last executing test programs: 4.816568683s ago: executing program 2 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r0, &(0x7f0000000040)=""/172, 0xac, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x14000000, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e900000109e5ff00006c45b2fc", @ANYRES32=r3], 0x34}, 0x1, 0x1000000}, 0x0) 4.489580526s ago: executing program 2 (id=2755): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xc) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="7b76f8842e51000000e6d0d713004408c1613bba8d225bf847644e3261f96b52e1b574551c6917a18f8d555819931c8939ffc2"]) r1 = openat$nullb(0xffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000001a00)={'\x00', 0x4, 0xfffffff9, 0x27, 0x1f, 0x8}) syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) bind$tipc(r3, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000140)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0xec) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) close_range(r7, 0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000004c0)='\x86\x02J\xa4\xa01\xfdW\x9a\x123\xf4\x11g\x04\xba-\xf3J@\xde-u\x06\xafO\xabRIB%HR\xc3\x02\x84\xa1\xd2\xa3\n9\xc1\xae\xbd\xdf\xf6]j\x89\xf7\xd9\x13\xd7?\xa6.\x95fTU3\xaa2DT\xd5\xac\x1a\x9e\xad\xc4\x9a\xf6\xa4@5\x8e\xb3GV\xfa,\x06\x18\x103f\xb0+\x84\xe8\xea\x96\xd1\xe1p\xc5\xa4`\x9b\xabg\xe0\xe2!\xf1\xb9m\xaf\xd6\xbe\x14_\x12\xf9\xedB\x06\x11\xf7q\xf8\xef\x8b\x1d\xed\xfc\x1fn5\x1c\xc2\xd6\xef\xb7H)\x91\x0f\x89)X\x9b1nI1\xff7\xdf\xf3&\xab\x8f\xaa\xfa\xd1\xb3\x9d4\x8a\n\xdfd\xc5X\x8e\x18\x0eE\xb1\x82\xac\x81O\xa0\xc4\xd2A\'\xa9p\xa5\x89F\xd4\x84\xb2\x1a\'(\x81\xfaz2F\x84\xff]\xd2\x8c\xf2\x96\x85\x9d\x01\x00_\xfe\t\xf8p\xbco\xd7\xc3\xeb^\x05\x90\xe0\xf1\xe7\x1e\x85r\xef\xb3\xab\xf5\x88:\xf0\x94\xaf\xd4m\xb8q\x89\x04\xdbm\xd0F@\xa0+\xad\xfb\xb9\xd6[[.\xf85\xae/\x8f\xd9\xa9C\xd4\xfb|]/\xab\x1b/\xb7\x85\xeb\xbc2/\x02g#\x16\xd5', &(0x7f0000000100)='\xf7x\t\x95\xe5\xdf\x00\x00\x80\xb1M0DB\f\xe9C\xe76\xcf\xb2*8\x90\x17\x91\r\xe3\x7f', 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001880)={0xcbc694376339f7ce, 0xf6, 0x0, {r6}}, 0xfffffe1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) 4.287271173s ago: executing program 2 (id=2758): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x4, 0x0, 0x1000000) 4.157713713s ago: executing program 2 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0) 3.901005551s ago: executing program 2 (id=2763): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) creat(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) socket$kcm(0x10, 0x0, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000795000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socket$l2tp(0x2, 0x2, 0x73) 2.750519268s ago: executing program 3 (id=2779): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0}) 2.575352329s ago: executing program 3 (id=2782): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_tid_address(0x0) 1.363270156s ago: executing program 3 (id=2790): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xc) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="7b76f8842e51000000e6d0d713004408c1613bba8d225bf847644e3261f96b52e1b574551c6917a18f8d555819931c8939ffc2"]) r1 = openat$nullb(0xffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000001a00)={'\x00', 0x4, 0xfffffff9, 0x27, 0x1f, 0x8}) syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) bind$tipc(r3, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000140)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0xec) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) close_range(r7, 0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000004c0)='\x86\x02J\xa4\xa01\xfdW\x9a\x123\xf4\x11g\x04\xba-\xf3J@\xde-u\x06\xafO\xabRIB%HR\xc3\x02\x84\xa1\xd2\xa3\n9\xc1\xae\xbd\xdf\xf6]j\x89\xf7\xd9\x13\xd7?\xa6.\x95fTU3\xaa2DT\xd5\xac\x1a\x9e\xad\xc4\x9a\xf6\xa4@5\x8e\xb3GV\xfa,\x06\x18\x103f\xb0+\x84\xe8\xea\x96\xd1\xe1p\xc5\xa4`\x9b\xabg\xe0\xe2!\xf1\xb9m\xaf\xd6\xbe\x14_\x12\xf9\xedB\x06\x11\xf7q\xf8\xef\x8b\x1d\xed\xfc\x1fn5\x1c\xc2\xd6\xef\xb7H)\x91\x0f\x89)X\x9b1nI1\xff7\xdf\xf3&\xab\x8f\xaa\xfa\xd1\xb3\x9d4\x8a\n\xdfd\xc5X\x8e\x18\x0eE\xb1\x82\xac\x81O\xa0\xc4\xd2A\'\xa9p\xa5\x89F\xd4\x84\xb2\x1a\'(\x81\xfaz2F\x84\xff]\xd2\x8c\xf2\x96\x85\x9d\x01\x00_\xfe\t\xf8p\xbco\xd7\xc3\xeb^\x05\x90\xe0\xf1\xe7\x1e\x85r\xef\xb3\xab\xf5\x88:\xf0\x94\xaf\xd4m\xb8q\x89\x04\xdbm\xd0F@\xa0+\xad\xfb\xb9\xd6[[.\xf85\xae/\x8f\xd9\xa9C\xd4\xfb|]/\xab\x1b/\xb7\x85\xeb\xbc2/\x02g#\x16\xd5', &(0x7f0000000100)='\xf7x\t\x95\xe5\xdf\x00\x00\x80\xb1M0DB\f\xe9C\xe76\xcf\xb2*8\x90\x17\x91\r\xe3\x7f', 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001880)={0xcbc694376339f7ce, 0xf6, 0x0, {r6}}, 0xfffffe1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) 1.117682288s ago: executing program 3 (id=2793): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) 1.001586215s ago: executing program 4 (id=2795): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) futex(&(0x7f0000000080), 0x18b, 0x0, 0x0, 0x0, 0x0) 933.257975ms ago: executing program 3 (id=2796): r0 = io_uring_setup(0xfc2, &(0x7f0000000180)) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40186417, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x0, 0x9, 0x3ff}) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') keyctl$dh_compute(0xa, 0x0, &(0x7f0000000480)=""/250, 0xfa, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f00000004c0)={0x0, 0x3e57, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 904.507194ms ago: executing program 4 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000340)}) 822.931801ms ago: executing program 4 (id=2798): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) socket$inet(0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) chmod(&(0x7f0000000000)='./file0\x00', 0x25) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e170e"], 0xf8) 820.357986ms ago: executing program 3 (id=2799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}}]}, 0x48}}, 0x0) epoll_create1(0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000380)=0xcd, 0x4) r3 = socket$inet6(0xa, 0x3, 0xe2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x434, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x36c, 0x238, 0x238, 0x36c, 0x238, 0x3, 0x0, {[{{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x20c, 0x274, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x0, 0x50}}, @common=@inet=@sctp={{0x144}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x490) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000801}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000c000000140004"], 0x58}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 759.53374ms ago: executing program 1 (id=2800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 719.475959ms ago: executing program 0 (id=2801): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{}, {@loopback}]}]}}}}}) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040), 0xf6) 578.737533ms ago: executing program 1 (id=2802): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x10}}, @tclass={{0x10}}, @dstopts={{0x14}}], 0x34}, 0x0) 578.006579ms ago: executing program 0 (id=2803): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 541.696922ms ago: executing program 4 (id=2804): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) 472.223715ms ago: executing program 0 (id=2805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast2, @in6=@mcast1={0xff, 0x2}, @in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast2, @in6=@mcast1, @in6=@local, @in6=@mcast1}]}]}, 0xec}}, 0x0) 457.580942ms ago: executing program 1 (id=2806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) 424.400144ms ago: executing program 4 (id=2807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) futex(&(0x7f0000000080), 0x18b, 0x0, 0x0, 0x0, 0x0) 364.295859ms ago: executing program 0 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000340)}) 309.911179ms ago: executing program 1 (id=2809): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x97, 0x0, &(0x7f00000000c0)) 303.708927ms ago: executing program 4 (id=2810): io_uring_setup(0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) 252.316402ms ago: executing program 0 (id=2811): r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x28}}], 0x1, 0x0) 158.16264ms ago: executing program 1 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 137.709609ms ago: executing program 2 (id=2813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xa, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac460300000000000000a667693addcb249341"}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20, 0x5}, {0x81, 0x5}, {0x6, 0x5}, {0xa}, {0x3}, {0x30, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x33, 0x4}, {0x1, 0x4}, {0x11, 0x1}, {0x1, 0x6}, {0x9, 0x7}, {0x5, 0x4}, {0x20, 0x5}, {0x2, 0x3}, {0x2, 0x1}], "98bdb9ff86e03614"}}, @NL80211_ATTR_QOS_MAP={0x55, 0xc7, {[{0x8, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x7}, {0xff, 0x5}, {0x0, 0x3}, {0x7, 0x7}, {0xe4, 0x6}, {0x3e, 0x4}, {0x4}, {0x2, 0x7}, {0x81, 0x6}, {0xd4, 0x3}], "aa401fe5e89934c3"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000260000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x8, 0x0) io_setup(0x8, 0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1b, 0x91, 0x2a, 0x40, 0x781, 0x100, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xf9, 0x3d}}]}}]}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x0, 0x1f, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x3, 0x5}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0xe5, 0x81, 0xff, 0x4}, 0x101, &(0x7f0000000100)={0x5, 0xf, 0x101, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x4, 0x9, 0xbc}, @ss_container_id={0x14, 0x10, 0x4, 0xa3, "4fc1f2750d405aa7698cafc4167cc683"}, @generic={0x89, 0x10, 0xb, "389fc133cfc60a4c7148fa9d3a9e024e9510804116f8a559b73dd0bd88f4b72ab7f7fdece9d1f760ce2ad4974a82a33c8720a58e278816433f866d5ad310b69983573d600109e6bfd290528c7db03eade0cb6409a4554a24570a9f53eeb07ecbe4a0c3d9a6b2d19c85a0e946e026db13aeb4207877c6db9e319c0ceeae8d24cf469bc67cbfd6"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a8f418f3dd5584d49528e292cdbfed3e"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "7c8bdf6a286edeaeea5470fe30827cec"}, @generic={0x2c, 0x10, 0x3, "5df4d38329801da81b8a4309cede98b51e2eee62d624e47ea2c879f0b249d426d55fbccd08f950ff20"}]}, 0x7, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "546e6f9836f8871f4f17617aaead4ae0d494b65637358c72c8512a8106f6880b03035ab4736bf881f12b7e4c263448d688e921e69671f81543a422193a4133f9ba327da072c8343e54f710a4142dc6aebfbd0f562e35759a75a77f5e6ae37e16289f0bec635cf29f26bd10779b00ba691824ad83b029dc872b28364b1abd17"}}, {0x18, &(0x7f0000000080)=@string={0x18, 0x3, "f9bb4565db55d9e2b23e285d0dccbaabb87789f46f00"}}, {0xb4, &(0x7f0000000300)=@string={0xb4, 0x3, "723b719f8cd2be7c641145c45436f0bb7e3787dd1822141d7c9938d7d39f674fd4390e17b127c2360315b58101a38c2a95cd250c2126ffd9bbd7c10aeb3236090dbb1da6a2d49825b819816c70513e59900971d63af75449e6eb5cce477cf5ff5f109212a85bfaccd44441505875b1b0601abba67b2cea40980c8259a1e2a16a86dcc44a95c9e528d1b9f538d4ce956ece59160669b9de3b656968f11bc37a6af89a35c3ff2b6754aded6024bb8fa5d53a61"}}, {0x3f, &(0x7f00000003c0)=@string={0x3f, 0x3, "20f508d047d197893b070967269c05f34cf260f9ef75c3e1e9f33290d7abae972cb9a9732e5972393a586c67b9be03f13fd42d85df731cd7450c8b673b"}}, {0xdb, &(0x7f0000000400)=@string={0xdb, 0x3, "5c3b2304b64989aa014954da50469f120bb340ea09277a7e29d5f5f6c933bf854bd11755a6c26e6bbde467a97d2cb972c6bd90e272f255ff5304f2b8740068e9d4b13a21eae96c5170e1d4c0419e769f9675f2a6f720e597318a6442695157fc414a5186b240bf7638fe89ca174dd81d7c133e60153be23d7db38f65860cefe850cf21ba81e4905f4b6e2ca5acae662d72c0042fdc93bfe4e4d097cdbf4a02d0ed433942a2ac2e23ec87046840dec3b90731e1e1cd0c4f91cefaf1900824b854ce2b5a70fa879f29a9d1711fa65677700c694af57fe1690f9b"}}, {0x4, &(0x7f0000000500)=@string={0x4, 0x3, "6614"}}, {0x37, &(0x7f0000000540)=@string={0x37, 0x3, "4bededf68d454b16a7181de427c0558eba0fc3418d4d4f2ffc068378509e1ab44fd0003f0808add3ee25fa0f6de037317df8496710"}}]}) 98.179926ms ago: executing program 0 (id=2814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_io_uring_setup(0x4893, &(0x7f0000000080)={0x0, 0xd66e, 0x800, 0x1, 0x18e}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x48df, 0xc404, 0x1b, &(0x7f0000000180)={[0x10001]}, 0x8) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040), 0x4) creat(0x0, 0x0) r3 = dup(0xffffffffffffffff) fanotify_mark(r3, 0x1, 0x1, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000074b60f1c88039c52360c2894de04a69d1df46b8e8d859da1ae9e99540149c16d920c842538d5a824ac72670443ef61f3942a"], 0x8, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) pipe2(0x0, 0x84000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000300)=@isdn, &(0x7f0000000240)=0x80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffe, 0x0) unshare(0x44000000) 0s ago: executing program 1 (id=2815): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.711160][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.730026][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.753583][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.765247][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.784875][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.807517][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.820982][T12473] veth1_vlan: entered promiscuous mode [ 521.915052][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.927499][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.943141][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.959245][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.970517][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.981491][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.992005][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.017235][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.039152][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.143858][T12449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.157465][T12449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.167395][T12449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.180440][T12449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.213744][ T1101] bridge_slave_1: left allmulticast mode [ 522.228216][ T1101] bridge_slave_1: left promiscuous mode [ 522.234201][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.261093][ T1101] bridge_slave_0: left allmulticast mode [ 522.267928][ T1101] bridge_slave_0: left promiscuous mode [ 522.273938][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.924892][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.950947][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.968553][ T1101] bond0 (unregistering): Released all slaves [ 523.131894][T12473] veth0_macvtap: entered promiscuous mode [ 523.269768][T12473] veth1_macvtap: entered promiscuous mode [ 523.468778][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.494333][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.517782][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.534332][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.544982][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.562214][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.572313][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.583029][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.593923][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.604551][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.616505][ T4487] Bluetooth: hci4: command tx timeout [ 523.641203][T12473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.692101][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.718561][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.732825][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.744069][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.754287][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.764823][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.774870][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.786919][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.798423][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.809082][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.821102][T12473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.834297][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.850123][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.871765][ T1101] hsr_slave_0: left promiscuous mode [ 523.884784][ T1101] hsr_slave_1: left promiscuous mode [ 523.893251][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.902070][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.910436][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.917972][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.956892][ T1101] veth1_macvtap: left promiscuous mode [ 523.962456][ T1101] veth0_macvtap: left promiscuous mode [ 523.968395][ T1101] veth1_vlan: left promiscuous mode [ 523.973738][ T1101] veth0_vlan: left promiscuous mode [ 524.533464][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 524.582051][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 