last executing test programs: 9.329509048s ago: executing program 1 (id=3492): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x12) 9.205111092s ago: executing program 1 (id=3494): socket$tipc(0x1e, 0x4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000080)=0x10001, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.47045383s ago: executing program 4 (id=3539): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="000020000008000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 3.309016455s ago: executing program 4 (id=3540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 2.615012059s ago: executing program 4 (id=3546): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) 2.296447997s ago: executing program 4 (id=3550): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)={0x38, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}]}]}]}, 0x38}}, 0x0) 2.164440451s ago: executing program 4 (id=3552): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 1.908294944s ago: executing program 2 (id=3554): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 1.90808109s ago: executing program 4 (id=3555): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)="967b545fb6f17eb27478ffe5e56db2e130aa58d9bd2ee6370d864f746589c321e0d3546efde9e11249efa2d3e3802baa4fdb882930a579e8e8658c32f4d3506ace8f6ea2ca9f1c667fad8a55f174", 0x4e) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) 1.767508545s ago: executing program 2 (id=3556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6152fd8dda9c51ea, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1.50305732s ago: executing program 0 (id=3560): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0) 1.352581893s ago: executing program 3 (id=3562): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)={0x38, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}]}]}]}, 0x38}}, 0x0) 1.276387546s ago: executing program 3 (id=3563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{}, {}, @device_b}, @random="d2e19a5c24a93497d82c0c7385ab"}, 0x28) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaa20000000000011907800000000000000008903aaecb876049221bc3e1b71b93c3e411dc763c4e67a5284e9cbf8a446e16b0f5432a8d099676daf2ab93d0abff393fb50c5e6fd90eb6aeabb676c48f8fe001082bf0b901373b5ae0543858b14e27d18b5f70ae4dd2d698bb00e367c52f6316db2ea379486fde0cb1f3dbcdaabdb9ce4f7c359dc0546fccaa71bb539cf1cea655bd1674a06e208717686819c2bd57d4913b074c378dcc177a3579ca8a9bbc156589e1e0a63707587e4a9c4da4d80b4fecc37fa"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000c80)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {}, "", @value={0x0, 0x1, 0x1, 0x1, 0xa9}, @value=@ver_80211n={0x0, 0xd5, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x8ad) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400020206000802110000000000080026006c090000000000000000000074168d730f0e00c4e519f0417526f364dd9ec23c07d76f515d92185bc5411d883efda946c103b2937b01357e1e11e3f9a6ddd8f55471c94ff7597b16cac36c0099073601c398bd5ec622d949b7e803c30000000000000000ec10abdefa651b8ca4dc1ef62350dbbf5d31cd3fab7504e980dc909cca2576ea8db0b821b536ecc036c4dae47cc46c14a17499afae8f76feab62e0b6436bc9ac05682de02902fa27cb1e31c7889092390b2052403813b233f7928c4eed164036c865da1833b7f1d70fa0fcae0674a9b37bd0241d31d1f0ba659cc5ff6947"], 0x3c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x1a6, [], 0x0, 0x0, &(0x7f0000000200)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'netpci0\x00', 'veth0_to_batadv\x00', 'batadv_slave_1\x00', 'geneve0\x00', @link_local, [], @dev, [], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'ipvlan0\x00', {}, 'pimreg0\x00'}}}], [], @snat={'snat\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x2}]}, 0x21e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{}, {0x5}]}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000007c0)=ANY=[@ANYBLOB="383d20000802110000010802110000000802070000000000"], 0x18) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000000000000000002082848b960c121824"], 0x28) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r9, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) 821.043773ms ago: executing program 2 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 590.543945ms ago: executing program 0 (id=3565): chdir(0x0) unlink(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 542.585363ms ago: executing program 2 (id=3566): r0 = socket(0x2b, 0x80801, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000001180)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x240080d1}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) 445.105388ms ago: executing program 3 (id=3567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 444.926726ms ago: executing program 0 (id=3568): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='.\x00', 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 383.330514ms ago: executing program 2 (id=3569): socket$inet6_dccp(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6}, 0x48) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x2}]}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x40}}, 0x0) 381.512316ms ago: executing program 3 (id=3570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) 366.755874ms ago: executing program 1 (id=3571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)="271fb4e97deb10fcba317775de80e785d2e168f55a257b68a0dc9a5fec55a4579f249cbf28f313c3f19b709a5fce56f167b727a87516f618cabdf43c49f16546dcbad37c3972c681592adfdd1b6f92f67652a9b442dd982de3f5fc56be000ec4a42667f202f4c7330a", &(0x7f0000000140), 0x5, r1}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000140)=""/75}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0}, 0x90) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@ax25={{0x3, @null}, [@remote, @null, @remote, @rose, @default, @remote, @default, @rose]}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000004080)=""/4104, 0x1008}, 0x10000) sendto$inet6(r0, &(0x7f0000000040)="93", 0x100ac, 0x0, 0x0, 0x44) 293.058762ms ago: executing program 0 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000070000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 248.464054ms ago: executing program 0 (id=3573): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)={0x38, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}]}]}]}, 0x38}}, 0x0) 230.121785ms ago: executing program 1 (id=3574): r0 = openat$vicodec0(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000400)={0x2}) 200.427724ms ago: executing program 3 (id=3575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003"], 0x60}}, 0x0) 176.863018ms ago: executing program 2 (id=3576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700008008000300", @ANYRES32=r2, @ANYBLOB="14000400726f73653000000000000000000000000800050006"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, &(0x7f0000001900)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00y%\x00'], 0x8) clock_gettime(0x0, &(0x7f0000000480)) ppoll(&(0x7f0000000440)=[{r7}, {r7}], 0x2, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x8}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0x6, 0x7}}, 0x3f, @val={0x8c, 0x10, {0xc29, "27beb93baf38", @short="ed69e6c8d8179e9d"}}}, 0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000005050505050500000000000000000000064000100ff060202ad020202010882848b960c129cf312dc911d23d607b61824"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$inet_sctp(0x2, 0xa5f8f64103c057f9, 0x84) 176.436088ms ago: executing program 0 (id=3577): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x0, {0x0, 0x1}, {0x0, 0xe55a85b9c4b321c3}}], 0x20) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 129.539919ms ago: executing program 1 (id=3578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2], 0x38}}, 0x0) 80.473894ms ago: executing program 3 (id=3579): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=3580): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 219.831250][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 219.846310][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 220.230247][ T5090] Bluetooth: hci1: command tx timeout [ 221.854107][ T8886] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 221.880195][ T8886] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 221.919929][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.938134][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.973823][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.002336][ T8899] netlink: 'syz.0.1394': attribute type 10 has an invalid length. [ 222.111852][ T8765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.142426][ T8765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.172048][ T8765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.193001][ T8907] qrtr: Invalid version 0 [ 222.197997][ T8765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.305984][ T5090] Bluetooth: hci1: command tx timeout [ 222.431937][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.487370][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.518324][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.525555][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.637704][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.644907][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.199286][ T8936] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 223.225360][ T8936] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1405'. [ 223.246611][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 223.286587][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 223.314508][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.432995][ T8765] veth0_vlan: entered promiscuous mode [ 223.482816][ T8765] veth1_vlan: entered promiscuous mode [ 223.561283][ T8765] veth0_macvtap: entered promiscuous mode [ 223.580887][ T8765] veth1_macvtap: entered promiscuous mode [ 223.664450][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.676295][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.696081][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.712142][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.724293][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.755391][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.773395][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.784815][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.803623][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.814249][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.827923][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.853403][ T8946] team0: entered promiscuous mode [ 223.859410][ T8946] team_slave_0: entered promiscuous mode [ 223.866955][ T8946] team_slave_1: entered promiscuous mode [ 223.875464][ T8946] team0: left promiscuous mode [ 223.880436][ T8946] team_slave_0: left promiscuous mode [ 223.889967][ T8946] team_slave_1: left promiscuous mode [ 223.914238][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 223.923304][ T8944] bridge_slave_1: left allmulticast mode [ 223.929455][ T8944] bridge_slave_1: left promiscuous mode [ 223.939475][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.967968][ T8944] bridge_slave_0: left allmulticast mode [ 223.981977][ T8944] bridge_slave_0: left promiscuous mode [ 223.997373][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.115417][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 224.225060][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.255402][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.275297][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.305346][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.319217][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 224.325317][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.341421][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.357211][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.377465][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.383741][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 224.405272][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.419183][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 224.433399][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.440449][ T9] usb 1-1: Manufacturer: syz [ 224.461675][ T9] usb 1-1: config 0 descriptor?? [ 224.465070][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.507029][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.567116][ T8765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.585334][ T9] rc_core: IR keymap rc-hauppauge not found [ 224.595632][ T9] Registered IR keymap rc-empty [ 224.601420][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 224.604062][ T8765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.645284][ T8765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.648176][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 224.664195][ T8765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.708704][ T9] usb 1-1: USB disconnect, device number 8 [ 224.957437][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.997082][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.047826][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.086966][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.213777][ T8974] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 225.222089][ T8974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1417'. [ 225.251778][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 225.289919][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 225.291174][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 225.463001][ T8992] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1424'. [ 225.472303][ T8992] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1424'. [ 225.995762][ T1147] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.087738][ T5090] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 226.186708][ T1147] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 226.195129][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.229177][ T9027] tmpfs: Unknown parameter '/' [ 226.250514][ T1147] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 226.264747][ T1147] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 226.279453][ T1147] usb 3-1: Manufacturer: syz [ 226.293082][ T1147] usb 3-1: config 0 descriptor?? [ 226.406737][ T1147] rc_core: IR keymap