last executing test programs: 3.296430038s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 3.162845257s ago: executing program 1: readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000280)=""/82, 0x52}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.934870901s ago: executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00') lseek(r0, 0x1c, 0x0) 2.814877819s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) 2.525177549s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.323253696s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa443, 0x0) flock(r0, 0x1) 2.279758524s ago: executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x1}, @const={0x5, {0x0, 0xa, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.09630227s ago: executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x4807b000) fsopen(&(0x7f00000000c0)='jfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) 1.773586573s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 1.625434736s ago: executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/43, 0x2b) getdents(r1, 0xfffffffffffffffd, 0x58) 1.576026176s ago: executing program 0: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) splice(r1, &(0x7f00000001c0), r0, 0x0, 0x80000001, 0x0) 1.52726123s ago: executing program 1: syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x88, 0x68, 0xf9, 0x8, 0x7ab, 0xfccd, 0x1f24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xa3, 0xfd}}]}}]}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1.365634295s ago: executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x6) setsockopt(r0, 0xff, 0x1, 0x0, 0x32) 1.328095985s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x52) 1.251641189s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa443, 0x0) flock(r0, 0x1) 1.225696687s ago: executing program 3: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) splice(r1, &(0x7f00000001c0), r0, 0x0, 0x80000001, 0x0) 1.194396754s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x4) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x28) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 1.099000692s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}]}, 0x34}}, 0x0) 1.098220678s ago: executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x4807b000) fsopen(&(0x7f00000000c0)='jfs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) 981.635898ms ago: executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xd}) 950.467211ms ago: executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600007, 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 836.273321ms ago: executing program 2: mkdir(&(0x7f0000000480)='./bus\x00', 0x152) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) chdir(&(0x7f0000000040)='./bus\x00') symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 797.129593ms ago: executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a23da90a", 0x4}], 0x1) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 700.968483ms ago: executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x40000000002, 0x3, 0x6) setsockopt(r0, 0xff, 0x1, 0x0, 0x32) 602.325026ms ago: executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82002, 0x0) read$proc_mixer(r0, &(0x7f0000000300)=""/218, 0xda) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 534.512881ms ago: executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x1}, @const={0x5, {0x0, 0xa, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 437.157995ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0xfffd}, 0x90) 400.448048ms ago: executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000740)={0xf}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000e601000040"]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 290.004579ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): T7655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.214166][ T7655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.218262][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.254431][ T7655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.254469][ T7655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.254496][ T7655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.254521][ T7655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.353729][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.457769][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.457794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.513494][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.544760][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.544861][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.591028][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.591129][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.619863][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.619887][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.732473][ T7818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.832182][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.040804][ T7818] veth0_vlan: entered promiscuous mode [ 200.062788][ T7818] veth1_vlan: entered promiscuous mode [ 200.153999][ T7818] veth0_macvtap: entered promiscuous mode [ 200.177138][ T5156] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.211794][ T7818] veth1_macvtap: entered promiscuous mode [ 200.278440][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.313662][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.336945][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.350281][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.364975][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.381067][ T5156] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.394455][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.411009][ T5156] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.424470][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.441918][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.469795][ T5156] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.480532][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.487861][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.495866][ T5156] usb 1-1: Product: syz [ 200.509635][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.536936][ T5156] usb 1-1: Manufacturer: syz [ 200.541580][ T5156] usb 1-1: SerialNumber: syz [ 200.551267][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.569494][ T5156] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 200.586105][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.599222][ T5156] cdc_ncm 1-1:1.0: bind() failure [ 200.615879][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.646169][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.676131][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.685988][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.717130][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.729944][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.808238][ T64] usb 5-1: USB disconnect, device number 5 [ 200.840617][ T7818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.890826][ T7818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.917801][ T7818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.962468][ T7818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.964696][ T8076] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 200.995364][ T8076] batman_adv: batadv0: Adding interface: team0 [ 200.995384][ T8076] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.995410][ T8076] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 201.039978][ T8078] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 201.040004][ T8078] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.040146][ T8078] team0: entered promiscuous mode [ 201.040163][ T8078] team_slave_0: entered promiscuous mode [ 201.040457][ T8078] team_slave_1: entered promiscuous mode [ 201.062898][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.063183][ T8078] batman_adv: batadv0: Interface activated: team0 [ 201.063241][ T8078] batman_adv: batadv0: Interface deactivated: team0 [ 201.063270][ T8078] batman_adv: batadv0: Removing interface: team0 [ 201.077011][ T8078] bridge0: port 3(team0) entered blocking state [ 201.077167][ T8078] bridge0: port 3(team0) entered disabled state [ 201.077329][ T8078] team0: entered allmulticast mode [ 201.077348][ T8078] team_slave_0: entered allmulticast mode [ 201.077365][ T8078] team_slave_1: entered allmulticast mode [ 201.098951][ T8078] bridge0: port 3(team0) entered blocking state [ 201.219889][ T8078] bridge0: port 3(team0) entered forwarding state [ 201.506596][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.543469][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.651918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.680383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.699202][ T8107] dvmrp0: entered allmulticast mode [ 201.744609][ T8107] dvmrp0: left allmulticast mode [ 201.836628][ T25] usb 1-1: USB disconnect, device number 3 [ 201.903267][ T8117] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 202.311138][ T8138] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 202.373738][ T8138] bridge0: port 3(team0) entered disabled state [ 202.441569][ T8138] team0: left allmulticast mode [ 202.464774][ T8138] team_slave_0: left allmulticast mode [ 202.477262][ T8138] team_slave_1: left allmulticast mode [ 202.501022][ T8138] team0: left promiscuous mode [ 202.517938][ T8138] team_slave_0: left promiscuous mode [ 202.535672][ T8138] team_slave_1: left promiscuous mode [ 202.553437][ T8138] bridge0: port 3(team0) entered disabled state [ 202.611439][ T8138] batman_adv: batadv0: Adding interface: team0 [ 202.629609][ T8138] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.654739][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.692490][ T8138] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 202.756569][ T1146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 202.779484][ T8141] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 202.807404][ T8141] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.861497][ T8141] team0: entered promiscuous mode [ 202.878323][ T8141] team_slave_0: entered promiscuous mode [ 202.893771][ T8141] team_slave_1: entered promiscuous mode [ 202.904905][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.921258][ T8141] batman_adv: batadv0: Interface activated: team0 [ 202.943965][ T8141] batman_adv: batadv0: Interface deactivated: team0 [ 202.959072][ T8141] batman_adv: batadv0: Removing interface: team0 [ 202.959235][ T1146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.980168][ T1146] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.986919][ T8141] bridge0: port 3(team0) entered blocking state [ 203.001264][ T1146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.001294][ T1146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.001315][ T1146] usb 3-1: Product: syz [ 203.001330][ T1146] usb 3-1: Manufacturer: syz [ 203.001346][ T1146] usb 3-1: SerialNumber: syz [ 203.026378][ T1146] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 203.044009][ T1146] cdc_ncm 3-1:1.0: bind() failure [ 203.070277][ T8141] bridge0: port 3(team0) entered disabled state [ 203.100288][ T8141] team0: entered allmulticast mode [ 203.139333][ T8141] team_slave_0: entered allmulticast mode [ 203.160176][ T8141] team_slave_1: entered allmulticast mode [ 203.214231][ T8141] bridge0: port 3(team0) entered blocking state [ 203.220659][ T8141] bridge0: port 3(team0) entered forwarding state [ 203.504128][ T8190] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.531823][ T8192] net_ratelimit: 8 callbacks suppressed [ 203.531842][ T8192] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.837518][ T29] audit: type=1326 audit(1717243021.638:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5f8a7cee9 code=0x0 [ 203.995298][ T5156] usb 3-1: USB disconnect, device number 2 [ 204.006143][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.206217][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 204.252376][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 204.281813][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.309441][ T25] usb 4-1: Product: syz [ 204.329965][ T25] usb 4-1: Manufacturer: syz [ 204.352134][ T25] usb 4-1: SerialNumber: syz [ 204.375316][ T25] usb 4-1: config 0 descriptor?? [ 204.638638][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.663195][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 204.782296][ T5155] usb 4-1: USB disconnect, device number 11 [ 204.859093][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.057677][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.308888][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.543457][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.992910][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.004980][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.014314][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.022975][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.031857][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.040196][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.637828][ T5156] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.826167][ T5156] usb 4-1: Using ep0 maxpacket: 8 [ 206.833417][ T5156] usb 4-1: New USB device found, idVendor=12d1, idProduct=f3c7, bcdDevice=ac.df [ 206.843081][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.855409][ T5156] usb 4-1: config 0 descriptor?? [ 206.873617][ T5156] huawei_cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 206.888903][ T5156] huawei_cdc_ncm 4-1:0.0: bind() failure [ 207.108811][ T25] usb 4-1: USB disconnect, device number 12 [ 207.449268][ T11] bridge_slave_1: left allmulticast mode [ 207.464084][ T11] bridge_slave_1: left promiscuous mode [ 207.475971][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.500485][ T11] bridge_slave_0: left allmulticast mode [ 207.516197][ T5155] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 207.524948][ T11] bridge_slave_0: left promiscuous mode [ 207.538238][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.716800][ T5155] usb 3-1: Using ep0 maxpacket: 32 [ 207.752655][ T5155] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 207.775555][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.816660][ T5155] usb 3-1: Product: syz [ 207.821019][ T5155] usb 3-1: Manufacturer: syz [ 207.842158][ T5155] usb 3-1: SerialNumber: syz [ 207.868451][ T5155] usb 3-1: config 0 descriptor?? [ 208.008371][ T5155] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 208.066284][ T5113] Bluetooth: hci4: command tx timeout [ 208.079587][ T6985] udevd[6985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.261397][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.273116][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.282971][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.291969][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.300527][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.313439][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.496631][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.513540][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.532076][ T11] bond0 (unregistering): Released all slaves [ 208.557540][ T1146] usb 3-1: USB disconnect, device number 3 [ 208.846157][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.047503][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 209.061143][ T25] usb 4-1: New USB device found, idVendor=12d1, idProduct=f3c7, bcdDevice=ac.df [ 209.079221][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.107177][ T25] usb 4-1: config 0 descriptor?? [ 209.117507][ T25] huawei_cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 209.130984][ T25] huawei_cdc_ncm 4-1:0.0: bind() failure [ 209.214963][ T11] hsr_slave_0: left promiscuous mode [ 209.248139][ T11] hsr_slave_1: left promiscuous mode [ 209.257060][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.264503][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.307066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.314523][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.365801][ T25] usb 4-1: USB disconnect, device number 13 [ 209.382533][ T11] veth1_macvtap: left promiscuous mode [ 209.391989][ T11] veth0_macvtap: left promiscuous mode [ 209.415804][ T11] veth1_vlan: left promiscuous mode [ 209.424428][ T11] veth0_vlan: left promiscuous mode [ 209.975900][ T8373] fuse: Bad value for 'source' [ 210.065887][ T8375] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 210.146347][ T5113] Bluetooth: hci4: command tx timeout [ 210.174850][ T11] team0 (unregistering): Port device team_slave_1 removed [ 210.216640][ T11] team0 (unregistering): Port device team_slave_0 removed [ 210.348363][ T785] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.386400][ T5113] Bluetooth: hci3: command tx timeout [ 210.540953][ T785] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 210.556316][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.581403][ T785] usb 4-1: config 0 descriptor?? [ 210.595975][ T785] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 210.745192][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 211.018576][ T785] gspca_stv06xx: I2C: Read error writing address: -71 [ 211.053623][ T785] usb 4-1: USB disconnect, device number 14 [ 211.193175][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 211.253753][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.265704][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.296495][ T8275] bridge_slave_0: entered allmulticast mode [ 211.315199][ T8275] bridge_slave_0: entered promiscuous mode [ 211.363526][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.403409][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.421908][ T8275] bridge_slave_1: entered allmulticast mode [ 211.439065][ T8275] bridge_slave_1: entered promiscuous mode [ 211.778371][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.788581][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.791907][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.824186][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.875411][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.885211][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.914655][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.922177][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.983773][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.008684][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.023786][ T8315] bridge_slave_0: entered allmulticast mode [ 212.036389][ T8315] bridge_slave_0: entered promiscuous mode [ 212.103367][ T8275] team0: Port device team_slave_0 added [ 212.201129][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.227223][ T5111] Bluetooth: hci4: command tx timeout [ 212.239352][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.247173][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.254407][ T8315] bridge_slave_1: entered allmulticast mode [ 212.261867][ T8315] bridge_slave_1: entered promiscuous mode [ 212.354601][ T8275] team0: Port device team_slave_1 added [ 212.409804][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.440438][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.457721][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.471947][ T5111] Bluetooth: hci3: command tx timeout [ 212.490250][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.497929][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.524635][ T8275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.562051][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.576314][ T5158] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.592424][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.601476][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.631269][ T8275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.680905][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.696410][ T5218] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.709775][ T8315] team0: Port device team_slave_0 added [ 212.766309][ T5158] usb 3-1: Using ep0 maxpacket: 32 [ 212.778783][ T8315] team0: Port device team_slave_1 added [ 212.800465][ T5158] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 212.815685][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.825617][ T5158] usb 3-1: Product: syz [ 212.841419][ T5158] usb 3-1: Manufacturer: syz [ 212.852117][ T5158] usb 3-1: SerialNumber: syz [ 212.861162][ T8275] hsr_slave_0: entered promiscuous mode [ 212.867060][ T5158] usb 3-1: config 0 descriptor?? [ 212.888093][ T8275] hsr_slave_1: entered promiscuous mode [ 212.904809][ T5218] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 212.924439][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.932794][ T5158] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 212.943011][ T8275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.954172][ T8275] Cannot create hsr debugfs directory [ 212.981266][ T6985] udevd[6985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.011585][ T5218] usb 4-1: config 0 descriptor?? [ 213.044554][ T5218] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 213.127379][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.144189][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.170765][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.184022][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.193153][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.224693][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.275517][ T5158] usb 3-1: USB disconnect, device number 4 [ 213.454011][ T5218] gspca_stv06xx: I2C: Read error writing address: -71 [ 213.482444][ T5218] usb 4-1: USB disconnect, device number 15 [ 213.523660][ T8315] hsr_slave_0: entered promiscuous mode [ 213.530983][ T8315] hsr_slave_1: entered promiscuous mode [ 213.538349][ T8315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.548697][ T8315] Cannot create hsr debugfs directory [ 213.654055][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.732993][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.761069][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 213.804213][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.898157][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.986180][ T5111] Bluetooth: hci1: command tx timeout [ 214.307610][ T5111] Bluetooth: hci4: command tx timeout [ 214.349935][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.377671][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.384960][ T8420] bridge_slave_0: entered allmulticast mode [ 214.421036][ T8420] bridge_slave_0: entered promiscuous mode [ 214.546796][ T5111] Bluetooth: hci3: command tx timeout [ 214.695254][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.715762][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.729425][ T8420] bridge_slave_1: entered allmulticast mode [ 214.748670][ T8420] bridge_slave_1: entered promiscuous mode [ 215.035592][ T11] bridge_slave_1: left allmulticast mode [ 215.042788][ T11] bridge_slave_1: left promiscuous mode [ 215.050429][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.062127][ T11] bridge_slave_0: left allmulticast mode [ 215.068578][ T11] bridge_slave_0: left promiscuous mode [ 215.074341][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.286237][ T5180] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.443070][ T11] team0: left allmulticast mode [ 215.450317][ T11] team_slave_0: left allmulticast mode [ 215.478524][ T11] team_slave_1: left allmulticast mode [ 215.484473][ T11] bridge0: port 3(team0) entered disabled state [ 215.495540][ T11] bridge_slave_1: left allmulticast mode [ 215.501370][ T11] bridge_slave_1: left promiscuous mode [ 215.515333][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.524517][ T11] bridge_slave_0: left allmulticast mode [ 215.530546][ T11] bridge_slave_0: left promiscuous mode [ 215.536121][ T5180] usb 4-1: Using ep0 maxpacket: 32 [ 215.541181][ T5180] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=e1.78 [ 215.542294][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.553216][ T5180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.575677][ T5180] usb 4-1: Product: syz [ 215.580376][ T5180] usb 4-1: Manufacturer: syz [ 215.585308][ T5180] usb 4-1: SerialNumber: syz [ 215.594715][ T5180] usb 4-1: config 0 descriptor?? [ 215.680613][ T5180] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 215.780290][ T6985] udevd[6985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.083732][ T5111] Bluetooth: hci1: command tx timeout [ 216.636222][ T5111] Bluetooth: hci3: command tx timeout [ 217.052500][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.069092][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.079984][ T11] bond0 (unregistering): Released all slaves [ 