525.083158][T12473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.112981][T12473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.126171][T12473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.134931][T12473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.263138][T12650] chnl_net:caif_netlink_parms(): no params data found [ 525.342767][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.353412][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.706218][ T4487] Bluetooth: hci4: command tx timeout [ 525.811404][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.826318][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.833703][T12650] bridge_slave_0: entered allmulticast mode [ 525.847949][T12650] bridge_slave_0: entered promiscuous mode [ 525.871159][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.913850][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.956659][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.963848][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.987080][T12650] bridge_slave_1: entered allmulticast mode [ 525.994715][T12650] bridge_slave_1: entered promiscuous mode [ 526.157563][T12650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.193022][T12650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.413029][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.427784][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.441823][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.454998][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.466645][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 526.476657][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.501785][T12650] team0: Port device team_slave_0 added [ 526.560326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.571543][T12650] team0: Port device team_slave_1 added [ 526.596516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.700427][T12650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.716818][ T5393] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 526.727272][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.788835][ T4487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.802238][ T4487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.811438][ T4487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.820601][ T4487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.828929][ T4487] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 526.838429][ T4487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 526.840851][T12650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.932443][T12650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.952586][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.964158][ T5393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.972680][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.976938][ T5393] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 527.010014][ T5393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.027812][ T5393] usb 3-1: config 0 descriptor?? [ 527.043596][T12650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.047566][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 527.220576][T12650] hsr_slave_0: entered promiscuous mode [ 527.234821][T12650] hsr_slave_1: entered promiscuous mode [ 527.243651][T12650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.262383][T12650] Cannot create hsr debugfs directory [ 527.488069][ T5393] wacom 0003:056A:0331.0013: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 527.490201][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.711961][ T5594] usb 3-1: USB disconnect, device number 28 [ 527.777006][ T4487] Bluetooth: hci4: command tx timeout [ 527.798201][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.012780][T12730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.023473][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.041116][T12730] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 528.183506][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.392165][T12730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.427137][T12730] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 528.577442][ T4487] Bluetooth: hci1: command tx timeout [ 528.757330][T12730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 528.763293][T12730] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 528.897262][ T4487] Bluetooth: hci3: command tx timeout [ 528.932882][T12726] chnl_net:caif_netlink_parms(): no params data found [ 529.096850][T12730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.131485][T12730] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 529.155757][T12721] chnl_net:caif_netlink_parms(): no params data found [ 529.191466][T12730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.210895][T12730] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 529.535575][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.858017][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.076997][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.091804][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.103789][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.121806][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.131464][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 530.142706][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.169905][ T4487] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.204934][ T4487] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.221322][ T4487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.240746][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.252214][ T4487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.265470][ T4487] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 530.277089][ T4487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.294897][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.302704][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.310067][T12726] bridge_slave_0: entered allmulticast mode [ 530.317907][T12726] bridge_slave_0: entered promiscuous mode [ 530.337493][ T931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 530.382956][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.390305][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.399112][T12726] bridge_slave_1: entered allmulticast mode [ 530.406946][T12726] bridge_slave_1: entered promiscuous mode [ 530.442345][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.473384][T12721] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.481378][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.490690][T12721] bridge_slave_0: entered allmulticast mode [ 530.498476][T12721] bridge_slave_0: entered promiscuous mode [ 530.539338][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.561268][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.576421][ T931] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 530.585741][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.601678][ T931] usb 4-1: config 0 descriptor?? [ 530.642475][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.663629][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.681677][T12721] bridge_slave_1: entered allmulticast mode [ 530.700952][T12721] bridge_slave_1: entered promiscuous mode [ 530.757786][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.772110][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.947665][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.987072][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.048268][ T931] wacom 0003:056A:0331.0014: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 531.114739][T12726] team0: Port device team_slave_0 added [ 531.133098][T12726] team0: Port device team_slave_1 added [ 531.281738][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.291322][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.292300][ T931] usb 4-1: USB disconnect, device number 19 [ 531.332096][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.415805][T12721] team0: Port device team_slave_0 added [ 531.446253][T12650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.461444][T12650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.474663][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.483396][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.510258][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.534490][T12721] team0: Port device team_slave_1 added [ 531.571620][T12650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.624641][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.631910][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.658270][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.681786][T12650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.727103][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.734632][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.761538][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.773278][ T1101] bridge_slave_1: left allmulticast mode [ 531.779704][ T1101] bridge_slave_1: left promiscuous mode [ 531.785516][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.802097][ T1101] bridge_slave_0: left allmulticast mode [ 531.809076][ T1101] bridge_slave_0: left promiscuous mode [ 531.814791][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.827504][ T1101] bridge_slave_1: left allmulticast mode [ 531.833308][ T1101] bridge_slave_1: left promiscuous mode [ 531.840274][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.851840][ T1101] bridge_slave_0: left allmulticast mode [ 531.858857][ T1101] bridge_slave_0: left promiscuous mode [ 531.864642][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.244143][T12810] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 532.337904][ T53] Bluetooth: hci0: command tx timeout [ 532.692254][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.705011][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.717047][ T1101] bond0 (unregistering): Released all slaves [ 532.857117][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.875107][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.895406][ T1101] bond0 (unregistering): Released all slaves [ 533.032453][T12726] hsr_slave_0: entered promiscuous mode [ 533.075095][T12726] hsr_slave_1: entered promiscuous mode [ 533.106973][T12726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.114600][T12726] Cannot create hsr debugfs directory [ 533.115020][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2098'. [ 533.343446][T12721] hsr_slave_0: entered promiscuous mode [ 533.361358][T12721] hsr_slave_1: entered promiscuous mode [ 533.372413][T12721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.380908][T12721] Cannot create hsr debugfs directory [ 533.776553][T12789] chnl_net:caif_netlink_parms(): no params data found [ 534.078662][T12816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.086355][T12816] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 534.480727][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.534557][T12789] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.542635][T12789] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.550151][T12789] bridge_slave_0: entered allmulticast mode [ 534.557877][T12789] bridge_slave_0: entered promiscuous mode [ 534.605932][T12789] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.617220][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.635245][T12789] bridge_slave_1: entered allmulticast mode [ 534.644380][T12789] bridge_slave_1: entered promiscuous mode [ 534.795859][T12650] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.857646][T12789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.933201][ T1101] hsr_slave_0: left promiscuous mode [ 534.939680][ T1101] hsr_slave_1: left promiscuous mode [ 534.957090][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.964632][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.992106][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.000175][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.018715][ T1101] hsr_slave_0: left promiscuous mode [ 535.025782][ T1101] hsr_slave_1: left promiscuous mode [ 535.037107][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.044545][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.057653][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.065121][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.110127][ T1101] veth1_macvtap: left promiscuous mode [ 535.115731][ T1101] veth0_macvtap: left promiscuous mode [ 535.121923][ T1101] veth1_vlan: left promiscuous mode [ 535.129506][ T1101] veth0_vlan: left promiscuous mode [ 535.136285][ T1101] veth1_macvtap: left promiscuous mode [ 535.141879][ T1101] veth0_macvtap: left promiscuous mode [ 535.148291][ T1101] veth1_vlan: left promiscuous mode [ 535.153706][ T1101] veth0_vlan: left promiscuous mode [ 535.256420][ T931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 535.453244][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.467625][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.491485][ T931] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 535.506396][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.528145][ T931] usb 4-1: config 0 descriptor?? [ 535.941500][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 535.984070][ T931] wacom 0003:056A:0331.0015: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 536.018602][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 536.202140][ T931] usb 4-1: USB disconnect, device number 20 [ 536.943519][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2104'. [ 537.220860][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 537.282825][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 537.820127][T12789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.893484][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.900714][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.986263][T12726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 538.016871][T12726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 538.020385][T12862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'. [ 538.121527][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.128889][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.159138][T12789] team0: Port device team_slave_0 added [ 538.176376][T12726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 538.194705][T12726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 538.279084][T12789] team0: Port device team_slave_1 added [ 538.546495][T12789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.577655][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.625337][T12789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.679919][T12789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.706757][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.765324][T12789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.886368][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2118'. [ 538.955413][T12789] hsr_slave_0: entered promiscuous mode [ 538.972939][T12789] hsr_slave_1: entered promiscuous mode [ 539.015844][T12789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.030818][T12789] Cannot create hsr debugfs directory [ 539.393000][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 539.409568][T12721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.423773][T12721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.452186][T12650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.470821][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.494630][T12721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.514805][T12721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.731829][T12899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.744671][ T1101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.781789][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.881796][ T1101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.947157][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.954408][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.043236][ T1101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.097319][T12910] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 540.137479][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.144701][ T6483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.234829][ T1101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.402634][T12650] veth0_vlan: entered promiscuous mode [ 540.454811][T12726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.492081][T12650] veth1_vlan: entered promiscuous mode [ 540.802420][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.821903][ T1101] bridge_slave_1: left allmulticast mode [ 540.829157][ T1101] bridge_slave_1: left promiscuous mode [ 540.834984][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.848431][ T1101] bridge_slave_0: left allmulticast mode [ 540.854124][ T1101] bridge_slave_0: left promiscuous mode [ 540.876848][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.658174][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.681793][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.700545][ T1101] bond0 (unregistering): Released all slaves [ 541.727626][T12650] veth0_macvtap: entered promiscuous mode [ 541.741007][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.840841][T12650] veth1_macvtap: entered promiscuous mode [ 542.092914][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.120285][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.146339][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.163783][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.183492][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.196332][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.217065][T12650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.309090][T12721] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.325771][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.353164][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.366035][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.385488][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.395868][T12650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.415003][T12650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.438226][T12650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.448375][ T58] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 542.460756][T12650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.479943][T12650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.492488][T12650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.504328][T12650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.543266][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.550696][ T8730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.569530][T12726] veth0_vlan: entered promiscuous mode [ 542.590450][ T1101] hsr_slave_0: left promiscuous mode [ 542.602096][ T1101] hsr_slave_1: left promiscuous mode [ 542.608337][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.615828][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.628553][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.636055][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.666503][ T1101] veth1_macvtap: left promiscuous mode [ 542.668746][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.672731][ T1101] veth0_macvtap: left promiscuous mode [ 542.690630][ T1101] veth1_vlan: left promiscuous mode [ 542.694058][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.695998][ T1101] veth0_vlan: left promiscuous mode [ 542.719604][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.739584][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.759543][ T58] usb 4-1: config 0 descriptor?? [ 543.183327][ T58] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x2 [ 543.193393][ T58] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 543.202065][ T58] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 543.215917][ T58] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 543.379465][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 543.440373][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 543.564869][ T931] usb 4-1: USB disconnect, device number 21 [ 544.061298][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.068632][ T5593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.151544][T12789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.198541][T12789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.228206][T12726] veth1_vlan: entered promiscuous mode [ 544.270895][T12789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.378425][T12789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.523970][T12721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.541864][T12721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.589794][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.609492][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.694332][T12726] veth0_macvtap: entered promiscuous mode [ 544.730758][T12726] veth1_macvtap: entered promiscuous mode [ 544.755454][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.779054][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.881645][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.913892][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.930847][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.953987][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.977933][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.997519][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.015133][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.041408][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.079293][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.102896][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.122479][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.135906][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.166335][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.196941][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.260633][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.329787][T12726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.354041][T12726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.375490][T12726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.390715][T12726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.759777][T12721] veth0_vlan: entered promiscuous mode [ 545.838921][T12721] veth1_vlan: entered promiscuous mode [ 545.907159][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.063867][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.075375][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.094612][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.215294][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.222555][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.283075][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.310166][ T931] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.317456][ T931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.326358][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.380661][T12721] veth0_macvtap: entered promiscuous mode [ 546.479949][T12721] veth1_macvtap: entered promiscuous mode [ 546.595381][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.622832][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.633043][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.643653][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.674986][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.687296][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.698532][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.709288][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.722803][T12721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.735702][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.756315][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.797143][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.826333][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.849818][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.874543][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.916262][T12721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.944464][T12721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.984504][T12721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.088273][T12721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.100760][T12721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.139447][T12721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.187309][T12721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.413804][T12789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.721931][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.757101][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.931700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.965763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.989489][T12789] veth0_vlan: entered promiscuous mode [ 548.056575][T12789] veth1_vlan: entered promiscuous mode [ 548.231855][T12789] veth0_macvtap: entered promiscuous mode [ 548.268035][T12789] veth1_macvtap: entered promiscuous mode [ 548.333594][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.369868][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.392658][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.414139][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.441693][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.478043][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.502971][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.518319][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.528412][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.539100][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.567549][T12789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.650553][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.714637][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.725284][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.774357][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.785008][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.813865][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.840750][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.865722][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.893094][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.923254][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.948528][T12789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.972977][T12789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.994446][T12789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.024795][T12789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.049166][T12789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.421793][ T6483] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 549.721384][T11052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.729568][T11052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.761382][ T6483] usb 2-1: No LPM exit latency info found, disabling LPM. [ 549.826283][ T6483] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 549.866301][ T6483] usb 2-1: config 1 interface 0 has no altsetting 0 [ 549.933050][ T6483] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 549.943993][ T6483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.974632][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.996276][ T6483] usb 2-1: Product: à¡  [ 550.000700][ T6483] usb 2-1: Manufacturer: á°‰ [ 550.020369][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.076731][T13082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 550.516855][ T6483] usb 2-1: USB disconnect, device number 23 [ 550.700378][T13112] netlink: 'syz.4.2158': attribute type 11 has an invalid length. [ 550.716744][ T58] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 550.729011][T13112] netlink: 198200 bytes leftover after parsing attributes in process `syz.4.2158'. [ 550.789075][T13116] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 550.926228][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 550.955189][ T58] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 550.973319][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 551.020617][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 551.045818][ T58] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 551.066244][ T58] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 551.074747][ T58] usb 3-1: Product: syz [ 551.087728][ T58] usb 3-1: Manufacturer: syz [ 551.092472][ T58] usb 3-1: SerialNumber: syz [ 551.121780][ T58] usb 3-1: config 0 descriptor?? [ 551.128256][T13100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 551.140931][ T58] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 551.215398][ T58] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 551.281385][T13104] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 551.584330][T13100] ldusb 3-1:0.0: Write buffer overflow, 64618 bytes dropped [ 551.737793][ T6527] usb 3-1: USB disconnect, device number 29 [ 551.818278][ T6527] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 553.481947][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2177'. [ 553.679825][ T5592] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 553.858210][ T5592] usb 3-1: device descriptor read/64, error -71 [ 554.139389][ T5592] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 554.306530][ T5592] usb 3-1: device descriptor read/64, error -71 [ 554.447694][ T5592] usb usb3-port1: attempt power cycle [ 554.546327][ T58] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 554.660299][T13216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2191'. [ 554.756291][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 554.763723][ T58] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 554.774726][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 554.794235][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 554.812034][ T58] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 554.829843][ T58] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 554.840810][ T58] usb 4-1: Product: syz [ 554.846182][ T58] usb 4-1: Manufacturer: syz [ 554.850863][ T58] usb 4-1: SerialNumber: syz [ 554.876306][ T5592] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 554.885130][ T58] usb 4-1: config 0 descriptor?? [ 554.891898][T13201] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 554.903335][ T58] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 554.919272][ T5592] usb 3-1: device descriptor read/8, error -71 [ 554.928586][ T58] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 555.204398][T13201] ldusb 4-1:0.0: Write buffer overflow, 64618 bytes dropped [ 555.227835][ T5592] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 555.267692][ T6483] usb 4-1: USB disconnect, device number 22 [ 555.276866][ T5592] usb 3-1: device descriptor read/8, error -71 [ 555.289460][ T6483] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 555.406748][ T5592] usb usb3-port1: unable to enumerate USB device [ 555.836267][ T6527] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 556.046021][ T6527] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 556.064934][ T6527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.076414][ T6527] usb 2-1: config 0 descriptor?? [ 556.093216][ T6527] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 556.633416][T13258] netlink: 'syz.0.2210': attribute type 11 has an invalid length. [ 556.663691][T13258] netlink: 198200 bytes leftover after parsing attributes in process `syz.0.2210'. [ 556.870387][ T6527] gp8psk: usb in 128 operation failed. [ 556.899148][ T6527] gp8psk: usb in 137 operation failed. [ 556.904688][ T6527] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 556.931479][ T6527] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 556.966489][ T6527] usb 2-1: USB disconnect, device number 24 [ 557.528625][T13286] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 557.563397][ T5592] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 557.716504][ T5592] usb 4-1: device descriptor read/64, error -71 [ 557.998532][ T5592] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 558.156231][ T5592] usb 4-1: device descriptor read/64, error -71 [ 558.242407][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2227'. [ 558.279161][ T5592] usb usb4-port1: attempt power cycle [ 558.696266][ T5592] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 558.773073][ T5592] usb 4-1: device descriptor read/8, error -71 [ 558.866765][ T931] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 559.066223][ T5592] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 559.067658][ T931] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 559.105432][ T5592] usb 4-1: device descriptor read/8, error -71 [ 559.111787][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.123660][ T931] usb 3-1: config 0 descriptor?? [ 559.157288][ T931] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 559.244931][ T5592] usb usb4-port1: unable to enumerate USB device [ 559.931645][ T931] gp8psk: usb in 128 operation failed. [ 559.960901][ T931] gp8psk: usb in 137 operation failed. [ 559.970947][ T931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 559.985370][ T931] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 560.025559][ T931] usb 3-1: USB disconnect, device number 34 [ 560.742831][ T6483] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 560.937523][ T6483] usb 2-1: Using ep0 maxpacket: 32 [ 560.959861][ T6483] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 560.989309][ T6483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 561.011212][ T6483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 561.042015][ T6483] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 561.066475][ T6483] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 561.093831][ T6483] usb 2-1: Product: syz [ 561.104033][ T6483] usb 2-1: Manufacturer: syz [ 561.126223][ T6483] usb 2-1: SerialNumber: syz [ 561.144235][ T6483] usb 2-1: config 0 descriptor?? [ 