slave_1: left promiscuous mode [ 329.041760][ T5236] usb usb1-port1: attempt power cycle [ 329.056947][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.064433][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.096004][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.131820][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.246479][ T63] veth1_macvtap: left promiscuous mode [ 329.285423][ T63] veth0_macvtap: left promiscuous mode [ 329.307346][ T63] veth1_vlan: left promiscuous mode [ 329.341063][ T63] veth0_vlan: left promiscuous mode [ 329.477027][ T5236] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 329.530148][ T5236] usb 1-1: device descriptor read/8, error -71 [ 329.806833][ T5236] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 329.839647][ T5236] usb 1-1: device descriptor read/8, error -71 [ 329.971015][ T5236] usb usb1-port1: unable to enumerate USB device [ 330.384924][ T63] team0 (unregistering): Port device team_slave_1 removed [ 330.447112][ T63] team0 (unregistering): Port device team_slave_0 removed [ 330.676751][ T5243] Bluetooth: hci4: command tx timeout [ 331.235505][ T9488] chnl_net:caif_netlink_parms(): no params data found [ 331.833307][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.866957][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.874329][ T9488] bridge_slave_0: entered allmulticast mode [ 331.931399][ T9488] bridge_slave_0: entered promiscuous mode [ 331.960440][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.010555][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.037076][ T9488] bridge_slave_1: entered allmulticast mode [ 332.057596][ T9488] bridge_slave_1: entered promiscuous mode [ 332.199177][ T9488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.246530][ T9488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.362878][ T9488] team0: Port device team_slave_0 added [ 332.394505][ T9488] team0: Port device team_slave_1 added [ 332.421099][ T5286] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 332.476044][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.487156][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.524627][ T9488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.575387][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.620247][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.636740][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 332.672936][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 332.692678][ T9488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.708039][ T5286] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 332.737337][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.757024][ T5243] Bluetooth: hci4: command tx timeout [ 332.778430][ T5286] usb 1-1: Product: syz [ 332.782657][ T5286] usb 1-1: Manufacturer: syz [ 332.831814][ T5286] usb 1-1: SerialNumber: syz [ 332.865847][ T5286] usb 1-1: config 0 descriptor?? [ 332.890360][ T9618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 332.908205][ T5286] hub 1-1:0.0: bad descriptor, ignoring hub [ 332.922989][ T5286] hub 1-1:0.0: probe with driver hub failed with error -5 [ 332.936276][ T5286] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 333.118523][ T9488] hsr_slave_0: entered promiscuous mode [ 333.163152][ T9488] hsr_slave_1: entered promiscuous mode [ 333.219027][ T5286] usb 1-1: USB disconnect, device number 16 [ 333.219099][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 333.736052][ T9644] syzkaller0: entered allmulticast mode [ 333.844061][ T9639] syzkaller0 (unregistering): left allmulticast mode [ 334.837396][ T5243] Bluetooth: hci4: command tx timeout [ 334.843082][ T5236] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 334.963687][ T9488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.985409][ T9488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.011230][ T9488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.027817][ T5236] usb 1-1: Using ep0 maxpacket: 16 [ 335.040649][ T9488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.042441][ T5236] usb 1-1: config 1 interface 0 has no altsetting 0 [ 335.100164][ T5236] usb 1-1: string descriptor 0 read error: -22 [ 335.106517][ T5236] usb 1-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 335.136292][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.175586][ T5236] usbhid 1-1:1.0: can't add hid device: -22 [ 335.202050][ T5236] usbhid 1-1:1.0: probe with driver usbhid failed with error -22 [ 335.349638][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.430502][ T5286] usb 1-1: USB disconnect, device number 17 [ 335.459026][ T9488] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.500296][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.507516][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.573794][ T2517] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.581051][ T2517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.829415][ T9488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.011659][ T9488] veth0_vlan: entered promiscuous mode [ 336.125473][ T9488] veth1_vlan: entered promiscuous mode [ 336.294222][ T9488] veth0_macvtap: entered promiscuous mode [ 336.352622][ T9488] veth1_macvtap: entered promiscuous mode [ 336.440389][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.486804][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.528006][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.556760][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.584485][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.626712][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.653645][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.668789][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.683535][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.743079][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.796517][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.861559][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.899516][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.935354][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.959327][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.973345][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.987919][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.005476][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.021983][ T9488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.043836][ T9488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.054396][ T9488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.063744][ T9488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.412115][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.441878][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.559321][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.592039][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.945678][ T9746] syzkaller0: entered promiscuous mode [ 338.965843][ T9746] syzkaller0: entered allmulticast mode [ 342.652424][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.671717][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.681518][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.700823][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.723574][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.733002][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.533204][ T9801] tipc: Started in network mode [ 343.538452][ T9801] tipc: Node identity ac1414aa, cluster identity 4711 [ 343.547395][ T9801] tipc: Enabled bearer , priority 10 [ 343.893545][ T9850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1302'. [ 343.919824][ T9850] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1302'. [ 343.938338][ T9850] unsupported nlmsg_type 40 [ 344.360810][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 344.668759][ T8] tipc: Node number set to 2886997162 [ 344.837869][ T5243] Bluetooth: hci1: command tx timeout [ 344.871692][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.913173][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.932845][ T9842] bridge_slave_0: entered allmulticast mode [ 344.994404][ T9842] bridge_slave_0: entered promiscuous mode [ 345.087790][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.094985][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.153159][ T9842] bridge_slave_1: entered allmulticast mode [ 345.184782][ T9842] bridge_slave_1: entered promiscuous mode [ 345.364948][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.401359][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.475609][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 345.686384][ T9842] team0: Port device team_slave_0 added [ 345.758909][ T9842] team0: Port device team_slave_1 added [ 345.862145][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.883877][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.917808][ T8] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 345.945121][ T9842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.987903][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.010591][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.071928][ T9842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.159068][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 346.168168][ T9842] hsr_slave_0: entered promiscuous mode [ 346.190287][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 346.210537][ T9842] hsr_slave_1: entered promiscuous mode [ 346.216862][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.225048][ T9842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.232691][ T8] usb 3-1: Product: syz [ 346.232715][ T8] usb 3-1: Manufacturer: syz [ 346.232747][ T8] usb 3-1: SerialNumber: syz [ 346.268533][ T9842] Cannot create hsr debugfs directory [ 346.599221][ T9901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1319'. [ 346.893373][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 346.921531][ T5243] Bluetooth: hci1: command tx timeout [ 347.101886][ T9842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.154691][ T9901] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 347.292496][ T9842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.480745][ T9842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.646559][ T9842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.925525][ T9842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.952537][ T9842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.974816][ T9842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.994318][ T9842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.194634][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.243737][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.270208][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.277466][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.312747][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.320025][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.523663][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.600963][ T5285] usb 3-1: USB disconnect, device number 25 [ 348.708865][ T9842] veth0_vlan: entered promiscuous mode [ 348.714686][ T9889] usblp0: removed [ 348.736258][ T9842] veth1_vlan: entered promiscuous mode [ 348.809264][ T9842] veth0_macvtap: entered promiscuous mode [ 348.853135][ T9842] veth1_macvtap: entered promiscuous mode [ 348.909110][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.939992][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.990975][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.996905][ T5243] Bluetooth: hci1: command tx timeout [ 349.063458][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.113134][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.150185][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.186553][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.221136][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.244994][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.265648][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.294387][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.362972][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.395384][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.413139][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.425320][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.457163][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.470884][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.509427][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.568046][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.586641][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.599106][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.624788][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.691554][ T9842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.705662][ T9842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.743201][ T9842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.760442][ T9842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.867241][ T5285] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 349.898899][ T9942] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.977171][ T9942] kvm: pic: level sensitive irq not supported [ 349.977724][ T9942] kvm: pic: non byte read [ 350.012571][ T9942] kvm: pic: level sensitive irq not supported [ 350.012649][ T9942] kvm: pic: non byte read [ 350.033822][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.054370][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.089812][ T5285] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.112160][ T5285] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 350.139838][ T5285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.152081][ T5285] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 350.165001][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.173793][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.182397][ T5285] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 350.268335][ T5285] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.279833][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.289537][ T9957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.297938][ T5285] usb 5-1: Product: syz [ 350.302361][ T5285] usb 5-1: Manufacturer: syz [ 350.318579][ T5285] cdc_wdm 5-1:1.0: skipping garbage [ 350.341979][ T5285] cdc_wdm 5-1:1.0: skipping garbage [ 350.343397][ T9957] fuse: Bad value for 'fd' [ 350.381216][ T9957] capability: warning: `syz.2.1337' uses 32-bit capabilities (legacy support in use) [ 350.396391][ T5285] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 350.426445][ T5285] cdc_wdm 5-1:1.0: Unknown control protocol [ 350.469903][ T5236] IPVS: starting estimator thread 0... [ 350.555743][ T5236] usb 5-1: USB disconnect, device number 9 [ 350.586867][ T9959] IPVS: using max 20 ests per chain, 48000 per kthread [ 351.077131][ T5243] Bluetooth: hci1: command tx timeout [ 351.587522][ T9980] loop0: detected capacity change from 0 to 7 [ 351.619239][ T9980] Dev loop0: unable to read RDB block 7 [ 351.635371][ T9980] loop0: unable to read partition table [ 351.642947][ T9980] loop0: partition table beyond EOD, truncated [ 351.650108][ T9980] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 351.650108][ T9980] ) failed (rc=-5) [ 351.938132][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 354.224190][T10075] netlink: 'syz.0.1380': attribute type 20 has an invalid length. [ 354.257028][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 354.836751][T10088] raw_sendmsg: syz.3.1385 forgot to set AF_INET. Fix it! [ 355.118796][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 355.827828][T10106] hub 6-0:1.0: USB hub found [ 355.853055][T10106] hub 6-0:1.0: 1 port detected [ 356.302298][T10112] hub 6-0:1.0: USB hub found [ 356.328303][T10112] hub 6-0:1.0: 1 port detected [ 356.799533][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.054456][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.234805][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.370948][T10122] netlink: 'syz.0.1399': attribute type 20 has an invalid length. [ 357.451423][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 357.479103][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.791763][ T63] bridge_slave_1: left allmulticast mode [ 357.808769][ T63] bridge_slave_1: left promiscuous mode [ 357.827212][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.846231][ T63] bridge_slave_0: left allmulticast mode [ 357.854710][ T63] bridge_slave_0: left promiscuous mode [ 357.872370][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.924804][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.938636][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.958418][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.968247][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.978425][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.986062][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.741174][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.768610][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.805217][ T63] bond0 (unregistering): Released all slaves [ 359.114283][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 359.114303][ T29] audit: type=1800 audit(1725836463.174:241): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1405" name="/" dev="fuse" ino=1 res=0 errno=0 [ 359.476964][ T7749] bond0: (slave syz_tun): Releasing backup interface [ 359.656758][ T63] hsr_slave_0: left promiscuous mode [ 359.695538][ T63] hsr_slave_1: left promiscuous mode [ 359.707605][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.756712][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.767607][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.775055][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.856304][ T63] veth1_macvtap: left promiscuous mode [ 359.881450][ T63] veth0_macvtap: left promiscuous mode [ 359.897247][ T63] veth1_vlan: left promiscuous mode [ 359.902689][ T63] veth0_vlan: left promiscuous mode [ 360.036974][ T4623] Bluetooth: hci1: command tx timeout [ 360.520392][ T4623] Bluetooth: hci2: command 0x0406 tx timeout [ 360.724871][T10177] netlink: 'syz.2.1414': attribute type 20 has an invalid length. [ 360.754456][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 360.818861][ T63] team0 (unregistering): Port device team_slave_1 removed [ 360.915913][ T63] team0 (unregistering): Port device team_slave_0 removed [ 361.007220][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.017406][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.037240][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.047399][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.061707][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 