217.175655][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.187255][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.199705][ T11] bond0 (unregistering): Released all slaves [ 217.213284][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.229280][ T5158] usb 4-1: USB disconnect, device number 16 [ 217.273330][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.410850][ T8420] team0: Port device team_slave_0 added [ 217.523010][ T8420] team0: Port device team_slave_1 added [ 217.690118][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.697383][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.723498][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.743059][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.753189][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.797730][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.054581][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.070395][ T8541] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.079652][ T8541] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.088405][ T8541] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.097155][ T8541] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.109024][ T8541] vxlan0: entered promiscuous mode [ 218.135126][ T8420] hsr_slave_0: entered promiscuous mode [ 218.149169][ T5111] Bluetooth: hci1: command tx timeout [ 218.161709][ T8420] hsr_slave_1: entered promiscuous mode [ 218.180557][ T8420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.189338][ T8420] Cannot create hsr debugfs directory [ 218.199609][ T8545] loop0: detected capacity change from 0 to 7 [ 218.208247][ T8545] Dev loop0: unable to read RDB block 7 [ 218.213812][ T8545] loop0: AHDI p1 p2 p4 [ 218.224218][ T8545] loop0: partition table partially beyond EOD, truncated [ 218.240527][ T8545] loop0: p1 start 926365495 is beyond EOD, truncated [ 218.342368][ T29] audit: type=1326 audit(1717243036.138:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x0 [ 218.369575][ T11] hsr_slave_0: left promiscuous mode [ 218.375746][ T11] hsr_slave_1: left promiscuous mode [ 218.384797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.393118][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.401793][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.409323][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.422750][ T11] hsr_slave_0: left promiscuous mode [ 218.429061][ T11] hsr_slave_1: left promiscuous mode [ 218.434963][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.444169][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.453871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.463983][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.473880][ T11] batman_adv: batadv0: Removing interface: ipvlan2 [ 218.504751][ T11] veth1_macvtap: left promiscuous mode [ 218.510581][ T11] veth0_macvtap: left promiscuous mode [ 218.516282][ T11] veth1_vlan: left promiscuous mode [ 218.521618][ T11] veth0_vlan: left promiscuous mode [ 218.529236][ T11] veth1_macvtap: left promiscuous mode [ 218.534738][ T11] veth0_macvtap: left promiscuous mode [ 218.542934][ T11] veth1_vlan: left promiscuous mode [ 218.549389][ T11] veth0_vlan: left promiscuous mode [ 219.107397][ T1146] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 219.137499][ T11] team0 (unregistering): Port device team_slave_1 removed [ 219.214815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 219.306172][ T1146] usb 3-1: Using ep0 maxpacket: 32 [ 219.339076][ T1146] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=8d.33 [ 219.356008][ T1146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.364102][ T1146] usb 3-1: Product: syz [ 219.374345][ T1146] usb 3-1: Manufacturer: syz [ 219.390302][ T1146] usb 3-1: SerialNumber: syz [ 219.396818][ T1146] usb 3-1: config 0 descriptor?? [ 219.425308][ T1146] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 219.634409][ T1146] usb 3-1: USB disconnect, device number 5 [ 220.043438][ T11] team_slave_1 (unregistering): left promiscuous mode [ 220.053828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 220.095037][ T11] team_slave_0 (unregistering): left promiscuous mode [ 220.104417][ T11] team0 (unregistering): Port device team_slave_0 removed [ 220.207460][ T8554] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 220.223522][ T8554] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 220.232165][ T5111] Bluetooth: hci1: command tx timeout [ 220.238223][ T8554] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 220.238312][ T8554] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 220.747063][ T8315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.836262][ T8315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.863902][ T8315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.892698][ T8568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.899721][ T8568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 220.942294][ T8315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.963955][ T8568] hsr_slave_0: left promiscuous mode [ 220.985632][ T8568] hsr_slave_1: left promiscuous mode [ 221.142489][ T8275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.168506][ T8275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.294389][ T8275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.326415][ T8275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.624730][ T8589] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.810687][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.833701][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.965530][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.977393][ T8604] loop0: detected capacity change from 0 to 7 [ 221.986570][ T8604] Dev loop0: unable to read RDB block 7 [ 222.016215][ T8604] loop0: AHDI p2 p3 [ 222.020292][ T8604] loop0: partition table partially beyond EOD, truncated [ 222.031211][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.041855][ T8604] loop0: p2 start 6514546 is beyond EOD, truncated [ 222.056760][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.063916][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.093384][ T8607] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.110384][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.117586][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.136999][ T8607] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.203414][ T8420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.237421][ T8420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.283608][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.290790][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.338048][ T8420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.376779][ T8420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.430811][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.438026][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.464483][ T8623] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.633885][ T8275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.760716][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.802737][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.991671][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.078840][ T8275] veth0_vlan: entered promiscuous mode [ 223.094183][ T8315] veth0_vlan: entered promiscuous mode [ 223.122789][ T8315] veth1_vlan: entered promiscuous mode [ 223.145141][ T8275] veth1_vlan: entered promiscuous mode [ 223.158907][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.178576][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.185665][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.229442][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.236639][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.266936][ T8275] veth0_macvtap: entered promiscuous mode [ 223.332609][ T8275] veth1_macvtap: entered promiscuous mode [ 223.349822][ T1146] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.358977][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.372796][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.390541][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.403611][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.415411][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.451484][ T8420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.478548][ T8315] veth0_macvtap: entered promiscuous mode [ 223.489967][ T8315] veth1_macvtap: entered promiscuous mode [ 223.504830][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.516869][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.527530][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.539269][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.551959][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.558564][ T1146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 223.579951][ T8275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.580589][ T1146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.612222][ T8275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.620282][ T1146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.633558][ T8275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.643781][ T1146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.658216][ T8275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.683330][ T1146] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.692938][ T1146] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.712159][ T1146] usb 3-1: Manufacturer: syz [ 223.732402][ T1146] usb 3-1: config 0 descriptor?? [ 223.768994][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.801777][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.821037][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.851676][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.870078][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.884715][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.902540][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.950513][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.974279][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.995548][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.006833][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.022499][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.036066][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.050944][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.062410][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.123683][ T8315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.149544][ T8315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.176213][ T8315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.191263][ T8315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.208148][ T1146] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 224.242305][ T1146] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 224.302056][ T1146] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 224.335877][ T8679] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.359384][ T8675] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.442499][ T8420] veth0_vlan: entered promiscuous mode [ 224.481731][ T5587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.493108][ T8420] veth1_vlan: entered promiscuous mode [ 224.507414][ T5587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.519383][ T5155] usb 3-1: USB disconnect, device number 6 [ 224.633624][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.658467][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.735597][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.760260][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.886409][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.894269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.903774][ T8420] veth0_macvtap: entered promiscuous mode [ 224.969814][ T8420] veth1_macvtap: entered promiscuous mode [ 224.996144][ T5218] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.144915][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.176204][ T5218] usb 4-1: Using ep0 maxpacket: 32 [ 225.192338][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.192618][ T5218] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=8d.33 [ 225.220267][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.237392][ T5218] usb 4-1: Product: syz [ 225.252218][ T5218] usb 4-1: Manufacturer: syz [ 225.258703][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.277981][ T5218] usb 4-1: SerialNumber: syz [ 225.304318][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.325849][ T5218] usb 4-1: config 0 descriptor?? [ 225.335148][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.356959][ T29] audit: type=1326 audit(1717243043.128:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effdb47cee9 code=0x0 [ 225.394450][ T5218] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 225.400740][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.414155][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.438315][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.468327][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.530050][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.543824][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.572356][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.583245][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.601989][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.623053][ T5587] usb 4-1: USB disconnect, device number 17 [ 225.625223][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.653009][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.678878][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.699197][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.735917][ T8420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.745510][ T8420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.765831][ T8420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.775005][ T8420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.929705][ T5815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.954993][ T5815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.019330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.037424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.582512][ T8825] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.611573][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.621717][ T8819] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.814017][ T8836] bridge0: entered allmulticast mode [ 229.351108][ T8863] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.394468][ T8859] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.205025][ T8908] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 230.574338][ T8928] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 230.812925][ T8938] Zero length message leads to an empty skb [ 230.966144][ T785] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.119949][ T8955] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.178459][ T785] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 231.207750][ T8959] bridge0: entered allmulticast mode [ 231.237064][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.275569][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.302456][ T785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 231.315394][ T8964] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 231.335983][ T785] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 231.345438][ T785] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 231.356273][ T785] usb 5-1: Manufacturer: syz [ 231.389575][ T785] usb 5-1: config 0 descriptor?? [ 231.392160][ T8966] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 231.449807][ T8969] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 231.818661][ T8985] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 231.893010][ T785] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 231.927048][ T785] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 231.969177][ T785] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 232.200863][ T1146] usb 5-1: USB disconnect, device number 6 [ 232.225940][ T9003] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 232.838019][ T9032] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.868517][ T9032] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.033995][ T9043] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 233.366191][ T1146] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.371085][ T9062] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.546232][ T1146] usb 2-1: Using ep0 maxpacket: 8 [ 233.555125][ T1146] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 