561.163146][T13352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.184456][ T6483] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 561.229164][ T6483] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 561.369886][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2257'. [ 561.567935][T13352] ldusb 2-1:0.0: Write buffer overflow, 64618 bytes dropped [ 561.695624][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-1) [ 561.707522][ T25] usb 2-1: USB disconnect, device number 25 [ 561.755734][ T25] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 562.023908][T13394] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 562.420961][ T29] audit: type=1326 audit(1720478248.457:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13409 comm="syz.0.2270" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x0 [ 562.445245][ T25] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 562.648479][ T25] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 562.669851][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.689062][ T25] usb 3-1: config 0 descriptor?? [ 562.698350][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 562.792754][ T931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 562.994685][ T931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.016257][ T931] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.046495][ T931] usb 4-1: New USB device found, idVendor=1751, idProduct=0032, bcdDevice= 0.00 [ 563.055732][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.077895][ T931] usb 4-1: config 0 descriptor?? [ 563.101665][ T931] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 563.301731][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.314195][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.403663][T13408] fuse: Unknown parameter '0xffffffffffffffff' [ 563.750469][ T25] gp8psk: usb in 128 operation failed. [ 563.765735][ T25] gp8psk: usb in 137 operation failed. [ 563.773636][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 563.797236][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 563.819936][ T25] usb 3-1: USB disconnect, device number 35 [ 564.624580][T13425] warn_alloc: 1 callbacks suppressed [ 564.624603][T13425] syz.0.2273: vmalloc error: size 633921536, failed to allocated page array size 1238128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 564.653202][T13425] CPU: 0 PID: 13425 Comm: syz.0.2273 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 564.663501][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 564.673607][T13425] Call Trace: [ 564.676905][T13425] [ 564.679849][T13425] dump_stack_lvl+0x241/0x360 [ 564.684555][T13425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.689776][T13425] ? __pfx__printk+0x10/0x10 [ 564.694389][T13425] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 564.700829][T13425] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 564.707354][T13425] warn_alloc+0x278/0x410 [ 564.711802][T13425] ? __pfx_warn_alloc+0x10/0x10 [ 564.716679][T13425] ? vb2_vmalloc_alloc+0xf2/0x340 [ 564.721721][T13425] ? __get_vm_area_node+0x23d/0x270 [ 564.726934][T13425] __vmalloc_node_range_noprof+0x69f/0x1460 [ 564.732863][T13425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 564.739213][T13425] ? __kasan_kmalloc+0x98/0xb0 [ 564.743994][T13425] ? vb2_vmalloc_alloc+0xb5/0x340 [ 564.749034][T13425] vmalloc_user_noprof+0x74/0x80 [ 564.753987][T13425] ? vb2_vmalloc_alloc+0xf2/0x340 [ 564.759025][T13425] vb2_vmalloc_alloc+0xf2/0x340 [ 564.763891][T13425] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 564.769371][T13425] __vb2_queue_alloc+0xa0f/0x16f0 [ 564.774457][T13425] vb2_core_create_bufs+0x825/0x1040 [ 564.779776][T13425] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 564.785523][T13425] ? __pfx___might_resched+0x10/0x10 [ 564.790821][T13425] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 564.796390][T13425] vb2_create_bufs+0x60e/0xdd0 [ 564.801183][T13425] ? __pfx_vb2_create_bufs+0x10/0x10 [ 564.806489][T13425] ? __mutex_lock+0x2ef/0xd70 [ 564.811182][T13425] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 564.816753][T13425] vb2_ioctl_create_bufs+0x2ba/0x400 [ 564.822063][T13425] v4l_create_bufs+0x18b/0x2a0 [ 564.826854][T13425] __video_do_ioctl+0xc26/0xde0 [ 564.831742][T13425] ? __pfx___video_do_ioctl+0x10/0x10 [ 564.837156][T13425] ? rcu_is_watching+0x15/0xb0 [ 564.841949][T13425] ? video_usercopy+0x1f0/0x1180 [ 564.846909][T13425] ? __kmalloc_noprof+0x217/0x400 [ 564.852082][T13425] video_usercopy+0x89b/0x1180 [ 564.856894][T13425] ? __pfx___video_do_ioctl+0x10/0x10 [ 564.862310][T13425] ? __pfx_video_usercopy+0x10/0x10 [ 564.867548][T13425] ? __fget_files+0x29/0x470 [ 564.872160][T13425] v4l2_ioctl+0x18c/0x1e0 [ 564.876520][T13425] v4l2_compat_ioctl32+0x1da/0x260 [ 564.881652][T13425] __se_compat_sys_ioctl+0x51c/0xca0 [ 564.886957][T13425] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 564.892785][T13425] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 564.898792][T13425] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 564.905139][T13425] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 564.911748][T13425] ? lockdep_hardirqs_on+0x99/0x150 [ 564.917055][T13425] __do_fast_syscall_32+0xb4/0x120 [ 564.922208][T13425] ? ret_from_fork_asm+0x1a/0x30 [ 564.927169][T13425] ? lockdep_hardirqs_on+0x99/0x150 [ 564.932390][T13425] do_fast_syscall_32+0x34/0x80 [ 564.937283][T13425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.943657][T13425] RIP: 0023:0xf7415579 [ 564.947767][T13425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 564.967398][T13425] RSP: 002b:00000000f5d2e57c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 564.975888][T13425] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 564.983878][T13425] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.991867][T13425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.999853][T13425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.008010][T13425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.016029][T13425] [ 565.026317][T13425] Mem-Info: [ 565.029588][T13425] active_anon:5755 inactive_anon:0 isolated_anon:0 [ 565.029588][T13425] active_file:15859 inactive_file:3045 isolated_file:0 [ 565.029588][T13425] unevictable:0 dirty:481 writeback:0 [ 565.029588][T13425] slab_reclaimable:9325 slab_unreclaimable:104148 [ 565.029588][T13425] mapped:15135 shmem:1776 pagetables:676 [ 565.029588][T13425] sec_pagetables:0 bounce:0 [ 565.029588][T13425] kernel_misc_reclaimable:0 [ 565.029588][T13425] free:1392775 free_pcp:780 free_cma:0 [ 565.089523][T13425] Node 0 active_anon:21384kB inactive_anon:0kB active_file:63248kB inactive_file:12176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60404kB dirty:1916kB writeback:0kB shmem:5568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10324kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 565.122125][T13425] Node 1 active_anon:1536kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 565.159956][T13425] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.195100][T13425] lowmem_reserve[]: 0 2571 2571 0 0 [ 565.201278][T13425] Node 0 DMA32 free:1603532kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:23432kB inactive_anon:0kB active_file:63204kB inactive_file:11928kB unevictable:0kB writepending:1916kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:5616kB local_pcp:2856kB free_cma:0kB [ 565.241650][T13425] lowmem_reserve[]: 0 0 0 0 0 [ 565.248061][T13425] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:56kB inactive_anon:0kB active_file:44kB inactive_file:248kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 565.281697][T13425] lowmem_reserve[]: 0 0 0 0 0 [ 565.287459][T13425] Node 1 Normal free:3947684kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.351873][ T58] usb 4-1: USB disconnect, device number 27 [ 565.409136][T13425] lowmem_reserve[]: 0 0 0 0 0 [ 565.418752][T13425] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.444754][T13425] Node 0 DMA32: 36*4kB (UE) 673*8kB (UME) 787*16kB (UME) 546*32kB (UME) 199*64kB (UME) 53*128kB (UME) 22*256kB (UME) 13*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 374*4096kB (M) = 1605448kB [ 565.521649][T13425] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.574158][T13425] Node 1 Normal: 7*4kB (UM) 21*8kB (UM) 12*16kB (UM) 11*32kB (UM) 7*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (U) 3*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3947684kB [ 565.639487][T13425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.655382][T13425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 565.666434][T13425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.682813][T13425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 565.695733][T13425] 21443 total pagecache pages [ 565.713519][T13425] 0 pages in swap cache [ 565.719365][T13425] Free swap = 124560kB [ 565.723574][T13425] Total swap = 124996kB [ 565.737372][T13425] 2097051 pages RAM [ 565.741421][T13425] 0 pages HighMem/MovableOnly [ 565.753368][T13425] 400871 pages reserved [ 565.758910][T13425] 0 pages cma reserved [ 567.267819][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2305'. [ 567.692252][ T5592] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 567.888174][ T5592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.916534][ T5592] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.956305][ T5592] usb 1-1: New USB device found, idVendor=1751, idProduct=0032, bcdDevice= 0.00 [ 567.981122][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.018885][ T5592] usb 1-1: config 0 descriptor?? [ 568.058024][ T5592] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 568.101778][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 568.470255][T13488] fuse: Unknown parameter '0xffffffffffffffff' [ 569.905179][T13550] netlink: 'syz.4.2328': attribute type 309 has an invalid length. [ 570.267037][ T25] usb 1-1: USB disconnect, device number 19 [ 570.271489][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'. [ 570.596396][ T29] audit: type=1326 audit(1720478256.637:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.2326" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x0 [ 571.155101][ T25] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 571.230874][T13579] netlink: 'syz.4.2340': attribute type 41 has an invalid length. [ 571.352902][ T25] usb 1-1: No LPM exit latency info found, disabling LPM. [ 571.381237][ T25] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 571.407031][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 571.429836][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 571.449439][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.486467][ T25] usb 1-1: Product: à¡  [ 571.490908][ T25] usb 1-1: Manufacturer: á°‰ [ 571.513679][T13572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.987468][T13596] syzkaller0: entered promiscuous mode [ 572.008512][T13596] syzkaller0: entered allmulticast mode [ 572.330341][T13601] Failed to get privilege flags for destination (handle=0x2:0x0) [ 573.321115][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'. [ 575.585672][ T25] usb 1-1: USB disconnect, device number 20 [ 577.066862][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 577.137144][T13653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2367'. [ 577.202966][T13653] Êüä^q: entered promiscuous mode [ 577.311067][T13627] warn_alloc: 2 callbacks suppressed [ 577.311091][T13627] syz.2.2357: vmalloc error: size 633921536, failed to allocated page array size 1238128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 577.371385][T13627] CPU: 0 PID: 13627 Comm: syz.2.2357 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 577.375545][T13657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 577.381580][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 577.381647][T13627] Call Trace: [ 577.381661][T13627] [ 577.381673][T13627] dump_stack_lvl+0x241/0x360 [ 577.381718][T13627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.381752][T13627] ? __pfx__printk+0x10/0x10 [ 577.381793][T13627] ? __rcu_read_unlock+0xa1/0x110 [ 577.381833][T13627] warn_alloc+0x278/0x410 [ 577.381876][T13627] ? __pfx_warn_alloc+0x10/0x10 [ 577.381916][T13627] ? vb2_vmalloc_alloc+0xf2/0x340 [ 577.381940][T13627] ? __get_vm_area_node+0x23d/0x270 [ 577.381972][T13627] __vmalloc_node_range_noprof+0x69f/0x1460 [ 577.382029][T13627] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.382070][T13627] ? __kasan_kmalloc+0x98/0xb0 [ 577.382101][T13627] ? vb2_vmalloc_alloc+0xb5/0x340 [ 577.382129][T13627] vmalloc_user_noprof+0x74/0x80 [ 577.382157][T13627] ? vb2_vmalloc_alloc+0xf2/0x340 [ 577.382180][T13627] vb2_vmalloc_alloc+0xf2/0x340 [ 577.382209][T13627] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 577.382245][T13627] __vb2_queue_alloc+0xa0f/0x16f0 [ 577.382331][T13627] vb2_core_create_bufs+0x825/0x1040 [ 577.382394][T13627] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 577.382439][T13627] ? __pfx___might_resched+0x10/0x10 [ 577.382468][T13627] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 577.382511][T13627] vb2_create_bufs+0x60e/0xdd0 [ 577.382554][T13627] ? __pfx_vb2_create_bufs+0x10/0x10 [ 577.382586][T13627] ? __mutex_lock+0x2ef/0xd70 [ 577.382620][T13627] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 577.382662][T13627] vb2_ioctl_create_bufs+0x2ba/0x400 [ 577.382706][T13627] v4l_create_bufs+0x18b/0x2a0 [ 577.382750][T13627] __video_do_ioctl+0xc26/0xde0 [ 577.382803][T13627] ? __pfx___video_do_ioctl+0x10/0x10 [ 577.382842][T13627] ? rcu_is_watching+0x15/0xb0 [ 577.382868][T13627] ? video_usercopy+0x1f0/0x1180 [ 577.382903][T13627] ? __kmalloc_noprof+0x217/0x400 [ 577.382947][T13627] video_usercopy+0x89b/0x1180 [ 577.382995][T13627] ? __pfx___video_do_ioctl+0x10/0x10 [ 577.581791][T13627] ? __pfx_video_usercopy+0x10/0x10 [ 577.587054][T13627] ? __fget_files+0x29/0x470 [ 577.591673][T13627] v4l2_ioctl+0x18c/0x1e0 [ 577.596082][T13627] v4l2_compat_ioctl32+0x1da/0x260 [ 577.601252][T13627] __se_compat_sys_ioctl+0x51c/0xca0 [ 577.606581][T13627] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 577.612513][T13627] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.618511][T13627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 577.624857][T13627] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 577.631470][T13627] ? lockdep_hardirqs_on+0x99/0x150 [ 577.636693][T13627] __do_fast_syscall_32+0xb4/0x120 [ 577.641824][T13627] ? ret_from_fork_asm+0x1a/0x30 [ 577.646777][T13627] ? lockdep_hardirqs_on+0x99/0x150 [ 577.651997][T13627] do_fast_syscall_32+0x34/0x80 [ 577.656875][T13627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 577.663218][T13627] RIP: 0023:0xf747a579 [ 577.667338][T13627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 577.686957][T13627] RSP: 002b:00000000f5d9357c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 577.695385][T13627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 577.703370][T13627] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.711353][T13627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.719356][T13627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.727359][T13627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.735375][T13627] [ 577.758133][T13627] Mem-Info: [ 577.762149][T13627] active_anon:5417 inactive_anon:0 isolated_anon:0 [ 577.762149][T13627] active_file:15859 inactive_file:3051 isolated_file:0 [ 577.762149][T13627] unevictable:0 dirty:582 writeback:0 [ 577.762149][T13627] slab_reclaimable:9308 slab_unreclaimable:105312 [ 577.762149][T13627] mapped:15586 shmem:1429 pagetables:681 [ 577.762149][T13627] sec_pagetables:0 bounce:0 [ 577.762149][T13627] kernel_misc_reclaimable:0 [ 577.762149][T13627] free:1387703 free_pcp:4492 free_cma:0 [ 577.813584][T13627] Node 0 active_anon:20132kB inactive_anon:0kB active_file:63248kB inactive_file:12200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62200kB dirty:2316kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10408kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no [ 577.852786][T13627] Node 1 active_anon:1536kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 577.890437][T13627] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.933214][T13627] lowmem_reserve[]: 0 2571 2571 0 0 [ 577.938863][T13627] Node 0 DMA32 free:1596544kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:20076kB inactive_anon:0kB active_file:63204kB inactive_file:11952kB unevictable:0kB writepending:2316kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:9252kB local_pcp:8812kB free_cma:0kB [ 577.991512][T13627] lowmem_reserve[]: 0 0 0 0 0 [ 578.018847][T13627] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:56kB inactive_anon:0kB active_file:44kB inactive_file:248kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 578.046522][T13627] lowmem_reserve[]: 0 0 0 0 0 [ 578.051325][T13627] Node 1 Normal free:3947684kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:188kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.094776][T13627] lowmem_reserve[]: 0 0 0 0 0 [ 578.100114][T13627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 