last executing test programs: 9.758400578s ago: executing program 3 (id=570): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x450, 0x2, [@TCA_FW_POLICE={0x44c, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x2, 0x489, 0x9, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x4931, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x8001, 0x0, 0xe9d1, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1, 0x4, 0x2, 0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0xced6, 0x0, 0x0, 0x36f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x22e97f, 0xf996, 0x8, 0x0, 0x0, 0x9, 0x7, 0x0, 0x10, 0x0, 0x0, 0x82, 0x2000, 0x6, 0x0, 0xffffff3d, 0x0, 0x2, 0x4, 0x10001, 0x0, 0x2, 0x8000, 0x5, 0x6, 0x5, 0x32a, 0x0, 0x0, 0x84a, 0x2, 0x3, 0x0, 0x6, 0x0, 0x0, 0x10001, 0xffffffff, 0x65, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9, 0x8001, 0x200, 0x5, 0x0, 0x3, 0x4, 0x9, 0x401, 0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9, 0x5, 0xd, 0x8, 0x1ff, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x17e2, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6a, 0x0, 0xe937, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x96ac, 0x0, 0x0, 0x0, 0x2, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x5, 0x3, 0xc6, 0x1, 0x4, 0x0, 0x3f, 0x0, 0x7fffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x9, 0x9, 0x80000000, 0x4, 0x5, 0x1, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0xcfbc, 0x7, 0x0, 0x0, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0xf, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9, 0x4, 0xdf}}]}]}}]}, 0x47c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.915806755s ago: executing program 3 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000095eba2b55b000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 7.916527247s ago: executing program 3 (id=576): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="0000010400000185678950dd2f38c1bfef3ba495f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b13, 0x0) 7.031821281s ago: executing program 0 (id=577): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68900000020600000d00000000000000000000000900020073797a3200000000050004000000000005000100070000000d0003006c6973743a73657400000000"], 0x40}}, 0x8001) ioctl$KVM_RUN(r3, 0xae80, 0x0) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00c983476e0499"], 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) 6.7995984s ago: executing program 2 (id=579): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cc8fdb002006000000000000"], 0x0) 6.635807914s ago: executing program 2 (id=581): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f00000003c0)={0x40, 0x7, 0x81, {0x81, 0x7, "5faa2dfbc0a4e90c3c65fe925d9081c0acb202de136a04b41584c8f40dcb291b5d8baf245eecd5d3d1e1fd8588219751c17a8d01c76a030b26d13d1d13eac01ac8051699588ec1c4c9ff3cfec6765e45675ad611c31053b43289360c94a176eced7f5b530c8496122335ea58b148aa4d66c35835de9957f97dcf15b6fb48bd"}}, &(0x7f0000000500)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "1c5215dae6c134a2c59143cc22e7fc730f52d2fe3d0fdcb71515efacf8b6d367a7f56cf0e308650fa39098cdad581714d8d08b3c7f08dfaace6018ea4e9d1e5f1b0856d2da9cafb1d873b30d902f2dcaa3d18ebd5385b6cfdb6922d5d679350eb4b2979ab19ab7814db1d05fa771a0e3b079c03d19666b0be193f1cf8f6eca63f438466c98af59a60d417bed2fe9cdb48931c4f991b06f208fd70197ef48ea3f007d9487fa002e2c39a14786645e91de24d5c83539fbc29dabdadd9faad3aa1a7c0547572085bbe37f755807c2d7c0d68434698ba0bdfa4cf5655e4043b242c94a"}}, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x9, "5a3efcdc"}, @local=@item_012={0x2, 0x2, 0x9, "dbbf"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x346, 0xb, 0x1, {0x22, 0x277}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000600)={0x40, 0xf, 0xbe, "c576139b09e993fcfb05b349220cd6a7a59ee840659ff1e5b0dbbbbc92b72a684cadd42f630de22c6331c9802dd405106d143017a33e010fbf9addbb1d8eb916c099a3a35c4b0b7de900723535b80afd033beb008d9fbda14788554daf1e4d13ca02342934350700cd824d9ec80b0264224fc422717c9ec92108bb51e6d1283f1d22762ba755b2d8743ba811211d4be118821c0809af78c3253a69f55207e4898b807e2b71df0694d2b8b1efd3817b6d41a5f09e5057dd77260bf3459156"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7b}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x1, 0xaf, "06bb349e9867769d192be6dcd221a800e71f9e2fc731fbdd0b31e0d6bee6fb49d68467f52733d5642ff038f9b7b9cfbbe2e142038926e863886e22e067593f9ebbe9abfef3bb313d4962c80c7e00a62da1236efdf760e7afb1e5c117a4ae094042336f08d2289e25f98518c6f33d27d70fab230ccfb954f1bcb750b123c4832607a4a208b2ffdba34b9758894a0e8895398343cbaa5cffd58b962674accb26a3e6a49ee4db0da8ba0d5db17a686bdd"}, &(0x7f0000000300)={0x20, 0x3, 0x1}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYRES16=0x0], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x5452, &(0x7f0000000000)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r9, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x0, 0x12}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYRESOCT=r6, @ANYRES16=r9], 0x44}, 0x1, 0x0, 0x0, 0x2040806}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000140)={r12}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4060000000000007111bd00000000208510000002000000850000000000000095000000000000009500000000000000b72f8285def2644330a88887ce33c09efdbf77ae07ba6580ede33dc15d9f5b59804ddb4460960b0e9b98910664be87f64ac26625d1"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 6.187384736s ago: executing program 4 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2, @ANYRES8=r2], 0x44}}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x5}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r3, &(0x7f0000000180)=""/35, 0x23, 0x12000, &(0x7f00000001c0)={0xa, 0x4e23, 0x1ff, @private1, 0x1bf}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.919577028s ago: executing program 4 (id=585): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="040048000100000000010000004000000000008490783ffdedffac1414aa00008d15fe20817b87000000000000", @ANYRES64, @ANYRESOCT=r1, @ANYRES16, @ANYRESHEX=r0], 0x4e) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1fa}, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa}) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.765619137s ago: executing program 0 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000095eba2b55b000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 4.6351403s ago: executing program 3 (id=587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x0, 0x800, 0x800008) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000880)=""/116, 0x74}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r5, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x78, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x56, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random=0xb, 0x1088, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x0, 0x0, 0x1}}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x78}}, 0x20000004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x1, 0x0) r9 = epoll_create1(0x0) r10 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018f800000000000055df76b20c0000000c0000000009000000000000303000"/45], &(0x7f0000000180)=""/34, 0x29, 0x22, 0x1, 0x3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r12, 0x10000002, 0x1, 0x1}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 3.759151192s ago: executing program 4 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = io_uring_setup(0x4a2f, &(0x7f0000000000)) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r3, r1, 0x0, 0x7) r4 = socket(0x840000000002, 0x3, 0x100) sendfile(r4, r1, 0x0, 0x4) dup2(r3, r2) 3.758170303s ago: executing program 0 (id=589): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) socket$nl_route(0x10, 0x3, 0x0) 3.464290633s ago: executing program 0 (id=590): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsu(0x0, 0xfffffffffffffffd, 0x2800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000380)={0x9, @output={0x1000, 0x1, {0x4, 0x19}, 0x6, 0x1}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x5dc5, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/25, 0x19}}], 0x1, 0x45833af92e4b39ff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r6) 3.40773272s ago: executing program 2 (id=591): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cc8fdb0020060000000000000000002000ffffac1e0001ff0200"], 0x0) 3.405909833s ago: executing program 3 (id=592): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x500, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x2800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000380)={0x9, @output={0x1000, 0x1, {0x4, 0x19}, 0x6, 0x1}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000580)="09000000010001", 0x7) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x5dc5, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r5) 3.261277952s ago: executing program 2 (id=594): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000001e80)=""/96, 0x60) read(r0, 0x0, 0x0) 3.127300095s ago: executing program 2 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="ccef9940e22d4e9ae960cade3854edabf197968ee02aa88d954c8c61bc4a669f7562610b4424ecbd1f807ca5680fe1b1887ce0b3a82da3d24ec9c3f2ff91a28d951f2345d8bf36098aa62c619939c1b0edcd6a28bdfcdde77e7148", @ANYRES32=r2, @ANYRES8=r2], 0x44}}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x5}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r3, &(0x7f0000000180)=""/35, 0x23, 0x12000, &(0x7f00000001c0)={0xa, 0x4e23, 0x1ff, @private1, 0x1bf}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.092588163s ago: executing program 1 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2, @ANYRES8=r2], 0x44}}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x5}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r3, &(0x7f0000000180)=""/35, 0x23, 0x12000, &(0x7f00000001c0)={0xa, 0x4e23, 0x1ff, @private1, 0x1bf}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.942705955s ago: executing program 2 (id=597): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="0000010400000185678950dd2f38c1bfef3ba495f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b13, 0x0) 2.831293435s ago: executing program 1 (id=598): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e80080005000000000008000300000000000825dd0000000000100001000000000000000000000000000800070000000000080001"], 0x64}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x238, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@ecn={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) sendto$inet(r6, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x188, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff2b2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3c6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1633a117}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18000000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x60}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 2.758607968s ago: executing program 4 (id=599): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="040048000100000000010000004000000000008490783ffdedffac1414aa00008d15fe20817b87000000000000", @ANYRES64, @ANYRESOCT=r1, @ANYRES16, @ANYRESHEX=r0], 0x4e) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1fa}, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa}) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.419854863s ago: executing program 4 (id=600): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) socket$nl_route(0x10, 0x3, 0x0) 1.276084969s ago: executing program 4 (id=601): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f00000003c0)={0x40, 0x7, 0x81, {0x81, 0x7, "5faa2dfbc0a4e90c3c65fe925d9081c0acb202de136a04b41584c8f40dcb291b5d8baf245eecd5d3d1e1fd8588219751c17a8d01c76a030b26d13d1d13eac01ac8051699588ec1c4c9ff3cfec6765e45675ad611c31053b43289360c94a176eced7f5b530c8496122335ea58b148aa4d66c35835de9957f97dcf15b6fb48bd"}}, &(0x7f0000000500)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "1c5215dae6c134a2c59143cc22e7fc730f52d2fe3d0fdcb71515efacf8b6d367a7f56cf0e308650fa39098cdad581714d8d08b3c7f08dfaace6018ea4e9d1e5f1b0856d2da9cafb1d873b30d902f2dcaa3d18ebd5385b6cfdb6922d5d679350eb4b2979ab19ab7814db1d05fa771a0e3b079c03d19666b0be193f1cf8f6eca63f438466c98af59a60d417bed2fe9cdb48931c4f991b06f208fd70197ef48ea3f007d9487fa002e2c39a14786645e91de24d5c83539fbc29dabdadd9faad3aa1a7c0547572085bbe37f755807c2d7c0d68434698ba0bdfa4cf5655e4043b242c94a"}}, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x9, "5a3efcdc"}, @local=@item_012={0x2, 0x2, 0x9, "dbbf"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x346, 0xb, 0x1, {0x22, 0x277}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000600)={0x40, 0xf, 0xbe, "c576139b09e993fcfb05b349220cd6a7a59ee840659ff1e5b0dbbbbc92b72a684cadd42f630de22c6331c9802dd405106d143017a33e010fbf9addbb1d8eb916c099a3a35c4b0b7de900723535b80afd033beb008d9fbda14788554daf1e4d13ca02342934350700cd824d9ec80b0264224fc422717c9ec92108bb51e6d1283f1d22762ba755b2d8743ba811211d4be118821c0809af78c3253a69f55207e4898b807e2b71df0694d2b8b1efd3817b6d41a5f09e5057dd77260bf3459156"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7b}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x1, 0xaf, "06bb349e9867769d192be6dcd221a800e71f9e2fc731fbdd0b31e0d6bee6fb49d68467f52733d5642ff038f9b7b9cfbbe2e142038926e863886e22e067593f9ebbe9abfef3bb313d4962c80c7e00a62da1236efdf760e7afb1e5c117a4ae094042336f08d2289e25f98518c6f33d27d70fab230ccfb954f1bcb750b123c4832607a4a208b2ffdba34b9758894a0e8895398343cbaa5cffd58b962674accb26a3e6a49ee4db0da8ba0d5db17a686bdd"}, &(0x7f0000000300)={0x20, 0x3, 0x1}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYRES16=0x0], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x5452, &(0x7f0000000000)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r9, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x0, 0x12}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYRESOCT=r6, @ANYRES16=r9], 0x44}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000140)={r12}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4060000000000007111bd00000000208510000002000000850000000000000095000000000000009500000000000000b72f8285def2644330a88887ce33c09efdbf77ae07ba6580ede33dc15d9f5b59804ddb4460960b0e9b98910664be87f64ac26625d1"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 1.139787945s ago: executing program 0 (id=602): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x8, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/189, 0xbd}], 0x5, 0x7, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 607.446635ms ago: executing program 3 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x61, &(0x7f00000003c0)=ANY=[], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d56549b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 412.958746ms ago: executing program 1 (id=604): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cc8fdb0020060000000000000000002000ffffac1e0001ff0200"], 0x0) 358.642669ms ago: executing program 1 (id=605): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000001e80)=""/96, 0x60) read(r0, 0x0, 0x0) 191.577766ms ago: executing program 1 (id=606): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x450, 0x2, [@TCA_FW_POLICE={0x44c, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x2, 0x489, 0x9, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x4931, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x8001, 0x0, 0xe9d1, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1, 0x4, 0x2, 0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0xced6, 0x0, 0x0, 0x36f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x22e97f, 0xf996, 0x8, 0x0, 0x0, 0x9, 0x7, 0x0, 0x10, 0x0, 0x0, 0x82, 0x2000, 0x6, 0x0, 0xffffff3d, 0x0, 0x2, 0x4, 0x10001, 0x0, 0x2, 0x8000, 0x5, 0x6, 0x5, 0x32a, 0x0, 0x0, 0x84a, 0x2, 0x3, 0x0, 0x6, 0x0, 0x0, 0x10001, 0xffffffff, 0x65, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9, 0x8001, 0x200, 0x5, 0x0, 0x3, 0x4, 0x9, 0x401, 0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9, 0x5, 0xd, 0x8, 0x1ff, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x17e2, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6a, 0x0, 0xe937, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x96ac, 0x0, 0x0, 0x0, 0x2, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x5, 0x3, 0xc6, 0x1, 0x4, 0x0, 0x3f, 0x0, 0x7fffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x9, 0x9, 0x80000000, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0xcfbc, 0x7, 0x0, 0x0, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0xf, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9, 0x4, 0xdf}}]}]}}]}, 0x47c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 126.790578ms ago: executing program 0 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES8, @ANYRES32=r0, @ANYBLOB="ccef9940e22d4e9ae960cade3854edabf197968ee02aa88d954c8c61bc4a669f7562610b4424ecbd1f807ca5680fe1b1887ce0b3a82da3d24ec9c3f2ff91a28d951f2345d8bf36098aa62c619939c1b0edcd6a28bdfcdde77e7148", @ANYRES32=r2, @ANYRES8=r2], 0x44}}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x5}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r3, &(0x7f0000000180)=""/35, 0x23, 0x12000, &(0x7f00000001c0)={0xa, 0x4e23, 0x1ff, @private1, 0x1bf}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 0s ago: executing program 1 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r2, @ANYRES8=r2], 0x44}}, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x5}}, {{@in6=@mcast2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(r3, &(0x7f0000000180)=""/35, 0x23, 0x12000, &(0x7f00000001c0)={0xa, 0x4e23, 0x1ff, @private1, 0x1bf}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) kernel console output (not intermixed with test programs): adv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.217813][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.224357][ T5081] Bluetooth: hci1: command tx timeout [ 61.230669][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.241013][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.267090][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.279207][ T5081] Bluetooth: hci2: command tx timeout [ 61.296072][ T5081] Bluetooth: hci4: command tx timeout [ 61.296091][ T5088] Bluetooth: hci0: command tx timeout [ 61.296323][ T5088] Bluetooth: hci3: command tx timeout [ 61.315833][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.396886][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.405979][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.432831][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.465668][ T5078] hsr_slave_0: entered promiscuous mode [ 61.472468][ T5078] hsr_slave_1: entered promiscuous mode [ 61.478648][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.486513][ T5078] Cannot create hsr debugfs directory [ 61.506960][ T5089] team0: Port device team_slave_0 added [ 61.516508][ T5089] team0: Port device team_slave_1 added [ 61.523053][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.530316][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.556341][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.571296][ T5075] hsr_slave_0: entered promiscuous mode [ 61.579483][ T5075] hsr_slave_1: entered promiscuous mode [ 61.586305][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.594214][ T5075] Cannot create hsr debugfs directory [ 61.677182][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.684610][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.711565][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.764495][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.772479][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.798973][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.829781][ T5074] hsr_slave_0: entered promiscuous mode [ 61.836253][ T5074] hsr_slave_1: entered promiscuous mode [ 61.847428][ T5074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.855866][ T5074] Cannot create hsr debugfs directory [ 62.024733][ T5089] hsr_slave_0: entered promiscuous mode [ 62.031348][ T5089] hsr_slave_1: entered promiscuous mode [ 62.037343][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.045464][ T5089] Cannot create hsr debugfs directory [ 62.250545][ T5073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.275159][ T5073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.286274][ T5073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.302882][ T5073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.388785][ T5075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.400998][ T5075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.424307][ T5075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.435703][ T5075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.528889][ T5078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.550740][ T5078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.600731][ T5078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.630339][ T5078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.703379][ T5074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.714876][ T5074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.732759][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.746469][ T5074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.768712][ T5074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.818306][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.866321][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.875210][ T5089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.890307][ T5089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.905412][ T5089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.918087][ T5089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.937070][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.944383][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.977891][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.985126][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.998563][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.034275][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.041437][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.084293][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.091759][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.236644][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.286217][ T5088] Bluetooth: hci1: command tx timeout [ 63.338230][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.355412][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.359635][ T5088] Bluetooth: hci3: command tx timeout [ 63.366957][ T5080] Bluetooth: hci4: command tx timeout [ 63.367508][ T5088] Bluetooth: hci0: command tx timeout [ 63.373648][ T5080] Bluetooth: hci2: command tx timeout [ 63.424500][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.431638][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.475120][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.516250][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.534393][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.541593][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.596961][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.604152][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.641825][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.648982][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.693367][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.729806][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.746407][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.753575][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.766608][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.773774][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.793993][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.988928][ T5073] veth0_vlan: entered promiscuous mode [ 64.055783][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.111240][ T5073] veth1_vlan: entered promiscuous mode [ 64.237755][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.273591][ T5073] veth0_macvtap: entered promiscuous mode [ 64.330716][ T5073] veth1_macvtap: entered promiscuous mode [ 64.451279][ T5078] veth0_vlan: entered promiscuous mode [ 64.473740][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.496885][ T5075] veth0_vlan: entered promiscuous mode [ 64.512096][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.527260][ T5073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.538717][ T5073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.551639][ T5073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.561073][ T5073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.575439][ T5078] veth1_vlan: entered promiscuous mode [ 64.594929][ T5075] veth1_vlan: entered promiscuous mode [ 64.678759][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.692534][ T5078] veth0_macvtap: entered promiscuous mode [ 64.736907][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.747767][ T5078] veth1_macvtap: entered promiscuous mode [ 64.786779][ T5075] veth0_macvtap: entered promiscuous mode [ 64.853809][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.863646][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.875742][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.888878][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.902951][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.911086][ T5075] veth1_macvtap: entered promiscuous mode [ 64.946200][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.958119][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.979809][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.995993][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.007285][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.017143][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.027616][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040691][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.058371][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.069372][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.079917][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.090926][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.103184][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.117123][ T5075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.126466][ T5075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.136879][ T5075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146831][ T5075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.176408][ T5078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.185865][ T5078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.194874][ T5078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.204509][ T5078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.226263][ T5074] veth0_vlan: entered promiscuous mode [ 65.237973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.240208][ T5074] veth1_vlan: entered promiscuous mode [ 65.256096][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.359634][ T5080] Bluetooth: hci1: command tx timeout [ 65.393747][ T5074] veth0_macvtap: entered promiscuous mode [ 65.411240][ T5074] veth1_macvtap: entered promiscuous mode [ 65.418130][ T5089] veth0_vlan: entered promiscuous mode [ 65.439533][ T5080] Bluetooth: hci2: command tx timeout [ 65.445006][ T5081] Bluetooth: hci0: command tx timeout [ 65.445030][ T5088] Bluetooth: hci4: command tx timeout [ 65.450487][ T5081] Bluetooth: hci3: command tx timeout [ 65.557554][ T5089] veth1_vlan: entered promiscuous mode [ 65.578730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.586755][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.586780][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.604299][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.635947][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.650508][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.660986][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.671502][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.682125][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.692642][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.703824][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.746788][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.757793][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.770079][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.780757][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.790622][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.801100][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.812279][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.828668][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.839551][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.865092][ T5089] veth0_macvtap: entered promiscuous mode [ 65.881673][ T5074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.890597][ T5074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.901360][ T5074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.910353][ T5074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.928837][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.938707][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.951590][ T5089] veth1_macvtap: entered promiscuous mode [ 66.068466][ T5164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.068927][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.093607][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.104360][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.114955][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.126348][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.137300][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.148768][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.154975][ T5164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.160208][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.181720][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.200905][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.218225][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.245055][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.275759][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.285844][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.297914][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.311473][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.328634][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.340610][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.423526][ T5089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446889][ T5089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469628][ T5089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.500970][ T5089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.547685][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.597348][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.639333][ T5172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7'. [ 66.654400][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.663150][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.672332][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.839711][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.869231][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 66.882133][ T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.901284][ T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.909967][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 66.933414][ T45] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 66.952424][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.994206][ T45] usb 5-1: config 0 descriptor?? [ 67.131069][ T5180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.204452][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.247231][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 67.464872][ T5088] Bluetooth: hci1: command tx timeout [ 67.519334][ T5086] Bluetooth: hci3: command tx timeout [ 67.525730][ T5081] Bluetooth: hci4: command tx timeout [ 67.531861][ T5080] Bluetooth: hci0: command tx timeout [ 67.539327][ T5088] Bluetooth: hci2: command tx timeout [ 67.918863][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.977666][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 68.030049][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.059284][ T8] usb 2-1: Product: syz [ 68.089053][ T8] usb 2-1: Manufacturer: syz [ 68.093699][ T8] usb 2-1: SerialNumber: syz [ 68.190093][ T8] usb 2-1: config 0 descriptor?? [ 68.272702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.276590][ T5167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.364763][ T5167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.303825][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.351531][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.386653][ T45] hid (null): report_id 0 is invalid [ 69.421146][ T45] hid (null): bogus close delimiter [ 69.454167][ T45] hid (null): unknown global tag 0xd [ 69.499914][ T45] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 69.508753][ T45] hid-generic 0003:0158:0100.0001: unexpected long global item [ 69.524859][ T5187] syz.3.10 (5187) used greatest stack depth: 18768 bytes left [ 69.606207][ T45] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 69.679689][ T45] usb 5-1: USB disconnect, device number 2 [ 69.894309][ T5198] tipc: Started in network mode [ 69.913195][ T5198] tipc: Node identity 067ac3f6e02, cluster identity 4711 [ 69.945057][ T5198] tipc: Enabled bearer , priority 0 [ 69.971757][ T5183] usb 2-1: USB disconnect, device number 2 [ 69.992418][ T5183] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -19 [ 70.009539][ T5183] f81534a_ctrl 2-1:0.0: failed to enable ports: -19 [ 70.103784][ T5200] tipc: Resetting bearer [ 70.231500][ T5197] tipc: Resetting bearer [ 70.359223][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.562044][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 70.590610][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.609651][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 71.369881][ T5183] tipc: Node number set to 3864708086 [ 71.379484][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.395744][ T8] usb 4-1: config 0 descriptor?? [ 71.575932][ T5212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13'. [ 71.924814][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.947170][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.858049][ T5183] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.070181][ T5183] usb 2-1: Using ep0 maxpacket: 8 [ 74.080582][ T5183] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 74.090240][ T5183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.098334][ T5183] usb 2-1: Product: syz [ 74.108388][ T5183] usb 2-1: Manufacturer: syz [ 74.123366][ T5183] usb 2-1: SerialNumber: syz [ 74.141530][ T5183] usb 2-1: config 0 descriptor?? [ 75.069250][ T5183] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 75.135940][ T5129] usb 4-1: USB disconnect, device number 2 [ 75.323239][ T5226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.634865][ T5183] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 75.666393][ T5183] usb 2-1: USB disconnect, device number 3 [ 75.761703][ T5197] tipc: Disabling bearer [ 76.820634][ T932] cfg80211: failed to load regulatory.db [ 77.137195][ T5138] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.144960][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.170447][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 77.177054][ T5088] Bluetooth: Wrong link type (-22) [ 77.182847][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 77.189931][ T5088] Bluetooth: Wrong link type (-22) [ 77.195651][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 77.202495][ T5088] Bluetooth: Wrong link type (-22) [ 77.854619][ T5138] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 77.862915][ T57] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.873446][ T5138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.884403][ T57] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.898561][ T5138] usb 4-1: config 0 has no interface number 0 [ 77.950507][ T57] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.993367][ T5138] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 78.059555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.071139][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.117377][ T5138] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 78.135052][ T57] usb 3-1: SerialNumber: syz [ 78.166905][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.211836][ T5138] usb 4-1: config 0 descriptor?? [ 78.268425][ T5138] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 78.383699][ T57] usb 3-1: cannot find UAC_HEADER [ 78.649432][ T5183] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.725644][ T57] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.741080][ T57] usb 3-1: USB disconnect, device number 2 [ 79.059128][ T5088] Bluetooth: hci1: command tx timeout [ 79.456459][ T11] usb 4-1: Failed to submit usb control message: -110 [ 79.532702][ T11] usb 4-1: unable to send the bmi data to the device: -110 [ 79.571103][ T11] usb 4-1: unable to get target info from device [ 79.579489][ T5183] usb 5-1: Using ep0 maxpacket: 32 [ 79.630659][ T11] usb 4-1: could not get target info (-110) [ 79.636649][ T11] usb 4-1: could not probe fw (-110) [ 79.679146][ T5183] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 79.725172][ T5183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.764210][ T5183] usb 5-1: Product: syz [ 79.772672][ T5183] usb 5-1: Manufacturer: syz [ 79.790523][ T5183] usb 5-1: SerialNumber: syz [ 79.803483][ T5264] Zero length message leads to an empty skb [ 79.828920][ T5183] usb 5-1: config 0 descriptor?? [ 79.843078][ T5084] udevd[5084]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.119663][ T5270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 80.292092][ T5253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.301136][ T57] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.325600][ T5253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.347757][ T5183] usb 4-1: USB disconnect, device number 3 [ 80.467903][ T5273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.509445][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 80.522874][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.540455][ T5275] tipc: Started in network mode [ 80.554966][ T5275] tipc: Node identity b299cc24bce4, cluster identity 4711 [ 80.564310][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 80.574623][ T5275] tipc: Enabled bearer , priority 0 [ 80.581598][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.603810][ T57] usb 3-1: config 0 descriptor?? [ 80.686166][ T5276] tipc: Resetting bearer [ 80.707371][ T57] usb 5-1: USB disconnect, device number 3 [ 80.740494][ T57] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 80.751638][ T57] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 80.776727][ T5274] tipc: Resetting bearer [ 81.836887][ T5138] tipc: Node number set to 243125284 [ 83.209636][ T5183] usb 3-1: USB disconnect, device number 3 [ 83.529337][ T5129] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.889505][ T5129] usb 5-1: Using ep0 maxpacket: 8 [ 83.990490][ T5129] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 84.059355][ T5129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.092380][ T5129] usb 5-1: Product: syz [ 84.113530][ T5129] usb 5-1: Manufacturer: syz [ 84.134293][ T5129] usb 5-1: SerialNumber: syz [ 84.190492][ T5129] usb 5-1: config 0 descriptor?? [ 84.434134][ T5129] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.491441][ T5183] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.560528][ T57] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.692085][ T5183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.712025][ T5183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.729213][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.737236][ T5183] usb 3-1: Product: syz [ 84.749062][ T5183] usb 3-1: Manufacturer: syz [ 84.765207][ T5183] usb 3-1: SerialNumber: syz [ 84.769170][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 84.782824][ T57] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 84.796490][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.830451][ T57] usb 4-1: config 0 descriptor?? [ 84.845400][ T57] gspca_main: sunplus-2.14.0 probing 041e:400b [ 85.198068][ T5129] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 85.222296][ T5129] usb 5-1: USB disconnect, device number 4 [ 86.037827][ T5183] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 86.044317][ T5183] cdc_ncm 3-1:1.0: bind() failure [ 86.054582][ T5183] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 86.062203][ T5183] cdc_ncm 3-1:1.1: bind() failure [ 86.229778][ T29] audit: type=1326 audit(1720946058.981:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5306 comm="syz.1.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3a7375bd9 code=0x0 [ 86.909803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 86.920251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.963777][ T57] gspca_sunplus: reg_w_riv err -110 [ 86.973279][ T57] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 87.040428][ T5274] tipc: Disabling bearer [ 87.089872][ T5322] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 87.114448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.360172][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 87.421589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.654399][ T5138] usb 3-1: USB disconnect, device number 4 [ 87.929355][ T5301] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 87.960197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.006341][ T5183] usb 4-1: USB disconnect, device number 4 [ 88.349664][ T5138] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.569186][ T5138] usb 3-1: Using ep0 maxpacket: 32 [ 88.629831][ T5138] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 88.639713][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.648064][ T5138] usb 3-1: Product: syz [ 88.714202][ T5138] usb 3-1: Manufacturer: syz [ 88.718848][ T5138] usb 3-1: SerialNumber: syz [ 88.759885][ T5138] usb 3-1: config 0 descriptor?? [ 88.969160][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.213603][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 89.392633][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.409204][ T5329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.574723][ T5329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.592034][ T9] usb 4-1: config 0 has no interface number 0 [ 89.608809][ T5344] netlink: 248 bytes leftover after parsing attributes in process `syz.0.49'. [ 89.628052][ T9] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 89.663824][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 89.693097][ T5138] usb 3-1: USB disconnect, device number 5 [ 89.730919][ T5138] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 89.742927][ T5138] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 89.749750][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.794439][ T9] usb 4-1: config 0 descriptor?? [ 89.846170][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 89.911965][ T5351] tipc: Started in network mode [ 89.916922][ T5351] tipc: Node identity 2a5ca698cc2a, cluster identity 4711 [ 89.936431][ T5351] tipc: Enabled bearer , priority 0 [ 90.161428][ T5351] tipc: Resetting bearer [ 90.347461][ T5350] tipc: Resetting bearer [ 90.698720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.709160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.719495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.060006][ T5183] tipc: Node number set to 3866535576 [ 91.069230][ T2484] usb 4-1: Failed to submit usb control message: -110 [ 91.076249][ T2484] usb 4-1: unable to send the bmi data to the device: -110 [ 91.151966][ T2484] usb 4-1: unable to get target info from device [ 91.166452][ T2484] usb 4-1: could not get target info (-110) [ 91.193170][ T2484] usb 4-1: could not probe fw (-110) [ 91.482122][ T29] audit: type=1326 audit(1720946064.151:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.2.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ad75bd9 code=0x0 [ 91.756274][ T5129] usb 4-1: USB disconnect, device number 5 [ 92.010779][ T57] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.884015][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.907456][ T57] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.917958][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.933121][ T57] usb 1-1: Product: syz [ 92.937323][ T57] usb 1-1: Manufacturer: syz [ 92.944764][ T57] usb 1-1: SerialNumber: syz [ 93.588661][ T57] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 93.598182][ T57] cdc_ncm 1-1:1.0: bind() failure [ 93.613790][ T57] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 93.623396][ T57] cdc_ncm 1-1:1.1: bind() failure [ 93.763006][ T5350] tipc: Disabling bearer [ 93.782244][ T5380] tipc: Enabling of bearer rejected, failed to enable media [ 94.042386][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 94.706355][ T5183] usb 1-1: USB disconnect, device number 2 [ 94.854381][ T5399] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.328151][ T932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.679727][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 95.765347][ T932] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 95.904551][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.041159][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.128276][ T932] usb 3-1: config 0 descriptor?? [ 96.167690][ T5419] tipc: Enabling of bearer rejected, failed to enable media [ 96.180950][ T932] gspca_main: sunplus-2.14.0 probing 041e:400b [ 96.884038][ T5129] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.680030][ T5129] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 97.689805][ T5129] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.701054][ T5129] usb 4-1: config 0 has no interface number 0 [ 97.707190][ T5129] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 97.725237][ T5129] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 97.759682][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.772794][ T5129] usb 4-1: config 0 descriptor?? [ 97.795555][ T5129] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.963545][ T5401] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 97.987433][ T932] gspca_sunplus: reg_w_riv err -71 [ 97.992989][ T932] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 98.010952][ T932] usb 3-1: USB disconnect, device number 6 [ 98.256481][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 98.801893][ T2824] usb 4-1: Failed to submit usb control message: -110 [ 98.871623][ T2824] usb 4-1: unable to send the bmi data to the device: -110 [ 98.898762][ T2824] usb 4-1: unable to get target info from device [ 98.923935][ T2824] usb 4-1: could not get target info (-110) [ 98.957102][ T2824] usb 4-1: could not probe fw (-110) [ 99.315092][ T5129] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.349428][ T932] usb 4-1: USB disconnect, device number 6 [ 103.516516][ T5129] usb 5-1: device not accepting address 5, error -71 [ 103.558565][ T5470] tipc: Enabling of bearer rejected, failed to enable media [ 104.628663][ T5129] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.904324][ T5129] usb 5-1: Using ep0 maxpacket: 8 [ 104.925300][ T5129] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.953419][ T5129] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 104.983555][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.214779][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 105.246630][ T5129] usb 5-1: config 0 descriptor?? [ 108.066719][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 108.174946][ T5128] usb 5-1: USB disconnect, device number 6 [ 112.776574][ T5506] syz.2.84 (5506) used greatest stack depth: 18480 bytes left [ 113.152713][ T5535] tipc: Enabling of bearer rejected, failed to enable media [ 113.197730][ T5541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.93'. [ 114.777562][ T5129] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.811760][ T5572] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.103'. [ 114.962405][ T5129] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 114.972463][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 115.057411][ T5129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.250367][ T5129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.445619][ T5129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.470397][ T5129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.499302][ T5129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.564969][ T5129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.567832][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 115.583138][ T5578] bridge_slave_1: left allmulticast mode [ 115.588814][ T5578] bridge_slave_1: left promiscuous mode [ 115.595143][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.596028][ T5129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.613789][ T5578] bridge_slave_0: left allmulticast mode [ 115.620470][ T5578] bridge_slave_0: left promiscuous mode [ 115.626718][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.643681][ T5129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.691237][ T5129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.716616][ T5129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.729635][ T5128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.916872][ T5129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.949185][ T5129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.957128][ T5129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.966303][ T5129] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.729138][ T5129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.740878][ T5129] usb 4-1: unable to read config index 5 descriptor/start: -71 [ 116.748487][ T5129] usb 4-1: can't read configurations, error -71 [ 116.819674][ T5128] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 116.831853][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.841278][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.853104][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.862666][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.872165][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.883522][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.897231][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.909375][ T932] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.912872][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.938342][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.953395][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.962902][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.982233][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.000199][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.012486][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.025447][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.033858][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.051773][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.070866][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.079341][ T5183] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.080139][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.102132][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.115860][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.120800][ T932] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 117.131380][ T932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.132082][ T5128] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.142022][ T932] usb 1-1: config 0 has no interface number 0 [ 117.157274][ T932] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 117.174884][ T5128] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.183074][ T932] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 117.187253][ T5128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.204475][ T932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.209721][ T5128] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 117.224273][ T5128] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 117.232922][ T5128] usb 5-1: Product: syz [ 117.237846][ T5128] usb 5-1: Manufacturer: syz [ 117.240640][ T932] usb 1-1: config 0 descriptor?? [ 117.247406][ T5128] usb 5-1: SerialNumber: syz [ 117.250075][ T5128] usb 5-1: config 0 descriptor?? [ 117.274917][ T5128] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 117.276921][ T932] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 117.315179][ T5183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.354676][ T5183] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.410874][ T5183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.455154][ T5183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.475430][ T5183] usb 2-1: Product: syz [ 117.480212][ T5183] usb 2-1: Manufacturer: syz [ 117.485421][ T5183] usb 2-1: SerialNumber: syz [ 117.507900][ T5128] usb 5-1: USB disconnect, device number 7 [ 117.533190][ T5128] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 118.189164][ T932] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.329349][ T12] usb 1-1: Failed to submit usb control message: -110 [ 118.336639][ T12] usb 1-1: unable to send the bmi data to the device: -110 [ 118.344773][ T12] usb 1-1: unable to get target info from device [ 118.354577][ T12] usb 1-1: could not get target info (-110) [ 118.369203][ T12] usb 1-1: could not probe fw (-110) [ 118.369250][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 118.389255][ T5129] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.393502][ T932] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 118.416090][ T932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.425837][ T932] usb 4-1: Product: syz [ 118.434440][ T932] usb 4-1: Manufacturer: syz [ 118.442297][ T932] usb 4-1: SerialNumber: syz [ 118.453832][ T932] usb 4-1: config 0 