233.571211][ T1146] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.587253][ T5159] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.604089][ T1146] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.618422][ T1146] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.629141][ T1146] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.646363][ T1146] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.655640][ T1146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.788197][ T5159] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 233.840619][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.864324][ T5159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.884204][ T5159] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.903367][ T1146] usb 2-1: GET_CAPABILITIES returned 0 [ 233.914081][ T1146] usbtmc 2-1:16.0: can't read capabilities [ 233.931990][ T5159] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 233.954217][ T5159] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 233.984824][ T5159] usb 1-1: Manufacturer: syz [ 233.992593][ T5159] usb 1-1: config 0 descriptor?? [ 234.139152][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.147406][ T1146] usb 2-1: USB disconnect, device number 4 [ 234.189968][ T9087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 234.312858][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.422110][ T5159] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 234.459920][ T5159] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 234.515645][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.671188][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.688223][ T5159] usb 1-1: USB disconnect, device number 4 [ 234.970654][ T35] bridge_slave_1: left allmulticast mode [ 234.999329][ T35] bridge_slave_1: left promiscuous mode [ 235.020997][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.041773][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.054132][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.063711][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.073891][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.083992][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.091705][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.127139][ T35] bridge_slave_0: left allmulticast mode [ 235.162068][ T35] bridge_slave_0: left promiscuous mode [ 235.168981][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.956122][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.186088][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 236.197576][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 236.205788][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.226810][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.246098][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.266120][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.286099][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.295159][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.549833][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 236.555354][ T25] usbtmc 2-1:16.0: can't read capabilities [ 236.638053][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.653039][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.673667][ T35] bond0 (unregistering): Released all slaves [ 236.698792][ T9114] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 236.723762][ T9118] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.739642][ T9118] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.820978][ T64] usb 2-1: USB disconnect, device number 5 [ 237.127124][ T1146] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.187045][ T5111] Bluetooth: hci3: command tx timeout [ 237.211309][ T35] hsr_slave_0: left promiscuous mode [ 237.222530][ T35] hsr_slave_1: left promiscuous mode [ 237.234625][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.243051][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.251981][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.259990][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.289197][ T35] veth1_macvtap: left promiscuous mode [ 237.295039][ T35] veth0_macvtap: left promiscuous mode [ 237.303756][ T35] veth1_vlan: left promiscuous mode [ 237.309502][ T35] veth0_vlan: left promiscuous mode [ 237.320668][ T1146] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 237.351321][ T1146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.397175][ T1146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.432308][ T1146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 237.463456][ T1146] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 237.494348][ T1146] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 237.532921][ T1146] usb 1-1: Manufacturer: syz [ 237.571532][ T1146] usb 1-1: config 0 descriptor?? [ 237.848436][ T29] audit: type=1326 audit(1717243055.638:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 237.883355][ T29] audit: type=1326 audit(1717243055.638:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 237.909377][ T29] audit: type=1326 audit(1717243055.638:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 237.933788][ T29] audit: type=1326 audit(1717243055.638:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 237.984792][ T29] audit: type=1326 audit(1717243055.638:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.102630][ T1146] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 238.111104][ T29] audit: type=1326 audit(1717243055.638:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.154367][ T1146] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 238.167738][ T29] audit: type=1326 audit(1717243055.638:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.233050][ T29] audit: type=1326 audit(1717243055.638:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.315364][ T29] audit: type=1326 audit(1717243055.638:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.408973][ T29] audit: type=1326 audit(1717243055.648:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8e7cee9 code=0x7ffc0000 [ 238.447526][ T5218] usb 1-1: USB disconnect, device number 5 [ 238.923983][ T35] team0 (unregistering): Port device team_slave_1 removed [ 239.028499][ T35] team0 (unregistering): Port device team_slave_0 removed [ 239.179707][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 239.276382][ T5111] Bluetooth: hci3: command tx timeout [ 239.890347][ T5218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 239.918916][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.102254][ T5218] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 240.134386][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.146373][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.157373][ T5218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 240.206971][ T9109] chnl_net:caif_netlink_parms(): no params data found [ 240.233924][ T5218] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 240.263940][ T5218] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.282877][ T5218] usb 4-1: Manufacturer: syz [ 240.315231][ T5218] usb 4-1: config 0 descriptor?? [ 240.612280][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.626700][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.634077][ T9109] bridge_slave_0: entered allmulticast mode [ 240.660209][ T9109] bridge_slave_0: entered promiscuous mode [ 240.687268][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.709422][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.734131][ T9109] bridge_slave_1: entered allmulticast mode [ 240.748105][ T9109] bridge_slave_1: entered promiscuous mode [ 240.782777][ T5218] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 240.813791][ T5218] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 240.856334][ T5180] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.920203][ T9109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.955701][ T9109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.076467][ T5180] usb 1-1: Using ep0 maxpacket: 16 [ 241.099525][ T5159] usb 4-1: USB disconnect, device number 18 [ 241.118119][ T5180] usb 1-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 241.135877][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.149623][ T5180] usb 1-1: Product: syz [ 241.154547][ T5180] usb 1-1: Manufacturer: syz [ 