578.116725][T13627] Node 0 DMA32: 288*4kB (UM) 593*8kB (UME) 772*16kB (UME) 606*32kB (UME) 200*64kB (UME) 55*128kB (UME) 24*256kB (UME) 20*512kB (UME) 6*1024kB (UME) 1*2048kB (M) 371*4096kB (M) = 1601672kB [ 578.169150][T13627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.209819][T13627] Node 1 Normal: 7*4kB (UM) 21*8kB (UM) 12*16kB (UM) 11*32kB (UM) 7*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (U) 3*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3947684kB [ 578.235480][T13627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.253970][T13627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.265185][T13627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.326237][T13627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.355272][T13627] 20337 total pagecache pages [ 578.361441][T13627] 0 pages in swap cache [ 578.365795][T13627] Free swap = 124548kB [ 578.372711][T13627] Total swap = 124996kB [ 578.382210][T13627] 2097051 pages RAM [ 578.432739][T13627] 0 pages HighMem/MovableOnly [ 578.438178][T13627] 400871 pages reserved [ 578.442385][T13627] 0 pages cma reserved [ 578.546265][T13664] syzkaller0: entered promiscuous mode [ 578.556384][T13664] syzkaller0: entered allmulticast mode [ 579.683363][T13685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2379'. [ 581.006307][ T5593] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 581.224735][ T5593] usb 1-1: config 0 has no interfaces? [ 581.230929][ T5593] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 581.249251][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.270008][ T5593] usb 1-1: config 0 descriptor?? [ 581.969801][ T25] usb 1-1: USB disconnect, device number 21 [ 584.153690][ T29] audit: type=1326 audit(1720478270.177:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.195688][ T29] audit: type=1326 audit(1720478270.227:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.217797][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.275372][ T29] audit: type=1326 audit(1720478270.227:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.315958][ T29] audit: type=1326 audit(1720478270.227:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.350771][T13685] Êüä^q: entered promiscuous mode [ 584.356819][ T29] audit: type=1326 audit(1720478270.227:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.382817][ T29] audit: type=1326 audit(1720478270.227:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.388241][T13700] netlink: 'syz.4.2383': attribute type 41 has an invalid length. [ 584.447000][ T29] audit: type=1326 audit(1720478270.237:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.535560][ T29] audit: type=1326 audit(1720478270.237:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.605590][T13738] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 584.635661][T13738] macsec1: entered promiscuous mode [ 584.653870][ T29] audit: type=1326 audit(1720478270.237:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.687430][T13738] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 584.707819][ T29] audit: type=1326 audit(1720478270.237:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x7ffc0000 [ 584.990269][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 585.106350][ T6483] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 585.200113][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 585.210046][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.258727][ T9] usb 4-1: config 0 descriptor?? [ 585.290283][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 585.307288][ T6483] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 585.387785][ T6483] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 5.86 [ 585.436156][ T6483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.466296][ T6483] usb 2-1: Product: syz [ 585.470573][ T6483] usb 2-1: Manufacturer: syz [ 585.475227][ T6483] usb 2-1: SerialNumber: syz [ 585.519185][ T6483] usb 2-1: config 0 descriptor?? [ 585.550861][ T6483] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 586.089350][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2408'. [ 586.113816][T13766] openvswitch: Êüä^q: Dropping previously announced user features [ 586.340007][ T9] gp8psk: usb in 128 operation failed. [ 586.362669][ T9] gp8psk: usb in 137 operation failed. [ 586.376232][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 586.396413][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 586.421183][ T9] usb 4-1: USB disconnect, device number 28 [ 586.831782][T13771] syzkaller0: entered promiscuous mode [ 586.847128][T13771] syzkaller0: entered allmulticast mode [ 587.166707][ T25] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 587.363978][ T25] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 587.373633][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.383073][ T25] usb 3-1: Product: syz [ 587.387912][ T25] usb 3-1: Manufacturer: syz [ 587.392656][ T25] usb 3-1: SerialNumber: syz [ 587.408696][ T25] usb 3-1: config 0 descriptor?? [ 587.457583][ T25] usb 3-1: selecting invalid altsetting 3 [ 587.466296][ T5592] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 587.478372][ T25] comedi comedi0: could not set alternate setting 3 in high speed [ 587.491258][ T25] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 587.519682][ T25] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 587.676732][ T25] usb 3-1: USB disconnect, device number 36 [ 587.696762][ T5592] usb 4-1: config 0 has no interfaces? [ 587.702337][ T5592] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 587.745175][ T5592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.764529][ T5592] usb 4-1: config 0 descriptor?? [ 588.342723][ T25] usb 4-1: USB disconnect, device number 29 [ 589.766610][T13782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2415'. [ 589.811543][ T9] usb 2-1: USB disconnect, device number 26 [ 589.831015][ T9] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 590.266294][ T6527] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 590.330143][T13806] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 590.352097][T13806] macsec1: entered promiscuous mode [ 590.375002][T13806] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 590.498678][ T6527] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=8b.30 [ 590.529768][ T6527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.567383][ T6527] usb 1-1: config 0 descriptor?? [ 590.907454][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 591.212752][T13819] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2429'. [ 591.253099][T13819] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 591.356471][T13824] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2431'. [ 591.369270][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.400238][T13824] Êüä^q: entered promiscuous mode [ 591.416806][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.716240][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 591.742572][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 591.742590][ T29] audit: type=1326 audit(1720478277.787:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13817 comm="syz.2.2428" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x0 [ 591.930077][ T6483] usb 1-1: USB disconnect, device number 22 [ 591.931082][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.983180][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.006415][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.046231][ T25] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 592.065629][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.098683][ T25] usb 2-1: config 0 descriptor?? [ 592.600292][ T25] acrux 0003:1A34:0802.0017: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 592.626171][ T25] acrux 0003:1A34:0802.0017: no inputs found [ 592.632254][ T25] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 593.037073][ T29] audit: type=1326 audit(1720478279.087:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.114558][ T29] audit: type=1326 audit(1720478279.087:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.142612][ T29] audit: type=1326 audit(1720478279.087:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.192738][ T29] audit: type=1326 audit(1720478279.087:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.228078][ T29] audit: type=1326 audit(1720478279.087:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.268940][ T29] audit: type=1326 audit(1720478279.087:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.322825][ T29] audit: type=1326 audit(1720478279.087:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.374748][T13860] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2443'. [ 593.375859][ T29] audit: type=1326 audit(1720478279.117:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 593.428875][T13860] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 593.489757][ T29] audit: type=1326 audit(1720478279.117:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 594.566447][ T58] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 594.649285][ T25] usb 2-1: USB disconnect, device number 27 [ 594.733538][T13889] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2454'. [ 594.768720][ T58] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 594.788344][T13889] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 594.796822][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.837531][ T58] usb 1-1: config 0 descriptor?? [ 594.846620][T13893] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 594.854231][T13893] macsec1: entered promiscuous mode [ 594.869793][ T58] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 594.881270][T13893] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 595.786856][ T58] gp8psk: usb in 128 operation failed. [ 595.806615][ T58] gp8psk: usb in 137 operation failed. [ 595.812159][ T58] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 595.833493][ T58] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 595.854427][ T58] usb 1-1: USB disconnect, device number 23 [ 595.940014][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 596.098780][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2468'. [ 596.162212][ T25] usb 4-1: config 0 has no interfaces? [ 596.167978][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 596.196240][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.232348][ T25] usb 4-1: config 0 descriptor?? [ 596.279184][T13929] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 596.286997][T13929] macsec1: entered promiscuous mode [ 596.304309][T13929] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 596.728580][T13942] syzkaller0: entered promiscuous mode [ 596.745678][T13942] syzkaller0: entered allmulticast mode [ 596.986721][ T58] usb 4-1: USB disconnect, device number 30 [ 597.657575][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b9e6c00: rx timeout, send abort [ 597.669089][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802b9e6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 598.632695][ T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 598.856207][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 598.878995][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.897250][ T9] usb 4-1: config 0 descriptor?? [ 598.912302][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 599.880397][ T9] gp8psk: usb in 128 operation failed. [ 599.897796][ T9] gp8psk: usb in 137 operation failed. [ 599.903328][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 599.930262][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 599.977238][ T9] usb 4-1: USB disconnect, device number 31 [ 600.381570][T13995] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2498' sets config #0 [ 600.922432][T14018] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 600.946383][T14018] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 601.234643][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880604b8800: rx timeout, send abort [ 601.243674][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880604b8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 601.642394][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 601.642417][ T29] audit: type=1326 audit(1720478287.687:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.2511" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747a579 code=0x0 [ 601.688188][ T931] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 601.898628][ T931] usb 2-1: Using ep0 maxpacket: 16 [ 601.913425][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 601.942566][ T931] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 601.986367][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.997058][ T931] usb 2-1: config 0 descriptor?? [ 602.287449][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2508'. [ 602.835007][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.880835][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.965249][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.072003][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.181151][ T931] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 603.206252][ T931] hid-generic 0003:0158:0100.0018: unexpected long global item [ 603.227089][ T931] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 603.781932][ T9] usb 2-1: USB disconnect, device number 28 [ 604.239060][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.478089][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.704743][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.906705][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.061596][ T4487] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.078508][ T4487] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.108726][ T4487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.137651][ T4487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.153375][ T4487] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 605.162733][ T4487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.191851][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.200369][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.213915][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.228922][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.245682][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 605.258717][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.343034][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.392999][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.400798][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.445981][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.453734][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.466586][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.474049][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.481669][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.494446][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.503071][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.510623][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.526206][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.544104][ T11] bridge_slave_1: left allmulticast mode [ 605.552560][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.566693][ T11] bridge_slave_1: left promiscuous mode [ 605.572650][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.580518][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.589236][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.607891][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.615354][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.646149][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.653655][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.665082][ T11] bridge_slave_0: left allmulticast mode [ 605.686138][ T11] bridge_slave_0: left promiscuous mode [ 605.691993][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.699812][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.717546][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.725007][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.766545][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.774020][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.797441][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.814799][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.841355][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.857135][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.864606][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.900033][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.932881][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.976648][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.984122][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 605.996354][ T5593] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 