361.072405][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.157093][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.373181][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 361.380496][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.395865][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.405584][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.442503][ T8] usb 5-1: config 0 descriptor?? [ 361.672862][ T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 361.870467][T10135] chnl_net:caif_netlink_parms(): no params data found [ 361.945670][ T8] usb 5-1: USB disconnect, device number 10 [ 361.954774][ T8] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 362.118115][ T4623] Bluetooth: hci1: command tx timeout [ 362.226707][ T5285] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 362.347001][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.361293][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.385361][T10135] bridge_slave_0: entered allmulticast mode [ 362.411466][T10135] bridge_slave_0: entered promiscuous mode [ 362.434834][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 362.443473][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.467748][ T5285] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 362.483952][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.491329][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.499908][T10135] bridge_slave_1: entered allmulticast mode [ 362.514138][ T5285] usb 3-1: config 0 descriptor?? [ 362.520890][T10135] bridge_slave_1: entered promiscuous mode [ 362.531614][ T5285] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 362.547979][ T5285] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 362.558889][ T5285] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 362.565554][ T5285] usb 3-1: media controller created [ 362.591919][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.624163][ T5285] usb 3-1: selecting invalid altsetting 1 [ 362.630055][ T5285] set interface failed [ 362.630085][ T5285] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 362.643167][ T5285] error writing reg: 0xff, val: 0x00 [ 362.698748][ T5285] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 362.785080][ T5285] usb 3-1: USB disconnect, device number 26 [ 362.788760][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 362.934593][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.971738][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.110611][T10225] netlink: 'syz.1.1426': attribute type 20 has an invalid length. [ 363.118842][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 363.134208][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.155601][T10135] team0: Port device team_slave_0 added [ 363.162125][ T4623] Bluetooth: hci2: command tx timeout [ 363.184794][T10135] team0: Port device team_slave_1 added [ 363.220519][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.235837][T10184] chnl_net:caif_netlink_parms(): no params data found [ 363.294549][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.301715][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.336705][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.359443][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.366427][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.397886][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.436219][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.579581][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.785032][T10135] hsr_slave_0: entered promiscuous mode [ 363.805654][T10135] hsr_slave_1: entered promiscuous mode [ 363.823660][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.863221][T10135] Cannot create hsr debugfs directory [ 363.989482][T10184] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.006869][T10184] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.014167][T10184] bridge_slave_0: entered allmulticast mode [ 364.043949][T10184] bridge_slave_0: entered promiscuous mode [ 364.067446][T10184] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.074708][T10184] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.092288][T10184] bridge_slave_1: entered allmulticast mode [ 364.108770][T10184] bridge_slave_1: entered promiscuous mode [ 364.196874][ T4623] Bluetooth: hci1: command tx timeout [ 364.349138][T10184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.412250][T10184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.708402][T10184] team0: Port device team_slave_0 added [ 364.726194][T10184] team0: Port device team_slave_1 added [ 364.827230][ T947] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 364.888696][ T63] bridge_slave_0: left allmulticast mode [ 364.900300][ T63] bridge_slave_0: left promiscuous mode [ 364.906399][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.040134][ T947] usb 2-1: Using ep0 maxpacket: 32 [ 365.054715][ T947] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 365.070290][ T947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.104906][ T947] usb 2-1: config 0 descriptor?? [ 365.139194][ T947] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 365.160776][ T947] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.208170][ T947] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 365.214880][ T947] usb 2-1: media controller created [ 365.236926][ T4623] Bluetooth: hci2: command tx timeout [ 365.242571][ T947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.327356][ T947] usb 2-1: selecting invalid altsetting 1 [ 365.359531][ T947] set interface failed [ 365.359568][ T947] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 365.374332][ T947] error writing reg: 0xff, val: 0x00 [ 365.476149][ T947] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 365.567310][ T947] usb 2-1: USB disconnect, device number 20 [ 365.786569][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.810107][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.831415][ T63] bond0 (unregistering): Released all slaves [ 365.876479][T10184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.914057][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.950342][T10184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.037652][T10184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.065381][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.112096][T10184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.276872][ T4623] Bluetooth: hci1: command tx timeout [ 366.942229][T10184] hsr_slave_0: entered promiscuous mode [ 366.969869][T10184] hsr_slave_1: entered promiscuous mode [ 366.994537][T10184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.018176][T10184] Cannot create hsr debugfs directory [ 367.055783][ T63] hsr_slave_0: left promiscuous mode [ 367.075701][ T63] hsr_slave_1: left promiscuous mode [ 367.127030][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.134596][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.174948][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.196823][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.274385][ T63] veth1_macvtap: left promiscuous mode [ 367.304774][ T63] veth0_macvtap: left promiscuous mode [ 367.316935][ T4623] Bluetooth: hci2: command tx timeout [ 367.325378][ T63] veth1_vlan: left promiscuous mode [ 367.340186][ T63] veth0_vlan: left promiscuous mode [ 368.572036][ T63] team0 (unregistering): Port device team_slave_1 removed [ 368.639841][ T63] team0 (unregistering): Port device team_slave_0 removed [ 369.396973][ T5243] Bluetooth: hci2: command tx timeout [ 370.261414][T10135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.325460][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 370.372466][T10135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.422927][T10135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.455839][T10135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.563990][ T29] audit: type=1326 audit(1725836474.624:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 370.642688][ T29] audit: type=1326 audit(1725836474.624:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 370.738441][ T29] audit: type=1326 audit(1725836474.634:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 370.775558][ T5243] Bluetooth: hci0: command 0x0406 tx timeout [ 370.803168][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.831489][ T29] audit: type=1326 audit(1725836474.634:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 371.067633][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.092350][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.099614][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.191205][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.198444][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.382475][T10135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.582958][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.626337][T10184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.658416][T10184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.692130][T10388] netlink: 'syz.1.1473': attribute type 20 has an invalid length. [ 371.709245][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 371.728168][T10184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.753887][T10184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.935418][T10135] veth0_vlan: entered promiscuous mode [ 372.041222][T10135] veth1_vlan: entered promiscuous mode [ 372.141890][T10184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.237909][T10184] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.286436][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.293707][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.325100][T10135] veth0_macvtap: entered promiscuous mode [ 372.344726][ T2517] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.351963][ T2517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.395996][T10135] veth1_macvtap: entered promiscuous mode [ 372.522423][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.543320][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.564229][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.575308][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.594676][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.618528][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.629221][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.641082][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.655894][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.711171][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.731024][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.756555][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.786764][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.807636][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.826376][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.848768][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.864481][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.877169][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.928347][T10135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.950270][T10135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.971418][T10135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.989650][T10135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.144562][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.198361][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.227153][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.227583][T10184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.239071][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.249993][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.273720][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.293513][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.322565][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.347485][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.376954][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.390135][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.394606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.425814][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.447065][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.490334][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.515388][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.544168][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.562494][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.581753][ T2517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.581988][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.621193][ T2517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.643964][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.676008][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.677068][T10184] veth0_vlan: entered promiscuous mode [ 373.719515][T10184] veth1_vlan: entered promiscuous mode [ 373.723556][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.764980][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.795325][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.830840][T10184] veth0_macvtap: entered promiscuous mode [ 373.851221][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.865943][T10184] veth1_macvtap: entered promiscuous mode [ 373.902508][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.924925][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.934784][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 373.979386][ T5282] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 374.011847][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.030964][ T5282] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 374.053334][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.102146][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.148831][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.192272][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.227863][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.240424][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.252642][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.265496][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.276509][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.295751][T10184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.339161][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.351889][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.364050][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.374889][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.385147][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.407044][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.425117][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.439639][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.459601][T10184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.475067][T10184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.494522][T10184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.563727][T10184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.599051][T10184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.625684][T10184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.644026][T10184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.755939][T10457] netlink: 'syz.3.1487': attribute type 20 has an invalid length. [ 374.791682][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 374.938872][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.964494][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.068520][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.112319][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.877123][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 375.918668][ T5285] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 376.124134][ T5285] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.151641][ T5285] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 376.193115][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.235604][ T5285] usb 3-1: Product: syz [ 376.247831][ T5285] usb 3-1: Manufacturer: syz [ 376.275375][ T5285] usb 3-1: SerialNumber: syz [ 376.280999][ T5236] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 376.304238][ T5285] usb 3-1: config 0 descriptor?? [ 376.496659][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 376.509861][ T5236] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 376.529013][ T5236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.566038][ T5236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.576541][ T47] usb 3-1: USB disconnect, device number 27 [ 376.612976][ T5236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 376.639525][ T5236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 376.674959][ T5236] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.702566][ T5236] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.725678][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.838603][T10536] netlink: 'syz.3.1506': attribute type 20 has an invalid length. [ 376.864885][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 376.953970][ T5236] usb 5-1: usb_control_msg returned -32 [ 376.961537][ T5236] usbtmc 5-1:16.0: can't read capabilities [ 377.332778][T10550] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 378.487233][ T5286] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 378.681855][ T5286] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.726062][ T5286] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 378.753122][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.777882][ T5286] usb 3-1: Product: syz [ 378.806693][ T5286] usb 3-1: Manufacturer: syz [ 378.811368][ T5286] usb 3-1: SerialNumber: syz [ 378.870620][ T5286] usb 3-1: config 0 descriptor?? [ 378.905585][ T5236] usb 5-1: USB disconnect, device number 11 [ 378.925948][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.933971][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.090478][T10605] netlink: 'syz.0.1525': attribute type 20 has an invalid length. [ 379.111725][ T947] usb 3-1: USB disconnect, device number 28 [ 379.113772][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 379.866939][ T947] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 380.077916][ T947] usb 2-1: Using ep0 maxpacket: 32 [ 380.086784][ T947] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 380.110213][ T947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.140987][ T947] usb 2-1: config 0 descriptor?? [ 380.160317][ T947] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 380.214646][ T947] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 380.271300][ T947] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 380.290688][ T947] usb 2-1: media controller created [ 380.374911][ T947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.469930][ T947] usb 2-1: selecting invalid altsetting 1 [ 380.475744][ T947] set interface failed [ 380.475776][ T947] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 380.517424][ T947] error writing reg: 0xff, val: 0x00 [ 380.632211][ T947] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 380.698378][ T947] usb 2-1: USB disconnect, device number 21 [ 381.172109][T10672] netlink: 'syz.2.1544': attribute type 20 has an invalid length. [ 381.198839][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 381.256949][ T947] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 381.448375][ T947] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.478439][ T947] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 381.500311][ T947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.522673][ T947] usb 5-1: Product: syz [ 381.529848][ T947] usb 5-1: Manufacturer: syz [ 381.534827][ T947] usb 5-1: SerialNumber: syz [ 381.564478][ T947] usb 5-1: config 0 descriptor?? [ 381.812095][ T5286] usb 5-1: USB disconnect, device number 12 [ 382.468874][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.661238][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.872801][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.050751][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.116865][ T5286] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 383.163167][T10710] netlink: 'syz.0.1559': attribute type 20 has an invalid length. [ 383.189067][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 383.267622][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.281561][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.290037][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.307616][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 383.315746][ T5286] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 383.325536][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.337060][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.348240][ T5286] usb 5-1: config 0 descriptor?? [ 383.353518][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 383.370110][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.378863][ T5286] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 383.391411][ T5286] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 383.406054][ T5286] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 383.414268][ T5286] usb 5-1: media controller created [ 383.446532][ T5286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.501228][ T5286] usb 5-1: selecting invalid altsetting 1 [ 383.544123][ T5286] set interface failed [ 383.544159][ T5286] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 383.589401][ T5286] error writing reg: 0xff, val: 0x00 [ 383.702321][ T5286] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 383.784452][ T5286] usb 5-1: USB disconnect, device number 13 [ 384.825681][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.872935][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.899153][ T53] bond0 (unregistering): Released all slaves [ 385.092320][ T53] tipc: Disabling bearer [ 385.118315][ T53] tipc: Left network mode [ 385.482735][ T5243] Bluetooth: hci3: command tx timeout [ 386.190168][ T53] hsr_slave_0: left promiscuous mode [ 386.196496][ T53] hsr_slave_1: left promiscuous mode [ 386.219810][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.239293][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.257774][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.281382][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.342138][ T53] veth1_macvtap: left promiscuous mode [ 386.353925][ T53] veth0_macvtap: left promiscuous mode [ 386.364434][ T53] veth1_vlan: left promiscuous mode [ 386.388567][ T53] veth0_vlan: left promiscuous mode [ 387.422446][ T53] team0 (unregistering): Port device team_slave_1 removed [ 387.515115][ T53] team0 (unregistering): Port device team_slave_0 removed [ 387.557168][ T5243] Bluetooth: hci3: command tx timeout [ 388.142862][T10714] chnl_net:caif_netlink_parms(): no params data found [ 388.439967][T10821] [U]  [ 388.649006][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.650821][ T47] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 388.656218][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.687056][T10714] bridge_slave_0: entered allmulticast mode [ 388.705352][T10714] bridge_slave_0: entered promiscuous mode [ 388.721315][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.733037][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.779131][T10714] bridge_slave_1: entered allmulticast mode [ 388.830689][T10714] bridge_slave_1: entered promiscuous mode [ 388.886765][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 388.898922][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 388.914322][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.939834][ T47] usb 1-1: config 0 descriptor?? [ 388.970788][ T47] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 388.989638][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.990185][ T47] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 389.034368][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.061426][ T47] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 389.074770][ T47] usb 1-1: media controller created [ 389.171773][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.197161][T10852] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 389.209797][T10852] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 389.218228][T10852] CPU: 0 UID: 0 PID: 10852 Comm: syz.3.1595 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 389.229129][ T47] usb 1-1: selecting invalid altsetting 1 [ 389.229333][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 389.245217][T10852] RIP: 0010:__mutex_lock+0xf2/0xd70 [ 389.248439][ T47] set interface failed [ 389.250434][T10852] Code: c0 c0 b9 33 9a 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 79 0b 00 00 83 3d bb 28 71 0e 00 75 21 49 8d 7d 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 b2 42 38 f6 4d 39 6d 60 0f 85 f3 0a 00 00 [ 389.274313][T10852] RSP: 0018:ffffc9000313ef60 EFLAGS: 00010202 [ 