descriptor?? [ 118.465668][ T932] gspca_main: sq930x-2.14.0 probing 2770:930c [ 118.589122][ T5129] usb 3-1: Using ep0 maxpacket: 32 [ 118.600444][ T5129] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 118.609770][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.617774][ T5129] usb 3-1: Product: syz [ 118.623042][ T5129] usb 3-1: Manufacturer: syz [ 118.627689][ T5129] usb 3-1: SerialNumber: syz [ 118.634937][ T5129] usb 3-1: config 0 descriptor?? [ 118.646005][ T5183] cdc_ncm 2-1:1.0: bind() failure [ 118.659804][ T5183] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 118.666926][ T5183] cdc_ncm 2-1:1.1: bind() failure [ 118.689198][ T57] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.879538][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 118.900765][ T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 118.925973][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.929619][ T9] usb 2-1: USB disconnect, device number 4 [ 118.938180][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.955916][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.967417][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.981439][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.991320][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.062044][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.074573][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.110730][ T5079] usb 3-1: USB disconnect, device number 7 [ 119.117136][ T5079] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 119.130200][ T5079] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 119.157296][ T5602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.112'. [ 119.235966][ T932] gspca_sq930x: ucbus_write failed -71 [ 119.367187][ T57] usb 1-1: USB disconnect, device number 3 [ 119.468495][ T5128] usb 5-1: USB disconnect, device number 8 [ 119.477898][ T5615] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.116'. [ 119.494394][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 120.209174][ T932] gspca_sq930x: Unknown sensor [ 120.218695][ T932] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 120.244069][ T932] usb 4-1: USB disconnect, device number 9 [ 120.434450][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 120.889182][ T932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.798308][ T932] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 121.860762][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.893608][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.926492][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.947065][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.986687][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.990575][ T5657] 9pnet_fd: Insufficient options for proto=fd [ 122.026909][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.059696][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.075515][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.124477][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.165619][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.190910][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.212233][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.230778][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.234746][ T5657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.256125][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.286641][ T5657] bond0: (slave rose0): Enslaving as an active interface with an up link [ 122.287651][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.306330][ T5664] warning: `syz.4.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.324186][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.334393][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.377244][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.397864][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.410434][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.459324][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.489401][ T932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.509372][ T932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.531213][ T932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.543581][ T932] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.588456][ T932] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.616611][ T932] usb 2-1: Product: syz [ 122.628491][ T932] usb 2-1: Manufacturer: syz [ 122.633491][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.649276][ T932] usb 2-1: SerialNumber: syz [ 122.680347][ T932] usb 2-1: config 0 descriptor?? [ 122.709416][ T932] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.856538][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 122.876125][ T9] usb 1-1: config 0 has no interfaces? [ 122.929158][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 122.938290][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.976414][ T9] usb 1-1: Product: syz [ 123.009115][ T9] usb 1-1: Manufacturer: syz [ 123.013794][ T9] usb 1-1: SerialNumber: syz [ 123.060018][ T5128] usb 2-1: USB disconnect, device number 5 [ 123.067676][ T9] usb 1-1: config 0 descriptor?? [ 123.110198][ T5128] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 125.055009][ T5723] 9pnet_fd: Insufficient options for proto=fd [ 125.148619][ T5723] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 125.236661][ T5128] usb 1-1: USB disconnect, device number 4 [ 125.735917][ T5743] 9pnet_fd: Insufficient options for proto=fd [ 125.953736][ T5746] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 126.028752][ T5746] netlink: 'syz.2.157': attribute type 4 has an invalid length. [ 126.127032][ T5746] netlink: 152 bytes leftover after parsing attributes in process `syz.2.157'. [ 126.324356][ T5746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.181449][ T932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.504576][ T5129] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.919214][ T5129] usb 5-1: Using ep0 maxpacket: 8 [ 128.938148][ T5129] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 128.969199][ T5129] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.019147][ T5129] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.100166][ T5129] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.129251][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 129.148676][ T5129] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.149573][ T932] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 129.181575][ T5129] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.209066][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.214394][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.232814][ T932] usb 4-1: config 0 descriptor?? [ 129.257499][ T932] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 129.339758][ T5804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.415646][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.453615][ T932] usb 4-1: qt2_attach - failed to power on unit: -71 [ 129.468965][ T932] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 129.506019][ T932] usb 4-1: USB disconnect, device number 10 [ 129.655566][ T5813] 9pnet_fd: Insufficient options for proto=fd [ 129.821159][ T5128] usb 5-1: USB disconnect, device number 9 [ 132.045411][ T5835] bpf: Bad value for 'mode' [ 132.287953][ T29] audit: type=1326 audit(1720946105.001:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5831 comm=252E2F01 exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e23775bd9 code=0x0 [ 132.320655][ T5088] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.329999][ T5088] Bluetooth: hci1: Injecting HCI hardware error event [ 132.338326][ T5080] Bluetooth: hci1: hardware error 0x00 [ 133.129342][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142677][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.844273][ T5080] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 136.566526][ T5879] veth1_macvtap: left promiscuous mode [ 136.658793][ T5887] bpf: Bad value for 'mode' [ 137.773165][ T29] audit: type=1326 audit(1720946110.531:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5886 comm=252E2F01 exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e23775bd9 code=0x0 [ 137.856812][ T5888] 9pnet_fd: Insufficient options for proto=fd [ 138.879757][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.259101][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 139.267337][ T45] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 139.276261][ T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.286220][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.367015][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.377725][ T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.392160][ T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.402141][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.349614][ T45] usb 2-1: USB disconnect, device number 6 [ 141.643977][ T29] audit: type=1326 audit(1720946114.381:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.0.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff02775bd9 code=0x0 [ 143.079283][ T5079] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.109151][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.304556][ T5079] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.326339][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 143.341920][ T5079] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.367162][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.379270][ T5079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.395040][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.416841][ T5079] usb 2-1: Product: syz [ 143.427106][ T5079] usb 2-1: Manufacturer: syz [ 143.433141][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.456028][ T5079] usb 2-1: SerialNumber: syz [ 143.472987][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.506652][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.539786][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.547897][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.344979][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.357988][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.365754][ T5079] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 144.373544][ T5079] cdc_ncm 2-1:1.0: bind() failure [ 144.382495][ T5079] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 144.389462][ T5079] cdc_ncm 2-1:1.1: bind() failure [ 144.409594][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.418514][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.439126][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.486551][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.525132][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.619910][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.760739][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.135887][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.147147][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.155571][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.164962][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.178445][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.213637][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.236841][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.269330][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.284136][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.314043][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.332815][ T9] usb 1-1: Product: syz [ 145.345622][ T9] usb 1-1: Manufacturer: syz [ 145.358558][ T9] usb 1-1: SerialNumber: syz [ 145.376619][ T9] usb 1-1: config 0 descriptor?? [ 145.432763][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.639761][ T5128] usb 1-1: USB disconnect, device number 5 [ 145.649933][ T5128] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 146.485553][ T57] usb 2-1: USB disconnect, device number 7 [ 146.959182][ T29] audit: type=1326 audit(1720946119.701:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6022 comm="syz.0.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff02775bd9 code=0x0 [ 147.709277][ T57] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.919509][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 147.937293][ T57] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 147.959437][ T57] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.987398][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.011412][ T57] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.029166][ T57] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.059181][ T57] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.078576][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.175204][ T6032] Bluetooth: MGMT ver 1.22 [ 148.545407][ T45] usb 2-1: USB disconnect, device number 8 [ 148.950109][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 149.356840][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 149.363544][ T5080] Bluetooth: Wrong link type (-22) [ 149.368794][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 149.377233][ T5080] Bluetooth: Wrong link type (-22) [ 149.382632][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 149.398449][ T5080] Bluetooth: Wrong link type (-22) [ 149.409620][ T5080] Bluetooth: hci2: link tx timeout [ 149.415855][ T5080] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.649267][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.885666][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.909161][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.957044][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.989812][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.997850][ T45] usb 2-1: Product: syz [ 150.030539][ T45] usb 2-1: Manufacturer: syz [ 150.035177][ T45] usb 2-1: SerialNumber: syz [ 150.080255][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 150.109388][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.138886][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.159176][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.177564][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.199086][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.240055][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.265142][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.289079][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.316124][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.334621][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.347518][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.375655][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.387867][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.409071][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.435898][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.451984][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.477328][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.497593][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.527592][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.537224][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.557561][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.588191][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.623663][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.647814][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.676555][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 150.731941][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 150.750881][ T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 150.760348][ T45] cdc_ncm 2-1:1.0: bind() failure [ 150.780123][ T9] usb 3-1: Product: syz [ 150.782743][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 150.794936][ T9] usb 3-1: Manufacturer: syz [ 150.804543][ T45] cdc_ncm 2-1:1.1: bind() failure [ 150.809797][ T9] usb 3-1: SerialNumber: syz [ 150.812162][ T9] usb 3-1: config 0 descriptor?? [ 150.841353][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 151.055424][ T5080] Bluetooth: hci2: command tx timeout [ 151.309398][ T9] usb 3-1: USB disconnect, device number 8 [ 151.365692][ T6084] bpf: Bad value for 'mode' [ 151.374380][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 151.542690][ T29] audit: type=1326 audit(1720946124.301:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6083 comm=252E2F01 exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e23775bd9 code=0x0 [ 152.398485][ T5079] usb 2-1: USB disconnect, device number 9 [ 152.597088][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 152.929301][ T5079] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.937061][ T29] audit: type=1326 audit(1720946125.631:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6104 comm="syz.4.