606.016843][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.038524][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.055548][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.072389][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.096583][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.104192][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.132884][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.166517][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.182706][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.222152][ T6483] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 606.231641][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.247138][ T6483] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 606.263829][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.324803][ T5593] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 606.342370][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.397625][ T5593] usb 4-1: config 0 descriptor?? [ 606.858032][ T5593] pantherlord 0003:0F30:0111.001A: item fetching failed at offset 6/7 [ 606.879210][ T5593] pantherlord 0003:0F30:0111.001A: parse failed [ 606.893874][ T5593] pantherlord 0003:0F30:0111.001A: probe with driver pantherlord failed with error -22 [ 607.092369][ T6527] usb 4-1: USB disconnect, device number 32 [ 607.099381][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.124066][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.146565][ T11] bond0 (unregistering): Released all slaves [ 607.246311][ T11] Êüä^q: left promiscuous mode [ 607.296772][ T4487] Bluetooth: hci0: command tx timeout [ 607.395935][T14180] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 607.882239][T14131] chnl_net:caif_netlink_parms(): no params data found [ 608.034657][ T11] hsr_slave_0: left promiscuous mode [ 608.051537][ T11] hsr_slave_1: left promiscuous mode [ 608.071813][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.090936][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.110815][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.130263][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.219411][ T11] veth1_macvtap: left promiscuous mode [ 608.233134][ T11] veth0_macvtap: left promiscuous mode [ 608.240321][ T11] veth1_vlan: left promiscuous mode [ 608.245281][T14219] netlink: 'syz.0.2578': attribute type 1 has an invalid length. [ 608.245774][ T11] veth0_vlan: left promiscuous mode [ 609.204290][ T11] team0 (unregistering): Port device team_slave_1 removed [ 609.352328][ T11] team0 (unregistering): Port device team_slave_0 removed [ 609.381794][ T4487] Bluetooth: hci0: command tx timeout [ 610.266439][ T931] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 610.454998][T14245] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 610.476042][T14245] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 610.498643][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.516246][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.524924][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.527540][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.545403][ T931] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 610.554832][ T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.567434][ T931] usb 1-1: config 0 descriptor?? [ 610.573030][T14131] bridge_slave_0: entered allmulticast mode [ 610.581351][T14131] bridge_slave_0: entered promiscuous mode [ 610.608177][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.615426][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.637023][T14131] bridge_slave_1: entered allmulticast mode [ 610.654487][T14131] bridge_slave_1: entered promiscuous mode [ 610.813952][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.843480][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.975906][T14131] team0: Port device team_slave_0 added [ 610.996720][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 611.010558][T14131] team0: Port device team_slave_1 added [ 611.038978][ T931] pantherlord 0003:0F30:0111.001B: item fetching failed at offset 6/7 [ 611.067011][ T931] pantherlord 0003:0F30:0111.001B: parse failed [ 611.086272][ T931] pantherlord 0003:0F30:0111.001B: probe with driver pantherlord failed with error -22 [ 611.145393][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.170228][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.214101][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.225518][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 611.256214][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.268710][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.275697][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.307693][ T9] usb 4-1: config 0 descriptor?? [ 611.324670][ T9] cp210x 4-1:0.0: cp210x converter detected [ 611.374677][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.456585][ T5593] usb 1-1: USB disconnect, device number 24 [ 611.468104][ T4487] Bluetooth: hci0: command tx timeout [ 611.667798][T14131] hsr_slave_0: entered promiscuous mode [ 611.682258][T14131] hsr_slave_1: entered promiscuous mode [ 611.737957][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 611.766945][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 612.017238][ T5593] usb 4-1: USB disconnect, device number 33 [ 612.039797][ T5593] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 612.106410][ T5593] cp210x 4-1:0.0: device disconnected [ 612.950054][T14131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.987584][T14131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.017921][T14131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.047578][T14131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.417976][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.472712][T14331] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 613.495394][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.536346][ T4487] Bluetooth: hci0: command tx timeout [ 613.560476][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.567739][ T5589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.619288][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.626571][ T5589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.760907][T14131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.881299][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.125852][T14131] veth0_vlan: entered promiscuous mode [ 614.192293][T14131] veth1_vlan: entered promiscuous mode [ 614.281353][T14131] veth0_macvtap: entered promiscuous mode [ 614.299224][ T5589] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 614.333189][T14131] veth1_macvtap: entered promiscuous mode [ 614.384398][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.404659][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.424492][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.471268][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.490655][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.508331][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.528714][ T5589] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 614.553069][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.566197][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.591396][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.602426][ T5589] usb 1-1: config 0 descriptor?? [ 614.624255][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.627816][ T5589] cp210x 1-1:0.0: cp210x converter detected [ 614.681840][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.709921][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.768692][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.828844][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.855868][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.880474][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.898640][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.937521][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.979723][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.015567][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.027286][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.061485][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.067007][ T5589] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 615.088406][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.123859][T14131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.153139][T14131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.189030][ T5589] usb 1-1: cp210x converter now attached to ttyUSB0 [ 615.190420][T14131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.284261][T14131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.459784][ T931] usb 1-1: USB disconnect, device number 25 [ 615.587618][ T931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.608594][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 615.648595][ T931] cp210x 1-1:0.0: device disconnected [ 615.735717][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.766659][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.919182][T11052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.943633][T11052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.575581][T14419] netlink: 'syz.3.2631': attribute type 9 has an invalid length. [ 616.614472][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 616.830526][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 616.882745][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 617.025009][T14437] team_slave_0: entered promiscuous mode [ 617.031291][T14437] team_slave_1: entered promiscuous mode [ 617.056786][T14437] macsec1: entered allmulticast mode [ 617.063046][T14437] team0: entered allmulticast mode [ 617.072863][T14437] team_slave_0: entered allmulticast mode [ 617.087887][T14437] team_slave_1: entered allmulticast mode [ 617.102381][T14437] team0: left allmulticast mode [ 617.108207][T14437] team_slave_0: left allmulticast mode [ 617.113885][T14437] team_slave_1: left allmulticast mode [ 617.120969][T14437] team_slave_0: left promiscuous mode [ 617.126650][T14437] team_slave_1: left promiscuous mode [ 617.502939][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 617.545875][ T29] audit: type=1326 audit(1720478303.587:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.557002][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 617.639574][ T29] audit: type=1326 audit(1720478303.587:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.676343][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 617.744275][ T29] audit: type=1326 audit(1720478303.587:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.840665][ T29] audit: type=1326 audit(1720478303.587:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.896279][ T29] audit: type=1326 audit(1720478303.587:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.976859][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 617.984996][ T29] audit: type=1326 audit(1720478303.587:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.985058][ T29] audit: type=1326 audit(1720478303.587:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.985110][ T29] audit: type=1326 audit(1720478303.587:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.985160][ T29] audit: type=1326 audit(1720478303.587:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 617.985208][ T29] audit: type=1326 audit(1720478303.587:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x7fc00000 [ 618.160573][T14479] macvlan1: entered promiscuous mode [ 618.181098][T14478] macvlan1: left promiscuous mode [ 618.528420][T14491] team_slave_0: entered promiscuous mode [ 618.534169][T14491] team_slave_1: entered promiscuous mode [ 618.553801][T14491] macsec1: entered allmulticast mode [ 618.561886][T14491] team0: entered allmulticast mode [ 618.572472][T14491] team_slave_0: entered allmulticast mode [ 618.581159][T14491] team_slave_1: entered allmulticast mode [ 618.609723][T14491] team0: left allmulticast mode [ 618.614660][T14491] team_slave_0: left allmulticast mode [ 618.653149][T14491] team_slave_1: left allmulticast mode [ 618.685538][T14491] team_slave_0: left promiscuous mode [ 618.691133][T14491] team_slave_1: left promiscuous mode [ 618.837833][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 618.864810][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 618.897183][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 618.976456][ T6527] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 619.148771][T14521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2659'. [ 619.186176][ T6527] usb 4-1: Using ep0 maxpacket: 8 [ 619.215566][ T6527] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.235179][ T6527] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.247249][ T6527] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.266123][ T6527] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.287203][ T6527] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.300507][ T6527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.466369][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 619.535211][ T6527] usb 4-1: GET_CAPABILITIES returned 0 [ 619.542303][ T6527] usbtmc 4-1:16.0: can't read capabilities [ 619.652301][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 619.665455][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 619.675850][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 619.689221][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.700141][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.712150][ T25] usb 2-1: config 0 descriptor?? [ 619.792326][T14507] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 619.823855][ T6527] usb 4-1: USB disconnect, device number 34 [ 620.163260][ T25] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 620.196878][ T25] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 620.219898][ T25] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 620.569915][T14551] team_slave_0: entered promiscuous mode [ 620.575673][T14551] team_slave_1: entered promiscuous mode [ 620.596223][T14551] macsec1: entered allmulticast mode [ 620.601590][T14551] team0: entered allmulticast mode [ 620.623685][T14551] team_slave_0: entered allmulticast mode [ 620.634350][ T25] usb 2-1: USB disconnect, device number 29 [ 620.638771][T14551] team_slave_1: entered allmulticast mode [ 620.680078][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 620.691992][T14551] team0: left allmulticast mode [ 620.714265][T14551] team_slave_0: left allmulticast mode [ 620.715179][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 620.744618][T14551] team_slave_1: left allmulticast mode [ 620.762746][T14551] team_slave_0: left promiscuous mode [ 620.769597][T14551] team_slave_1: left promiscuous mode [ 620.965212][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'. [ 622.000169][T14596] team_slave_0: entered promiscuous mode [ 622.000287][T14596] team_slave_1: entered promiscuous mode [ 622.000388][T14596] macsec1: entered allmulticast mode [ 622.000405][T14596] team0: entered allmulticast mode [ 622.000420][T14596] team_slave_0: entered allmulticast mode [ 622.000437][T14596] team_slave_1: entered allmulticast mode [ 622.034859][T14596] team0: left allmulticast mode [ 622.034883][T14596] team_slave_0: left allmulticast mode [ 622.034896][T14596] team_slave_1: left allmulticast mode [ 622.034937][T14596] team_slave_0: left promiscuous mode [ 622.034985][T14596] team_slave_1: left promiscuous mode [ 622.352812][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 622.372985][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 622.954677][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 622.986431][ T58] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 623.033234][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 623.033254][ T29] audit: type=1326 audit(1720478309.077:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz.3.2697" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7452579 code=0x0 [ 623.190680][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 623.211793][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 623.241002][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.266919][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.279769][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.302706][ T58] usb 2-1: config 0 descriptor?? [ 623.679117][ T6527] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 623.753680][ T58] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 623.772822][ T58] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 623.805444][ T58] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 623.867004][ T6527] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 623.894576][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.924313][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.966164][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 623.977666][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.007890][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.038839][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.060300][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.073460][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 624.082507][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.082548][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.111208][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.148695][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.171549][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 