last executing test programs: 11.462383963s ago: executing program 1 (id=6632): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 11.406662938s ago: executing program 1 (id=6633): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="193513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 11.269215222s ago: executing program 1 (id=6634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.087693924s ago: executing program 1 (id=6645): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r0) lsetxattr$security_capability(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0) 9.925546011s ago: executing program 1 (id=6648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) accept(0xffffffffffffffff, 0x0, 0x0) 9.723298834s ago: executing program 1 (id=6649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x180}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @remote}], 0x20) sendmmsg$inet6(r3, &(0x7f0000005000)=[{{&(0x7f0000002680)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f00000036c0)=[{&(0x7f00000026c0)="c7", 0x1}], 0x1}}], 0x1, 0x24040040) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003600), 0xffffffffffffffff) move_pages(0x0, 0x1ffffffffffffd15, &(0x7f0000000040), 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003640)={0x44, r6, 0xdad7910243f6aa75, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x19000041}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r7, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x7b}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="080026006c09000018007000040005000a0018000303030303030000"], 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xec, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4c091) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000480)) ioctl$TIOCMBIC(r11, 0x5417, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09000000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x64}}, 0x0) bind$tipc(r4, &(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x2}}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000440)='wg0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 4.880070777s ago: executing program 0 (id=6679): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000100)) 4.751298069s ago: executing program 3 (id=6680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'wp384-generic\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba10491b3d4662ff5e935cd3d77fe76955f9bd9be41ea3fb9304c929450000000000", 0x2c}) 4.679857281s ago: executing program 0 (id=6681): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x49, "789b8c93dc0f74d133f22aa3114ccb886d7945e7fc64dd9988b69d9f4936a483a6c6caa53304531e7269bc90ba92a1ae7c15da48376cf456b11e18272e31b545e7a71f1df543417089"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.575252222s ago: executing program 3 (id=6682): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_getres(0x0, 0x0) 3.433736166s ago: executing program 3 (id=6685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, r2, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x5e97}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)=':', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='`'], 0x60}}, {{&(0x7f0000001240)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002580)=ANY=[], 0x87}}], 0x2, 0xc0) syz_emit_ethernet(0x6e, &(0x7f0000006600)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x38, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}, @eol, @window={0x3, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) 3.199342195s ago: executing program 3 (id=6686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000040)={@my=0x1, 0xfffffffc}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000180)={@hyper}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x84, &(0x7f00000005c0)={0x0, 0x88, "ac65c47dd3a90e8795853fab5d7e244502f7b8436da41d8d0791a45b695aba20a5fb767d9d88b4d97f5558828e631212c4dc041f649a6d72d3cc2abcbda362da552c350755b3b8039fa1dbff3f529a6daf093cd5177c148fa7079afc0f1309dc9eeb4f0a37ab18f58153e96ba13bc1bd9584c9f690a9d3687afff5bb7e40911740d7126f64d6d6bd"}, &(0x7f00000002c0)=0x90) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xf6b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x356, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7558, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1041, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x1, 0x400}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0xee33) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64=r7, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x20008090) madvise(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000984000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00001fa000/0x4000)=nil) 2.877960456s ago: executing program 4 (id=6687): prctl$PR_SCHED_CORE(0x26, 0x0, 0x0, 0x0, 0x0) 2.842251678s ago: executing program 0 (id=6688): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) fsync(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r2, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0x0, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x0, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 2.68107859s ago: executing program 4 (id=6689): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa020290780000000060000810000011000000000011a3db97000000000000ffff00000000fc0200000000000000000000000000000000000000000000052f000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000002f907864010101ac1414aa800090781200183f2500000000000000000000007f0000017f0000019df9b7e5a8564ff1fc28218ab24dd867c19708909d2f57da9cb264023516389764f6dc081574348633a2c4fea02ce7f7dbe12c06a2f285c095e9a8de61ace4bd216bb2bd9176dc842cc99225c410f52d0b72e41894b90605782ce6e2f322698c699c56303ed4a6f6ba6f28f2aceb1bd691f038e9c39098de2c85b31fa0ba891a2fd14920"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41a0022}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r8, @ANYRESDEC=r8, @ANYRES64=r5], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r10}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414aa0000000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="96bc1480489c", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa001c000000000000000000000008"], 0x38}, 0x80) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 2.635218109s ago: executing program 0 (id=6691): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0x24, 0x0, 0x0) 2.417041058s ago: executing program 0 (id=6692): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'wp384-generic\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba10491b3d4662ff5e935cd3d77fe76955f9bd9be41ea3fb9304c929450000000000", 0x2c}) 2.355839343s ago: executing program 4 (id=6693): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000765000/0x1000)=nil, 0x1002, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 2.2658261s ago: executing program 0 (id=6694): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x4}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) accept4$packet(r4, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x24, 0x0, 0x0) shutdown(r4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000500)=""/168, 0xa8, 0x0, &(0x7f00000000c0)=""/17, 0x11}}, 0x10) 2.175138133s ago: executing program 4 (id=6695): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_getres(0x0, 0x0) 2.156564474s ago: executing program 3 (id=6696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0xf4, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54}}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x4, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x95ee}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0xf4}, 0x1, 0xba01}, 0x0) 1.671811689s ago: executing program 3 (id=6697): pipe2(&(0x7f0000000300), 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1dc, 0x0, &(0x7f0000000140)="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2f}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x0, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100)) 1.083817645s ago: executing program 2 (id=6700): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x40044160, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, 0x0, 0x1, 0x2}) 799.742272ms ago: executing program 2 (id=6701): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) fsync(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r2, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0x0, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x0, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 717.417255ms ago: executing program 2 (id=6702): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0x24, 0x0, 0x0) 523.85311ms ago: executing program 4 (id=6703): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 456.906518ms ago: executing program 2 (id=6704): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'wp384-generic\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba10491b3d4662ff5e935cd3d77fe76955f9bd9be41ea3fb9304c929450000000000", 0x2c}) 325.75163ms ago: executing program 4 (id=6705): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 308.747335ms ago: executing program 2 (id=6706): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000765000/0x1000)=nil, 0x1002, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 0s ago: executing program 2 (id=6707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, r2, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x5e97}]}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)=':', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='`'], 0x60}}, {{&(0x7f0000001240)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000002580)=ANY=[], 0x87}}], 0x2, 0xc0) syz_emit_ethernet(0x6e, &(0x7f0000006600)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x38, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}, @eol, @window={0x3, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): (unregistering): Port device team_slave_1 removed [ 1356.137493][T15850] team0 (unregistering): Port device team_slave_0 removed [ 1356.256017][ T7794] usb 3-1: USB disconnect, device number 46 [ 1356.676159][T27735] Bluetooth: hci4: command tx timeout [ 1356.981947][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6203'. [ 1357.146677][T28815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1357.448549][T28705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.456913][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.471676][T28705] bridge_slave_0: entered allmulticast mode [ 1357.500590][T28705] bridge_slave_0: entered promiscuous mode [ 1357.539968][T28705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.557516][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.591739][T28705] bridge_slave_1: entered allmulticast mode [ 1357.599601][ T7767] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1357.677455][T28705] bridge_slave_1: entered promiscuous mode [ 1357.832050][ T7767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.866179][ T7767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.915165][ T7767] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1357.952011][ T7767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.999447][ T7767] usb 1-1: config 0 descriptor?? [ 1358.017511][ T7767] usbhid 1-1:0.0: can't add hid device: -22 [ 1358.066184][ T7767] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1358.118814][T28705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.129291][ T45] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1358.226237][T28705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.319303][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 1358.340681][ T45] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 1358.372794][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.410339][ T45] usb 4-1: config 0 descriptor?? [ 1358.418001][T28705] team0: Port device team_slave_0 added [ 1358.484823][T28705] team0: Port device team_slave_1 added [ 1358.506854][ T45] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1358.618435][T28852] [U] [ 1358.621207][T28852] [U] [ 1358.623953][T28852] [U] [ 1358.626689][T28852] [U] [ 1358.673691][T28705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.709480][T28852] [U] [ 1358.712264][T28852] [U] [ 1358.714986][T28852] [U] [ 1358.717705][T28852] [U] [ 1358.737990][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.749671][T27735] Bluetooth: hci4: command tx timeout [ 1358.771727][T28852] [U] [ 1358.774521][T28852] [U] [ 1358.777255][T28852] [U] [ 1358.802647][T28705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.817725][T28705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.828433][T28705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.834855][T25045] usb 4-1: USB disconnect, device number 65 [ 1358.854532][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.871486][T15850] usb 4-1: Failed to submit usb control message: -71 [ 1358.879172][T28705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.892048][T15850] usb 4-1: unable to send the bmi data to the device: -71 [ 1358.901770][T15850] usb 4-1: unable to get target info from device [ 1358.908199][T15850] usb 4-1: could not get target info (-71) [ 1358.949648][T15850] usb 4-1: could not probe fw (-71) [ 1358.969312][ T45] IPVS: starting estimator thread 0... [ 1359.092163][T28860] IPVS: using max 17 ests per chain, 40800 per kthread [ 1359.138145][T28705] hsr_slave_0: entered promiscuous mode [ 1359.174820][T28705] hsr_slave_1: entered promiscuous mode [ 1359.344055][T28845] [U] [ 1360.015139][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.127523][T25045] usb 1-1: USB disconnect, device number 74 [ 1360.391748][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.678118][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.689914][ T45] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1360.716699][T12127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1360.737343][T12127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1360.748398][T12127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1360.759805][T25045] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1360.771774][T12127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1360.790343][T12127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1360.797857][T12127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1360.889942][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 