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e23775bd9 code=0x0 [ 153.129753][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 153.239222][ T5079] usb 2-1: Using ep0 maxpacket: 8 [ 153.281845][ T5079] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 153.366012][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 153.374057][ T5088] Bluetooth: Wrong link type (-22) [ 153.379462][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 153.385985][ T5088] Bluetooth: Wrong link type (-22) [ 153.391211][ T5088] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 153.397726][ T5088] Bluetooth: Wrong link type (-22) [ 153.404201][ T5088] Bluetooth: hci4: link tx timeout [ 153.410419][ T5088] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.423615][ T5079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.431718][ T5079] usb 2-1: Product: syz [ 153.435982][ T5079] usb 2-1: Manufacturer: syz [ 153.442673][ T5079] usb 2-1: SerialNumber: syz [ 153.450426][ T5079] usb 2-1: config 0 descriptor?? [ 153.689704][ T5079] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 154.153331][ T5081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.169239][ T5081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.198236][ T5081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.211067][ T5081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.227808][ T5081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.237190][ T5081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.792149][ T5079] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 154.806527][ T5079] usb 2-1: USB disconnect, device number 10 [ 154.833119][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.895819][ T6130] binder: 6129:6130 ioctl c0306201 0 returned -14 [ 154.979119][ T5128] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 155.202293][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.211215][ T5081] Bluetooth: hci4: command tx timeout [ 155.452646][ T5128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.468610][ T5128] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.478002][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.486255][ T5128] usb 4-1: Product: syz [ 155.490596][ T5128] usb 4-1: Manufacturer: syz [ 155.495340][ T5128] usb 4-1: SerialNumber: syz [ 155.869934][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.174387][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.319335][ T5080] Bluetooth: hci5: command tx timeout [ 156.809922][ T5128] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 156.826599][ T5128] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 156.847431][ T5128] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 157.348875][ T5080] Bluetooth: hci4: command 0x0406 tx timeout [ 157.419105][ T5079] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.469690][ T5128] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 157.496010][ T5128] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 157.653191][ T5128] usb 4-1: USB disconnect, device number 11 [ 157.656208][ T5079] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.660841][ T5128] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 157.965968][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 158.139160][ T6119] chnl_net:caif_netlink_parms(): no params data found [ 158.146762][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.188821][ T5079] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.264493][ T5079] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.285018][ T5079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.335991][ T5079] usb 3-1: config 0 descriptor?? [ 158.358204][ T6158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.409673][ T5080] Bluetooth: hci5: command tx timeout [ 158.703231][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 158.709861][ T5080] Bluetooth: Wrong link type (-22) [ 158.715030][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 158.721785][ T5080] Bluetooth: Wrong link type (-22) [ 158.726961][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 158.733513][ T5080] Bluetooth: Wrong link type (-22) [ 158.811570][ T5079] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 158.831014][ T5079] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 158.880139][ T5079] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.127050][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.176021][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.222704][ T35] bond0 (unregistering): Released all slaves [ 159.582164][ T35] tipc: Left network mode [ 159.640238][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.647385][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.711795][ T6119] bridge_slave_0: entered allmulticast mode [ 159.750868][ T6119] bridge_slave_0: entered promiscuous mode [ 159.769966][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.787054][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.795013][ T6119] bridge_slave_1: entered allmulticast mode [ 159.805929][ T6119] bridge_slave_1: entered promiscuous mode [ 159.928833][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 159.936394][ T5080] Bluetooth: Wrong link type (-22) [ 159.941691][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 159.948217][ T5080] Bluetooth: Wrong link type (-22) [ 159.955514][ T5080] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 159.962208][ T5080] Bluetooth: Wrong link type (-22) [ 159.968414][ T5079] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.176263][ T6119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.229239][ T5079] usb 5-1: Using ep0 maxpacket: 8 [ 160.237097][ T5079] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.278896][ T5079] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 160.299305][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.322471][ T6119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.346008][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 160.358949][ T5079] usb 5-1: config 0 descriptor?? [ 160.400604][ T5079] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 160.417496][ T5079] usb 5-1: No valid video chain found. [ 160.480529][ T5080] Bluetooth: hci5: command tx timeout [ 160.651374][ T5080] Bluetooth: hci2: command 0x0406 tx timeout [ 161.750116][ T35] hsr_slave_0: left promiscuous mode [ 161.768938][ T35] hsr_slave_1: left promiscuous mode [ 161.831109][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.898041][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.980626][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.015953][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.094474][ T35] veth0_macvtap: left promiscuous mode [ 162.102851][ T35] veth1_vlan: left promiscuous mode [ 162.110657][ T35] veth0_vlan: left promiscuous mode [ 162.559193][ T5080] Bluetooth: hci5: command tx timeout [ 162.719699][ T5080] Bluetooth: hci2: command 0x0406 tx timeout [ 162.801124][ T5138] usb 5-1: USB disconnect, device number 10 [ 164.757260][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 164.869779][ T932] usb 3-1: USB disconnect, device number 9 [ 166.266611][ T35] team0 (unregistering): Port device team_slave_1 removed [ 166.301093][ T35] team0 (unregistering): Port device team_slave_0 removed [ 166.586456][ T6119] team0: Port device team_slave_0 added [ 166.710600][ T6119] team0: Port device team_slave_1 added [ 166.831552][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.843351][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.879154][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.072702][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.093835][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.132904][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.325084][ T6119] hsr_slave_0: entered promiscuous mode [ 167.333514][ T6119] hsr_slave_1: entered promiscuous mode [ 167.343806][ T6119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.354163][ T6119] Cannot create hsr debugfs directory [ 167.910099][ T6262] netlink: 52 bytes leftover after parsing attributes in process `syz.1.287'. [ 169.155422][ T6277] netlink: 248 bytes leftover after parsing attributes in process `syz.4.289'. [ 170.135703][ T6119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.223224][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 170.230532][ T6119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.268628][ T6119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.312667][ T6119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.367319][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 171.515676][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.713480][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.763355][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.770593][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.818941][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.826181][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.284339][ T57] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 172.486884][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 172.554245][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.606409][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 172.645112][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.781878][ T57] usb 3-1: config 0 descriptor?? [ 172.888493][ T57] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 172.940961][ T57] usb 3-1: No valid video chain found. [ 174.253324][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.436979][ T6119] veth0_vlan: entered promiscuous mode [ 174.501559][ T6119] veth1_vlan: entered promiscuous mode [ 174.702589][ T6119] veth0_macvtap: entered promiscuous mode [ 174.826646][ T6119] veth1_macvtap: entered promiscuous mode [ 175.350130][ T29] audit: type=1326 audit(1720946147.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6352 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d6a975bd9 code=0x0 [ 175.453326][ T8] usb 3-1: USB disconnect, device number 10 [ 175.523705][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.633675][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.662255][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.738002][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.924478][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.941899][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.189201][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.269231][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.336670][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.741336][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.896596][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.112038][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.293899][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.335516][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.513706][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.645976][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.739691][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.756420][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.203318][ T6119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.271737][ T6119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.343592][ T6119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.370497][ T6119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.077862][ T2484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.050937][ T29] audit: type=1326 audit(1720946153.971:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6422 comm="syz.1.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3a7375bd9 code=0x0 [ 182.186423][ T2484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.661439][ T3755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.697484][ T3755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.206159][ T5079] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.080998][ T5079] usb 3-1: Using ep0 maxpacket: 32 [ 184.092990][ T5079] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.140148][ T5079] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.159748][ T5079] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.168857][ T5079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.217509][ T5079] hub 3-1:4.0: USB hub found [ 184.463143][ T5079] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 184.841778][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 185.119455][ T9] usb 3-1: USB disconnect, device number 11 [ 185.427962][ T5138] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.535953][ T29] audit: type=1326 audit(1720946158.291:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6473 comm="syz.3.326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d6a975bd9 code=0x0 [ 185.679492][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 185.709175][ T5138] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.746648][ T5138] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 185.828518][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.155559][ T5138] usb 1-1: config 0 descriptor?? [ 186.197458][ T5160] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.521304][ T5081] Bluetooth: hci2: command 0x0406 tx timeout [ 186.521328][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 186.527471][ T5081] Bluetooth: hci4: command 0x0406 tx timeout [ 186.585969][ T5160] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.613213][ T5160] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.639736][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.890821][ T5160] usb 2-1: Product: syz [ 187.043345][ T5160] usb 2-1: Manufacturer: syz [ 187.055910][ T6492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 187.066196][ T5160] usb 2-1: SerialNumber: syz [ 187.659847][ T5079] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.714534][ T5160] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 187.735650][ T5160] cdc_ncm 2-1:1.0: bind() failure [ 187.765954][ T5160] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 187.807663][ T5160] cdc_ncm 2-1:1.1: bind() failure [ 187.891212][ T5079] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.936896][ T5079] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.980080][ T5079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.008125][ T5079] usb 4-1: Product: syz [ 188.025785][ T5079] usb 4-1: Manufacturer: syz [ 188.041604][ T5079] usb 4-1: SerialNumber: syz [ 188.723814][ T5079] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 188.757684][ T5079] cdc_ncm 4-1:1.0: bind() failure [ 188.770853][ T5128] usb 2-1: USB disconnect, device number 11 [ 188.771491][ T5079] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 188.827174][ T5079] cdc_ncm 4-1:1.1: bind() failure [ 188.900537][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 190.173960][ T5129] usb 1-1: USB disconnect, device number 6 [ 190.183048][ T6533] netlink: 52 bytes leftover after parsing attributes in process `syz.2.340'. [ 190.349153][ T8] usb 4-1: USB disconnect, device number 12 [ 194.499216][ T5129] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.578166][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629121][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.935630][ T5129] usb 1-1: Using ep0 maxpacket: 32 [ 194.994628][ T5129] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.026489][ T5129] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.053954][ T5129] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 195.054990][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 195.249496][ T6580] binder: 6578:6580 ioctl c0306201 0 returned -14 [ 195.274367][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.306969][ T5129] hub 1-1:4.0: USB hub found [ 195.439251][ T5128] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.508038][ T5129] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 195.621285][ T5128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.636746][ T5128] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.647417][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.656657][ T5128] usb 4-1: Product: syz [ 195.663208][ T5128] usb 4-1: Manufacturer: syz [ 195.671848][ T5128] usb 4-1: SerialNumber: syz [ 195.840078][ T5079] usb 1-1: USB disconnect, device number 7 [ 195.889252][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 196.238412][ T6601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.362'. [ 196.292276][ T5128] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 196.300321][ T5128] cdc_ncm 4-1:1.0: bind() failure [ 196.313057][ T5128] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 196.320071][ T5128] cdc_ncm 4-1:1.1: bind() failure [ 196.466876][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.355298][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 197.532753][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 197.714555][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.781300][ T8] usb 2-1: Product: syz [ 197.791730][ T8] usb 2-1: Manufacturer: syz [ 197.809149][ T8] usb 2-1: SerialNumber: syz [ 197.820559][ T8] usb 2-1: config 0 descriptor?? [ 198.031301][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 198.550756][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.745211][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.816782][ T8] usb 4-1: USB disconnect, device number 13 [ 198.919719][ T9] usb 2-1: USB disconnect, device number 12 [ 198.957702][ T9] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -19 [ 199.019046][ T9] f81534a_ctrl 2-1:0.0: failed to enable ports: -19 [ 199.439127][ T5079] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.447414][ T5183] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.479157][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.659372][ T5183] usb 5-1: Using ep0 maxpacket: 32 [ 199.665462][ T5079] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 199.673503][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 199.699792][ T5183] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 199.712358][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.723222][ T5183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.731791][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 199.741817][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.765283][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.774678][ T5183] usb 5-1: config 0 descriptor?? [ 199.779884][ T5138] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.789053][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.796161][ T8] usb 4-1: Product: syz [ 199.802575][ T8] usb 4-1: Manufacturer: syz [ 199.807202][ T8] usb 4-1: SerialNumber: syz [ 199.815018][ T5183] gspca_main: sunplus-2.14.0 probing 041e:400b [ 199.827060][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.851531][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.864166][ T8] usb 4-1: config 0 descriptor?? [ 199.891623][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.912740][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.939343][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.960401][ T6642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.375'. [ 199.969143][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.979135][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 