624.184557][ T58] usb 2-1: USB disconnect, device number 30 [ 624.234852][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.281582][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.302807][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.337467][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.355177][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.364301][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.406223][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.414268][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.428692][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.453182][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.468526][ T6527] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.480356][ T6527] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.492749][ T6527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.502740][ T6527] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 624.519760][ T6527] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 624.542042][ T6527] usb 3-1: Product: syz [ 624.555709][ T6527] usb 3-1: Manufacturer: syz [ 624.580480][ T6527] usb 3-1: SerialNumber: syz [ 624.604288][ T6527] usb 3-1: config 0 descriptor?? [ 624.626856][ T6527] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 624.739480][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.745964][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.034894][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 625.037061][ T58] usb 3-1: USB disconnect, device number 37 [ 625.089478][ T58] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 625.168324][T14663] ALSA: seq fatal error: cannot create timer (-22) [ 625.618796][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 625.643892][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 625.710738][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2718'. [ 626.172282][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'. [ 626.211617][ T29] audit: type=1326 audit(1720478312.257:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14692 comm="syz.1.2724" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a8579 code=0x0 [ 627.133288][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 627.199666][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 627.436193][ T5592] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 627.557802][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'. [ 627.603883][ T29] audit: type=1326 audit(1720478313.637:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.2.2741" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a7579 code=0x0 [ 627.666216][ T5592] usb 2-1: Using ep0 maxpacket: 8 [ 627.677571][ T5592] usb 2-1: config 0 has an invalid interface number: 37 but max is 2 [ 627.700960][ T5592] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 627.716293][ T5592] usb 2-1: config 0 has no interface number 1 [ 627.727995][ T5592] usb 2-1: too many endpoints for config 0 interface 0 altsetting 152: 165, using maximum allowed: 30 [ 627.739862][ T5592] usb 2-1: config 0 interface 0 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 627.773484][ T5592] usb 2-1: config 0 interface 0 has no altsetting 0 [ 627.796040][ T5592] usb 2-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=be.0e [ 627.816228][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.839239][ T5592] usb 2-1: Product: syz [ 627.852632][ T5592] usb 2-1: Manufacturer: syz [ 627.870292][ T5592] usb 2-1: SerialNumber: syz [ 627.884972][ T5592] usb 2-1: config 0 descriptor?? [ 627.939821][ T29] audit: type=1326 audit(1720478313.987:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.2739" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x0 [ 628.135546][ T5592] kaweth 2-1:0.37: Firmware present in device. [ 628.328179][ T5592] kaweth 2-1:0.37: Error reading configuration (-71), no net device created [ 628.349791][ T5592] kaweth 2-1:0.37: probe with driver kaweth failed with error -5 [ 628.423175][ T5592] kaweth 2-1:0.0: Firmware present in device. [ 628.446601][ T5592] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 628.465690][ T5592] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 628.487849][ T5592] usb 2-1: USB disconnect, device number 31 [ 629.260649][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2750'. [ 629.499070][T14773] program syz.2.2755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.656212][ T5592] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 629.858886][ T5592] usb 2-1: Using ep0 maxpacket: 16 [ 629.880908][ T5592] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 629.913731][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.922200][ T5592] usb 2-1: Product: syz [ 629.932345][ T5592] usb 2-1: Manufacturer: syz [ 629.952620][ T5592] usb 2-1: SerialNumber: syz [ 629.967311][ T5592] usb 2-1: config 0 descriptor?? [ 630.212385][ T5592] usb 2-1: Cannot retrieve CPort count: -71 [ 630.226202][ T5592] usb 2-1: Cannot retrieve CPort count: -71 [ 630.236757][ T5592] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 630.260734][ T5592] usb 2-1: USB disconnect, device number 32 [ 630.423327][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2766'. [ 630.438253][ T6527] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 630.636211][ T6527] usb 3-1: Using ep0 maxpacket: 8 [ 630.650980][ T6527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.663834][ T6527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 630.687159][ T6527] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 630.727628][ T6527] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 630.762922][ T6527] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 630.791489][ T6527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.824208][ T6527] hub 3-1:1.0: bad descriptor, ignoring hub [ 630.856315][ T6527] hub 3-1:1.0: probe with driver hub failed with error -5 [ 630.893279][ T6527] cdc_wdm 3-1:1.0: skipping garbage [ 630.902994][ T6527] cdc_wdm 3-1:1.0: skipping garbage [ 630.912610][ T6527] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 630.918982][ T6527] cdc_wdm 3-1:1.0: Unknown control protocol [ 631.434678][T14834] ALSA: seq fatal error: cannot create timer (-22) [ 631.982226][T14790] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 632.022081][T14850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.663034][T14864] program syz.3.2790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.848875][ T5592] usb 3-1: USB disconnect, device number 38 [ 633.123654][T14881] gtp0: entered promiscuous mode [ 633.406539][ T931] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 633.618302][ T931] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 633.634092][ T931] usb 4-1: config 179 has no interface number 0 [ 633.671250][ T931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 633.702960][ T931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 633.737197][ T931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 633.775683][ T931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 633.794072][ T931] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 633.820430][ T931] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 633.839055][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.884667][T14881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.897091][T14881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.956296][ C0] ------------[ cut here ]------------ [ 633.962479][ C0] WARNING: CPU: 0 PID: 14917 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 633.971582][ C0] Modules linked in: [ 633.975501][ C0] CPU: 0 PID: 14917 Comm: syz.2.2813 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 633.985666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 633.995757][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 634.001503][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 634.021127][ C0] RSP: 0018:ffffc900000063d0 EFLAGS: 00010002 [ 634.027215][ C0] RAX: 0000000080010303 RBX: ffff88802a985a00 RCX: 0000000000000002 [ 634.035196][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 634.043183][ C0] RBP: 0100000000000004 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 634.051167][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 634.059169][ C0] R13: ffff88802cdff200 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 634.067179][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0063) knlGS:00000000f5cc0b40 [ 634.076140][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 634.082746][ C0] CR2: 000000000c2f237d CR3: 000000007b2ce000 CR4: 00000000003506f0 [ 634.090733][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.098726][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 634.106711][ C0] Call Trace: [ 634.110002][ C0] [ 634.112859][ C0] ? __warn+0x163/0x4e0 [ 634.117041][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 634.122181][ C0] ? report_bug+0x2b3/0x500 [ 634.126719][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 634.131848][ C0] ? handle_bug+0x3e/0x70 [ 634.136222][ C0] ? exc_invalid_op+0x1a/0x50 [ 634.140921][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 634.145966][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 634.151013][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 634.156142][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 634.161021][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 634.166766][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 634.172163][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 634.178092][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 634.183582][ C0] dummy_timer+0x830/0x45d0 [ 634.188107][ C0] ? __pfx_lock_release+0x10/0x10 [ 634.193160][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.199507][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 634.204905][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 634.210134][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 634.215090][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 634.220042][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 634.225263][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 634.231275][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 634.237022][ C0] hrtimer_interrupt+0x396/0x990 [ 634.241998][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 634.248004][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 634.253661][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.259685][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 634.265116][ C0] Code: e8 5b af 09 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd e0 a9 db 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 2c 88 7f 00 48 c7 c3 c8 7c 03 00 49 03 1e 48 89 [ 634.284769][ C0] RSP: 0018:ffffc90000006b68 EFLAGS: 00000246 [ 634.290897][ C0] RAX: 1ffffffff1bb753c RBX: 0000000000000000 RCX: dffffc0000000000 [ 634.298986][ C0] RDX: ffff88802a985a00 RSI: ffffffff8c1fe960 RDI: ffffffff8c1fe920 [ 634.306979][ C0] RBP: 0000000000000001 R08: ffffffff8100b50d R09: ffffffff8141095f [ 634.315069][ C0] R10: 0000000000000003 R11: ffff88802a985a00 R12: ffff88802a985a00 [ 634.323092][ C0] R13: ffffffff8181dd90 R14: ffffffff8ddba9e0 R15: dffffc0000000000 [ 634.331153][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.337354][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 634.342671][ C0] ? in_gate_area_no_mm+0x3d/0x60 [ 634.347835][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.352640][ C0] kernel_text_address+0x82/0xe0 [ 634.357632][ C0] __kernel_text_address+0xd/0x40 [ 634.362713][ C0] unwind_get_return_address+0x5d/0xc0 [ 634.368252][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.374821][ C0] arch_stack_walk+0x125/0x1b0 [ 634.379641][ C0] stack_trace_save+0x118/0x1d0 [ 634.384546][ C0] ? kernel_text_address+0xa7/0xe0 [ 634.389723][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 634.395149][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.401707][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 634.406703][ C0] kasan_save_track+0x3f/0x80 [ 634.411409][ C0] ? kasan_save_track+0x3f/0x80 [ 634.416285][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 634.421089][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 634.426158][ C0] ? __cfg80211_bss_update+0x1a1/0x20c0 [ 634.431766][ C0] ? cfg80211_inform_single_bss_data+0xfd6/0x2360 [ 634.438212][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 634.444076][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 634.450405][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 634.456275][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 634.461582][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 634.466929][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 634.472070][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 634.478247][ C0] ? tasklet_action_common+0x321/0x4d0 [ 634.483742][ C0] ? handle_softirqs+0x2c4/0x970 [ 634.488695][ C0] ? do_softirq+0x11b/0x1e0 [ 634.493222][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 634.498611][ C0] ? ieee80211_tx_skb_tid+0x264/0x420 [ 634.504018][ C0] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 634.509335][ C0] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 634.514897][ C0] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 634.519934][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 634.524633][ C0] ? netlink_rcv_skb+0x1e3/0x430 [ 634.529591][ C0] ? genl_rcv+0x28/0x40 [ 634.533756][ C0] ? netlink_unicast+0x7ea/0x980 [ 634.538742][ C0] ? netlink_sendmsg+0x8db/0xcb0 [ 634.543699][ C0] ? __sock_sendmsg+0x221/0x270 [ 634.548573][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 634.553612][ C0] ? __sys_sendmsg+0x2b0/0x3a0 [ 634.558398][ C0] ? __do_fast_syscall_32+0xb4/0x120 [ 634.563732][ C0] ? do_fast_syscall_32+0x34/0x80 [ 634.568779][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.575428][ C0] __kasan_kmalloc+0x98/0xb0 [ 634.580043][ C0] ? __cfg80211_bss_update+0x1a1/0x20c0 [ 634.585628][ C0] __kmalloc_noprof+0x1f9/0x400 [ 634.590522][ C0] __cfg80211_bss_update+0x1a1/0x20c0 [ 634.595914][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 634.600974][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 634.606811][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 634.612295][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 634.618821][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 634.625281][ C0] ? cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 634.631721][ C0] cfg80211_inform_single_bss_data+0xfd6/0x2360 [ 634.638170][ C0] ? __pfx_lock_release+0x10/0x10 [ 634.643302][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 634.650017][ C0] ? __pfx_validate_chain+0x10/0x10 [ 634.655413][ C0] ? kernel_text_address+0xa7/0xe0 [ 634.660554][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 634.666385][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 634.672087][ C0] ? __pfx_validate_chain+0x10/0x10 [ 634.677322][ C0] ? validate_chain+0x11e/0x5900 [ 634.682410][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 634.688495][ C0] ? __pfx_validate_chain+0x10/0x10 [ 634.693715][ C0] ? mark_lock+0x9a/0x350 [ 634.698152][ C0] ? mark_lock+0x9a/0x350 [ 634.702587][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 634.707658][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 634.712721][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 634.718558][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 634.724657][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 634.730612][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 634.736274][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 634.742734][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 634.749093][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 634.755013][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 634.759982][ C0] ieee80211_rx_list+0x2b00/0x3780 [ 634.765136][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 634.770222][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 634.775734][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 634.780796][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 634.787065][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 634.793514][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 634.798565][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 634.803615][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.809962][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 634.815449][ C0] ? skb_dequeue+0x113/0x150 [ 634.820340][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 634.826349][ C0] tasklet_action_common+0x321/0x4d0 [ 634.831746][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 634.837663][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 634.844014][ C0] ? workqueue_softirq_action+0xca/0x140 [ 634.849666][ C0] handle_softirqs+0x2c4/0x970 [ 634.854450][ C0] ? do_softirq+0x11b/0x1e0 [ 634.858987][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 