1360.898390][ T45] usb 3-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 1360.917891][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1360.927257][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1360.941232][ T45] usb 3-1: string descriptor 0 read error: -22 [ 1360.947631][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1360.957155][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.965742][T25045] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=6c.69 [ 1360.975282][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1360.975334][ T45] cdc_ncm 3-1:1.0: bind() failure [ 1361.037333][T25045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.062512][T25045] usb 1-1: config 0 descriptor?? [ 1361.073590][T25045] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 1361.108810][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.322772][T25045] gspca_sunplus: reg_r err -71 [ 1361.331747][T25045] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1361.346885][T25045] usb 1-1: USB disconnect, device number 75 [ 1361.842131][ T12] bridge_slave_1: left allmulticast mode [ 1361.861863][ T12] bridge_slave_1: left promiscuous mode [ 1361.880070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.892657][ T12] bridge_slave_0: left allmulticast mode [ 1361.898630][ T12] bridge_slave_0: left promiscuous mode [ 1361.916600][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.112736][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.120289][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.682278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.697528][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.711514][ T12] bond0 (unregistering): Released all slaves [ 1362.916963][T27735] Bluetooth: hci0: command tx timeout [ 1362.956079][T28705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1363.097255][T28705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1363.134122][T28705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1363.224320][T28705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1363.276689][T28886] chnl_net:caif_netlink_parms(): no params data found [ 1363.594564][ T8] usb 3-1: USB disconnect, device number 47 [ 1363.604477][ T12] hsr_slave_0: left promiscuous mode [ 1363.634247][ T12] hsr_slave_1: left promiscuous mode [ 1363.652766][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.672847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.700048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.708029][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.817854][ T12] veth1_macvtap: left promiscuous mode [ 1363.841358][ T12] veth0_macvtap: left promiscuous mode [ 1363.847192][ T12] veth1_vlan: left promiscuous mode [ 1363.881351][ T12] veth0_vlan: left promiscuous mode [ 1363.962226][T12127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1363.983568][T12127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1363.999905][T12127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1364.032418][T12127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1364.089634][T12127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1364.097226][T12127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1364.989465][T27735] Bluetooth: hci0: command tx timeout [ 1365.087311][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1365.144245][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1366.012010][T28886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.027521][T28886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.038125][T28886] bridge_slave_0: entered allmulticast mode [ 1366.055294][T28886] bridge_slave_0: entered promiscuous mode [ 1366.097189][T28886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.108000][T28886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.119855][T28886] bridge_slave_1: entered allmulticast mode [ 1366.130349][T28886] bridge_slave_1: entered promiscuous mode [ 1366.209331][T27735] Bluetooth: hci3: command tx timeout [ 1366.301141][T28886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.365845][T28886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.522001][T28886] team0: Port device team_slave_0 added [ 1366.596080][T28886] team0: Port device team_slave_1 added [ 1366.849413][T28886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.872538][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.898928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.920677][T28886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.961828][T28886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.990461][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.016411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.038238][T28886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.069444][T27735] Bluetooth: hci0: command tx timeout [ 1367.176819][T28964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1367.404023][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.473282][T28886] hsr_slave_0: entered promiscuous mode [ 1367.498130][T28886] hsr_slave_1: entered promiscuous mode [ 1367.565557][T28886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1367.591413][T28886] Cannot create hsr debugfs directory [ 1367.719560][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.763166][T28921] chnl_net:caif_netlink_parms(): no params data found [ 1367.853066][ T29] audit: type=1326 audit(1720316191.128:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28975 comm="syz.2.6244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8f75bd9 code=0x0 [ 1367.913617][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.002134][T28705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.178119][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.270850][T27735] Bluetooth: hci3: command tx timeout [ 1368.573737][T28705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.843612][T28921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.863507][T28921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.881451][T28921] bridge_slave_0: entered allmulticast mode [ 1368.891069][T28921] bridge_slave_0: entered promiscuous mode [ 1368.917016][T28921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.925667][T28921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.942660][T28921] bridge_slave_1: entered allmulticast mode [ 1368.956319][T28921] bridge_slave_1: entered promiscuous mode [ 1368.985314][T29008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.993121][T29008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.114350][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.121639][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.150179][T27735] Bluetooth: hci0: command tx timeout [ 1369.275616][T29025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.410449][T28921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.462592][T28921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.507668][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.514978][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.552942][ T12] bridge_slave_1: left allmulticast mode [ 1369.564326][ T12] bridge_slave_1: left promiscuous mode [ 1369.584283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.604945][T29029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1369.617504][ T12] bridge_slave_0: left allmulticast mode [ 1369.623900][ T12] bridge_slave_0: left promiscuous mode [ 1369.630473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.241571][ T45] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1370.349970][T27735] Bluetooth: hci3: command tx timeout [ 1370.440445][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 1370.454110][ T45] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1370.463233][ T45] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1370.486102][ T45] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1370.505928][ T45] usb 1-1: config 250 has no interface number 0 [ 1370.525407][ T45] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1370.540018][ T45] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1370.576165][ T45] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1370.598750][ T45] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1370.629486][ T45] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1370.656332][ T45] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1370.674277][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1370.695935][ T45] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1370.704784][ T45] usb 1-1: Product: syz [ 1370.709444][ T45] usb 1-1: SerialNumber: syz [ 1370.741980][ T45] hub 1-1:250.228: bad descriptor, ignoring hub [ 1370.748340][ T45] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1370.878260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.900905][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.929269][ T7770] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1370.947189][ T45] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 76 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1370.951849][ T12] bond0 (unregistering): Released all slaves [ 1371.140712][ T7770] usb 3-1: Using ep0 maxpacket: 16 [ 1371.148258][ T7770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1371.175442][ T7770] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1371.192673][ T7770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.225564][ T7770] usb 3-1: config 0 descriptor?? [ 1371.235167][T28921] team0: Port device team_slave_0 added [ 1371.244814][T29045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.254194][T29045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.358756][T28921] team0: Port device team_slave_1 added [ 1371.439997][ T5145] usb 1-1: USB disconnect, device number 76 [ 1371.465071][ T5145] usblp0: removed [ 1371.574606][T28921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.583764][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.617807][T28921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.643351][T28921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.660749][T28921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.695031][T28921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.708407][T28886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1371.806622][ T12] hsr_slave_0: left promiscuous mode [ 1371.813078][ T12] hsr_slave_1: left promiscuous mode [ 1371.828326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.836658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.846626][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.854503][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.902843][ T12] veth1_macvtap: left promiscuous mode [ 1371.908469][ T12] veth0_macvtap: left promiscuous mode [ 1371.915208][ T12] veth1_vlan: left promiscuous mode [ 1371.920735][ T12] veth0_vlan: left promiscuous mode [ 1372.014661][T29087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.029586][T29087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.070407][ T7770] hid (null): report_id 4075563258 is invalid [ 1372.103872][ T7770] hid-generic 0003:0158:0100.0021: unknown main item tag 0x1 [ 1372.113172][ T7770] hid-generic 0003:0158:0100.0021: unexpected long global item [ 1372.140923][ T7770] hid-generic 0003:0158:0100.0021: probe with driver hid-generic failed with error -22 [ 1372.335483][ T29] audit: type=1326 audit(1720316195.608:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29090 comm="syz.0.6258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff701975bd9 code=0x0 [ 1372.429495][T27735] Bluetooth: hci3: command tx timeout [ 1373.185069][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1373.256697][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1373.942618][T29068] netlink: 'syz.2.6257': attribute type 10 has an invalid length. [ 1373.956944][T29068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1373.967070][T29068] bridge0: port 3(hsr_slave_1) entered blocking state [ 1373.976099][T29068] bridge0: port 3(hsr_slave_1) entered disabled state [ 1373.985986][T29068] hsr_slave_1: entered allmulticast mode [ 1374.001545][T29068] hsr_slave_1: left allmulticast mode [ 1374.007529][T29068] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1374.043802][T28886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1374.062670][T28886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1374.086495][T28886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1374.131903][ T5145] usb 3-1: USB disconnect, device number 48 [ 1374.293914][T28921] hsr_slave_0: entered promiscuous mode [ 1374.303281][T28921] hsr_slave_1: entered promiscuous mode [ 1374.324495][T28921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1374.334663][T28921] Cannot create hsr debugfs directory [ 1374.618452][T28705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.103370][T29112] netlink: 199356 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1375.132204][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1375.154449][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.290735][T28705] veth0_vlan: entered promiscuous mode [ 1375.371413][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.408325][T12127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.430841][T12127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.446812][T12127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.467159][T12127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.477422][T12127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1375.489459][T12127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1375.545220][ T5145] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1375.564016][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.607548][T28705] veth1_vlan: entered promiscuous mode [ 1375.623447][T28886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.695136][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.747722][T28886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.759499][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 1375.781245][ T5145] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1375.805903][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.813153][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.824649][ T5145] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1375.839168][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.852884][ T5145] usb 1-1: config 0 descriptor?? [ 1375.863320][ T5145] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1375.899729][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.906930][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.973330][T28705] veth0_macvtap: entered promiscuous mode [ 1376.026695][T28705] veth1_macvtap: entered promiscuous mode [ 1376.096105][T29116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.111679][T29116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.118064][T28921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1376.168440][T27735] Bluetooth: hci2: Invalid handle: 0x756f > 0x0eff [ 1376.192133][ T12] bridge_slave_1: left allmulticast mode [ 1376.197832][ T12] bridge_slave_1: left promiscuous mode [ 1376.223359][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.262537][ T12] bridge_slave_0: left allmulticast mode [ 1376.268233][ T12] bridge_slave_0: left promiscuous mode [ 1376.275208][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.775173][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.787899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.799963][ T12] bond0 (unregistering): Released all slaves [ 1376.814611][T28921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1376.828702][T28921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1376.924883][T28921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1377.068258][T28705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.081892][T28705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.092856][T28705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1377.103449][T28705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.115529][T28705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.167013][T28705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.183574][T28705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.197187][T28705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1377.209190][T28705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.221342][T28705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.273654][T29122] chnl_net:caif_netlink_parms(): no params data found [ 1377.290862][T28705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.300053][T28705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.308917][T28705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.318746][T28705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.426453][ T12] hsr_slave_0: left promiscuous mode [ 1377.433266][ T12] hsr_slave_1: left promiscuous mode [ 1377.439494][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.446949][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.456772][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.465044][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.503677][ T12] veth1_macvtap: left promiscuous mode [ 1377.510223][ T12] veth0_macvtap: left promiscuous mode [ 1377.515933][ T12] veth1_vlan: left promiscuous mode [ 1377.523943][ T12] veth0_vlan: left promiscuous mode [ 1377.549316][T12127] Bluetooth: hci1: command tx timeout [ 1378.164275][T25045] usb 1-1: USB disconnect, device number 77 [ 1378.286969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1378.380252][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1379.342944][T29136] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [P.]L3 index 0 [ 1379.517599][T28886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.631567][T12127] Bluetooth: hci1: command tx timeout [ 1379.686796][ T45] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1379.790642][T29122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.797867][T29122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.820944][T29122] bridge_slave_0: entered allmulticast mode [ 1379.828575][T29122] bridge_slave_0: entered promiscuous mode [ 1379.842836][T29122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.850637][T29122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.857935][T29122] bridge_slave_1: entered allmulticast mode [ 1379.865811][T29122] bridge_slave_1: entered promiscuous mode [ 1379.887343][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 1379.910588][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.916983][ T12] IPVS: stop unused estimator thread 0... [ 1379.919680][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1379.954305][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.966148][ T45] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1379.983038][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.025520][ T45] usb 1-1: config 0 descriptor?? [ 1380.073797][T29122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.097812][T29122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.181371][T12077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.195011][T12077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.225604][T29122] team0: Port device team_slave_0 added [ 1380.267801][T29122] team0: Port device team_slave_1 added [ 1380.327780][T28886] veth0_vlan: entered promiscuous mode [ 1380.368235][T28921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.478851][T29122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.493186][T29122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.526517][T29122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.547524][T29138] netlink: 'syz.0.6267': attribute type 10 has an invalid length. [ 1380.559430][T29138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6267'. [ 1380.569841][T29138] bridge0: port 3(hsr_slave_1) entered blocking state [ 1380.577043][T29138] bridge0: port 3(hsr_slave_1) entered disabled state [ 1380.585086][T29138] hsr_slave_1: entered allmulticast mode [ 1380.597373][T29138] hsr_slave_1: left allmulticast mode [ 1380.609688][T29138] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1380.690560][T29122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.697576][T29122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.759272][T29122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.806047][T28886] veth1_vlan: entered promiscuous mode [ 1380.918412][T29138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.941953][T29138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.953571][T28921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.988649][ T45] hid (null): report_id 4075563258 is invalid [ 1381.010289][T29122] hsr_slave_0: entered promiscuous mode [ 1381.027498][ T45] hid-generic 0003:0158:0100.0022: unknown main item tag 0x1 [ 1381.042138][T29122] hsr_slave_1: entered promiscuous mode [ 1381.047714][ T45] hid-generic 0003:0158:0100.0022: unexpected long global item [ 1381.048614][ T45] hid-generic 0003:0158:0100.0022: probe with driver hid-generic failed with error -22 [ 1381.099274][T29122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.117206][T29122] Cannot create hsr debugfs directory [ 1381.148315][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.155617][ T7767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.205301][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.212596][ T7767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.294061][T25045] usb 1-1: USB disconnect, device number 78 [ 1381.530341][T28886] veth0_macvtap: entered promiscuous mode [ 1381.538550][T28921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1381.564036][T28921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.625819][T28886] veth1_macvtap: entered promiscuous mode [ 1381.709246][T12127] Bluetooth: hci1: command tx timeout [ 1381.766485][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1381.818358][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.838627][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1381.857591][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.880807][T28886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.305808][T28921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.326635][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.350988][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.368818][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.387403][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.420338][T28886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1382.706357][T12077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.808513][T28886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.831840][T28886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.859237][T28886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.868024][T28886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.068084][T12077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.213474][T12077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.265334][T27735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.278896][T27735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.290901][T27735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1383.312676][T27735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1383.335923][T28921] veth0_vlan: entered promiscuous mode [ 1383.343087][T27735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1383.355210][T27735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1383.460381][T12077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.496640][T28921] veth1_vlan: entered promiscuous mode [ 1383.789840][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.790011][T12127] Bluetooth: hci1: command tx timeout [ 1383.820233][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.913538][T29122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1384.035943][T28921] veth0_macvtap: entered promiscuous mode [ 1384.062809][T29122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1384.128989][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.142589][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.153444][T29122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1384.247602][T28921] veth1_macvtap: entered promiscuous mode [ 1384.265221][T29122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1384.587024][T12077] bridge_slave_1: left allmulticast mode [ 1384.600360][T12077] bridge_slave_1: left promiscuous mode [ 1384.606219][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.622721][T12077] bridge_slave_0: left allmulticast mode [ 1384.628455][T12077] bridge_slave_0: left promiscuous mode [ 1384.640710][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.949365][ T7770] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1385.093713][T29255] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [P.]L3 index 0 [ 1385.169120][ T7770] usb 2-1: Using ep0 maxpacket: 16 [ 1385.176628][ T7770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1385.197309][ T7770] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1385.207677][ T7770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.233177][ T7770] usb 2-1: config 0 descriptor?? [ 1385.389385][T12127] Bluetooth: hci2: command tx timeout [ 1385.407827][T29261] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1385.423770][T29261] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1385.699407][T12077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.725461][T12077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.743608][T12077] bond0 (unregistering): Released all slaves [ 1385.827705][T29275] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [P.]L3 index 0 [ 1385.865966][T29238] netlink: 'syz.1.6280': attribute type 10 has an invalid length. [ 1385.889247][T29238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1385.901015][T29238] bridge0: port 3(hsr_slave_1) entered blocking state [ 1385.908144][T29238] bridge0: port 3(hsr_slave_1) entered disabled state [ 1385.915511][T29238] hsr_slave_1: entered allmulticast mode [ 1385.971537][T29238] hsr_slave_1: left allmulticast mode [ 1385.990365][T29238] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1386.048377][T29238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.072026][T29238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.096737][ T7770] hid (null): report_id 4075563258 is invalid [ 1386.120571][ T7770] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 1386.134030][ T7770] hid-generic 0003:0158:0100.0023: unexpected long global item [ 1386.143197][ T7770] hid-generic 0003:0158:0100.0023: probe with driver hid-generic failed with error -22 [ 1386.201192][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.216526][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.229264][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.244942][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.254932][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.265646][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.282040][T28921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.473491][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.485139][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.495803][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.507156][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.517591][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1386.528680][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.541501][T28921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.554771][T28921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.563901][T28921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.573414][T28921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.584289][T28921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.615983][ T45] usb 2-1: USB disconnect, device number 73 [ 1386.817159][T12077] hsr_slave_0: left promiscuous mode [ 1386.858518][T12077] hsr_slave_1: left promiscuous mode [ 1386.865583][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.873647][T12077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.886119][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.899312][T12077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.937935][T12077] veth1_macvtap: left promiscuous mode [ 1386.943981][T12077] veth0_macvtap: left promiscuous mode [ 1386.950348][T12077] veth1_vlan: left promiscuous mode [ 1386.955831][T12077] veth0_vlan: left promiscuous mode [ 1387.479222][T12127] Bluetooth: hci2: command tx timeout [ 1387.826837][T12077] team0 (unregistering): Port device team_slave_1 removed [ 1387.893994][T12077] team0 (unregistering): Port device team_slave_0 removed [ 1388.725662][T29212] chnl_net:caif_netlink_parms(): no params data found [ 1388.926306][T29122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.004820][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.019326][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.102204][T29212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.120689][T29212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.128152][T29212] bridge_slave_0: entered allmulticast mode [ 1389.137090][T29212] bridge_slave_0: entered promiscuous mode [ 1389.234854][T29212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.245058][T29212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.254022][T29212] bridge_slave_1: entered allmulticast mode [ 1389.262705][T29212] bridge_slave_1: entered promiscuous mode [ 1389.283289][T29122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.385893][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.393163][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.416605][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.442663][T29212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.457223][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.474827][T27735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1389.486214][T27735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1389.495745][T27735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1389.504195][T27735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1389.513517][T27735] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1389.522638][T27735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1389.549628][T12127] Bluetooth: hci2: command tx timeout [ 1389.611912][T29212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.637475][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.644744][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.857661][T29212] team0: Port device team_slave_0 added [ 1389.937192][T29122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.124333][T12077] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.204212][T29212] team0: Port device team_slave_1 added [ 1390.283148][T12077] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.299249][ T7773] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1390.364975][T29212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.372184][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.401986][T29212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.464668][T12077] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.489851][T29212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.496835][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.525177][T29212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.536266][ T7773] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1390.548112][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.569239][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.603826][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.622520][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.643727][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.663988][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.675996][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.686686][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.698991][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.707401][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.718519][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.732117][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.745534][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.757420][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.770451][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.778084][T12077] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.778820][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.802257][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.813629][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.822291][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.850240][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.862268][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.870811][ T7773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1390.880307][ T7773] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1390.885140][T29212] hsr_slave_0: entered promiscuous mode [ 1390.903276][ T7773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1390.918231][T29212] hsr_slave_1: entered promiscuous mode [ 1390.921587][ T7773] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1390.940035][ T7773] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1390.948665][T29212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1390.948691][ T7773] usb 5-1: Product: syz [ 1390.966590][T29212] Cannot create hsr debugfs directory [ 1390.968782][ T7773] usb 5-1: Manufacturer: syz [ 1390.977125][ T7773] usb 5-1: SerialNumber: syz [ 1390.985762][ T7773] usb 5-1: config 0 descriptor?? [ 1390.998838][ T7773] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1391.193046][T29122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.274230][ T29] audit: type=1326 audit(1720316214.548:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29364 comm="syz.3.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5543f75bd9 code=0x7ffc0000 [ 1391.299332][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 1391.306925][T25045] usb 5-1: USB disconnect, device number 64 [ 1391.338919][T25045] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1391.350185][ T29] audit: type=1326 audit(1720316214.548:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29364 comm="syz.3.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5543f75bd9 code=0x7ffc0000 [ 1391.440631][T29367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6317'. [ 1391.630542][T27735] Bluetooth: hci2: command tx timeout [ 1391.636276][T12127] Bluetooth: hci0: command tx timeout [ 1391.668087][T12077] bridge_slave_1: left allmulticast mode [ 1391.692228][T12077] bridge_slave_1: left promiscuous mode [ 1391.698015][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.725144][T12077] bridge_slave_0: left allmulticast mode [ 1391.739169][T12077] bridge_slave_0: left promiscuous mode [ 1391.745033][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.288889][ T7773] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1392.487025][ T7773] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1392.496573][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.510403][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.548815][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.557798][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.574362][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.586703][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.594360][T12077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.602305][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.615641][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.627974][T12077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.634321][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.646823][T12077] bond0 (unregistering): Released all slaves [ 1392.647647][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.678794][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.709290][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.723870][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.739314][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.772217][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.787887][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.797164][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.827395][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.845491][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.854591][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.880490][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.889506][ T7773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1392.898456][ T7773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1392.915406][ T7773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.926045][ T7773] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1392.935642][ T7773] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1392.958086][ T7773] usb 4-1: Product: syz [ 1392.970204][ T7773] usb 4-1: Manufacturer: syz [ 1392.979799][ T7773] usb 4-1: SerialNumber: syz [ 1392.998219][ T7773] usb 4-1: config 0 descriptor?? [ 1393.031244][ T7773] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1393.403677][T29327] chnl_net:caif_netlink_parms(): no params data found [ 1393.455503][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 1393.460043][T25045] usb 4-1: USB disconnect, device number 66 [ 1393.482093][T29403] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 1393.495186][T25045] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1393.711391][T12127] Bluetooth: hci0: command tx timeout [ 1393.872791][T12077] hsr_slave_0: left promiscuous mode [ 1393.882322][T29410] sctp: [Deprecated]: syz.4.6326 (pid 29410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1393.882322][T29410] Use struct sctp_sack_info instead [ 1393.899870][T12077] hsr_slave_1: left promiscuous mode [ 1393.917565][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.934110][T12077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.943051][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.951752][T12077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.984822][T12077] veth1_macvtap: left promiscuous mode [ 1393.990676][T12077] veth0_macvtap: left promiscuous mode [ 1393.996645][T12077] veth1_vlan: left promiscuous mode [ 1394.002586][T12077] veth0_vlan: left promiscuous mode [ 1394.105008][T29414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1394.123699][T29414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1394.137215][T29414] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1394.158874][T29414] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6328'. [ 1394.177968][T29414] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1394.188413][T29414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1395.002540][T12077] team0 (unregistering): Port device team_slave_1 removed [ 1395.077496][T12077] team0 (unregistering): Port device team_slave_0 removed [ 1395.710666][T29431] sctp: [Deprecated]: syz.3.6334 (pid 29431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1395.710666][T29431] Use struct sctp_sack_info instead [ 1395.789244][T12127] Bluetooth: hci0: command tx timeout [ 1396.085490][ T7773] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1396.299119][ T7773] usb 5-1: Using ep0 maxpacket: 32 [ 1396.315411][ T7773] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=58.d3 [ 1396.332354][ T7773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.357973][T29122] veth0_vlan: entered promiscuous mode [ 1396.381421][ T7773] usb 5-1: Product: syz [ 1396.401516][ T7773] usb 5-1: Manufacturer: syz [ 1396.429271][ T7773] usb 5-1: SerialNumber: syz [ 1396.462356][T29122] veth1_vlan: entered promiscuous mode [ 1396.479966][ T7773] usb 5-1: config 0 descriptor?? [ 1396.521420][ T7773] ttusb_dec_send_command: command bulk message failed: error -22 [ 1396.537876][ T7773] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1396.688497][T29327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.704236][T29327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.717071][T29327] bridge_slave_0: entered allmulticast mode [ 1396.730654][T29327] bridge_slave_0: entered promiscuous mode [ 1396.772439][T29327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.779998][T29327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.796337][T29327] bridge_slave_1: entered allmulticast mode [ 1396.836921][ T7770] usb 5-1: USB disconnect, device number 65 [ 1396.839335][T29327] bridge_slave_1: entered promiscuous mode [ 1396.989922][T29327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.174307][T29327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.374739][T29122] veth0_macvtap: entered promiscuous mode [ 1397.520845][T29122] veth1_macvtap: entered promiscuous mode [ 1397.585440][T29327] team0: Port device team_slave_0 added [ 1397.604168][T29212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1397.654233][T29212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1397.682786][T29212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1397.714001][T29327] team0: Port device team_slave_1 added [ 1397.790107][T29212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1397.870011][T12127] Bluetooth: hci0: command tx timeout [ 1397.921941][T29122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.937679][T29122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.961606][T29122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1397.978938][T29122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.002575][T29122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.029490][T29327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.036647][T29327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.107582][T29327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.139216][ T29] audit: type=1326 audit(1720316221.398:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.167380][ T29] audit: type=1326 audit(1720316221.408:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.208107][ T29] audit: type=1326 audit(1720316221.478:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.239777][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6342'. [ 1398.300034][ T29] audit: type=1326 audit(1720316221.478:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.347188][ T29] audit: type=1326 audit(1720316221.478:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.381104][ T29] audit: type=1326 audit(1720316221.518:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.424525][T29122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.445123][T29122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.464246][ T29] audit: type=1326 audit(1720316221.518:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.494798][T29122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1398.535055][T29122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.545630][ T29] audit: type=1326 audit(1720316221.578:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29477 comm="syz.4.