199.989123][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.001035][ T5138] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.011141][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.023369][ T5138] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.052315][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.064749][ T5138] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.080243][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.088733][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.100530][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.122895][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.128854][ T5138] hub 2-1:4.0: USB hub found [ 200.167749][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.194684][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.223675][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.269077][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.294018][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.327120][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.371161][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.378221][ T5138] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 200.402548][ T5079] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.437267][ T5079] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.480361][ T5079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.503742][ T5079] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 200.539653][ T5079] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 200.564847][ T5079] usb 3-1: Product: syz [ 200.590280][ T5079] usb 3-1: Manufacturer: syz [ 200.608140][ T5079] usb 3-1: SerialNumber: syz [ 200.634397][ T5079] usb 3-1: config 0 descriptor?? [ 200.668527][ T5079] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 200.717690][ C0] hrtimer: interrupt took 148075 ns [ 200.721866][ T5138] usb 2-1: USB disconnect, device number 13 [ 200.760684][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 200.828761][ T8] usb 4-1: USB disconnect, device number 14 [ 200.893123][ T5138] usb 3-1: USB disconnect, device number 12 [ 200.918512][ T5138] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 200.941288][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 201.051800][ T6635] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 201.111882][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.142941][ T5183] gspca_sunplus: reg_w_riv err -71 [ 201.148224][ T5183] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 201.171219][ T5183] usb 5-1: USB disconnect, device number 11 [ 202.326750][ T5080] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 203.411666][ T5128] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.422404][ T6678] tipc: Started in network mode [ 203.427436][ T6678] tipc: Node identity ceca3950f4a2, cluster identity 4711 [ 203.435399][ T6678] tipc: Enabled bearer , priority 0 [ 204.009320][ T5080] Bluetooth: hci4: command 0x0406 tx timeout [ 204.347400][ T6680] netlink: 52 bytes leftover after parsing attributes in process `syz.2.387'. [ 204.379674][ T5128] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.396973][ T5128] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.409936][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.419741][ T6678] tipc: Resetting bearer [ 204.425617][ T5128] usb 4-1: Product: syz [ 204.454082][ T5128] usb 4-1: Manufacturer: syz [ 204.454633][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 204.481171][ T6675] tipc: Resetting bearer [ 204.488106][ T5128] usb 4-1: SerialNumber: syz [ 204.639499][ T5129] tipc: Node number set to 979908944 [ 204.899352][ T57] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.959320][ T5129] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 205.090087][ T57] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 205.099884][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.109100][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.127505][ T5128] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 205.133716][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.142969][ T5128] cdc_ncm 4-1:1.0: bind() failure [ 205.158593][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.167719][ T5129] usb 3-1: Using ep0 maxpacket: 8 [ 205.173717][ T5128] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 205.180751][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.194247][ T5128] cdc_ncm 4-1:1.1: bind() failure [ 205.212051][ T5129] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 205.223805][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.230574][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.238582][ T5129] usb 3-1: Product: syz [ 205.244532][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.257211][ T5129] usb 3-1: Manufacturer: syz [ 205.265081][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.276200][ T5129] usb 3-1: SerialNumber: syz [ 205.300763][ T5129] usb 3-1: config 0 descriptor?? [ 205.306504][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.318574][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.329735][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.341213][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.349744][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.358692][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.372981][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.381487][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.393796][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.404873][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.413371][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.422445][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.433464][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.443613][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.453496][ T57] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.472027][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.486218][ T57] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.497685][ T57] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 205.506213][ T57] usb 1-1: Product: syz [ 205.510575][ T57] usb 1-1: Manufacturer: syz [ 205.517061][ T57] usb 1-1: SerialNumber: syz [ 205.517265][ T5129] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.537870][ T57] usb 1-1: config 0 descriptor?? [ 205.550014][ T57] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 205.583144][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.765066][ T57] usb 1-1: USB disconnect, device number 8 [ 205.777996][ T57] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 205.789756][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 205.807511][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 205.822169][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.836365][ T8] usb 5-1: config 0 descriptor?? [ 205.853321][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 206.157577][ T5129] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 206.177226][ T5129] usb 3-1: USB disconnect, device number 13 [ 206.321583][ T6675] tipc: Disabling bearer [ 206.549768][ T5129] usb 4-1: USB disconnect, device number 15 [ 207.662117][ T8] gspca_sunplus: reg_w_riv err -110 [ 207.703249][ T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 209.192470][ T6721] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 209.392497][ T6721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.612635][ T6734] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'. [ 209.676409][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 210.271834][ T5129] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.316045][ T57] usb 5-1: USB disconnect, device number 12 [ 210.919177][ T5129] usb 1-1: Using ep0 maxpacket: 8 [ 210.935922][ T5129] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 210.945053][ T5129] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.134492][ T5129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.202668][ T5129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.239466][ T5129] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.257244][ T5129] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.267180][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.559284][ T5183] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.243592][ T5183] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 212.314176][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.332920][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.363845][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.376495][ T5160] usb 1-1: USB disconnect, device number 9 [ 212.388549][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.402585][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.415338][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.423500][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.432881][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.444845][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.455950][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.465648][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.478219][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.496552][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.506065][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.522331][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.535455][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.546674][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.558868][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.569180][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.580765][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.592272][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.600466][ T5183] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.615964][ T5183] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.628199][ T5183] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.642019][ T5183] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.652643][ T5183] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.663309][ T5183] usb 2-1: Product: syz [ 212.667572][ T5183] usb 2-1: Manufacturer: syz [ 212.675700][ T5183] usb 2-1: SerialNumber: syz [ 212.688582][ T5183] usb 2-1: config 0 descriptor?? [ 212.706117][ T5183] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.929913][ T5183] usb 2-1: USB disconnect, device number 14 [ 212.985544][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.994241][ T5183] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 213.209200][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 213.916158][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.927349][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.937498][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.946880][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.017146][ T45] hub 4-1:4.0: USB hub found [ 214.248450][ T45] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 215.125540][ T45] usb 4-1: USB disconnect, device number 16 [ 215.197978][ T57] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 215.389220][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 215.404406][ T57] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 215.417114][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.435686][ T57] usb 1-1: Product: syz [ 215.442412][ T57] usb 1-1: Manufacturer: syz [ 215.447200][ T57] usb 1-1: SerialNumber: syz [ 215.481692][ T57] usb 1-1: config 0 descriptor?? [ 215.659704][ T5160] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.807613][ T57] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.920089][ T5160] usb 2-1: Using ep0 maxpacket: 32 [ 215.972196][ T5160] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 216.142984][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.351275][ T5160] usb 2-1: config 0 descriptor?? [ 216.386157][ T5160] gspca_main: sunplus-2.14.0 probing 041e:400b [ 216.614495][ T6800] tipc: Enabled bearer , priority 0 [ 216.687048][ T6800] tipc: Resetting bearer [ 216.703775][ T57] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.724111][ T57] usb 1-1: USB disconnect, device number 10 [ 216.733009][ T6799] tipc: Resetting bearer [ 216.747624][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 217.009103][ T5183] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.213743][ T5183] usb 4-1: Using ep0 maxpacket: 8 [ 217.235034][ T5183] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 217.255502][ T5183] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.272264][ T5183] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.285776][ T5183] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.296408][ T5183] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.312977][ T5183] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.322715][ T5183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.758288][ T5183] usb 4-1: USB disconnect, device number 17 [ 217.972503][ T5160] gspca_sunplus: reg_w_riv err -110 [ 217.977515][ T29] audit: type=1326 audit(1720946190.731:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6810 comm="syz.0.428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c46d75bd9 code=0x0 [ 218.077324][ T5160] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 218.721614][ T6799] tipc: Disabling bearer [ 218.742968][ T6788] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 218.757060][ T6788] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 219.500804][ T57] usb 2-1: USB disconnect, device number 15 [ 221.762341][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 221.859141][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.008870][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 222.069157][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 222.097682][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 222.119118][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.139307][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.183990][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.214697][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.256186][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.268684][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.988169][ T5183] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.209266][ T5183] usb 5-1: Using ep0 maxpacket: 32 [ 223.227546][ T5183] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 223.245093][ T5183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.253741][ T5129] usb 2-1: USB disconnect, device number 16 [ 223.265176][ T5183] usb 5-1: config 0 descriptor?? [ 223.295057][ T5183] gspca_main: sunplus-2.14.0 probing 041e:400b [ 225.100374][ T5183] gspca_sunplus: reg_w_riv err -110 [ 225.426507][ T5183] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 225.492855][ T6889] netlink: 248 bytes leftover after parsing attributes in process `syz.3.449'. [ 225.717589][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 225.793227][ T6903] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 226.773566][ T6916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.457'. [ 226.873792][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.200991][ T5129] usb 5-1: USB disconnect, device number 13 [ 227.449092][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.679261][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 227.696727][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 227.738374][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.773905][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.801828][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.845059][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.888046][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.921946][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.432164][ T9] usb 2-1: USB disconnect, device number 17 [ 230.009141][ T6961] binder: 6955:6961 ioctl c0306201 0 returned -14 [ 230.410068][ T6953] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 230.416900][ T6953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 230.450670][ T6953] vhci_hcd vhci_hcd.0: Device attached [ 230.464878][ T6965] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'. [ 230.478603][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 230.582472][ T6967] vhci_hcd: connection closed [ 230.587680][ T5461] vhci_hcd: stop threads [ 230.686416][ T5461] vhci_hcd: release socket [ 230.703560][ T5461] vhci_hcd: disconnect device [ 230.813500][ T6978] netlink: 248 bytes leftover after parsing attributes in process `syz.2.473'. [ 232.223787][ T6997] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 233.193206][ T7007] binder: 7000:7007 ioctl c0306201 0 returned -14 [ 233.769583][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 234.074794][ T7024] netlink: 52 bytes leftover after parsing attributes in process `syz.4.485'. [ 235.475056][ T7037] tipc: Started in network mode [ 235.495941][ T7037] tipc: Node identity 1ed3c8c89d95, cluster identity 4711 [ 235.521165][ T7037] tipc: Enabled bearer , priority 0 [ 235.718404][ T7038] tipc: Resetting bearer [ 235.765676][ T7035] tipc: Resetting bearer [ 236.899657][ T5160] tipc: Node number set to 2202454216 [ 237.336372][ T5160] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.074873][ T7053] binder: 7052:7053 ioctl c0306201 0 returned -14 [ 238.249686][ T5160] usb 5-1: Using ep0 maxpacket: 8 [ 238.303229][ T5160] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 238.367539][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.372666][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.0.500'. [ 238.389280][ T5160] usb 5-1: Product: syz [ 238.407187][ T5160] usb 5-1: Manufacturer: syz [ 238.434840][ T5160] usb 5-1: SerialNumber: syz [ 238.469251][ T5160] usb 5-1: config 0 descriptor?? [ 238.702049][ T5160] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.837898][ T7071] netlink: 248 bytes leftover after parsing attributes in process `syz.2.503'. [ 239.344424][ T5160] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 239.377654][ T5160] usb 5-1: USB disconnect, device number 14 [ 239.970729][ T7075] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.475354][ T7035] tipc: Disabling bearer [ 240.575231][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.385029][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.508120][ T7088] binder: 7084:7088 ioctl c0306201 0 returned -14 [ 241.555369][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.672412][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.719513][ T45] usb 3-1: Product: syz [ 241.723910][ T45] usb 3-1: Manufacturer: syz [ 241.749537][ T45] usb 3-1: SerialNumber: syz [ 244.523324][ T45] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 244.720070][ T45] cdc_ncm 3-1:1.0: bind() failure [ 244.740617][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 244.760852][ T45] cdc_ncm 3-1:1.1: bind() failure [ 244.874718][ T7116] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.171780][ T5160] usb 3-1: USB disconnect, device number 14 [ 245.347511][ T7128] netlink: 52 bytes leftover after parsing attributes in process `syz.3.519'. [ 246.383317][ T7139] binder: 7138:7139 ioctl c0306201 0 returned -14 [ 247.483837][ T7150] netlink: 248 bytes leftover after parsing attributes in process `syz.2.525'. [ 248.751321][ T7161] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.452498][ T7179] binder: 7178:7179 ioctl c0306201 0 returned -14 [ 250.995208][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 251.589144][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 251.682478][ T57] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.729301][ T29] audit: type=1326 audit(1720946224.451:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.4.