rc-hauppauge not found [ 226.418005][ T1147] Registered IR keymap rc-empty [ 226.424720][ T1147] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.441251][ T1147] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 226.545170][ T1147] usb 3-1: USB disconnect, device number 4 [ 226.902460][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1448'. [ 227.487710][ T9083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.521230][ T9083] IPVS: Unknown mcast interface: pim6reg [ 227.546043][ T9083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.598451][ T9089] netlink: 'syz.4.1458': attribute type 4 has an invalid length. [ 228.520528][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 228.804643][ T9130] delete_channel: no stack [ 229.888019][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.056557][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.091655][ T9147] netlink: 'syz.4.1477': attribute type 4 has an invalid length. [ 230.136148][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 230.147615][ T5090] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 230.157579][ T5090] Bluetooth: hci2: Injecting HCI hardware error event [ 230.166444][ T5090] Bluetooth: hci2: hardware error 0x00 [ 230.386018][ T9149] syz.0.1476 uses obsolete (PF_INET,SOCK_PACKET) [ 231.210849][ T9168] delete_channel: no stack [ 231.614183][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.626450][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.636322][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.649440][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.668106][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.685493][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.954087][ T2869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.150900][ T2869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.225479][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 232.379157][ T2869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.552238][ T2869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.748738][ T9213] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1503'. [ 233.252358][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 233.311320][ T2869] bridge_slave_1: left allmulticast mode [ 233.323525][ T2869] bridge_slave_1: left promiscuous mode [ 233.330612][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.373478][ T2869] bridge_slave_0: left allmulticast mode [ 233.385832][ T2869] bridge_slave_0: left promiscuous mode [ 233.391642][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.745589][ T5090] Bluetooth: hci6: command tx timeout [ 234.522268][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.551134][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.597489][ T2869] bond0 (unregistering): Released all slaves [ 235.510394][ T5090] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 235.523723][ T5090] Bluetooth: hci5: Injecting HCI hardware error event [ 235.535037][ T5090] Bluetooth: hci5: hardware error 0x00 [ 235.591410][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.609546][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.617094][ T9183] bridge_slave_0: entered allmulticast mode [ 235.624585][ T9183] bridge_slave_0: entered promiscuous mode [ 235.633940][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.641867][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.649483][ T9183] bridge_slave_1: entered allmulticast mode [ 235.659123][ T9183] bridge_slave_1: entered promiscuous mode [ 235.677994][ T9252] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 235.825602][ T4485] Bluetooth: hci6: command tx timeout [ 235.931662][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.000897][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.013713][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1521'. [ 236.044003][ T2869] hsr_slave_0: left promiscuous mode [ 236.057443][ T2869] hsr_slave_1: left promiscuous mode [ 236.087533][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.102888][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.122814][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.132113][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.205208][ T2869] veth1_macvtap: left promiscuous mode [ 236.212362][ T2869] veth0_macvtap: left promiscuous mode [ 236.219349][ T2869] veth1_vlan: left promiscuous mode [ 236.224977][ T2869] veth0_vlan: left promiscuous mode [ 237.211041][ T2869] team0 (unregistering): Port device team_slave_1 removed [ 237.274423][ T2869] team0 (unregistering): Port device team_slave_0 removed [ 237.671968][ T5090] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 237.749923][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 237.821841][ T9294] tipc: Started in network mode [ 237.827172][ T9294] tipc: Node identity 1, cluster identity 4711 [ 237.833445][ T9294] tipc: Node number set to 1 [ 237.844257][ T9183] team0: Port device team_slave_0 added [ 237.860791][ T9183] team0: Port device team_slave_1 added [ 237.905954][ T5090] Bluetooth: hci6: command tx timeout [ 237.948744][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.973377][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.994398][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 237.994414][ T29] audit: type=1326 audit(1721357774.759:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 238.031864][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.042808][ T29] audit: type=1326 audit(1721357774.789:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 238.042860][ T29] audit: type=1326 audit(1721357774.789:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 238.042899][ T29] audit: type=1326 audit(1721357774.799:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 238.042937][ T29] audit: type=1326 audit(1721357774.799:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 238.152833][ T9303] netlink: 'syz.4.1530': attribute type 4 has an invalid length. [ 238.164734][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.205379][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.268840][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.289046][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 239.327700][ T9183] hsr_slave_0: entered promiscuous mode [ 239.363041][ T9183] hsr_slave_1: entered promiscuous mode [ 239.374837][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.382846][ T9183] Cannot create hsr debugfs directory [ 239.682426][ T9329] kvm: pic: single mode not supported [ 239.871473][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 239.988392][ T5090] Bluetooth: hci6: command tx timeout [ 240.088114][ T9348] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 240.358742][ T9183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.369909][ T9183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.393696][ T9183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.416723][ T9183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.594300][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.641387][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.662391][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.669549][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.506491][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.513613][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.731004][ T9357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.783316][ T9357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.064925][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.262983][ T9183] veth0_vlan: entered promiscuous mode [ 242.334760][ T9183] veth1_vlan: entered promiscuous mode [ 242.383493][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 242.479428][ T9183] veth0_macvtap: entered promiscuous mode [ 242.504653][ T9183] veth1_macvtap: entered promiscuous mode [ 242.626494][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.675921][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.695402][ T927] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.710732][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.754663][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.773273][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.784955][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.802681][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.813738][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.843167][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.856415][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.891385][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.907483][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.940633][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.955521][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.960948][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.975667][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.993128][ T927] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 243.002645][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.004350][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.032007][ T927] usb 1-1: config 0 descriptor?? [ 243.052096][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.071743][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.091813][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.104001][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.115138][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.132765][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.152459][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.177444][ T9183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.190524][ T9183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.199658][ T9183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.210418][ T9183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.235503][ T5097] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.327956][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.346976][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.445476][ T9396] ptrace attach of "./syz-executor exec"[5093] was attempted by "./syz-executor exec"[9396] [ 243.468070][ T5097] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.472980][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.486995][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 243.501837][ T5097] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.506469][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.520213][ T9396] tipc: Enabling of bearer rejected, failed to enable media [ 243.540467][ T5097] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.571314][ T927] belkin 0003:1020:0006.000A: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 243.584380][ T5097] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.630604][ T5097] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.640725][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.672993][ T5097] usb 2-1: Product: syz [ 243.683973][ T5097] usb 2-1: Manufacturer: syz [ 243.718166][ T5097] cdc_wdm 2-1:1.0: skipping garbage [ 243.725809][ T5097] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 243.754514][ T1147] usb 1-1: USB disconnect, device number 9 [ 243.889478][ T9425] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1569'. [ 244.154993][ T1147] usb 2-1: USB disconnect, device number 14 [ 244.437662][ T9449] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 244.499036][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 245.284027][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'. [ 245.557773][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 247.544229][ T9516] @: renamed from vlan0 (while UP) [ 247.562030][ T9519] netlink: 'syz.4.1605': attribute type 17 has an invalid length. [ 247.587696][ T9519] netlink: 'syz.4.1605': attribute type 41 has an invalid length. [ 247.619213][ T9519] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1605'. [ 247.756282][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 247.895595][ T9533] sctp: [Deprecated]: syz.4.1612 (pid 9533) Use of int in max_burst socket option. [ 247.895595][ T9533] Use struct sctp_assoc_value instead [ 247.937300][ T9537] delete_channel: no stack [ 251.421818][ T9623] netlink: 644 bytes leftover after parsing attributes in process `syz.3.1651'. [ 253.944774][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 254.046846][ T9693] macvlan2: entered allmulticast mode [ 254.083895][ T9693] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 254.116384][ T9693] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 254.158231][ T9693] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 254.400217][ T9708] netlink: 644 bytes leftover after parsing attributes in process `syz.0.1682'. [ 255.143875][ T9735] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 255.174125][ T9735] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 255.249135][ T9738] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 255.270669][ T9738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1691'. [ 255.310921][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 255.383151][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 255.677058][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1699'. [ 255.812134][ T9762] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 256.073647][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.082175][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.332776][ T9789] netlink: 'syz.4.1714': attribute type 5 has an invalid length. [ 256.691538][ T9802] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 256.720700][ T9799] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1719'. [ 256.788522][ T9799] ip6gretap0: entered promiscuous mode [ 256.849728][ T9799] ip6gretap0: left promiscuous mode [ 256.963808][ T9808] Bluetooth: MGMT ver 1.23 [ 257.622760][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.658655][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'. [ 257.730978][ T9845] netlink: 'syz.2.1735': attribute type 5 has an invalid length. [ 257.766934][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.832148][ T9851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.099689][ T9858] unsupported nla_type 33800 [ 258.145450][ T4485] Bluetooth: hci3: command 0x0406 tx timeout [ 