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.573490][T29122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.609821][T29122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.618612][T29122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.635284][T29122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.644597][T29122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.714475][T29327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.715149][ T29] audit: type=1326 audit(1720316221.988:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29504 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.736563][T29327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.784954][ T29] audit: type=1326 audit(1720316222.028:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29504 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9f5eb75bd9 code=0x7ffc0000 [ 1398.808411][T29327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.025928][T29327] hsr_slave_0: entered promiscuous mode [ 1399.037512][T29327] hsr_slave_1: entered promiscuous mode [ 1399.044438][T29327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1399.060491][T29327] Cannot create hsr debugfs directory [ 1399.373949][T24861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.418778][T24861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.465928][T29212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.713553][T24861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.725901][T24861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.741784][T29212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.850624][T25057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.857826][T25057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.046249][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.053484][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.369301][ T7770] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1400.580675][ T7770] usb 5-1: Using ep0 maxpacket: 32 [ 1400.606220][ T7770] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1400.648531][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.680394][T29212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.682014][ T7770] usb 5-1: Product: syz [ 1400.710772][ T7770] usb 5-1: Manufacturer: syz [ 1400.724668][ T7770] usb 5-1: SerialNumber: syz [ 1400.737780][ T7770] usb 5-1: config 0 descriptor?? [ 1400.752418][ T7770] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 1400.780086][ T7770] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 1400.809482][ T7770] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 1400.846649][ T7770] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1400.860467][T29327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1400.889656][T29327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1400.947838][T29327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1401.005531][T29327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1401.094892][T29212] veth0_vlan: entered promiscuous mode [ 1401.138533][T29212] veth1_vlan: entered promiscuous mode [ 1401.318646][T29212] veth0_macvtap: entered promiscuous mode [ 1401.349378][ T7770] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1401.375933][T29212] veth1_macvtap: entered promiscuous mode [ 1401.433504][T29327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.455599][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1401.478675][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.500799][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.518494][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.529984][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.542080][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.553124][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.569140][ T7770] usb 4-1: Using ep0 maxpacket: 32 [ 1401.582545][T29212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.599162][ T7770] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1401.624795][ T7770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1401.628612][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.653186][ T7770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1401.665779][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.677729][ T7770] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1401.678099][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.688403][ T7770] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1401.704501][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.716689][ T7770] usb 4-1: Product: syz [ 1401.726827][T29212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.738900][T29212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.741647][ T7770] usb 4-1: Manufacturer: syz [ 1401.763419][ T7770] usb 4-1: SerialNumber: syz [ 1401.780346][ T7770] usb 4-1: config 0 descriptor?? [ 1401.781054][T29212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.787244][T29542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1401.811998][ T7770] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1401.834295][T29327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.841068][ T7770] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1401.894569][T29212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.914251][T29212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.923511][T29212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.933085][T29212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.945751][T29527] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6355'. [ 1401.973225][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.980538][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.112448][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.119734][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.141861][ T783] usb 5-1: USB disconnect, device number 66 [ 1402.237069][T29542] ldusb 4-1:0.0: Write buffer overflow, 64618 bytes dropped [ 1402.272040][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.315177][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.352119][ T8] usb 4-1: USB disconnect, device number 67 [ 1402.382790][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1402.425747][T29327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.453572][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.483374][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.564486][T29327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.702675][T29327] veth0_vlan: entered promiscuous mode [ 1402.767051][T29327] veth1_vlan: entered promiscuous mode [ 1402.827969][T29327] veth0_macvtap: entered promiscuous mode [ 1402.848197][T29327] veth1_macvtap: entered promiscuous mode [ 1402.927177][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.943208][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.953654][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1402.965730][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.978281][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.000719][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.019179][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.059220][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.080720][T29327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.111652][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.145984][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.178286][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.209165][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.252186][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.284084][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.319151][T29327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.346708][T29327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.375656][T29327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.420188][T29327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.446116][T29327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.476883][T29327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.500158][T29327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.855774][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.891424][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.992725][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.027518][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.120703][ T45] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1404.352986][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1404.369185][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1404.397703][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.416191][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.422421][T29610] netlink: 'syz.1.6383': attribute type 2 has an invalid length. [ 1404.426703][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.446465][T29610] netlink: 'syz.1.6383': attribute type 1 has an invalid length. [ 1404.451203][ T45] usb 3-1: config 0 descriptor?? [ 1404.458416][T29610] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1404.467508][T29589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1404.549182][ T5145] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1404.739809][ T5145] usb 4-1: Using ep0 maxpacket: 32 [ 1404.755116][ T5145] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 1404.764674][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.775181][ T5145] usb 4-1: Product: syz [ 1404.784199][ T5145] usb 4-1: Manufacturer: syz [ 1404.799256][ T5145] usb 4-1: SerialNumber: syz [ 1404.808448][ T5145] usb 4-1: config 0 descriptor?? [ 1404.821796][ T5145] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 1404.847270][ T5145] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 1404.869322][ T5145] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 1404.884277][ T5145] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1404.921422][T29589] pim6reg1: entered promiscuous mode [ 1404.926852][T29589] pim6reg1: entered allmulticast mode [ 1404.975391][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 1405.000475][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1405.021609][ T45] usb 3-1: USB disconnect, device number 49 [ 1405.121730][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1405.121751][ T29] audit: type=1326 audit(1720316228.398:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.0.6390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83bf75bd9 code=0x0 [ 1405.150838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.985683][T29602] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1406.172865][ T5145] usb 4-1: USB disconnect, device number 68 [ 1407.229638][ T7767] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1407.436040][ T7767] usb 1-1: config 0 has an invalid interface number: 160 but max is 1 [ 1407.463050][ T7767] usb 1-1: config 0 has an invalid interface number: 243 but max is 1 [ 1407.473079][ T7767] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 1407.489406][ T7767] usb 1-1: config 0 has no interface number 0 [ 1407.495773][ T7767] usb 1-1: config 0 has no interface number 1 [ 1407.519676][ T7767] usb 1-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1407.562947][ T7767] usb 1-1: config 0 interface 243 altsetting 0 endpoint 0xD has an invalid bInterval 128, changing to 11 [ 1407.590756][ T7767] usb 1-1: config 0 interface 243 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1407.606519][ T7767] usb 1-1: config 0 interface 243 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1407.659781][ T7767] usb 1-1: config 0 interface 243 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 1407.687638][ T7767] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=3f.37 [ 1407.704534][ T7767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.720792][ T7767] usb 1-1: config 0 descriptor?? [ 1408.109518][T29709] input: syz0 as /devices/virtual/input/input68 [ 1408.269567][ T5145] usb 1-1: USB disconnect, device number 79 [ 1408.649417][T25057] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1408.879887][T25057] usb 3-1: Using ep0 maxpacket: 8 [ 1408.896608][T25057] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.936077][T25057] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1408.962412][T25057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.988176][T25057] usb 3-1: config 0 descriptor?? [ 1409.022447][T25057] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1409.111746][T29730] netlink: 'syz.1.6427': attribute type 5 has an invalid length. [ 1409.192063][T29730] netlink: 200836 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1409.235017][T29730] openvswitch: netlink: Duplicate key (type 0). [ 1409.373374][T29738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1409.569213][T25045] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1409.769292][T25045] usb 2-1: Using ep0 maxpacket: 16 [ 1409.796578][T25045] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 1409.810537][T25045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.827505][T25045] usb 2-1: Product: syz [ 1409.847867][T25045] usb 2-1: Manufacturer: syz [ 1409.853778][T25045] usb 2-1: SerialNumber: syz [ 1409.869649][T25045] usb 2-1: config 0 descriptor?? [ 1409.887579][T25045] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 1409.925641][T25057] gspca_vc032x: reg_r err -110 [ 1409.947269][T25057] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1410.302608][T25045] usb 2-1: USB disconnect, device number 74 [ 1410.838376][T29768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6441'. [ 1410.999586][ T7773] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1411.200902][ T7773] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 1411.219090][ T7773] usb 1-1: config 0 has no interface number 0 [ 1411.234623][ T7773] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.258306][ T7773] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.295149][ T7773] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1411.318495][ T7773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.330421][ T7773] usb 1-1: config 0 descriptor?? [ 1411.350359][T29784] misc userio: Invalid payload size [ 1411.365784][T29784] misc userio: No port type given on /dev/userio [ 1411.562531][ T7773] usbhid 1-1:0.25: can't add hid device: -71 [ 1411.569522][ T7773] usbhid 1-1:0.25: probe with driver usbhid failed with error -71 [ 1411.587105][ T7773] usb 1-1: USB disconnect, device number 80 [ 1411.699466][ T7767] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1411.866738][ T7773] usb 3-1: USB disconnect, device number 50 [ 1411.899578][ T7767] usb 2-1: Using ep0 maxpacket: 8 [ 1411.936573][ T7767] usb 2-1: descriptor type invalid, skip [ 1411.972969][ T7767] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.008704][ T7767] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1412.053400][ T7767] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1412.082336][ T7767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.109878][ T7767] usb 2-1: Product: ࠚ [ 1412.114121][ T7767] usb 2-1: Manufacturer: 䘍ូ蕡礵௔⏅䡊魻컹本噘臗䐣ঝ퇓䇫㤔⏷褠驘첝뜞쪚ᘁ쳏湡麆㔲驅ﳇ딶꺨ร깛ꋠƨ玲ϙ뎎⽠쭤沇꠲킆㲶쇩땒ꆄ煏熐럽湊잉훁崎항蔊뤶똱⣫痼ﮁ╪熪ﲅ⇳⤉䠼맩큓╘갹䦖ǚ騔趤‭牗閑䇽㜋⃵챒燦纂ऌṳ퐘 [ 1412.207050][ T7767] usb 2-1: SerialNumber: ΁歚奓䄼颱렐ಖᔋ洬腆脔ሲ鑞།麾坑砣兠粘쯂∸┣Ⅺ줽螨濦ṳ쉱戮⚳㴢샇쵛顴术枈䆽敚뺠鋚㦋홫鷪䫆䲶ྐྵ૾䦰趎ᇾ⏾碲⾳嶂ꟳ䀕뫠ᠿ恃䍀ꫦ [ 1412.328582][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1412.467531][T29786] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1412.579570][T29802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1412.726506][ T7767] cdc_ncm 2-1:1.0: bind() failure [ 1412.772165][ T7767] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1412.788731][ T7767] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1412.810564][ T7767] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1412.853329][ T7767] usb 2-1: USB disconnect, device number 75 [ 1413.652853][T29826] input: syz0 as /devices/virtual/input/input69 [ 1413.809160][T25045] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1414.013255][T25045] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1414.047930][T25045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.083171][T25045] usb 2-1: config 0 descriptor?? [ 1414.249636][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.353625][T29838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1414.534057][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.678432][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.012578][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.156639][T25045] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1415.291774][T27735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1415.306256][T27735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1415.319176][T27735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1415.335960][T27735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1415.347789][T27735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1415.360044][T25045] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1415.361270][T27735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.443273][T25045] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1415.527676][ T12] bridge_slave_1: left allmulticast mode [ 1415.534450][ T12] bridge_slave_1: left promiscuous mode [ 1415.534499][T25045] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1415.540349][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.610414][ T12] bridge_slave_0: left allmulticast mode [ 1415.613985][T25045] usb 2-1: USB disconnect, device number 76 [ 1415.616118][ T12] bridge_slave_0: left promiscuous mode [ 1415.679400][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.254986][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.275312][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.296010][ T12] bond0 (unregistering): Released all slaves [ 1417.485796][T27735] Bluetooth: hci2: command tx timeout [ 1417.819538][ T29] audit: type=1326 audit(1720316241.078:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29892 comm="syz.4.6485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f5eb75bd9 code=0x0 [ 1418.949390][ T12] hsr_slave_0: left promiscuous mode [ 1419.026173][ T12] hsr_slave_1: left promiscuous mode [ 1419.061001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.089311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.128349][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.138178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.209930][ T12] veth1_macvtap: left promiscuous mode [ 1419.237678][ T12] veth0_macvtap: left promiscuous mode [ 1419.250650][ T12] veth1_vlan: left promiscuous mode [ 1419.267799][ T12] veth0_vlan: left promiscuous mode [ 1419.559762][T27735] Bluetooth: hci2: command tx timeout [ 1420.709508][ T29] audit: type=1326 audit(1720316243.978:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29949 comm="syz.2.6500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x0 [ 1420.901768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1421.020500][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1421.271545][ T7770] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1421.487694][ T7770] usb 5-1: Using ep0 maxpacket: 8 [ 1421.512095][ T7770] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1421.539378][ T7770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.569254][ T7770] usb 5-1: Product: syz [ 1421.573589][ T7770] usb 5-1: Manufacturer: syz [ 1421.578341][ T7770] usb 5-1: SerialNumber: syz [ 1421.597247][ T7770] usb 5-1: config 0 descriptor?? [ 1421.641746][T27735] Bluetooth: hci2: command tx timeout [ 1421.834721][ T7770] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1421.959280][ T5145] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1422.160499][ T5145] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1422.177509][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.231526][ T5145] usb 3-1: config 0 descriptor?? [ 1422.308805][T29960] lo: Caught tx_queue_len zero misconfig [ 1422.438126][T29865] chnl_net:caif_netlink_parms(): no params data found [ 1422.981491][T29865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.031699][T29865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.037329][ T7770] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1423.045836][T29865] bridge_slave_0: entered allmulticast mode [ 1423.070905][ T7770] usb 5-1: USB disconnect, device number 67 [ 1423.078043][T29865] bridge_slave_0: entered promiscuous mode [ 1423.094340][T29865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.107878][T29865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.135455][T29865] bridge_slave_1: entered allmulticast mode [ 1423.182956][T29865] bridge_slave_1: entered promiscuous mode [ 1423.320699][ T5145] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1423.418214][T29865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.472695][T29865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.521796][ T5145] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1423.552526][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.563918][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.570659][ T5145] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1423.662407][ T5145] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1423.709440][ T5145] usb 3-1: USB disconnect, device number 51 [ 1423.723170][T29865] team0: Port device team_slave_0 added [ 1423.729118][T27735] Bluetooth: hci2: command tx timeout [ 1423.782435][T29865] team0: Port device team_slave_1 added [ 1423.932168][T29865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.007987][T29865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.051295][T29865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.106777][T29865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.137658][T29865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.224001][T29865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.394270][T29865] hsr_slave_0: entered promiscuous mode [ 1424.427897][T29865] hsr_slave_1: entered promiscuous mode [ 1424.444248][T29865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.463428][T29865] Cannot create hsr debugfs directory [ 1424.505943][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6514'. [ 1425.199850][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6517'. [ 1425.749291][T25045] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1425.969161][T25045] usb 3-1: Using ep0 maxpacket: 8 [ 1425.987272][T25045] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.021590][T25045] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1426.046563][T25045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.080100][T25045] usb 3-1: config 0 descriptor?? [ 1426.106201][T30045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1426.295615][T29865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1426.312696][ T5145] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1426.323980][ T7794] usb 3-1: USB disconnect, device number 52 [ 1426.335072][T29865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1426.396044][T29865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1426.436125][T29865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1426.521464][ T5145] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1426.544386][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.596055][ T5145] usb 2-1: config 0 descriptor?? [ 1426.617116][ T5145] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1426.886538][T29865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.895803][T25057] usb 2-1: USB disconnect, device number 77 [ 1426.974747][T29865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.022831][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.030287][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.058172][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.065490][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.341450][T29865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.450761][T30068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6533'. [ 1427.486632][T29865] veth0_vlan: entered promiscuous mode [ 1427.533719][T29865] veth1_vlan: entered promiscuous mode [ 1427.649665][T29865] veth0_macvtap: entered promiscuous mode [ 1427.682949][T29865] veth1_macvtap: entered promiscuous mode [ 1427.731008][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6534'. [ 1427.757248][T12127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1427.776082][T12127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1427.786826][T12127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1427.801059][T12127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1427.812667][T12127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1427.820528][T12127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1427.839177][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.909079][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.918957][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.979619][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.005867][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.040357][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.077254][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.099077][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.118581][T30090] netlink: 'syz.3.6533': attribute type 3 has an invalid length. [ 1428.121277][T29865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.152887][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.179056][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.188955][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.229111][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.245226][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.260694][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.281314][T29865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.309054][T29865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.332828][T29865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.416222][T29865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.444428][T29865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.464263][T29865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.489840][T29865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.035208][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.093947][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.178583][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.205441][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.322592][T30085] chnl_net:caif_netlink_parms(): no params data found [ 1429.430831][ T7770] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1429.513509][ T5145] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1429.642115][ T7770] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1429.665801][T30085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.674852][ T7770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.704063][T30085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.731079][ T5145] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1429.732803][ T7770] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1429.756576][T30085] bridge_slave_0: entered allmulticast mode [ 1429.756627][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1429.781617][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1429.791100][T30085] bridge_slave_0: entered promiscuous mode [ 1429.805215][ T7770] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1429.825699][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1429.828027][T30085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.845934][ T7770] usb 4-1: Manufacturer: syz [ 1429.854351][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1429.860821][ T7770] usb 4-1: config 0 descriptor?? [ 1429.870009][T27735] Bluetooth: hci4: command tx timeout [ 1429.881790][T30085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.899216][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1429.928663][T30085] bridge_slave_1: entered allmulticast mode [ 1429.959586][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1429.986008][T30085] bridge_slave_1: entered promiscuous mode [ 1430.012543][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.049090][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.083592][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.094027][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.122690][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.153155][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.159902][ T7770] rc_core: IR