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e23775bd9 code=0x0 [ 251.899116][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 251.908857][ T45] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 251.933045][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.960013][ T45] usb 4-1: Product: syz [ 251.986695][ T45] usb 4-1: Manufacturer: syz [ 252.009041][ T45] usb 4-1: SerialNumber: syz [ 252.048605][ T45] usb 4-1: config 0 descriptor?? [ 252.079330][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 252.142730][ T57] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 252.173115][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.231329][ T57] usb 2-1: Product: syz [ 252.259037][ T57] usb 2-1: Manufacturer: syz [ 252.263723][ T57] usb 2-1: SerialNumber: syz [ 252.321590][ T57] usb 2-1: config 0 descriptor?? [ 252.421369][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.503120][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.563775][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.569625][ T57] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.858983][ T8] usb 4-1: USB disconnect, device number 18 [ 253.635533][ T8] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -19 [ 253.656291][ T8] f81534a_ctrl 4-1:0.0: failed to enable ports: -19 [ 254.957824][ T57] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 255.279203][ T57] usb 2-1: USB disconnect, device number 18 [ 256.078558][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093916][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 256.102507][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.319207][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 256.342280][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 256.372397][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.408894][ T9] usb 4-1: Product: syz [ 256.428933][ T9] usb 4-1: Manufacturer: syz [ 256.435265][ T9] usb 4-1: SerialNumber: syz [ 256.491072][ T9] usb 4-1: config 0 descriptor?? [ 256.517422][ T29] audit: type=1326 audit(1720946229.211:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7243 comm="syz.2.554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ad75bd9 code=0x0 [ 256.542989][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 256.780429][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 256.959237][ T5160] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 257.079504][ T9] gspca_sq930x: reg_r 001f failed -110 [ 257.089278][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 257.153858][ T5160] usb 2-1: device descriptor read/64, error -71 [ 258.239304][ T5160] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 258.258253][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 258.295088][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 258.321595][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.419282][ T5160] usb 2-1: device descriptor read/64, error -71 [ 258.529263][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 258.548651][ T5160] usb usb2-port1: attempt power cycle [ 258.555412][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 258.571762][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.585833][ T9] usb 3-1: Product: syz [ 258.592185][ T9] usb 3-1: Manufacturer: syz [ 258.596804][ T9] usb 3-1: SerialNumber: syz [ 258.611541][ T9] usb 3-1: config 0 descriptor?? [ 258.899650][ T5138] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.169413][ T5138] usb 5-1: Using ep0 maxpacket: 32 [ 259.268794][ T5138] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 259.295183][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.357384][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.410135][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.458889][ T5138] usb 5-1: Product: syz [ 259.471218][ T5138] usb 5-1: Manufacturer: syz [ 259.491303][ T5138] usb 5-1: SerialNumber: syz [ 259.553544][ T5138] usb 5-1: config 0 descriptor?? [ 259.599317][ T9] usb 3-1: USB disconnect, device number 15 [ 259.605850][ T9] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 259.615243][ T9] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 259.900896][ T8] usb 4-1: USB disconnect, device number 19 [ 260.290563][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 260.335177][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.702169][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.886204][ T5138] usb 5-1: USB disconnect, device number 15 [ 260.920874][ T5138] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 261.744829][ T5138] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 262.999216][ T932] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 263.046333][ T5080] Bluetooth: Wrong link type (-71) [ 263.163278][ T932] usb 4-1: device descriptor read/64, error -71 [ 263.361240][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 263.449152][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 263.479821][ T932] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 263.639139][ T932] usb 4-1: device descriptor read/64, error -71 [ 263.666504][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 263.689421][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 263.698627][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 263.709209][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.733346][ T45] usb 3-1: config 0 descriptor?? [ 263.742136][ T45] gspca_main: sunplus-2.14.0 probing 041e:400b [ 263.770141][ T932] usb usb4-port1: attempt power cycle [ 264.399420][ T932] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 264.456632][ T932] usb 4-1: device descriptor read/8, error -71 [ 264.919184][ T932] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 264.985373][ T932] usb 4-1: device descriptor read/8, error -71 [ 265.905424][ T932] usb usb4-port1: unable to enumerate USB device [ 266.006029][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.587'. [ 266.208650][ T45] gspca_sunplus: reg_w_riv err -71 [ 266.254976][ T45] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 266.293669][ T45] usb 3-1: USB disconnect, device number 16 [ 266.652081][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 266.676811][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 267.191291][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 267.609304][ T45] usb 3-1: device descriptor read/64, error -71 [ 267.942995][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.164457][ T45] usb 3-1: device descriptor read/64, error -71 [ 268.304775][ T45] usb usb3-port1: attempt power cycle [ 268.762294][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 268.786321][ T5129] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 268.829955][ T45] usb 3-1: device descriptor read/8, error -71 [ 268.979280][ T5129] usb 5-1: Using ep0 maxpacket: 32 [ 268.993347][ T5129] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 269.025763][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.074129][ T5129] usb 5-1: config 0 descriptor?? [ 269.129780][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 269.140778][ T5129] gspca_main: sunplus-2.14.0 probing 041e:400b [ 269.191038][ T45] usb 3-1: device descriptor read/8, error -71 [ 269.379828][ T45] usb usb3-port1: unable to enumerate USB device [ 269.731574][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 269.750983][ C1] ------------[ cut here ]------------ [ 269.756884][ C1] WARNING: CPU: 1 PID: 7419 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 269.765841][ C1] Modules linked in: [ 269.769745][ C1] CPU: 1 PID: 7419 Comm: syz.0.607 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 269.779715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 269.789768][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 269.795499][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 06 8e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 269.815129][ C1] RSP: 0018:ffffc90000a170d0 EFLAGS: 00010002 [ 269.821200][ C1] RAX: 0000000000010303 RBX: ffff888029a45a00 RCX: 0000000000000002 [ 269.829166][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f5540 [ 269.837133][ C1] RBP: 0100000000000005 R08: ffffffff92f765f7 R09: 1ffffffff25eecbe [ 269.845188][ C1] R10: dffffc0000000000 R11: fffffbfff25eecbf R12: ffffffff819630de [ 269.853157][ C1] R13: ffff88807cde8900 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 269.861122][ C1] FS: 00007f5c47b256c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 269.870049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.876623][ C1] CR2: 00007fe3a730c5e0 CR3: 0000000022982000 CR4: 00000000003506f0 [ 269.884590][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.892551][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.900524][ C1] Call Trace: [ 269.903806][ C1] [ 269.906645][ C1] ? __warn+0x163/0x4e0 [ 269.910807][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 269.915920][ C1] ? report_bug+0x2b3/0x500 [ 269.920423][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 269.925537][ C1] ? handle_bug+0x3e/0x70 [ 269.929860][ C1] ? exc_invalid_op+0x1a/0x50 [ 269.934534][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 269.939558][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 269.944585][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 269.949691][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 269.954540][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 269.960256][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 269.965628][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 269.971519][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 269.976727][ C1] dummy_timer+0x830/0x45d0 [ 269.981273][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 269.986216][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 269.991148][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 269.996346][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 270.002339][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 270.008068][ C1] hrtimer_interrupt+0x396/0x990 [ 270.013139][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 270.019232][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 270.024891][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.030899][ C1] RIP: 0010:preempt_count_sub+0x0/0x170 [ 270.036466][ C1] Code: 8c 77 ff ff ff 48 c7 c7 60 9b ac 8f e8 59 08 93 00 e9 66 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 56 53 89 fb 48 c7 c0 e0 e6 76 94 48 c1 e8 03 49 be [ 270.056095][ C1] RSP: 0018:ffffc90000a17868 EFLAGS: 00000246 [ 270.062174][ C1] RAX: ffffffff8180144d RBX: 00007f5c46d75bd9 RCX: 0000000000040000 [ 270.070144][ C1] RDX: ffffc90002311000 RSI: 00000000000008ef RDI: 0000000000000001 [ 270.078110][ C1] RBP: 0000000000000001 R08: ffffffff81800e58 R09: ffffffff8141095f [ 270.086080][ C1] R10: 0000000000000003 R11: ffff888029a45a00 R12: 0000000000000000 [ 270.094050][ C1] R13: ffffffff8181dd10 R14: 00007f5c46d75bd9 R15: 1ffff92000142f29 [ 270.102021][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.108195][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 270.113490][ C1] ? __module_address+0x28/0x500 [ 270.118435][ C1] ? is_module_text_address+0x9d/0x190 [ 270.123900][ C1] is_module_text_address+0x10f/0x190 [ 270.129274][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.135437][ C1] kernel_text_address+0x96/0xe0 [ 270.140378][ C1] __kernel_text_address+0xd/0x40 [ 270.145403][ C1] unwind_get_return_address+0x5d/0xc0 [ 270.150862][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.156945][ C1] arch_stack_walk+0x125/0x1b0 [ 270.161723][ C1] stack_trace_save+0x118/0x1d0 [ 270.166577][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 270.171954][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 270.177240][ C1] ? __pfx_validate_chain+0x10/0x10 [ 270.182439][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.188600][ C1] kasan_save_track+0x3f/0x80 [ 270.193281][ C1] ? kasan_save_track+0x3f/0x80 [ 270.198134][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 270.202914][ C1] ? __kmalloc_noprof+0x1f9/0x400 [ 270.208060][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 270.214074][ C1] ? ieee80211_inform_bss+0x15f/0x1080 [ 270.219549][ C1] ? cfg80211_inform_single_bss_data+0x1121/0x2360 [ 270.226082][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 270.231903][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 270.238163][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 270.244010][ C1] ? ieee80211_scan_rx+0x526/0x9c0 [ 270.249141][ C1] ? ieee80211_rx_list+0x2b00/0x3780 [ 270.254443][ C1] ? ieee80211_rx_napi+0x18a/0x3c0 [ 270.259564][ C1] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 270.265740][ C1] ? tasklet_action_common+0x321/0x4d0 [ 270.271220][ C1] ? handle_softirqs+0x2c4/0x970 [ 270.276162][ C1] ? do_softirq+0x11b/0x1e0 [ 270.280664][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 270.286055][ C1] ? ieee80211_tx_skb_tid+0x264/0x420 [ 270.291446][ C1] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 270.296738][ C1] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 270.302290][ C1] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 270.307339][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 270.312055][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 270.317010][ C1] ? genl_rcv+0x28/0x40 [ 270.321169][ C1] ? netlink_unicast+0x7ea/0x980 [ 270.326125][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 270.331070][ C1] ? __sock_sendmsg+0x221/0x270 [ 270.335921][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 270.340876][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 270.345740][ C1] ? do_syscall_64+0xf3/0x230 [ 270.350419][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.356613][ C1] __kasan_kmalloc+0x98/0xb0 [ 270.361213][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 270.367202][ C1] __kmalloc_noprof+0x1f9/0x400 [ 270.372061][ C1] ieee802_11_parse_elems_full+0xd5/0x2870 [ 270.377876][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.384208][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 270.390099][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 270.395302][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 270.401191][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.407527][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 270.413859][ C1] ? kvfree_call_rcu+0x48c/0x790 [ 270.418802][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 270.424098][ C1] ? cfg80211_update_known_bss+0xb95/0x1500 [ 270.430003][ C1] ieee80211_inform_bss+0x15f/0x1080 [ 270.435298][ C1] ? __cfg80211_bss_update+0x1a8f/0x20c0 [ 270.440933][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 270.446659][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 270.453073][ C1] ? cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 270.459491][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 270.465220][ C1] cfg80211_inform_single_bss_data+0x1121/0x2360 [ 270.471549][ C1] ? mark_lock+0x9a/0x350 [ 270.475885][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 270.482579][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 270.488388][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 270.494047][ C1] ? __pfx_validate_chain+0x10/0x10 [ 270.499248][ C1] ? validate_chain+0x11e/0x5900 [ 270.504208][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 270.510278][ C1] ? __pfx_validate_chain+0x10/0x10 [ 270.515476][ C1] ? mark_lock+0x9a/0x350 [ 270.519815][ C1] ? mark_lock+0x9a/0x350 [ 270.524146][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 270.529190][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 270.534210][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 270.540024][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 270.546101][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 270.551907][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 270.557549][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 270.563713][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.570044][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 270.575853][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 270.580798][ C1] ieee80211_rx_list+0x2b00/0x3780 [ 270.585909][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 270.590941][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 270.596413][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 