258.808054][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 258.882808][ T9898] netlink: 'syz.3.1759': attribute type 5 has an invalid length. [ 259.848657][ T9928] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.083982][ T9935] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1774'. [ 260.527215][ T9955] netlink: 'syz.1.1781': attribute type 5 has an invalid length. [ 261.359284][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.421790][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1788'. [ 261.524529][ T9980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.549870][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.979517][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 262.288490][T10011] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 262.299510][T10011] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1805'. [ 262.308758][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 262.320622][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 262.855739][T10056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.870876][T10056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.952297][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 262.963082][T10064] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 263.250827][T10020] delete_channel: no stack [ 264.456540][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 264.466158][T10096] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 264.725574][ T5097] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 264.918279][ T5097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.701219][ T5097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.724912][ T5097] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 265.755577][ T5097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.782509][ T5097] usb 3-1: config 0 descriptor?? [ 265.844811][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 266.201576][T10093] ptrace attach of "./syz-executor exec"[8067] was attempted by "./syz-executor exec"[10093] [ 266.283441][T10093] tipc: Started in network mode [ 266.302086][T10093] tipc: Node identity , cluster identity 4711 [ 266.317974][ T5097] belkin 0003:1020:0006.000B: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 266.332863][T10093] tipc: Failed to set node id, please configure manually [ 266.349041][T10093] tipc: Enabling of bearer rejected, failed to enable media [ 266.370671][T10128] tap0: tun_chr_ioctl cmd 35108 [ 266.524927][ T5134] usb 3-1: USB disconnect, device number 5 [ 266.575841][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 266.603348][T10132] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 267.285008][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 268.785760][ T5134] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.066714][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.251299][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.336553][ T5134] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 269.358595][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.377932][ T5134] usb 2-1: config 0 descriptor?? [ 269.793477][T10182] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[10182] [ 269.870444][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 269.899279][ T5134] belkin 0003:1020:0006.000C: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 270.111179][ T9] usb 2-1: USB disconnect, device number 15 [ 270.466206][T10212] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1884'. [ 270.934881][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1893'. [ 271.063564][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 271.068191][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.095421][T10236] bridge_slave_1: left allmulticast mode [ 271.108214][T10236] bridge_slave_1: left promiscuous mode [ 271.121131][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.150803][T10236] bridge_slave_0: left allmulticast mode [ 271.166352][T10236] bridge_slave_0: left promiscuous mode [ 271.180886][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.550832][T10241] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1896'. [ 271.709437][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1900'. [ 272.204747][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 273.178850][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1914'. [ 278.315011][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1927'. [ 278.515860][T10311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1925'. [ 278.718014][T10327] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 278.726001][T10327] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 278.733913][T10327] netlink: 9336 bytes leftover after parsing attributes in process `syz.2.1932'. [ 278.764473][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 278.769546][T10327] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 279.144071][T10308] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.425490][T10362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1942'. [ 280.977758][T10378] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 281.101656][T10384] macvlan2: entered allmulticast mode [ 281.110755][T10384] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 281.120245][T10384] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 281.144241][T10384] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 281.650075][T10411] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 282.691096][T10424] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 282.777072][T10424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.828199][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.835957][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.930014][T10435] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1970'. [ 282.960236][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1970'. [ 283.113543][T10448] 9pnet_virtio: no channels available for device syz [ 285.222258][T10493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1989'. [ 286.373694][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'. [ 286.427787][T10518] 9pnet_virtio: no channels available for device syz [ 288.023532][T10558] macvlan3: entered allmulticast mode [ 288.055722][T10558] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 288.318991][ T5090] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 288.597473][T10581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.725564][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.832223][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.203083][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.282336][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2026'. [ 289.376080][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.397823][T10603] 9pnet_virtio: no channels available for device syz [ 289.398016][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.618922][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.637322][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.673278][T10612] macvlan3: entered allmulticast mode [ 289.681667][T10612] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 290.219559][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 290.266061][T10627] bridge_slave_1: left allmulticast mode [ 290.282004][T10627] bridge_slave_1: left promiscuous mode [ 290.299659][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.338498][T10627] bridge_slave_0: left allmulticast mode [ 290.355424][T10627] bridge_slave_0: left promiscuous mode [ 290.363478][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.561771][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 291.044924][T10654] 9pnet_virtio: no channels available for device syz [ 291.885542][ T5090] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 292.805519][ T5132] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.000598][ T5132] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 293.020315][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.041499][ T5132] usb 1-1: config 0 descriptor?? [ 293.053417][ T5090] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 294.604146][ T5132] pegasus 1-1:0.0: can't reset MAC [ 294.623295][ T5132] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 294.657948][ T5132] usb 1-1: USB disconnect, device number 10 [ 294.676628][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 295.887907][ T5090] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 296.599841][ T5132] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.843649][ T5132] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 296.865414][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.891319][ T5132] usb 2-1: config 0 descriptor?? [ 296.905985][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 296.960504][T10786] netlink: 'syz.0.2100': attribute type 3 has an invalid length. [ 296.991885][T10786] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2100'. [ 297.104527][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 297.991158][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 298.402972][ T5132] pegasus 2-1:0.0: can't reset MAC [ 298.425490][ T5132] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 298.446127][ T5132] usb 2-1: USB disconnect, device number 16 [ 298.528787][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 298.852886][T10833] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2119'. [ 299.078224][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 299.102385][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 299.115671][ T4485] Bluetooth: hci4: command 0x0406 tx timeout [ 299.577127][T10879] openvswitch: netlink: Unknown key attributes 2 [ 300.028744][T10913] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 300.045488][T10913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2152'. [ 300.070749][T10913] ipvlan1: entered promiscuous mode [ 300.090080][T10913] ipvlan1: entered allmulticast mode [ 300.097102][T10913] veth0_vlan: entered allmulticast mode [ 300.116040][ T5090] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 300.119713][T10913] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 302.212515][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 302.782296][ T5090] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 303.749760][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 303.864086][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 303.949876][T11020] mmap: syz.4.2186 (11020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 304.215382][ T5132] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 304.354664][T11044] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 304.365959][T11044] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 304.407304][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.419005][T11051] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 304.439325][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.455392][T11051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2196'. [ 304.464759][ T5132] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 304.479711][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 304.496337][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.509083][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 304.518404][ T5132] usb 2-1: config 0 descriptor?? [ 304.531140][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 304.844525][T11076] netlink: 644 bytes leftover after parsing attributes in process `syz.2.2206'. [ 304.923679][T11019] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[11019] [ 304.951254][T11019] tipc: Enabling of bearer rejected, failed to enable media [ 305.007811][ T5132] belkin 0003:1020:0006.000D: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 305.233927][ T8] usb 2-1: USB disconnect, device number 17 [ 305.251520][T11095] Bluetooth: MGMT ver 1.23 [ 305.542785][T11110] netlink: 644 bytes leftover after parsing attributes in process `syz.0.2219'. [ 306.025492][ T5132] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 306.208584][ T5132] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.217596][ T5132] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.228056][ T5132] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.237613][ T5132] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.254767][ T5132] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.267410][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.285040][ T5132] usb 5-1: Product: syz [ 306.289564][ T5132] usb 5-1: Manufacturer: syz [ 306.318072][ T5132] cdc_wdm 5-1:1.0: skipping garbage [ 306.323377][ T5132] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 306.775170][ T5132] usb 5-1: USB disconnect, device number 7 [ 307.098915][ T5090] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 307.353638][ T5090] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 307.434112][T11163] input: syz0 as /devices/virtual/input/input8 [ 307.674485][T11188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2244'. [ 308.131140][T11197] program syz.4.2249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.288811][ T29] audit: type=1326 audit(1721357845.069:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.338219][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'. [ 308.361333][ T29] audit: type=1326 audit(1721357845.069:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.416229][ T29] audit: type=1326 audit(1721357845.099:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.461801][ T29] audit: type=1326 audit(1721357845.099:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.572189][ T29] audit: type=1326 audit(1721357845.099:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.593744][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.674985][ T29] audit: type=1326 audit(1721357845.099:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.736749][ T29] audit: type=1326 audit(1721357845.109:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.875855][ T29] audit: type=1326 audit(1721357845.109:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 308.901186][ T29] audit: type=1326 audit(1721357845.109:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 309.003534][ T29] audit: type=1326 audit(1721357845.109:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11206 comm="syz.0.