keymap rc-hauppauge not found [ 1430.159923][ T7770] Registered IR keymap rc-empty [ 1430.161261][ T7770] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1430.189643][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.220366][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.234422][ T7770] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 1430.249950][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.257461][T30085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.298462][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.315825][T30085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.333918][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.359280][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.391653][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.409191][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.443471][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.499418][ T5145] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1430.508395][ T5145] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1430.627518][T30085] team0: Port device team_slave_0 added [ 1430.634366][ T5145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1430.665951][ T5145] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1430.736481][T30085] team0: Port device team_slave_1 added [ 1430.749852][ T5145] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1430.758270][ T5145] usb 2-1: Product: syz [ 1430.784912][T30158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6549'. [ 1430.808619][ T5145] usb 2-1: Manufacturer: syz [ 1430.817741][ T5145] usb 2-1: SerialNumber: syz [ 1430.860888][ T5145] usb 2-1: config 0 descriptor?? [ 1430.900357][ T5145] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1430.973024][T30085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.993846][T30085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.102192][T30085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.163877][T30085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.206448][T30085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1431.372059][T30085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.461898][ T7773] usb 2-1: USB disconnect, device number 78 [ 1431.535373][T30175] netlink: 'syz.2.6549': attribute type 3 has an invalid length. [ 1431.547900][ T7773] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1431.743806][T30085] hsr_slave_0: entered promiscuous mode [ 1431.784188][T30085] hsr_slave_1: entered promiscuous mode [ 1431.810541][T30085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.836958][T30085] Cannot create hsr debugfs directory [ 1431.949355][T27735] Bluetooth: hci4: command tx timeout [ 1432.831901][T30085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.225236][ T7767] usb 4-1: USB disconnect, device number 69 [ 1433.254499][T30085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.497068][T30085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.647382][T12127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1433.659686][T12127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1433.670093][T12127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1433.681414][T12127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1433.689467][T12127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1433.698639][T12127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1433.855724][T30085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.029326][T27735] Bluetooth: hci4: command tx timeout [ 1434.155322][T12077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.196277][ T29] audit: type=1326 audit(1720316257.468:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.248699][ T29] audit: type=1326 audit(1720316257.508:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.351516][ T29] audit: type=1326 audit(1720316257.508:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.543337][ T29] audit: type=1326 audit(1720316257.508:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.573649][ T29] audit: type=1326 audit(1720316257.508:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.601099][T12077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.652324][ T29] audit: type=1326 audit(1720316257.548:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.718373][ T29] audit: type=1326 audit(1720316257.548:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.873319][ T29] audit: type=1326 audit(1720316257.548:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1434.908625][T12077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.957332][ T29] audit: type=1326 audit(1720316257.548:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1435.059258][ T29] audit: type=1326 audit(1720316257.558:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30224 comm="syz.2.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8300f75bd9 code=0x7ffc0000 [ 1435.269451][T12077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.353976][T30085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1435.385529][T30085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1435.405438][T30085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1435.438502][T30085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1435.670641][T12077] bridge_slave_1: left allmulticast mode [ 1435.684399][T12077] bridge_slave_1: left promiscuous mode [ 1435.710977][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.742973][T12077] bridge_slave_0: left allmulticast mode [ 1435.748660][T12077] bridge_slave_0: left promiscuous mode [ 1435.764526][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.789329][T27735] Bluetooth: hci2: command tx timeout [ 1436.113176][T27735] Bluetooth: hci4: command tx timeout [ 1436.866207][T30310] netlink: 'syz.1.6589': attribute type 3 has an invalid length. [ 1436.967324][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6599'. [ 1437.050168][T12077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.094456][T12077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.145745][T12077] bond0 (unregistering): Released all slaves [ 1437.217341][T30285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1437.300356][T30215] chnl_net:caif_netlink_parms(): no params data found [ 1437.598534][T30324] netlink: 'syz.3.6602': attribute type 11 has an invalid length. [ 1437.810831][T27735] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1437.869201][T27735] Bluetooth: hci2: command tx timeout [ 1438.138132][T12077] hsr_slave_0: left promiscuous mode [ 1438.186235][T12077] hsr_slave_1: left promiscuous mode [ 1438.194162][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.219235][T12077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.236466][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.249295][ T7794] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1438.268101][T12077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.365057][T12077] veth1_macvtap: left promiscuous mode [ 1438.398325][T12077] veth0_macvtap: left promiscuous mode [ 1438.409046][T12077] veth1_vlan: left promiscuous mode [ 1438.414686][T12077] veth0_vlan: left promiscuous mode [ 1438.489678][ T7794] usb 2-1: Using ep0 maxpacket: 8 [ 1438.512281][ T7794] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1438.541427][ T7794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.561617][ T7794] usb 2-1: Product: syz [ 1438.583201][ T7794] usb 2-1: Manufacturer: syz [ 1438.598148][ T7794] usb 2-1: SerialNumber: syz [ 1438.624006][ T7794] usb 2-1: config 0 descriptor?? [ 1438.868532][ T7794] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1439.592542][T12077] team0 (unregistering): Port device team_slave_1 removed [ 1439.675996][T12077] team0 (unregistering): Port device team_slave_0 removed [ 1439.949575][T27735] Bluetooth: hci2: command tx timeout [ 1440.378381][T30215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.386263][T30215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.395116][T30215] bridge_slave_0: entered allmulticast mode [ 1440.411707][T30215] bridge_slave_0: entered promiscuous mode [ 1440.455049][T30367] netlink: 'syz.3.6614': attribute type 11 has an invalid length. [ 1440.544667][T30215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.562158][T30215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.590555][T30215] bridge_slave_1: entered allmulticast mode [ 1440.598613][T30215] bridge_slave_1: entered promiscuous mode [ 1440.662271][ T7794] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1440.691338][ T7794] usb 2-1: USB disconnect, device number 79 [ 1440.761985][T30215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.801364][T30085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.813842][T30215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.968829][T27735] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1441.024350][T30215] team0: Port device team_slave_0 added [ 1441.074293][T30215] team0: Port device team_slave_1 added [ 1441.207996][T30085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.225948][T30215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.249112][T30215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.295113][T30215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.346858][T30215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.374152][T30215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.453325][T30215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.498908][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.506130][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.554003][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.561293][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.651125][T30215] hsr_slave_0: entered promiscuous mode [ 1441.658010][T30215] hsr_slave_1: entered promiscuous mode [ 1441.667118][T30215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.675404][T30215] Cannot create hsr debugfs directory [ 1441.946745][T30085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1442.029921][T27735] Bluetooth: hci2: command tx timeout [ 1442.075108][T30085] veth0_vlan: entered promiscuous mode [ 1442.111907][T30085] veth1_vlan: entered promiscuous mode [ 1442.374513][T30085] veth0_macvtap: entered promiscuous mode [ 1442.412816][T30085] veth1_macvtap: entered promiscuous mode [ 1442.485502][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.500343][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.514269][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.535642][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.546052][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.562658][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.574263][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.587836][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.600574][T30085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.626541][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.639189][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.649648][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.660258][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.671348][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.681956][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.691815][T30085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.702326][T30085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.715385][T30085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.727718][T30085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.737060][T30085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.746392][T30085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.756806][T30085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.936949][T30215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1442.961945][T30215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1442.983363][T30215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1442.984670][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.001930][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.012721][T30215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1443.066081][T24861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.089680][T24861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.282387][T30215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.328623][T30215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.382560][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.389820][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.467748][T25057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.474960][T25057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.710020][T30215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.850871][T30215] veth0_vlan: entered promiscuous mode [ 1443.913312][T30215] veth1_vlan: entered promiscuous mode [ 1444.037982][T30215] veth0_macvtap: entered promiscuous mode [ 1444.061549][T30215] veth1_macvtap: entered promiscuous mode [ 1444.105927][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.129132][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.156364][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.245743][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.301495][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.338239][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.363156][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.396839][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.408219][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.419414][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.451592][T30215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.538927][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.566500][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.586831][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.616044][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.635719][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.646938][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.666532][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.697001][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.713040][T30215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.727829][T30215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.750517][T30215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.770841][T30215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.780560][T30215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.792733][T30215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.803673][T30215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.890227][ T7773] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1444.949203][ T5145] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1445.027804][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.071766][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.091399][ T7773] usb 4-1: Using ep0 maxpacket: 8 [ 1445.111389][T15850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.121239][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1445.121260][ T29] audit: type=1326 audit(1720316268.398:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30444 comm="syz.1.6622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda1d75bd9 code=0x7fc00000 [ 1445.139162][ T7773] usb 4-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 1445.169077][T15850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.181181][ T5145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.199853][ T5145] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 1445.218167][ T7773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.247114][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.256023][ T7773] usb 4-1: config 0 descriptor?? [ 1445.288162][ T5145] usb 3-1: config 0 descriptor?? [ 1445.313559][ T5145] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1445.552415][ T7794] usb 4-1: USB disconnect, device number 70 [ 1445.586211][ T5145] usb 3-1: USB disconnect, device number 53 [ 1446.271779][T30505] netlink: 'syz.4.6635': attribute type 11 has an invalid length. [ 1447.767958][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1447.846341][T27735] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1447.878422][T30557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1448.051449][T30557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1448.462382][T30571] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1448.601479][T30578] netlink: 'syz.0.6652': attribute type 17 has an invalid length. [ 1448.649262][T30578] lo: entered promiscuous mode [ 1448.699222][ T7773] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1448.789207][T30568] lo: left promiscuous mode [ 1448.891848][ T7773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1448.919123][ T5145] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1448.920045][ T7773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1448.954047][ T7773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1448.999470][ T7773] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1449.016103][ T7773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.028475][ T7773] usb 3-1: config 0 descriptor?? [ 1449.131896][ T5145] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.179265][ T5145] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.235066][T30597] netlink: 'syz.0.6658': attribute type 29 has an invalid length. [ 1449.245896][T30597] netlink: 'syz.0.6658': attribute type 3 has an invalid length. [ 1449.254371][T30597] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1449.276355][ T5145] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1449.294729][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.323518][ T5145] usb 5-1: config 0 descriptor?? [ 1449.358720][ T5145] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 1449.381501][ T5145] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 1449.409452][ T5145] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1449.481419][ T7773] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 1449.489571][ T45] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1449.578929][ T7773] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1449.631063][ T7773] usb 5-1: USB disconnect, device number 68 [ 1449.729208][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 1449.744313][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.770439][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1449.799316][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1449.839038][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.898015][ T45] usb 4-1: config 0 descriptor?? [ 1449.904677][T30589] delete_channel: no stack [ 1450.028496][ T5145] usb 3-1: USB disconnect, device number 54 [ 1450.725481][T30608] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1450.749220][T30608] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1451.499578][T30633] netlink: 'syz.4.6672': attribute type 1 has an invalid length. [ 1452.225184][ T5145] usb 4-1: USB disconnect, device number 71 [ 1452.399163][T25045] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1452.602100][T25045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1452.613453][T25045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1452.641776][T25045] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1452.679100][T25045] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1452.698564][T25045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.727389][T25045] usb 3-1: config 0 descriptor?? [ 1452.845729][ T8] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1453.050402][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1453.079121][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.110523][ T8] usb 1-1: config 0 descriptor?? [ 1453.119518][ T8] cp210x 1-1:0.0: cp210x converter detected [ 1453.178497][T25045] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1453.210235][T25045] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1453.540096][ T8] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1453.594750][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1453.633618][ T8] usb 3-1: USB disconnect, device number 55 [ 1453.794031][ T5145] usb 1-1: USB disconnect, device number 81 [ 1453.835108][ T5145] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1453.869536][ T5145] cp210x 1-1:0.0: device disconnected [ 1454.195867][T27735] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1454.206206][T27735] Bluetooth: hci3: Injecting HCI hardware error event [ 1454.216129][T12127] Bluetooth: hci3: hardware error 0x00 [ 1454.644773][T30677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6689'. [ 1455.147071][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.169168][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.176972][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.199155][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.218655][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.248199][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.262081][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.315129][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1455.361245][T30694] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 1456.050248][ T8] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1456.259173][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1456.272164][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.356815][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.370898][T12127] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1456.395323][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1456.457062][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1456.535403][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1456.555780][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1456.618703][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.665613][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.700182][ T8] usb 4-1: Product: syz [ 1456.704420][ T8] usb 4-1: Manufacturer: syz [ 1456.765624][ T8] usb 4-1: SerialNumber: syz [ 1457.037150][T30699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.051554][T30699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.134659][T30718] input: syz1 as /devices/virtual/input/input71 [ 1457.521954][ T35] ------------[ cut here ]------------ [ 1457.528037][ T35] WARNING: CPU: 1 PID: 35 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.538666][ T35] Modules linked in: [ 1457.542931][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1457.554387][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1457.565619][ T35] Workqueue: phy291 ieee80211_color_collision_detection_work [ 1457.573442][ T35] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.580216][ T35] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 09 db b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 fb da b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ed da b8 f6 c6 05 14 81 ba 04 01 90 48 [ 1457.600011][ T35] RSP: 0018:ffffc90000ab7aa0 EFLAGS: 00010293 [ 1457.606177][ T35] RAX: ffffffff8add4cb5 RBX: 0000000000000000 RCX: ffff888017e8bc00 [ 1457.614362][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1457.622496][ T35] RBP: ffffc90000ab7bb0 R08: ffffffff8add47e2 R09: 1ffffffff1f5a92d [ 1457.630853][ T35] R10: dffffc0000000000 R11: ffffffff8af8c6b0 R12: 1ffff92000156f5c [ 1457.638922][ T35] R13: ffff888071af4000 R14: ffff888071af4cb0 R15: dffffc0000000000 [ 1457.646981][ T35] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1457.656978][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1457.664420][ T35] CR2: 0000000020df9000 CR3: 000000007a384000 CR4: 00000000003506f0 [ 1457.672529][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1457.680618][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1457.688647][ T35] Call Trace: [ 1457.692037][ T35] [ 1457.694992][ T35] ? __warn+0x163/0x4e0 [ 1457.699254][ T35] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.705119][ T35] ? report_bug+0x2b3/0x500 [ 1457.709761][ T35] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.715621][ T35] ? handle_bug+0x3e/0x70 [ 1457.720149][ T35] ? exc_invalid_op+0x1a/0x50 [ 1457.724926][ T35] ? asm_exc_invalid_op+0x1a/0x20 [ 1457.730082][ T35] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 1457.737603][ T35] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 1457.743499][ T35] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 1457.749384][ T35] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.755230][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 1457.761184][ T35] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1457.767213][ T35] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 1457.774121][ T35] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1457.780664][ T35] ? process_scheduled_works+0x945/0x1830 [ 1457.786420][ T35] process_scheduled_works+0xa2c/0x1830 [ 1457.792171][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 1457.798207][ T35] ? assign_work+0x364/0x3d0 [ 1457.802851][ T35] worker_thread+0x86d/0xd50 [ 1457.807501][ T35] ? __kthread_parkme+0x169/0x1d0 [ 1457.812582][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1457.817720][ T35] kthread+0x2f0/0x390 [ 1457.821863][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1457.827007][ T35] ? __pfx_kthread+0x10/0x10 [ 1457.831662][ T35] ret_from_fork+0x4b/0x80 [ 1457.836104][ T35] ? __pfx_kthread+0x10/0x10 [ 1457.840770][ T35] ret_from_fork_asm+0x1a/0x30 [ 1457.845681][ T35] [ 1457.848731][ T35] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1457.856034][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1457.866898][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1457.876989][ T35] Workqueue: phy291 ieee80211_color_collision_detection_work [ 1457.884412][ T35] Call Trace: [ 1457.887734][ T35] [ 1457.890687][ T35] dump_stack_lvl+0x241/0x360 [ 1457.895391][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1457.900626][ T35] ? __pfx__printk+0x10/0x10 [ 1457.905239][ T35] ? vscnprintf+0x5d/0x90 [ 1457.909597][ T35] panic+0x349/0x860 [ 1457.913526][ T35] ? __warn+0x172/0x4e0 [ 1457.917704][ T35] ? __pfx_panic+0x10/0x10 [ 1457.922254][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 1457.927230][ T35] __warn+0x346/0x4e0 [ 1457.931245][ T35] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.937069][ T35] report_bug+0x2b3/0x500 [ 1457.941424][ T35] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.947266][ T35] handle_bug+0x3e/0x70 [ 1457.951459][ T35] exc_invalid_op+0x1a/0x50 [ 1457.955997][ T35] asm_exc_invalid_op+0x1a/0x20 [ 1457.960874][ T35] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 1457.967325][ T35] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 09 db b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 fb da b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ed da b8 f6 c6 05 14 81 ba 04 01 90 48 [ 1457.986974][ T35] RSP: 0018:ffffc90000ab7aa0 EFLAGS: 00010293 [ 1457.993084][ T35] RAX: ffffffff8add4cb5 RBX: 0000000000000000 RCX: ffff888017e8bc00 [ 1458.001083][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1458.009442][ T35] RBP: ffffc90000ab7bb0 R08: ffffffff8add47e2 R09: 1ffffffff1f5a92d [ 1458.017428][ T35] R10: dffffc0000000000 R11: ffffffff8af8c6b0 R12: 1ffff92000156f5c [ 1458.025506][ T35] R13: ffff888071af4000 R14: ffff888071af4cb0 R15: dffffc0000000000 [ 1458.033529][ T35] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 1458.041149][ T35] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 1458.047010][ T35] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 1458.052874][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 1458.057933][ T35] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1458.063949][ T35] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 1458.070150][ T35] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1458.076524][ T35] ? process_scheduled_works+0x945/0x1830 [ 1458.082276][ T35] process_scheduled_works+0xa2c/0x1830 [ 1458.087910][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 1458.093930][ T35] ? assign_work+0x364/0x3d0 [ 1458.098553][ T35] worker_thread+0x86d/0xd50 [ 1458.103314][ T35] ? __kthread_parkme+0x169/0x1d0 [ 1458.108385][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1458.113539][ T35] kthread+0x2f0/0x390 [ 1458.117655][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1458.122805][ T35] ? __pfx_kthread+0x10/0x10 [ 1458.127444][ T35] ret_from_fork+0x4b/0x80 [ 1458.131883][ T35] ? __pfx_kthread+0x10/0x10 [ 1458.136509][ T35] ret_from_fork_asm+0x1a/0x30 [ 1458.141409][ T35] [ 1458.144776][ T35] Kernel Offset: disabled [ 1458.149366][ T35] Rebooting in 86400 seconds..