634.864294][ C0] do_softirq+0x11b/0x1e0 [ 634.868643][ C0] [ 634.871579][ C0] [ 634.874541][ C0] ? __pfx_do_softirq+0x10/0x10 [ 634.879410][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 634.885061][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.889867][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 634.895083][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 634.899953][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 634.905950][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 634.911688][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 634.917693][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 634.922999][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 634.928225][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 634.933541][ C0] ieee80211_mgmt_tx+0x1b46/0x2170 [ 634.938680][ C0] ? trace_kmalloc+0x1f/0xd0 [ 634.943300][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 634.948553][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 634.953963][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 634.958844][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 634.964149][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 634.969477][ C0] genl_rcv_msg+0xb14/0xec0 [ 634.974015][ C0] ? mark_lock+0x9a/0x350 [ 634.978381][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.983651][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 634.988781][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 634.994205][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 634.999507][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 635.004990][ C0] ? __pfx___might_resched+0x10/0x10 [ 635.010302][ C0] netlink_rcv_skb+0x1e3/0x430 [ 635.015088][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.020133][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.025446][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 635.030934][ C0] genl_rcv+0x28/0x40 [ 635.034929][ C0] netlink_unicast+0x7ea/0x980 [ 635.039718][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 635.045113][ C0] ? __virt_addr_valid+0x183/0x520 [ 635.050252][ C0] ? __check_object_size+0x49c/0x900 [ 635.055580][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 635.060723][ C0] netlink_sendmsg+0x8db/0xcb0 [ 635.065714][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.071035][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 635.076002][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 635.081299][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 635.086780][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.092107][ C0] __sock_sendmsg+0x221/0x270 [ 635.096840][ C0] ____sys_sendmsg+0x525/0x7d0 [ 635.101733][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.107057][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 635.111670][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 635.116843][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 635.123468][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 635.128695][ C0] __do_fast_syscall_32+0xb4/0x120 [ 635.133839][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.140027][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 635.145474][ C0] do_fast_syscall_32+0x34/0x80 [ 635.150382][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.156752][ C0] RIP: 0023:0xf73a7579 [ 635.160842][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 635.180561][ C0] RSP: 002b:00000000f5cc057c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 635.188996][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000200 [ 635.196981][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.204980][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.212974][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 635.220991][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.229017][ C0] [ 635.232057][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 635.239439][ C0] CPU: 0 PID: 14917 Comm: syz.2.2813 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 635.249604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 635.259783][ C0] Call Trace: [ 635.263078][ C0] [ 635.265992][ C0] dump_stack_lvl+0x241/0x360 [ 635.270707][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.275928][ C0] ? __pfx__printk+0x10/0x10 [ 635.280650][ C0] ? _printk+0xd5/0x120 [ 635.284853][ C0] ? vscnprintf+0x5d/0x90 [ 635.289283][ C0] panic+0x349/0x860 [ 635.293375][ C0] ? __warn+0x172/0x4e0 [ 635.297556][ C0] ? __pfx_panic+0x10/0x10 [ 635.301991][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 635.307316][ C0] __warn+0x346/0x4e0 [ 635.311318][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 635.316446][ C0] report_bug+0x2b3/0x500 [ 635.320795][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 635.325935][ C0] handle_bug+0x3e/0x70 [ 635.330113][ C0] exc_invalid_op+0x1a/0x50 [ 635.334645][ C0] asm_exc_invalid_op+0x1a/0x20 [ 635.339782][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 635.345519][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 635.365147][ C0] RSP: 0018:ffffc900000063d0 EFLAGS: 00010002 [ 635.371233][ C0] RAX: 0000000080010303 RBX: ffff88802a985a00 RCX: 0000000000000002 [ 635.379224][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 635.387209][ C0] RBP: 0100000000000004 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 635.395390][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 635.403376][ C0] R13: ffff88802cdff200 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 635.411366][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 635.416514][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 635.421383][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 635.427134][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 635.432527][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 635.438452][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 635.443683][ C0] dummy_timer+0x830/0x45d0 [ 635.448222][ C0] ? __pfx_lock_release+0x10/0x10 [ 635.453284][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 635.459647][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 635.465138][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 635.470391][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 635.475348][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 635.480319][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 635.485539][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 635.491547][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 635.497386][ C0] hrtimer_interrupt+0x396/0x990 [ 635.502364][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 635.508367][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 635.514020][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.520053][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 635.525446][ C0] Code: e8 5b af 09 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd e0 a9 db 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 2c 88 7f 00 48 c7 c3 c8 7c 03 00 49 03 1e 48 89 [ 635.545181][ C0] RSP: 0018:ffffc90000006b68 EFLAGS: 00000246 [ 635.551267][ C0] RAX: 1ffffffff1bb753c RBX: 0000000000000000 RCX: dffffc0000000000 [ 635.559344][ C0] RDX: ffff88802a985a00 RSI: ffffffff8c1fe960 RDI: ffffffff8c1fe920 [ 635.567354][ C0] RBP: 0000000000000001 R08: ffffffff8100b50d R09: ffffffff8141095f [ 635.575426][ C0] R10: 0000000000000003 R11: ffff88802a985a00 R12: ffff88802a985a00 [ 635.583493][ C0] R13: ffffffff8181dd90 R14: ffffffff8ddba9e0 R15: dffffc0000000000 [ 635.591481][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 635.597688][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 635.603081][ C0] ? in_gate_area_no_mm+0x3d/0x60 [ 635.608220][ C0] ? rcu_is_watching+0x15/0xb0 [ 635.613002][ C0] kernel_text_address+0x82/0xe0 [ 635.618051][ C0] __kernel_text_address+0xd/0x40 [ 635.623106][ C0] unwind_get_return_address+0x5d/0xc0 [ 635.628593][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.635112][ C0] arch_stack_walk+0x125/0x1b0 [ 635.639915][ C0] stack_trace_save+0x118/0x1d0 [ 635.644787][ C0] ? kernel_text_address+0xa7/0xe0 [ 635.649919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 635.655328][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.661847][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 635.666816][ C0] kasan_save_track+0x3f/0x80 [ 635.671508][ C0] ? kasan_save_track+0x3f/0x80 [ 635.676372][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 635.681155][ C0] ? __kmalloc_noprof+0x1f9/0x400 [ 635.686203][ C0] ? __cfg80211_bss_update+0x1a1/0x20c0 [ 635.691764][ C0] ? cfg80211_inform_single_bss_data+0xfd6/0x2360 [ 635.698201][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 635.704022][ C0] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 635.710278][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 635.716118][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 635.721281][ C0] ? ieee80211_rx_list+0x2b00/0x3780 [ 635.726704][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 635.731832][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 635.738000][ C0] ? tasklet_action_common+0x321/0x4d0 [ 635.743472][ C0] ? handle_softirqs+0x2c4/0x970 [ 635.748420][ C0] ? do_softirq+0x11b/0x1e0 [ 635.752940][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 635.758328][ C0] ? ieee80211_tx_skb_tid+0x264/0x420 [ 635.763713][ C0] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 635.769019][ C0] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 635.774575][ C0] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 635.779609][ C0] ? genl_rcv_msg+0xb14/0xec0 [ 635.784294][ C0] ? netlink_rcv_skb+0x1e3/0x430 [ 635.789246][ C0] ? genl_rcv+0x28/0x40 [ 635.793421][ C0] ? netlink_unicast+0x7ea/0x980 [ 635.798382][ C0] ? netlink_sendmsg+0x8db/0xcb0 [ 635.803337][ C0] ? __sock_sendmsg+0x221/0x270 [ 635.808213][ C0] ? ____sys_sendmsg+0x525/0x7d0 [ 635.813167][ C0] ? __sys_sendmsg+0x2b0/0x3a0 [ 635.817954][ C0] ? __do_fast_syscall_32+0xb4/0x120 [ 635.823259][ C0] ? do_fast_syscall_32+0x34/0x80 [ 635.828306][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.834846][ C0] __kasan_kmalloc+0x98/0xb0 [ 635.839472][ C0] ? __cfg80211_bss_update+0x1a1/0x20c0 [ 635.845295][ C0] __kmalloc_noprof+0x1f9/0x400 [ 635.850199][ C0] __cfg80211_bss_update+0x1a1/0x20c0 [ 635.855677][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 635.860726][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 635.866552][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 635.872201][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 635.878634][ C0] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 635.885082][ C0] ? cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 635.891534][ C0] cfg80211_inform_single_bss_data+0xfd6/0x2360 [ 635.898061][ C0] ? __pfx_lock_release+0x10/0x10 [ 635.903363][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 635.910074][ C0] ? __pfx_validate_chain+0x10/0x10 [ 635.915287][ C0] ? kernel_text_address+0xa7/0xe0 [ 635.920420][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 635.926420][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 635.932116][ C0] ? __pfx_validate_chain+0x10/0x10 [ 635.937806][ C0] ? validate_chain+0x11e/0x5900 [ 635.942866][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 635.948946][ C0] ? __pfx_validate_chain+0x10/0x10 [ 635.954161][ C0] ? mark_lock+0x9a/0x350 [ 635.958510][ C0] ? mark_lock+0x9a/0x350 [ 635.962856][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 635.967915][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 635.972963][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 635.978795][ C0] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 635.984888][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 635.990712][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 635.996370][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 636.002555][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.008902][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 636.014742][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 636.019710][ C0] ieee80211_rx_list+0x2b00/0x3780 [ 636.024841][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 636.029890][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 636.035376][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 636.040445][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 636.046440][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.052814][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 636.057885][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 636.062861][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 636.069213][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 636.074723][ C0] ? skb_dequeue+0x113/0x150 [ 636.079343][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 636.085352][ C0] tasklet_action_common+0x321/0x4d0 [ 636.090660][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 636.096480][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.102825][ C0] ? workqueue_softirq_action+0xca/0x140 [ 636.108473][ C0] handle_softirqs+0x2c4/0x970 [ 636.113264][ C0] ? do_softirq+0x11b/0x1e0 [ 636.117803][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 636.123153][ C0] do_softirq+0x11b/0x1e0 [ 636.127508][ C0] [ 636.130451][ C0] [ 636.133391][ C0] ? __pfx_do_softirq+0x10/0x10 [ 636.138252][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 636.143929][ C0] ? rcu_is_watching+0x15/0xb0 [ 636.148825][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 636.154075][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 636.158958][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 636.164968][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 636.170728][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 636.176732][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 636.182039][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 636.187256][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 636.192567][ C0] ieee80211_mgmt_tx+0x1b46/0x2170 [ 636.197704][ C0] ? trace_kmalloc+0x1f/0xd0 [ 636.202331][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 636.207556][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 636.212965][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 636.217847][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 636.223152][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 636.228502][ C0] genl_rcv_msg+0xb14/0xec0 [ 636.233020][ C0] ? mark_lock+0x9a/0x350 [ 636.237395][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.242476][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 636.247539][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 636.252954][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 636.258258][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 636.263745][ C0] ? __pfx___might_resched+0x10/0x10 [ 636.269060][ C0] netlink_rcv_skb+0x1e3/0x430 [ 636.273869][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.278913][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.284239][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 636.289753][ C0] genl_rcv+0x28/0x40 [ 636.293744][ C0] netlink_unicast+0x7ea/0x980 [ 636.298530][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 636.303832][ C0] ? __virt_addr_valid+0x183/0x520 [ 636.308997][ C0] ? __check_object_size+0x49c/0x900 [ 636.314329][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 636.319488][ C0] netlink_sendmsg+0x8db/0xcb0 [ 636.324311][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.329623][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 636.334634][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.339946][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 636.345452][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.350771][ C0] __sock_sendmsg+0x221/0x270 [ 636.355583][ C0] ____sys_sendmsg+0x525/0x7d0 [ 636.360381][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.365707][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 636.370317][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.375483][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 636.382094][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 636.387335][ C0] __do_fast_syscall_32+0xb4/0x120 [ 636.392479][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.398661][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 636.403884][ C0] do_fast_syscall_32+0x34/0x80 [ 636.408787][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 636.415129][ C0] RIP: 0023:0xf73a7579 [ 636.419208][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 636.438832][ C0] RSP: 002b:00000000f5cc057c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 636.447266][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000200 [ 636.455269][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.463271][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.471254][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 636.479256][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.487253][ C0] [ 636.490568][ C0] Kernel Offset: disabled [ 636.495005][ C0] Rebooting in 86400 seconds..