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 310.232830][T11246] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 310.377069][T11246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.540831][T11292] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 313.549883][T11292] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 313.820517][T11316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.874232][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2288'. [ 313.921966][T11323] tmpfs: Bad value for 'mpol' [ 313.977484][T11316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.011720][T11316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.386470][T11338] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 314.536557][T11338] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.090387][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 315.135722][T11375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.226454][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2308'. [ 315.450812][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.464545][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.802949][T11400] netlink: 'syz.4.2319': attribute type 10 has an invalid length. [ 317.510084][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.516728][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.006412][T11443] 9pnet_fd: Insufficient options for proto=fd [ 319.782591][T11465] 9pnet_fd: Insufficient options for proto=fd [ 320.154296][ T5090] Bluetooth: hci0: unexpected event for opcode 0x200a [ 320.339756][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.347512][T11499] IPv6: NLM_F_CREATE should be set when creating new route [ 321.102741][T11528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.110046][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 321.901424][T11576] @: renamed from vlan0 (while UP) [ 321.993243][T11578] netlink: 'syz.3.2390': attribute type 1 has an invalid length. [ 322.044134][T11577] netlink: 'syz.0.2389': attribute type 1 has an invalid length. [ 322.383976][T11591] netlink: 'syz.2.2395': attribute type 29 has an invalid length. [ 322.464744][T11591] netlink: 'syz.2.2395': attribute type 29 has an invalid length. [ 322.529719][T11591] netlink: 'syz.2.2395': attribute type 29 has an invalid length. [ 322.559629][T11591] netlink: 'syz.2.2395': attribute type 29 has an invalid length. [ 323.937963][T11611] @: renamed from vlan0 (while UP) [ 324.093520][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.105782][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.116871][T11617] 9pnet_fd: Insufficient options for proto=fd [ 324.124381][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.955427][T11648] Bluetooth: MGMT ver 1.23 [ 326.274545][T11665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.369633][T11668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.264735][T11698] delete_channel: no stack [ 332.203155][T11776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.361785][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 332.361802][ T29] audit: type=1326 audit(1721357869.139:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 332.409648][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2475'. [ 332.474200][T11788] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2476'. [ 332.499296][ T29] audit: type=1326 audit(1721357869.139:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 332.575401][ T29] audit: type=1326 audit(1721357869.169:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 332.781928][ T29] audit: type=1326 audit(1721357869.189:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.010637][T11800] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2478' resets device [ 333.208519][ T29] audit: type=1326 audit(1721357869.189:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.261730][ T29] audit: type=1326 audit(1721357869.189:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.302367][ T29] audit: type=1326 audit(1721357869.189:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.324157][ T29] audit: type=1326 audit(1721357869.189:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.372932][ T29] audit: type=1326 audit(1721357869.189:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 333.546613][ T29] audit: type=1326 audit(1721357869.189:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x7ffc0000 [ 334.441108][T11828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.850250][T11840] binder: BINDER_SET_CONTEXT_MGR already set [ 334.856719][T11840] binder: 11831:11840 ioctl 4018620d 20000040 returned -16 [ 336.227160][T11851] macvlan3: entered allmulticast mode [ 336.341963][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2501'. [ 337.321299][T11878] binder: BINDER_SET_CONTEXT_MGR already set [ 337.327417][T11878] binder: 11869:11878 ioctl 4018620d 20000040 returned -16 [ 338.165954][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2515'. [ 338.315591][ T5133] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 338.516851][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 338.535684][ T5133] usb 3-1: Using ep0 maxpacket: 8 [ 338.713353][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2526'. [ 338.866258][ T5133] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 338.885371][ T5133] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 338.895962][ T5133] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.905161][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.092758][T11938] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 340.111527][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 341.427630][ T5133] usb 3-1: USB disconnect, device number 6 [ 342.247087][ T5090] Bluetooth: hci4: unexpected event for opcode 0x040d [ 342.413362][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2548'. [ 342.783791][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 342.873697][T11994] cannot load conntrack support for proto=3 [ 343.367821][ T5133] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.132784][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.171891][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.203791][ T5133] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 344.224698][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.248217][ T5133] usb 2-1: config 0 descriptor?? [ 344.314161][T12010] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 344.344785][T12010] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 344.363025][T12013] netlink: 'syz.2.2559': attribute type 1 has an invalid length. [ 344.396924][T12013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2559'. [ 344.448781][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 344.498424][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'. [ 344.711794][T12000] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[12000] [ 344.779991][T12000] tipc: Enabling of bearer rejected, failed to enable media [ 344.822668][ T5133] belkin 0003:1020:0006.000E: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 344.854950][ T5090] Bluetooth: hci4: unexpected event for opcode 0x040d [ 345.061558][ T5097] usb 2-1: USB disconnect, device number 18 [ 345.212907][T12042] macvlan3: entered allmulticast mode [ 345.707408][T12054] netlink: 'syz.3.2571': attribute type 1 has an invalid length. [ 345.843803][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 345.843821][ T29] audit: type=1326 audit(1721357882.619:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff020375b59 code=0x7ffc0000 [ 345.994767][ T29] audit: type=1326 audit(1721357882.619:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff020375b59 code=0x7ffc0000 [ 346.060296][ T29] audit: type=1326 audit(1721357882.659:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff020375b59 code=0x7ffc0000 [ 346.116556][ T29] audit: type=1326 audit(1721357882.659:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff020375b59 code=0x7ffc0000 [ 346.211094][ T29] audit: type=1326 audit(1721357882.659:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff020375b59 code=0x7ffc0000 [ 346.715779][ T5134] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 346.817227][T12092] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2587'. [ 346.858330][T12092] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2587'. [ 346.878788][T12093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2588'. [ 346.911702][T12092] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2587'. [ 346.942032][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.996346][ T5134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.040673][ T5134] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 347.060807][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.072668][ T5134] usb 5-1: config 0 descriptor?? [ 347.261320][T12100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.305425][T12100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2593'. [ 347.483162][T12080] ptrace attach of "./syz-executor exec"[8235] was attempted by "./syz-executor exec"[12080] [ 347.508692][T12080] tipc: Enabling of bearer rejected, failed to enable media [ 347.528157][ T5134] belkin 0003:1020:0006.000F: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 347.702007][T12117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2599'. [ 347.735983][ T25] usb 5-1: USB disconnect, device number 8 [ 348.165888][ T5134] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 348.306438][T12147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2610'. [ 348.347724][T12149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.369322][ T5134] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.392242][ T5134] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.414566][ T5134] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.423887][ T5134] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.439466][ T5134] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.449756][ T5090] Bluetooth: hci4: unexpected event for opcode 0x200a [ 348.459207][ T5134] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.467491][ T5134] usb 1-1: Product: syz [ 348.471774][ T5134] usb 1-1: Manufacturer: syz [ 348.481219][ T5134] cdc_wdm 1-1:1.0: skipping garbage [ 348.486666][ T5134] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 348.793739][ T5097] usb 1-1: USB disconnect, device number 11 [ 349.856304][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.886232][T12213] __nla_validate_parse: 2 callbacks suppressed [ 349.886253][T12213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2631'. [ 350.091382][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 350.966880][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'. [ 351.289118][T12286] netlink: 'syz.2.2657': attribute type 1 has an invalid length. [ 351.575430][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2666'. [ 351.595732][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 352.367272][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 353.265502][ T29] audit: type=1326 audit(1721357890.039:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12368 comm="syz.0.2688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cc1d75b59 code=0x0 [ 353.480274][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'. [ 354.025498][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 355.243021][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.431660][ T4485] Bluetooth: hci6: command 0x0406 tx timeout [ 355.479672][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=d1.60 [ 355.568154][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.613197][ T9] usb 3-1: config 0 descriptor?? [ 355.629422][ T9] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected [ 355.670904][ T9] usb 3-1: Direct firmware load for keyspan/usa19qi.fw failed with error -2 [ 355.704648][T12412] netlink: 'syz.4.2703': attribute type 2 has an invalid length. [ 355.716437][ T9] usb 3-1: Falling back to sysfs fallback for: keyspan/usa19qi.fw [ 356.189899][T12436] delete_channel: no stack [ 357.582688][T12464] delete_channel: no stack [ 357.586271][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 357.831166][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.072142][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.275727][ T8] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 358.284821][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.310878][ T8] usb 2-1: config 0 descriptor?? [ 358.746742][T12455] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[12455] [ 358.920750][ T8] belkin 0003:1020:0006.0010: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 361.584923][T12455] tipc: Enabling of bearer rejected, failed to enable media [ 361.612521][ T8] usb 2-1: USB disconnect, device number 19 [ 361.906086][ T5090] Bluetooth: hci6: command 0x0406 tx timeout [ 362.406019][T12571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.458328][ T5097] IPVS: starting estimator thread 0... [ 362.575660][T12573] IPVS: using max 32 ests per chain, 76800 per kthread [ 362.848880][T12579] nbd: must specify a size in bytes for the device [ 363.460844][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 363.563621][T12619] delete_channel: no stack [ 363.817188][T12633] 9pnet_virtio: no channels available for device syz [ 364.037173][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2786'. [ 364.250923][T12654] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 365.530206][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'. [ 365.801741][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 366.305926][T12702] netlink: 'syz.3.2806': attribute type 17 has an invalid length. [ 366.326499][T12702] netlink: 'syz.3.2806': attribute type 41 has an invalid length. [ 366.334514][T12702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2806'. [ 366.406873][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 366.577384][T12719] netlink: 'syz.3.2810': attribute type 1 has an invalid length. [ 366.595858][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 366.942799][ T29] audit: type=1326 audit(1721357903.719:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12730 comm="syz.2.2817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x0 [ 367.230859][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 