389.280404][T10852] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff9a33b903 [ 389.288384][T10852] RDX: dffffc0000000000 RSI: ffff888030280000 RDI: 00000000000000c8 [ 389.296356][T10852] RBP: ffffc9000313f0b8 R08: ffffc9000313f027 R09: 0000000000000000 [ 389.304353][T10852] R10: ffffc9000313f000 R11: fffff52000627e05 R12: dffffc0000000000 [ 389.312331][T10852] R13: 0000000000000068 R14: 0000000000000000 R15: ffff888060c51958 [ 389.320304][T10852] FS: 0000000000000000(0000) GS:ffff8880b8800000(0063) knlGS:00000000f5776b40 [ 389.329233][T10852] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 389.335828][T10852] CR2: 00007f35653215e8 CR3: 0000000028422000 CR4: 00000000003506f0 [ 389.343802][T10852] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.351779][T10852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.359756][T10852] Call Trace: [ 389.363043][T10852] [ 389.365975][T10852] ? __die_body+0x88/0xe0 [ 389.370325][T10852] ? die_addr+0x108/0x140 [ 389.374667][T10852] ? exc_general_protection+0x3dd/0x5d0 [ 389.380230][T10852] ? asm_exc_general_protection+0x26/0x30 [ 389.385973][T10852] ? __mutex_lock+0xf2/0xd70 [ 389.390602][T10852] ? __mutex_lock+0x2ef/0xd70 [ 389.395292][T10852] ? dvb_usbv2_generic_write+0x26/0x50 [ 389.400773][T10852] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.406767][T10852] ? __pfx___mutex_lock+0x10/0x10 [ 389.411800][T10852] ? mark_lock+0x9a/0x350 [ 389.416151][T10852] dvb_usbv2_generic_write+0x26/0x50 [ 389.421446][T10852] mxl111sf_ctrl_msg+0x143/0x270 [ 389.426397][T10852] mxl111sf_write_reg+0xd8/0x1f0 [ 389.431435][T10852] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 389.436996][T10852] mxl111sf_i2c_xfer+0x91e/0x8a30 [ 389.442032][T10852] ? arch_stack_walk+0x16d/0x1b0 [ 389.446997][T10852] ? stack_trace_save+0x118/0x1d0 [ 389.452048][T10852] ? __pfx_check_noncircular+0x10/0x10 [ 389.457551][T10852] ? add_lock_to_list+0x1de/0x2e0 [ 389.462594][T10852] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 389.468055][T10852] ? stack_trace_save+0x118/0x1d0 [ 389.473086][T10852] ? __pfx_stack_trace_save+0x10/0x10 [ 389.478468][T10852] ? lockdep_unlock+0x16a/0x300 [ 389.483328][T10852] ? mark_lock+0x2a4/0x350 [ 389.487757][T10852] ? __lock_acquire+0x137a/0x2040 [ 389.492848][T10852] ? mark_lock+0x9a/0x350 [ 389.497193][T10852] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.503186][T10852] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 389.509525][T10852] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 389.514992][T10852] __i2c_transfer+0x866/0x21f0 [ 389.519763][T10852] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 389.525685][T10852] ? lockdep_hardirqs_on+0x99/0x150 [ 389.530898][T10852] ? __pfx___i2c_transfer+0x10/0x10 [ 389.536119][T10852] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 389.541509][T10852] ? i2c_transfer+0x119/0x3b0 [ 389.546202][T10852] i2c_transfer+0x271/0x3b0 [ 389.550723][T10852] ? __pfx_i2c_transfer+0x10/0x10 [ 389.555759][T10852] ? __might_fault+0xc6/0x120 [ 389.560453][T10852] ? _copy_from_user+0xa6/0xe0 [ 389.565230][T10852] i2cdev_ioctl_rdwr+0x452/0x700 [ 389.570273][T10852] compat_i2cdev_ioctl+0x7ca/0x8e0 [ 389.575403][T10852] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 389.581044][T10852] ? __fget_files+0x3f6/0x470 [ 389.585732][T10852] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 389.591290][T10852] ? security_file_ioctl_compat+0x87/0xb0 [ 389.597107][T10852] __se_compat_sys_ioctl+0x51c/0xca0 [ 389.602413][T10852] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 389.608233][T10852] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 389.614229][T10852] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 389.620567][T10852] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 389.627161][T10852] ? lockdep_hardirqs_on+0x99/0x150 [ 389.632373][T10852] __do_fast_syscall_32+0xb4/0x110 [ 389.637489][T10852] ? exc_page_fault+0x590/0x8c0 [ 389.642355][T10852] do_fast_syscall_32+0x34/0x80 [ 389.647215][T10852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.653566][T10852] RIP: 0023:0xf747d579 [ 389.657637][T10852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 389.677334][T10852] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 389.685799][T10852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 389.693770][T10852] RDX: 0000000020001100 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.701772][T10852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.709743][T10852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.717710][T10852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.725687][T10852] [ 389.728802][T10852] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.780785][T10852] ---[ end trace 0000000000000000 ]--- [ 389.786457][ T5243] Bluetooth: hci3: command tx timeout [ 389.804975][T10852] RIP: 0010:__mutex_lock+0xf2/0xd70 [ 389.821324][T10714] team0: Port device team_slave_0 added [ 389.829615][T10714] team0: Port device team_slave_1 added [ 389.833431][T10852] Code: c0 c0 b9 33 9a 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 79 0b 00 00 83 3d bb 28 71 0e 00 75 21 49 8d 7d 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 b2 42 38 f6 4d 39 6d 60 0f 85 f3 0a 00 00 [ 389.871941][T10852] RSP: 0018:ffffc9000313ef60 EFLAGS: 00010202 [ 389.939549][T10852] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff9a33b903 [ 390.021119][T10852] RDX: dffffc0000000000 RSI: ffff888030280000 RDI: 00000000000000c8 [ 390.058039][T10852] RBP: ffffc9000313f0b8 R08: ffffc9000313f027 R09: 0000000000000000 [ 390.066080][T10852] R10: ffffc9000313f000 R11: fffff52000627e05 R12: dffffc0000000000 [ 390.121235][T10852] R13: 0000000000000068 R14: 0000000000000000 R15: ffff888060c51958 [ 390.155060][T10852] FS: 0000000000000000(0000) GS:ffff8880b8800000(0063) knlGS:00000000f5776b40 [ 390.186635][T10852] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 390.197175][T10852] CR2: 000055f273f047f0 CR3: 0000000028422000 CR4: 00000000003506f0 [ 390.205200][T10852] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.241050][T10852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.266797][T10852] Kernel panic - not syncing: Fatal exception [ 390.273233][T10852] Kernel Offset: disabled [ 390.277570][T10852] Rebooting in 86400 seconds..