270.601442][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 270.607427][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.613756][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 270.618783][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 270.623728][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.630057][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 270.635529][ C1] ? skb_dequeue+0x113/0x150 [ 270.640121][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 270.646106][ C1] tasklet_action_common+0x321/0x4d0 [ 270.651394][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 270.657202][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.663619][ C1] ? workqueue_softirq_action+0xca/0x140 [ 270.669251][ C1] handle_softirqs+0x2c4/0x970 [ 270.674039][ C1] ? do_softirq+0x11b/0x1e0 [ 270.678541][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 270.683829][ C1] do_softirq+0x11b/0x1e0 [ 270.688153][ C1] [ 270.691078][ C1] [ 270.694007][ C1] ? __pfx_do_softirq+0x10/0x10 [ 270.698851][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 270.704485][ C1] ? rcu_is_watching+0x15/0xb0 [ 270.709246][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 270.714555][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 270.719495][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 270.725532][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 270.731268][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 270.737262][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 270.742556][ C1] ieee80211_tx_skb_tid+0x264/0x420 [ 270.747764][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 270.753055][ C1] ieee80211_mgmt_tx+0x1b46/0x2170 [ 270.758173][ C1] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 270.763374][ C1] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 270.768927][ C1] nl80211_tx_mgmt+0xb0d/0x1190 [ 270.773784][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 270.779075][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 270.784387][ C1] genl_rcv_msg+0xb14/0xec0 [ 270.788889][ C1] ? mark_lock+0x9a/0x350 [ 270.793223][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.798261][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 270.803280][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 270.808646][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 270.814013][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 270.819501][ C1] ? __pfx___might_resched+0x10/0x10 [ 270.824817][ C1] netlink_rcv_skb+0x1e3/0x430 [ 270.829602][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.834647][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.839949][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 270.845425][ C1] genl_rcv+0x28/0x40 [ 270.849407][ C1] netlink_unicast+0x7ea/0x980 [ 270.854184][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 270.859469][ C1] ? __virt_addr_valid+0x183/0x530 [ 270.864584][ C1] ? __check_object_size+0x49c/0x900 [ 270.869868][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 270.874980][ C1] netlink_sendmsg+0x8db/0xcb0 [ 270.879758][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.885044][ C1] ? __import_iovec+0x536/0x820 [ 270.889892][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.895168][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 270.900633][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.905918][ C1] __sock_sendmsg+0x221/0x270 [ 270.910595][ C1] ____sys_sendmsg+0x525/0x7d0 [ 270.915368][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.920663][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 270.925257][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.930437][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.936788][ C1] ? do_syscall_64+0x100/0x230 [ 270.941566][ C1] ? do_syscall_64+0xb6/0x230 [ 270.946246][ C1] do_syscall_64+0xf3/0x230 [ 270.950752][ C1] ? clear_bhb_loop+0x35/0x90 [ 270.955434][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.961359][ C1] RIP: 0033:0x7f5c46d75bd9 [ 270.965786][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.985409][ C1] RSP: 002b:00007f5c47b25048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.993842][ C1] RAX: ffffffffffffffda RBX: 00007f5c46f03f60 RCX: 00007f5c46d75bd9 [ 271.001819][ C1] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 000000000000000b [ 271.009789][ C1] RBP: 00007f5c46de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 271.017757][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.025986][ C1] R13: 000000000000000b R14: 00007f5c46f03f60 R15: 00007fff16883af8 [ 271.034412][ C1] [ 271.037432][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.044702][ C1] CPU: 1 PID: 7419 Comm: syz.0.607 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 271.054672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.064717][ C1] Call Trace: [ 271.067991][ C1] [ 271.070828][ C1] dump_stack_lvl+0x241/0x360 [ 271.075602][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.080804][ C1] ? __pfx__printk+0x10/0x10 [ 271.085410][ C1] ? _printk+0xd5/0x120 [ 271.089571][ C1] ? vscnprintf+0x5d/0x90 [ 271.093898][ C1] panic+0x349/0x860 [ 271.097793][ C1] ? __warn+0x172/0x4e0 [ 271.101946][ C1] ? __pfx_panic+0x10/0x10 [ 271.106360][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 271.111603][ C1] __warn+0x346/0x4e0 [ 271.115623][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 271.120753][ C1] report_bug+0x2b3/0x500 [ 271.125105][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 271.130236][ C1] handle_bug+0x3e/0x70 [ 271.134399][ C1] exc_invalid_op+0x1a/0x50 [ 271.138922][ C1] asm_exc_invalid_op+0x1a/0x20 [ 271.143800][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 271.149526][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 06 8e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 271.169142][ C1] RSP: 0018:ffffc90000a170d0 EFLAGS: 00010002 [ 271.175219][ C1] RAX: 0000000000010303 RBX: ffff888029a45a00 RCX: 0000000000000002 [ 271.183204][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f5540 [ 271.191193][ C1] RBP: 0100000000000005 R08: ffffffff92f765f7 R09: 1ffffffff25eecbe [ 271.199169][ C1] R10: dffffc0000000000 R11: fffffbfff25eecbf R12: ffffffff819630de [ 271.207143][ C1] R13: ffff88807cde8900 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 271.215122][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 271.220161][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 271.225013][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 271.230756][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 271.236155][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 271.242066][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 271.247283][ C1] dummy_timer+0x830/0x45d0 [ 271.251832][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 271.256777][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 271.261715][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 271.266938][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 271.272950][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 271.278687][ C1] hrtimer_interrupt+0x396/0x990 [ 271.283658][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 271.289658][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 271.295295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.301278][ C1] RIP: 0010:preempt_count_sub+0x0/0x170 [ 271.306824][ C1] Code: 8c 77 ff ff ff 48 c7 c7 60 9b ac 8f e8 59 08 93 00 e9 66 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 56 53 89 fb 48 c7 c0 e0 e6 76 94 48 c1 e8 03 49 be [ 271.326427][ C1] RSP: 0018:ffffc90000a17868 EFLAGS: 00000246 [ 271.332499][ C1] RAX: ffffffff8180144d RBX: 00007f5c46d75bd9 RCX: 0000000000040000 [ 271.340469][ C1] RDX: ffffc90002311000 RSI: 00000000000008ef RDI: 0000000000000001 [ 271.348460][ C1] RBP: 0000000000000001 R08: ffffffff81800e58 R09: ffffffff8141095f [ 271.356452][ C1] R10: 0000000000000003 R11: ffff888029a45a00 R12: 0000000000000000 [ 271.364439][ C1] R13: ffffffff8181dd10 R14: 00007f5c46d75bd9 R15: 1ffff92000142f29 [ 271.372439][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.378611][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 271.383904][ C1] ? __module_address+0x28/0x500 [ 271.388853][ C1] ? is_module_text_address+0x9d/0x190 [ 271.394349][ C1] is_module_text_address+0x10f/0x190 [ 271.399729][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.405890][ C1] kernel_text_address+0x96/0xe0 [ 271.410847][ C1] __kernel_text_address+0xd/0x40 [ 271.415889][ C1] unwind_get_return_address+0x5d/0xc0 [ 271.421372][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.427460][ C1] arch_stack_walk+0x125/0x1b0 [ 271.432247][ C1] stack_trace_save+0x118/0x1d0 [ 271.437144][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 271.442539][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 271.447829][ C1] ? __pfx_validate_chain+0x10/0x10 [ 271.453030][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 271.459282][ C1] kasan_save_track+0x3f/0x80 [ 271.463963][ C1] ? kasan_save_track+0x3f/0x80 [ 271.468811][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 271.473565][ C1] ? __kmalloc_noprof+0x1f9/0x400 [ 271.478587][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 271.484571][ C1] ? ieee80211_inform_bss+0x15f/0x1080 [ 271.490031][ C1] ? cfg80211_inform_single_bss_data+0x1121/0x2360 [ 271.496530][ C1] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 271.502331][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 271.508569][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 271.514402][ C1] ? ieee80211_scan_rx+0x526/0x9c0 [ 271.519538][ C1] ? ieee80211_rx_list+0x2b00/0x3780 [ 271.524839][ C1] ? ieee80211_rx_napi+0x18a/0x3c0 [ 271.529961][ C1] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 271.536130][ C1] ? tasklet_action_common+0x321/0x4d0 [ 271.541612][ C1] ? handle_softirqs+0x2c4/0x970 [ 271.546549][ C1] ? do_softirq+0x11b/0x1e0 [ 271.551050][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 271.556500][ C1] ? ieee80211_tx_skb_tid+0x264/0x420 [ 271.561896][ C1] ? ieee80211_mgmt_tx+0x1b46/0x2170 [ 271.567209][ C1] ? cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 271.572781][ C1] ? nl80211_tx_mgmt+0xb0d/0x1190 [ 271.577814][ C1] ? genl_rcv_msg+0xb14/0xec0 [ 271.582504][ C1] ? netlink_rcv_skb+0x1e3/0x430 [ 271.587474][ C1] ? genl_rcv+0x28/0x40 [ 271.591644][ C1] ? netlink_unicast+0x7ea/0x980 [ 271.596590][ C1] ? netlink_sendmsg+0x8db/0xcb0 [ 271.601533][ C1] ? __sock_sendmsg+0x221/0x270 [ 271.606382][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 271.611322][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 271.616083][ C1] ? do_syscall_64+0xf3/0x230 [ 271.620757][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.626847][ C1] __kasan_kmalloc+0x98/0xb0 [ 271.631435][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 271.637418][ C1] __kmalloc_noprof+0x1f9/0x400 [ 271.642276][ C1] ieee802_11_parse_elems_full+0xd5/0x2870 [ 271.648088][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.654429][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 271.660330][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 271.665529][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 271.671414][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.677744][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 271.684074][ C1] ? kvfree_call_rcu+0x48c/0x790 [ 271.689017][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 271.694317][ C1] ? cfg80211_update_known_bss+0xb95/0x1500 [ 271.700221][ C1] ieee80211_inform_bss+0x15f/0x1080 [ 271.705512][ C1] ? __cfg80211_bss_update+0x1a8f/0x20c0 [ 271.711142][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 271.716866][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 271.723277][ C1] ? cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 271.729692][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 271.735410][ C1] cfg80211_inform_single_bss_data+0x1121/0x2360 [ 271.741742][ C1] ? mark_lock+0x9a/0x350 [ 271.746075][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 271.752769][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 271.758586][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 271.764243][ C1] ? __pfx_validate_chain+0x10/0x10 [ 271.769449][ C1] ? validate_chain+0x11e/0x5900 [ 271.774409][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 271.780479][ C1] ? __pfx_validate_chain+0x10/0x10 [ 271.785674][ C1] ? mark_lock+0x9a/0x350 [ 271.790001][ C1] ? mark_lock+0x9a/0x350 [ 271.794327][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 271.799367][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 271.804381][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 271.810194][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 271.816268][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 271.822075][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 271.827715][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 271.833877][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.840204][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 271.846013][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 271.850966][ C1] ieee80211_rx_list+0x2b00/0x3780 [ 271.856087][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 271.861120][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 271.866588][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 271.871611][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.877586][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.883913][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 271.888934][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 271.893874][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.900199][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 271.905660][ C1] ? skb_dequeue+0x113/0x150 [ 271.910245][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 271.916228][ C1] tasklet_action_common+0x321/0x4d0 [ 271.921510][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 271.927312][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.933633][ C1] ? workqueue_softirq_action+0xca/0x140 [ 271.939264][ C1] handle_softirqs+0x2c4/0x970 [ 271.944024][ C1] ? do_softirq+0x11b/0x1e0 [ 271.948526][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 271.953818][ C1] do_softirq+0x11b/0x1e0 [ 271.958144][ C1] [ 271.961069][ C1] [ 271.963992][ C1] ? __pfx_do_softirq+0x10/0x10 [ 271.968833][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 271.974465][ C1] ? rcu_is_watching+0x15/0xb0 [ 271.979225][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 271.984414][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 271.989262][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 271.995267][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.001019][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 272.007018][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 272.012308][ C1] ieee80211_tx_skb_tid+0x264/0x420 [ 272.017508][ C1] ? ieee80211_tx_skb_tid+0x30/0x420 [ 272.022800][ C1] ieee80211_mgmt_tx+0x1b46/0x2170 [ 272.027921][ C1] ? ieee80211_mgmt_tx+0xa2e/0x2170 [ 272.033149][ C1] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 272.038528][ C1] nl80211_tx_mgmt+0xb0d/0x1190 [ 272.043380][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 272.048672][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 272.054001][ C1] genl_rcv_msg+0xb14/0xec0 [ 272.058509][ C1] ? mark_lock+0x9a/0x350 [ 272.062846][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.067885][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 272.072903][ C1] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 272.078269][ C1] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 272.083547][ C1] ? __pfx_nl80211_post_doit+0x10/0x10 [ 272.089005][ C1] ? __pfx___might_resched+0x10/0x10 [ 272.094302][ C1] netlink_rcv_skb+0x1e3/0x430 [ 272.099066][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.104085][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.109388][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 272.114857][ C1] genl_rcv+0x28/0x40 [ 272.118831][ C1] netlink_unicast+0x7ea/0x980 [ 272.123610][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 272.128891][ C1] ? __virt_addr_valid+0x183/0x530 [ 272.134001][ C1] ? __check_object_size+0x49c/0x900 [ 272.139283][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 272.144394][ C1] netlink_sendmsg+0x8db/0xcb0 [ 272.149167][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.154455][ C1] ? __import_iovec+0x536/0x820 [ 272.159318][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.164609][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 272.170074][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.175360][ C1] __sock_sendmsg+0x221/0x270 [ 272.180034][ C1] ____sys_sendmsg+0x525/0x7d0 [ 272.184826][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.190168][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 272.194775][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.199920][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.206247][ C1] ? do_syscall_64+0x100/0x230 [ 272.211010][ C1] ? do_syscall_64+0xb6/0x230 [ 272.215705][ C1] do_syscall_64+0xf3/0x230 [ 272.220202][ C1] ? clear_bhb_loop+0x35/0x90 [ 272.224871][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.230762][ C1] RIP: 0033:0x7f5c46d75bd9 [ 272.235168][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.254771][ C1] RSP: 002b:00007f5c47b25048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.263191][ C1] RAX: ffffffffffffffda RBX: 00007f5c46f03f60 RCX: 00007f5c46d75bd9 [ 272.271165][ C1] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 000000000000000b [ 272.279135][ C1] RBP: 00007f5c46de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 272.287105][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.295073][ C1] R13: 000000000000000b R14: 00007f5c46f03f60 R15: 00007fff16883af8 [ 272.303052][ C1] [ 272.306278][ C1] Kernel Offset: disabled [ 272.310662][ C1] Rebooting in 86400 seconds..