367.580244][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 367.939045][T12766] delete_channel: no stack [ 368.131486][T12781] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 368.236930][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 368.391971][T12798] delete_channel: no stack [ 368.869492][T12821] delete_channel: no stack [ 368.916409][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.523819][T12830] 9pnet_virtio: no channels available for device syz [ 370.595007][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.885056][ T4485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.913318][ T4485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.924737][ T4485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.941008][ T4485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.950441][ T4485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.958370][ T4485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.051606][T12900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.273194][ T29] audit: type=1326 audit(1721357910.019:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.341489][ T29] audit: type=1326 audit(1721357910.019:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.365678][ T29] audit: type=1326 audit(1721357910.029:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.387597][ T29] audit: type=1326 audit(1721357910.029:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.409603][ T29] audit: type=1326 audit(1721357910.029:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.452677][ T29] audit: type=1326 audit(1721357910.029:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.554350][ T29] audit: type=1326 audit(1721357910.029:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.657246][ T29] audit: type=1326 audit(1721357910.029:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.725813][T12890] chnl_net:caif_netlink_parms(): no params data found [ 373.731407][ T29] audit: type=1326 audit(1721357910.029:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.797436][T12928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.812056][ T29] audit: type=1326 audit(1721357910.029:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.2.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844175b59 code=0x7ffc0000 [ 373.983166][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.993347][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.000744][T12890] bridge_slave_0: entered allmulticast mode [ 374.009539][T12890] bridge_slave_0: entered promiscuous mode [ 374.036532][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.044191][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.057501][T12890] bridge_slave_1: entered allmulticast mode [ 374.065842][ T4485] Bluetooth: hci1: command tx timeout [ 374.078943][T12890] bridge_slave_1: entered promiscuous mode [ 374.150019][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.169210][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.272399][T12890] team0: Port device team_slave_0 added [ 374.318002][T12890] team0: Port device team_slave_1 added [ 374.441060][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.448803][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.508919][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.569724][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.595417][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.655539][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.821875][T12890] hsr_slave_0: entered promiscuous mode [ 374.851729][T12890] hsr_slave_1: entered promiscuous mode [ 374.874535][T12890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.895770][T12890] Cannot create hsr debugfs directory [ 375.049148][T12962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.278409][T12890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.509814][T12890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.709750][T12890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.908843][T12890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.145675][ T4485] Bluetooth: hci1: command tx timeout [ 376.258277][T12890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.308820][T12890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.353312][T12890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.361685][T12980] __nla_validate_parse: 1 callbacks suppressed [ 376.361702][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2917'. [ 376.404432][T12890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.421488][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2917'. [ 376.675567][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.746502][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.787260][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.794425][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.845757][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.852951][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.348240][T12994] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2922'. [ 377.621440][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.731890][T12890] veth0_vlan: entered promiscuous mode [ 377.777400][T12890] veth1_vlan: entered promiscuous mode [ 377.786193][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.026272][T12890] veth0_macvtap: entered promiscuous mode [ 378.084740][T12890] veth1_macvtap: entered promiscuous mode [ 378.163651][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.207171][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.217868][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2927'. [ 378.243127][ T4485] Bluetooth: hci1: command tx timeout [ 378.255785][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.278195][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.296550][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.322717][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.367830][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.417169][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.454762][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.475383][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.503800][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.534973][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.577260][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.648506][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2927'. [ 378.691550][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.751084][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.975056][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.027590][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.161767][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.382206][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.415373][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.445446][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.495026][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.511174][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.524649][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.534555][T12890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.545076][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.561046][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.709808][T13021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2930'. [ 379.749170][T12890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.776897][T12890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.813995][T12890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.837611][T12890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.866698][T13034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2932'. [ 379.889638][T13038] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2934'. [ 380.126303][T13042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.159390][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.187646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.266403][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.297463][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.306290][ T4485] Bluetooth: hci1: command tx timeout [ 380.407288][ T5133] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 380.611491][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.624263][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.638849][ T5133] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 380.648167][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.662052][ T5133] usb 2-1: config 0 descriptor?? [ 380.774907][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2944'. [ 380.829805][T13065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.843823][T13065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.894224][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2946'. [ 381.073792][T13044] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[13044] [ 381.110669][T13044] tipc: Enabling of bearer rejected, failed to enable media [ 381.149444][ T5133] belkin 0003:1020:0006.0011: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 381.365371][ T927] usb 2-1: USB disconnect, device number 20 [ 381.921427][T13096] __nla_validate_parse: 1 callbacks suppressed [ 381.921444][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2956'. [ 382.135146][T13102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2958'. [ 382.442330][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.450027][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.556129][T13110] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2961'. [ 382.575868][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2961'. [ 382.753699][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2967'. [ 382.770494][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 382.936596][T13131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2969'. [ 383.169368][ T1147] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 383.278130][T13152] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2978'. [ 383.298631][T13152] 0ªX¹¦D: renamed from gretap0 (while UP) [ 383.308689][T13152] 0ªX¹¦D: entered allmulticast mode [ 383.314327][T13152] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 383.365660][ T1147] usb 1-1: Using ep0 maxpacket: 16 [ 383.395554][ T1147] usb 1-1: config 0 has no interfaces? [ 383.401072][ T1147] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 383.415314][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.435770][ T1147] usb 1-1: config 0 descriptor?? [ 383.541679][T13159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2979'. [ 383.742957][ T5133] usb 1-1: USB disconnect, device number 12 [ 383.913487][T13166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2982'. [ 384.121375][T13173] vivid-003: disconnect [ 384.139074][T13171] vivid-003: reconnect [ 385.009600][T13204] vivid-005: disconnect [ 385.021150][T13200] vivid-005: reconnect [ 385.618449][T13233] vivid-007: disconnect [ 385.634092][T13232] vivid-007: reconnect [ 385.765564][ T1147] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 385.946750][T13246] bridge_slave_0: entered allmulticast mode [ 385.967452][ T1147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.973481][T13251] bridge_slave_0: entered promiscuous mode [ 386.000081][ T1147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.023645][ T1147] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 386.052066][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.079523][ T1147] usb 1-1: config 0 descriptor?? [ 386.491120][T13224] ptrace attach of "./syz-executor exec"[12890] was attempted by "./syz-executor exec"[13224] [ 386.520677][T13224] tipc: Started in network mode [ 386.526585][T13224] tipc: Node identity , cluster identity 4711 [ 386.532740][T13224] tipc: Failed to set node id, please configure manually [ 386.546607][T13224] tipc: Enabling of bearer rejected, failed to enable media [ 386.560555][ T1147] belkin 0003:1020:0006.0012: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 386.767385][ T1147] usb 1-1: USB disconnect, device number 13 [ 387.286704][ T5097] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 387.528573][ T5097] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.536529][T13295] __nla_validate_parse: 9 callbacks suppressed [ 387.536547][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'. [ 387.555584][ T5097] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.596444][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'. [ 387.603882][ T5097] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.636026][ T5097] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.637001][T13295] bridge_slave_1: left allmulticast mode [ 387.671939][ T5097] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.692036][T13295] bridge_slave_1: left promiscuous mode [ 387.701573][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.731995][ T5097] usb 2-1: Product: syz [ 387.745306][ T5097] usb 2-1: Manufacturer: syz [ 387.746866][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.772958][ T5097] cdc_wdm 2-1:1.0: skipping garbage [ 387.791949][ T5097] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 387.827413][ T4485] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 387.968021][T13295] bridge_slave_0: left allmulticast mode [ 388.009707][T13295] bridge_slave_0: left promiscuous mode [ 388.038863][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.204373][ T8] usb 2-1: USB disconnect, device number 21 [ 388.452650][T13313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.509443][T13315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.524931][T13315] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 388.566286][T13315] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 388.624397][T13326] nbd: must specify a size in bytes for the device [ 389.014833][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 389.057221][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 389.604605][T13364] netlink: 'syz.0.3052': attribute type 5 has an invalid length. [ 389.751811][T13369] tipc: Started in network mode [ 389.768230][T13369] tipc: Node identity ffffffff, cluster identity 4711 [ 389.793776][T13369] tipc: Node number set to 4294967295 [ 389.964680][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 390.565351][ T4485] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 394.091872][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 394.256128][T13437] : renamed from ipvlan1 (while UP) [ 394.303026][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.354236][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.386785][T13443] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 394.482923][T13443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.606181][T13448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.651902][T13448] bond6: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 394.703492][T13448] bond6: (slave ip6tnl1): Error -95 calling set_mac_address [ 394.770318][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 396.809203][T13475] : renamed from ipvlan1 [ 397.026564][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 398.926156][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3114'. [ 399.597136][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 400.130348][T13590] syz.0.3134[13590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.130509][T13590] syz.0.3134[13590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.293287][T13597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.322414][T13597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.333881][T13598] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3138'. [ 400.865632][ T927] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 401.075899][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 401.096999][ T927] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 401.117244][ T927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.135511][ T927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.151839][ T927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 401.163304][ T927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 401.176620][ T927] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.192889][ T927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.202413][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.224314][ T927] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 402.407556][T13608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3142'. [ 402.424018][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 402.669234][T13630] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3149'. [ 404.175839][ T5134] usb 1-1: USB disconnect, device number 14 [ 404.555768][T13667] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3162'. [ 404.708087][T13671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3158'. [ 405.187673][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 405.389758][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.414744][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.675496][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 405.734773][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3171'. [ 405.885679][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 405.906518][ T25] usb 2-1: config 0 has no interfaces? [ 406.274140][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.321078][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.364593][T13701] ptrace attach of "./syz-executor exec"[9183] was attempted by "./syz-executor exec"[13701] [ 406.392196][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.405724][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.425951][ T25] usb 2-1: config 0 descriptor?? [ 406.456504][T13701] tipc: Started in network mode [ 406.461403][T13701] tipc: Node identity , cluster identity 4711 [ 406.479130][T13706] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3176'. [ 406.495360][T13701] tipc: Failed to set node id, please configure manually [ 406.502456][T13701] tipc: Enabling of bearer rejected, failed to enable media [ 406.724066][ T5134] usb 2-1: USB disconnect, device number 22 [ 407.177760][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.190575][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.199210][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.209334][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.222072][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.230403][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.401093][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.598745][T13729] fuse: Bad value for 'group_id' [ 407.636041][T13729] fuse: Bad value for 'group_id' [ 407.651892][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.664169][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.719508][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.808909][ T5090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.820301][ T5090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.836969][ T5090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.850729][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.866115][ T5090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.884127][ T5090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 407.892066][ T5090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.006970][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.395709][T13745] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3189'. [ 408.420735][T13718] chnl_net:caif_netlink_parms(): no params data found [ 409.147159][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.171573][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.191809][ T35] bond0 (unregistering): Released all slaves [ 409.277446][ T4485] Bluetooth: hci4: command tx timeout [ 409.358737][ T35] bond1 (unregistering): Released all slaves [ 409.435434][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 409.481365][ T35] bond2 (unregistering): Released all slaves [ 409.617770][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 409.624930][ T8] usb 2-1: config 0 has no interfaces? [ 409.631551][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.645749][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.657359][ T8] usb 2-1: config 0 descriptor?? [ 409.687080][T13770] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3199'. [ 409.889754][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.916759][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.944259][T13718] bridge_slave_0: entered allmulticast mode [ 409.952040][T13718] bridge_slave_0: entered promiscuous mode [ 409.989868][ T4485] Bluetooth: hci5: command tx timeout [ 410.025644][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.078243][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.096558][T13718] bridge_slave_1: entered allmulticast mode [ 410.106432][T13718] bridge_slave_1: entered promiscuous mode [ 410.149233][ T5097] usb 2-1: USB disconnect, device number 23 [ 410.303425][T13732] chnl_net:caif_netlink_parms(): no params data found [ 410.324254][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.390951][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.584080][T13718] team0: Port device team_slave_0 added [ 410.610140][T13718] team0: Port device team_slave_1 added [ 410.752424][ T35] hsr_slave_0: left promiscuous mode [ 410.795418][ T35] hsr_slave_1: left promiscuous mode [ 410.819844][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.848344][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.879612][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.895486][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.970577][ T35] veth1_macvtap: left promiscuous mode [ 410.985329][ T35] veth0_macvtap: left promiscuous mode [ 410.991795][ T35] veth1_vlan: left promiscuous mode [ 411.005750][ T35] veth0_vlan: left promiscuous mode [ 411.345698][ T4485] Bluetooth: hci4: command tx timeout [ 411.699950][ T35] team0 (unregistering): Port device team_slave_1 removed [ 411.768447][ T35] team0 (unregistering): Port device team_slave_0 removed [ 412.065411][ T5090] Bluetooth: hci5: command tx timeout [ 412.291754][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.305295][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.325034][T13806] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3210'. [ 412.356240][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.370063][T13732] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.377387][T13732] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.384710][T13732] bridge_slave_0: entered allmulticast mode [ 412.408591][T13732] bridge_slave_0: entered promiscuous mode [ 412.417580][T13732] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.424709][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.450710][T13732] bridge_slave_1: entered allmulticast mode [ 412.460288][T13732] bridge_slave_1: entered promiscuous mode [ 412.477374][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.491645][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.520323][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.604930][T13732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.653745][T13732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.770544][T13732] team0: Port device team_slave_0 added [ 412.786011][T13817] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 412.801227][T13732] team0: Port device team_slave_1 added [ 412.805418][T13817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3215'. [ 412.823531][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 412.858746][T13718] hsr_slave_0: entered promiscuous mode [ 412.875739][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 412.880966][T13718] hsr_slave_1: entered promiscuous mode [ 412.909197][T13718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.932831][T13718] Cannot create hsr debugfs directory [ 413.045969][T13732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.063193][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.120482][T13732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.146749][T13732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.175540][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.195498][ T5134] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 413.225675][T13732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.266159][T13824] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3218'. [ 413.363234][T13830] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3221'. [ 413.404551][T13732] hsr_slave_0: entered promiscuous mode [ 413.405546][ T5134] usb 2-1: Using ep0 maxpacket: 8 [ 413.418004][T13732] hsr_slave_1: entered promiscuous mode [ 413.425558][ T55] Bluetooth: hci4: command tx timeout [ 413.425801][ T4485] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 413.431019][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 413.445625][T13732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.445892][ T5134] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 413.461576][ T5134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.476078][ T5134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.482512][T13732] Cannot create hsr debugfs directory [ 413.485861][ T5134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.485890][ T5134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.485935][ T5134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 413.485959][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.758674][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.895158][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.007297][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.096032][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.148231][ T5090] Bluetooth: hci5: command tx timeout [ 414.373404][T13851] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3230'. [ 414.383453][T13849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3229'. [ 414.774414][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.789159][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.802552][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 414.812347][ T35] bond0 (unregistering): Released all slaves [ 414.927008][ T35] tipc: Left network mode [ 415.381607][T13732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.451259][T13732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.505520][ T5090] Bluetooth: hci4: command tx timeout [ 415.581145][T13732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.661507][T13732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.707606][ T35] hsr_slave_0: left promiscuous mode [ 415.717847][ T35] hsr_slave_1: left promiscuous mode [ 415.730035][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.742136][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.776393][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.791351][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.854753][ T35] veth1_macvtap: left promiscuous mode [ 415.862106][ T35] veth0_macvtap: left promiscuous mode [ 415.876132][ T35] veth1_vlan: left promiscuous mode [ 415.881473][ T35] veth0_vlan: left promiscuous mode [ 415.895613][T13872] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3239'. [ 415.943222][ T927] usb 2-1: USB disconnect, device number 24 [ 416.225443][ T5090] Bluetooth: hci5: command tx timeout [ 416.466174][ T35] team0 (unregistering): Port device team_slave_1 removed [ 416.510720][ T35] team0 (unregistering): Port device team_slave_0 removed [ 416.917159][T13718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.008336][T13718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.086516][T13718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.118453][T13718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.167615][T13891] netlink: 'syz.0.3244': attribute type 1 has an invalid length. [ 417.345003][T13900] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3248'. [ 417.587813][T13718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.640057][T13732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.677351][ T5134] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 417.723673][T13718] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.753152][T13732] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.785024][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.792191][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.871328][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.879304][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.895396][ T5134] usb 2-1: Using ep0 maxpacket: 8 [ 417.912596][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.919197][ T5134] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 417.919812][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.935363][ T5134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.960404][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.967201][ T5134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.967585][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.986024][ T5134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.997311][ T5134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.015556][ T5134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.044796][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.296613][ T5134] usb 2-1: usb_control_msg returned -32 [ 418.312478][ T5134] usbtmc 2-1:16.0: can't read capabilities [ 418.476050][T13718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.572023][T13718] veth0_vlan: entered promiscuous mode [ 418.610350][T13718] veth1_vlan: entered promiscuous mode [ 418.700983][T13718] veth0_macvtap: entered promiscuous mode [ 418.718705][T13732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.744140][T13718] veth1_macvtap: entered promiscuous mode [ 418.814578][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.838205][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.856404][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.879199][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.893871][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.922214][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.953910][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.967885][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.978088][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.991286][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.014847][T13718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.048518][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.078992][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.099990][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.111380][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.122339][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.137312][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.155007][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.170273][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.182089][T13718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.193995][T13718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.207470][T13718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.220130][T13718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.239171][T13718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.259400][T13718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.271906][T13718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.449949][T13732] veth0_vlan: entered promiscuous mode [ 419.556572][T13732] veth1_vlan: entered promiscuous mode [ 419.576550][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.588041][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.726731][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.747303][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.751485][T13732] veth0_macvtap: entered promiscuous mode [ 419.811219][T13732] veth1_macvtap: entered promiscuous mode [ 419.896835][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.907744][ T9] usb 3-1: ezusb_ihex_firmware_download - request "keyspan/usa19qi.fw" failed [ 419.907776][ T9] usb 3-1: failed to load firmware "keyspan/usa19qi.fw" [ 419.907890][ T9] keyspan 3-1:0.0: probe with driver keyspan failed with error -2 [ 419.958654][ T9] usb 3-1: USB disconnect, device number 7 [ 420.002383][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.045451][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.073130][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.095399][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.108742][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.136401][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.155325][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.165176][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.194024][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.215402][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.235996][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.257092][T13732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.356641][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.395348][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.405200][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.413676][ T5132] usb 2-1: USB disconnect, device number 25 [ 420.454992][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.482302][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.503127][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.523368][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.546137][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.559150][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.570667][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.580689][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.603703][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.623323][T13732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.651336][T13732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.679872][T13732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.703414][T13732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.722147][T13948] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3260'. [ 420.735561][T13732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.751087][T13948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 420.754817][T13941] tipc: Started in network mode [ 420.757865][T13948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 420.770345][T13948] vhci_hcd vhci_hcd.0: Device attached [ 420.777459][T13941] tipc: Node identity ffffffff, cluster identity 4711 [ 420.784258][T13941] tipc: Node number set to 4294967295 [ 420.815319][T13951] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 0 [ 420.860052][ T53] vhci_hcd: stop threads [ 420.864813][ T53] vhci_hcd: release socket [ 420.894813][ T53] vhci_hcd: disconnect device [ 420.921354][T13958] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 420.967485][ T5132] vhci_hcd: vhci_device speed not set [ 421.112697][T13963] netlink: 'syz.2.3263': attribute type 5 has an invalid length. [ 421.283419][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.303084][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.411215][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.433839][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.399129][T14005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3275'. [ 422.435579][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3275'. [ 422.470863][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.494776][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.502108][T14005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.521831][T14003] netlink: 'syz.0.3277': attribute type 4 has an invalid length. [ 424.471877][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3294'. [ 424.823322][T14055] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 425.637284][T14068] : renamed from ipvlan1 [ 426.064038][T14076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3305'. [ 427.062206][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3317'. [ 427.144553][T14112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.164167][T14112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.191584][T14112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.395919][T14126] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 427.742978][T14136] : renamed from ipvlan1 [ 427.912782][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3330'. [ 428.432128][T14166] : renamed from ipvlan1 [ 428.618585][T14171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3345'. [ 429.344042][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'. [ 429.464742][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.494675][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.538611][T14192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.624668][T14211] syzkaller0: entered promiscuous mode [ 429.638862][T14211] syzkaller0: entered allmulticast mode [ 429.653170][ T35] syzkaller0: tun_net_xmit 48 [ 429.659137][T14214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3363'. [ 429.710247][T14211] syzkaller0: tun_net_xmit 1280 [ 429.725375][T14211] syzkaller0: create flow: hash 547939762 index 1 [ 429.852940][T14208] syzkaller0: delete flow: hash 547939762 index 1 [ 429.976887][T14225] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 432.593374][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.613362][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.656074][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.674497][T14271] netlink: 'syz.2.3383': attribute type 5 has an invalid length. [ 433.173625][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.224503][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.338453][T14297] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3394'. [ 435.539894][T14378] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 436.625181][T14385] netlink: 'syz.3.3425': attribute type 5 has an invalid length. [ 437.940050][T14419] netlink: 'syz.4.3438': attribute type 5 has an invalid length. [ 440.389509][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.764011][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 441.139893][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.148856][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.158818][T14500] ptrace attach of "./syz-executor exec"[9183] was attempted by "./syz-executor exec"[14500] [ 441.177833][T14500] tipc: Started in network mode [ 441.182917][T14500] tipc: Node identity , cluster identity 4711 [ 441.191495][T14500] tipc: Failed to set node id, please configure manually [ 441.201750][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 441.265781][ T5090] Bluetooth: hci5: command tx timeout [ 442.535370][ T5130] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 442.646371][ T5097] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 442.731355][ T5130] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.755587][ T5130] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.765030][ T5130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.773408][ T5130] usb 5-1: Product: syz [ 442.777921][ T5130] usb 5-1: Manufacturer: syz [ 442.782603][ T5130] usb 5-1: SerialNumber: syz [ 442.792295][ T5130] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 442.847590][ T5097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.860530][ T5097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.870620][ T5097] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 442.879868][ T5097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.890699][ T5097] usb 3-1: config 0 descriptor?? [ 443.036072][ T5130] usb 5-1: USB disconnect, device number 9 [ 443.089227][T14554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.106571][ T5090] Bluetooth: hci4: command tx timeout [ 443.109890][T14554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3483'. [ 443.238401][T14554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.258205][T14554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.301919][T14543] ptrace attach of "./syz-executor exec"[13718] was attempted by "./syz-executor exec"[14543] [ 443.327832][T14543] tipc: Enabling of bearer rejected, failed to enable media [ 443.344384][ T5097] belkin 0003:1020:0006.0013: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 443.383749][T14557] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3484'. [ 443.545664][ T9] usb 3-1: USB disconnect, device number 8 [ 444.870829][T14607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.924948][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3503'. [ 445.047370][T14607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.088397][T14607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.251128][T14623] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 445.280766][T14623] macvlan2: entered allmulticast mode [ 445.295629][T14623] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 445.324322][T14623] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 445.345428][T14623] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 445.588077][T14625] kvm: kvm [14624]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x80 [ 445.645905][T14625] kvm: kvm [14624]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80 [ 445.982473][T14641] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 446.509421][T14647] netlink: 'syz.0.3522': attribute type 1 has an invalid length. [ 446.568773][T14647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.608861][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3521'. [ 446.707022][T14653] vlan2: entered promiscuous mode [ 446.733244][T14653] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 446.781147][T14653] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 448.307174][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.377620][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3526'. [ 448.540597][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.581260][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.910066][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c312c00: rx timeout, send abort [ 448.920844][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e46400: rx timeout, send abort [ 448.929279][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c312c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 448.944866][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029e46400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 449.065051][T14680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.130124][T14680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.255480][T14686] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 449.279136][T14686] macvlan3: entered allmulticast mode [ 449.290730][T14686] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 449.331721][T14686] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 449.349551][T14686] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 449.436463][T14695] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 449.522089][T14698] fuse: Bad value for 'fd' [ 449.569684][T14695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.806580][T14710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3538'. [ 450.117317][T14718] tipc: Started in network mode [ 450.122251][T14718] tipc: Node identity 9a15f3a37849, cluster identity 4711 [ 450.173314][T14718] tipc: Enabled bearer , priority 0 [ 450.258705][T14716] syzkaller0: MTU too low for tipc bearer [ 450.286155][T14716] tipc: Disabling bearer [ 450.757921][T14730] lo: entered allmulticast mode [ 450.760881][T14734] fuse: Bad value for 'fd' [ 451.314656][T14746] tipc: Started in network mode [ 451.325482][T14746] tipc: Node identity ffffffff, cluster identity 4711 [ 451.332866][T14746] tipc: Node number set to 4294967295 [ 451.575392][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 451.675644][T14760] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 451.795412][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 451.802511][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 451.815479][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.838763][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.864339][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.890893][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.916753][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 451.924237][T14770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.932165][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3563'. [ 451.944265][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 451.966447][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.996206][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.012479][T14770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.017631][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 452.031451][T14770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.065102][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 452.075315][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 452.105311][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.125293][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.155312][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 452.179942][ T25] usb 5-1: string descriptor 0 read error: -22 [ 452.195439][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.204522][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.241577][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 452.350830][T14772] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 452.375739][T14772] macvlan2: entered allmulticast mode [ 452.381824][T14772] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 452.410418][T14772] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 452.424608][T14772] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 452.514080][ T9] usb 5-1: USB disconnect, device number 10 [ 452.839849][T14783] nicvf0: renamed from bridge_slave_1 (while UP) [ 452.851575][T14783] netlink: 'syz.2.3569': attribute type 2 has an invalid length. [ 452.868975][T14783] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 453.045361][ T5130] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 453.107006][ T4485] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 453.113547][ T4485] Bluetooth: hci4: command 0x206a tx timeout [ 453.245040][T14804] ------------[ cut here ]------------ [ 453.251175][T14804] WARNING: CPU: 1 PID: 14804 at include/net/mac80211.h:6993 minstrel_ht_update_caps+0x44a/0x17e0 [ 453.261847][T14804] Modules linked in: [ 453.265814][T14804] CPU: 1 PID: 14804 Comm: syz.1.3580 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0 [ 453.275769][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.285888][T14804] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 453.292258][T14804] Code: da e8 aa 2f ca f9 e9 24 ff ff ff e8 70 b7 7e f6 eb 17 e8 69 b7 7e f6 eb 14 e8 62 b7 7e f6 49 c1 fd 38 eb 0c e8 57 b7 7e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 453.311946][T14804] RSP: 0018:ffffc90003e5ef80 EFLAGS: 00010287 [ 453.318072][T14804] RAX: ffffffff8b17aca9 RBX: 000000000000000c RCX: 0000000000040000 [ 453.326096][T14804] RDX: ffffc9000454a000 RSI: 0000000000000e1d RDI: 0000000000000e1e [ 453.334090][T14804] RBP: 0000000000000000 R08: ffffffff8b17abc5 R09: 0000000000000000 [ 453.342118][T14804] R10: ffff88801bb5c008 R11: ffffed100376bd49 R12: 1ffff1100f63961c [ 453.350144][T14804] R13: 0b00000000000000 R14: ffff88807b1cb0e0 R15: 0100000000000000 [ 453.358171][T14804] FS: 00007f90d6c106c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 453.367157][T14804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.373757][T14804] CR2: 00007f08e7f97fa8 CR3: 0000000020a8a000 CR4: 00000000003506f0 [ 453.381788][T14804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.389806][T14804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.397832][T14804] Call Trace: [ 453.401126][T14804] [ 453.404075][T14804] ? __warn+0x163/0x4e0 [ 453.408302][T14804] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 453.414056][T14804] ? report_bug+0x2b3/0x500 [ 453.418620][T14804] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 453.424370][T14804] ? handle_bug+0x3e/0x70 [ 453.428764][T14804] ? exc_invalid_op+0x1a/0x50 [ 453.433468][T14804] ? asm_exc_invalid_op+0x1a/0x20 [ 453.438551][T14804] ? minstrel_ht_update_caps+0x365/0x17e0 [ 453.444296][T14804] ? minstrel_ht_update_caps+0x449/0x17e0 [ 453.450076][T14804] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 453.455875][T14804] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.461288][T14804] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 453.467157][T14804] rate_control_rate_init+0x3cf/0x5f0 [ 453.472555][T14804] ? rate_control_rate_init+0xe3/0x5f0 [ 453.478108][T14804] sta_apply_auth_flags+0x1b6/0x410 [ 453.483353][T14804] sta_apply_parameters+0xe23/0x1550 [ 453.488719][T14804] ieee80211_add_station+0x3da/0x630 [ 453.494040][T14804] rdev_add_station+0x11b/0x2b0 [ 453.498960][T14804] nl80211_new_station+0x1d53/0x2550 [ 453.504294][T14804] ? __pfx_nl80211_new_station+0x10/0x10 [ 453.509992][T14804] ? netdev_run_todo+0xf88/0x1000 [ 453.515091][T14804] genl_rcv_msg+0xb14/0xec0 [ 453.519650][T14804] ? mark_lock+0x9a/0x350 [ 453.524017][T14804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.529127][T14804] ? __pfx_lock_acquire+0x10/0x10 [ 453.534174][T14804] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 453.539599][T14804] ? __pfx_nl80211_new_station+0x10/0x10 [ 453.545284][T14804] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.550785][T14804] ? __pfx___might_resched+0x10/0x10 [ 453.556210][T14804] netlink_rcv_skb+0x1e3/0x430 [ 453.561008][T14804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.566095][T14804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.571429][T14804] ? __netlink_deliver_tap+0x77e/0x7c0 [ 453.576986][T14804] genl_rcv+0x28/0x40 [ 453.581004][T14804] netlink_unicast+0x7f0/0x990 [ 453.585843][T14804] ? __pfx_netlink_unicast+0x10/0x10 [ 453.591153][T14804] ? __virt_addr_valid+0x183/0x530 [ 453.596325][T14804] ? __check_object_size+0x49c/0x900 [ 453.601639][T14804] ? bpf_lsm_netlink_send+0x9/0x10 [ 453.606810][T14804] netlink_sendmsg+0x8e4/0xcb0 [ 453.611623][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.616971][T14804] ? __import_iovec+0x536/0x820 [ 453.621852][T14804] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 453.627188][T14804] ? security_socket_sendmsg+0x87/0xb0 [ 453.632673][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.638014][T14804] __sock_sendmsg+0x221/0x270 [ 453.642722][T14804] ____sys_sendmsg+0x525/0x7d0 [ 453.647551][T14804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.652881][T14804] __sys_sendmsg+0x2b0/0x3a0 [ 453.657532][T14804] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.662727][T14804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.669116][T14804] ? do_syscall_64+0x100/0x230 [ 453.673910][T14804] ? do_syscall_64+0xb6/0x230 [ 453.678644][T14804] do_syscall_64+0xf3/0x230 [ 453.683170][T14804] ? clear_bhb_loop+0x35/0x90 [ 453.687896][T14804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.693818][T14804] RIP: 0033:0x7f90d5d75b59 [ 453.698300][T14804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.717973][T14804] RSP: 002b:00007f90d6c10048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.726454][T14804] RAX: ffffffffffffffda RBX: 00007f90d5f05f60 RCX: 00007f90d5d75b59 [ 453.734449][T14804] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000004 [ 453.742481][T14804] RBP: 00007f90d5de4e5d R08: 0000000000000000 R09: 0000000000000000 [ 453.750530][T14804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.758592][T14804] R13: 000000000000004d R14: 00007f90d5f05f60 R15: 00007fff3e3cf028 [ 453.766656][T14804] [ 453.769696][T14804] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.776988][T14804] CPU: 1 PID: 14804 Comm: syz.1.3580 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0 [ 453.786809][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.796881][T14804] Call Trace: [ 453.800171][T14804] [ 453.803114][T14804] dump_stack_lvl+0x241/0x360 [ 453.807825][T14804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.813047][T14804] ? __pfx__printk+0x10/0x10 [ 453.817672][T14804] ? vscnprintf+0x5d/0x90 [ 453.822023][T14804] panic+0x349/0x860 [ 453.825943][T14804] ? __warn+0x172/0x4e0 [ 453.830125][T14804] ? __pfx_panic+0x10/0x10 [ 453.834594][T14804] __warn+0x346/0x4e0 [ 453.838597][T14804] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 453.844341][T14804] report_bug+0x2b3/0x500 [ 453.848690][T14804] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 453.854432][T14804] handle_bug+0x3e/0x70 [ 453.858609][T14804] exc_invalid_op+0x1a/0x50 [ 453.863139][T14804] asm_exc_invalid_op+0x1a/0x20 [ 453.868011][T14804] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 453.874358][T14804] Code: da e8 aa 2f ca f9 e9 24 ff ff ff e8 70 b7 7e f6 eb 17 e8 69 b7 7e f6 eb 14 e8 62 b7 7e f6 49 c1 fd 38 eb 0c e8 57 b7 7e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 453.893986][T14804] RSP: 0018:ffffc90003e5ef80 EFLAGS: 00010287 [ 453.900078][T14804] RAX: ffffffff8b17aca9 RBX: 000000000000000c RCX: 0000000000040000 [ 453.908068][T14804] RDX: ffffc9000454a000 RSI: 0000000000000e1d RDI: 0000000000000e1e [ 453.916055][T14804] RBP: 0000000000000000 R08: ffffffff8b17abc5 R09: 0000000000000000 [ 453.924043][T14804] R10: ffff88801bb5c008 R11: ffffed100376bd49 R12: 1ffff1100f63961c [ 453.932032][T14804] R13: 0b00000000000000 R14: ffff88807b1cb0e0 R15: 0100000000000000 [ 453.940029][T14804] ? minstrel_ht_update_caps+0x365/0x17e0 [ 453.945772][T14804] ? minstrel_ht_update_caps+0x449/0x17e0 [ 453.951533][T14804] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.956940][T14804] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 453.962766][T14804] rate_control_rate_init+0x3cf/0x5f0 [ 453.968162][T14804] ? rate_control_rate_init+0xe3/0x5f0 [ 453.973652][T14804] sta_apply_auth_flags+0x1b6/0x410 [ 453.978880][T14804] sta_apply_parameters+0xe23/0x1550 [ 453.984199][T14804] ieee80211_add_station+0x3da/0x630 [ 453.989514][T14804] rdev_add_station+0x11b/0x2b0 [ 453.994394][T14804] nl80211_new_station+0x1d53/0x2550 [ 453.999721][T14804] ? __pfx_nl80211_new_station+0x10/0x10 [ 454.005378][T14804] ? netdev_run_todo+0xf88/0x1000 [ 454.010465][T14804] genl_rcv_msg+0xb14/0xec0 [ 454.014984][T14804] ? mark_lock+0x9a/0x350 [ 454.019346][T14804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.024519][T14804] ? __pfx_lock_acquire+0x10/0x10 [ 454.029566][T14804] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 454.034953][T14804] ? __pfx_nl80211_new_station+0x10/0x10 [ 454.040603][T14804] ? __pfx_nl80211_post_doit+0x10/0x10 [ 454.046083][T14804] ? __pfx___might_resched+0x10/0x10 [ 454.051398][T14804] netlink_rcv_skb+0x1e3/0x430 [ 454.056188][T14804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.061233][T14804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.066556][T14804] ? __netlink_deliver_tap+0x77e/0x7c0 [ 454.072055][T14804] genl_rcv+0x28/0x40 [ 454.076055][T14804] netlink_unicast+0x7f0/0x990 [ 454.080847][T14804] ? __pfx_netlink_unicast+0x10/0x10 [ 454.086146][T14804] ? __virt_addr_valid+0x183/0x530 [ 454.091284][T14804] ? __check_object_size+0x49c/0x900 [ 454.096686][T14804] ? bpf_lsm_netlink_send+0x9/0x10 [ 454.101824][T14804] netlink_sendmsg+0x8e4/0xcb0 [ 454.106628][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.111936][T14804] ? __import_iovec+0x536/0x820 [ 454.116809][T14804] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 454.122110][T14804] ? security_socket_sendmsg+0x87/0xb0 [ 454.127594][T14804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.132896][T14804] __sock_sendmsg+0x221/0x270 [ 454.137607][T14804] ____sys_sendmsg+0x525/0x7d0 [ 454.142403][T14804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.147725][T14804] __sys_sendmsg+0x2b0/0x3a0 [ 454.152332][T14804] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.157515][T14804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.163878][T14804] ? do_syscall_64+0x100/0x230 [ 454.168668][T14804] ? do_syscall_64+0xb6/0x230 [ 454.173387][T14804] do_syscall_64+0xf3/0x230 [ 454.177910][T14804] ? clear_bhb_loop+0x35/0x90 [ 454.182604][T14804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.188531][T14804] RIP: 0033:0x7f90d5d75b59 [ 454.192963][T14804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.212583][T14804] RSP: 002b:00007f90d6c10048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.221021][T14804] RAX: ffffffffffffffda RBX: 00007f90d5f05f60 RCX: 00007f90d5d75b59 [ 454.229019][T14804] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000004 [ 454.237006][T14804] RBP: 00007f90d5de4e5d R08: 0000000000000000 R09: 0000000000000000 [ 454.244995][T14804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.252981][T14804] R13: 000000000000004d R14: 00007f90d5f05f60 R15: 00007fff3e3cf028 [ 454.260994][T14804] [ 454.264241][T14804] Kernel Offset: disabled [ 454.268672][T14804] Rebooting in 86400 seconds..