241.174355][ T9109] team0: Port device team_slave_0 added [ 241.186973][ T5180] usb 1-1: SerialNumber: syz [ 241.209476][ T5180] usb 1-1: config 0 descriptor?? [ 241.233149][ T9109] team0: Port device team_slave_1 added [ 241.233463][ T5180] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 241.267196][ T5180] dvb-usb: bulk message failed: -22 (3/0) [ 241.319412][ T5180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.341317][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.348963][ T5111] Bluetooth: hci3: command tx timeout [ 241.350966][ T5180] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 241.379991][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.411125][ T5180] usb 1-1: media controller created [ 241.436462][ T9109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.460965][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.496436][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.509675][ T5180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.527321][ T9109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.582926][ T5180] dvb-usb: bulk message failed: -22 (6/0) [ 241.590679][ T5180] dvb-usb: bulk message failed: -22 (6/0) [ 241.605857][ T5180] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 241.609043][ T9109] hsr_slave_0: entered promiscuous mode [ 241.619806][ T5180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 241.632136][ T9109] hsr_slave_1: entered promiscuous mode [ 241.644535][ T9109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.648372][ T5180] dvb-usb: schedule remote query interval to 150 msecs. [ 241.652794][ T9109] Cannot create hsr debugfs directory [ 241.659449][ T5180] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 241.678302][ T5180] usb 1-1: USB disconnect, device number 6 [ 241.864311][ T5180] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 242.285173][ T9329] sit0: entered promiscuous mode [ 242.325063][ T9329] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 242.358718][ T9329] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.437854][ T9329] syz-executor.2 (9329) used greatest stack depth: 17560 bytes left [ 243.085806][ T9109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.110738][ T9109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.151514][ T9109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.178291][ T9109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.424568][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.431587][ T5111] Bluetooth: hci3: command tx timeout [ 243.456272][ T5159] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 243.512925][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.557964][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.565123][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.581386][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.588617][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.666946][ T5159] usb 2-1: Using ep0 maxpacket: 16 [ 243.699004][ T5159] usb 2-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 243.717227][ T5159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.727023][ T9109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.754219][ T5159] usb 2-1: Product: syz [ 243.782063][ T5159] usb 2-1: Manufacturer: syz [ 243.801836][ T5159] usb 2-1: SerialNumber: syz [ 243.823155][ T5159] usb 2-1: config 0 descriptor?? [ 243.840778][ T5159] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 243.855821][ T9109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.880149][ T5159] dvb-usb: bulk message failed: -22 (3/0) [ 243.923503][ T5159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.947027][ T5155] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 243.971991][ T5159] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 243.992734][ T5159] usb 2-1: media controller created [ 244.014174][ T9109] veth0_vlan: entered promiscuous mode [ 244.074815][ T9109] veth1_vlan: entered promiscuous mode [ 244.101002][ T5159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.156248][ T5155] usb 4-1: Using ep0 maxpacket: 32 [ 244.184693][ T5155] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 244.211686][ T5159] dvb-usb: bulk message failed: -22 (6/0) [ 244.221091][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.230886][ T9109] veth0_macvtap: entered promiscuous mode [ 244.239069][ T5159] dvb-usb: bulk message failed: -22 (6/0) [ 244.244922][ T5155] usb 4-1: Product: syz [ 244.267732][ T5159] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 244.277369][ T5155] usb 4-1: Manufacturer: syz [ 244.288692][ T9109] veth1_macvtap: entered promiscuous mode [ 244.301265][ T5155] usb 4-1: SerialNumber: syz [ 244.347407][ T5155] usb 4-1: config 0 descriptor?? [ 244.356378][ T5159] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 244.395582][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.407163][ T5159] dvb-usb: schedule remote query interval to 150 msecs. [ 244.414170][ T5159] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 244.439228][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.468105][ T5159] usb 2-1: USB disconnect, device number 6 [ 244.474792][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.506668][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.555905][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.585372][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.610756][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.662802][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.707345][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.729143][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.800540][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.851811][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.893950][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.902197][ T5159] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 244.924847][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.969764][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.040176][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.065920][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.090702][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.102777][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.180157][ T5155] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 245.209051][ T9109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.230957][ T5155] usb 4-1: USB disconnect, device number 19 [ 245.253563][ T9109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.292737][ T9109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.314533][ T9109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.422740][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.736557][ T9453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.737412][ T5159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.806479][ T5159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.881986][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.890386][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.045369][ T9467] vlan0: entered promiscuous mode [ 246.069520][ T9467] vlan0: entered allmulticast mode [ 246.091171][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888066f6b400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 246.105722][ T9467] veth0_vlan: entered allmulticast mode [ 246.165795][ T9467] team0: Port device vlan0 added [ 246.185349][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 246.185367][ T29] audit: type=1326 audit(1717243063.978:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954e7cee9 code=0x7ffc0000 [ 246.288470][ T9485] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 246.299235][ T29] audit: type=1326 audit(1717243063.978:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954e7cee9 code=0x7ffc0000 [ 246.306834][ T9486] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 246.408129][ T29] audit: type=1326 audit(1717243064.058:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8954e7cee9 code=0x7ffc0000 [ 246.459248][ T9489] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 246.527441][ T29] audit: type=1326 audit(1717243064.058:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954e7cee9 code=0x7ffc0000 [ 246.553824][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.597693][ T29] audit: type=1326 audit(1717243064.058:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8954e7cee9 code=0x7ffc0000 [ 246.729846][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.978020][ T29] audit: type=1326 audit(1717243064.768:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2d27cee9 code=0x7ffc0000 [ 247.000804][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.033281][ T29] audit: type=1326 audit(1717243064.768:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2d27cee9 code=0x7ffc0000 [ 247.063041][ T29] audit: type=1326 audit(1717243064.768:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f2d27cee9 code=0x7ffc0000 [ 247.085746][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.138386][ T29] audit: type=1326 audit(1717243064.768:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2d27cee9 code=0x7ffc0000 [ 247.151592][ T9530] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 247.228679][ T29] audit: type=1326 audit(1717243064.768:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6f2d27cee9 code=0x7ffc0000 [ 247.251391][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.270283][ T9534] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 247.273283][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.385275][ T9534] debugfs: Directory 'netdev:' with parent 'phy61' already present! [ 247.489761][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.526579][ T5159] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 247.682737][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.746245][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 247.753596][ T5159] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.776877][ T5159] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.785811][ T5159] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.872789][ T5159] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.905019][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.938284][ T5159] usb 5-1: Product: syz [ 247.945670][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.983472][ T5159] usb 5-1: Manufacturer: syz [ 248.007254][ T5159] usb 5-1: SerialNumber: syz [ 248.037397][ T9563] netlink: zone id is out of range [ 248.084140][ T9563] netlink: set zone limit has 4 unknown bytes [ 248.282318][ T5159] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 248.332221][ T5159] cdc_ncm 5-1:1.0: bind() failure [ 248.386662][ T5159] usb 5-1: USB disconnect, device number 7 [ 248.426599][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.526758][ T12] bridge_slave_1: left allmulticast mode [ 248.552648][ T12] bridge_slave_1: left promiscuous mode [ 248.579187][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.591309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.594687][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.623229][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.632614][ T12] bridge_slave_0: left allmulticast mode [ 248.639568][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.646337][ T12] bridge_slave_0: left promiscuous mode [ 248.652374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.666350][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.676337][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.442874][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.453576][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.467164][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.490263][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.498172][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.505565][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.629483][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.641728][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.655322][ T12] bond0 (unregistering): Released all slaves [ 249.667804][ T9575] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 249.692265][ T9584] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 249.704219][ T9599] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 249.817474][ T9604] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 250.047994][ T9618] netlink: zone id is out of range [ 250.142029][ T9618] netlink: set zone limit has 4 unknown bytes [ 250.453296][ T12] hsr_slave_0: left promiscuous mode [ 250.468256][ T12] hsr_slave_1: left promiscuous mode [ 250.489803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.511641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.530072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.543965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.607501][ T12] veth1_macvtap: left promiscuous mode [ 250.630014][ T12] veth0_macvtap: left promiscuous mode [ 250.646240][ T1146] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 250.656724][ T12] veth1_vlan: left promiscuous mode [ 250.669912][ T12] veth0_vlan: left promiscuous mode [ 250.706458][ T5113] Bluetooth: hci4: command tx timeout [ 250.793444][ T5111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.806957][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.822795][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.833093][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.842658][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.849746][ T1146] usb 5-1: Using ep0 maxpacket: 16 [ 250.855677][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.864867][ T1146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.876626][ T1146] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.885539][ T1146] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.902430][ T1146] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.912271][ T1146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.921888][ T1146] usb 5-1: Product: syz [ 250.928016][ T1146] usb 5-1: Manufacturer: syz [ 250.932727][ T1146] usb 5-1: SerialNumber: syz [ 251.197329][ T1146] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 251.205879][ T1146] cdc_ncm 5-1:1.0: bind() failure [ 251.244201][ T1146] usb 5-1: USB disconnect, device number 8 [ 251.454364][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.493508][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.587410][ T5111] Bluetooth: hci2: command tx timeout [ 251.939347][ T9642] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 251.963639][ T9645] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 252.531659][ T9580] chnl_net:caif_netlink_parms(): no params data found [ 252.710120][ T9687] binder: 9682:9687 unknown command 0 [ 252.711680][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 252.720038][ T9687] binder: 9682:9687 ioctl c0306201 200003c0 returned -22 [ 252.786854][ T5111] Bluetooth: hci4: command tx timeout [ 252.956512][ T5111] Bluetooth: hci1: command tx timeout [ 253.015691][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.032011][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.041446][ T9580] bridge_slave_0: entered allmulticast mode [ 253.049765][ T9580] bridge_slave_0: entered promiscuous mode [ 253.060823][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.070982][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.088162][ T9580] bridge_slave_1: entered allmulticast mode [ 253.095613][ T9580] bridge_slave_1: entered promiscuous mode [ 253.274036][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.314865][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.407606][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 253.441505][ T9713] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 253.478272][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.511825][ T9717] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 253.589797][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.626862][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.634017][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.642018][ T9607] bridge_slave_0: entered allmulticast mode [ 253.654350][ T9721] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 253.654911][ T9607] bridge_slave_0: entered promiscuous mode [ 253.666292][ T5111] Bluetooth: hci2: command tx timeout [ 253.686687][ T9721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 253.697065][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.726240][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.741235][ T9607] bridge_slave_1: entered allmulticast mode [ 253.766412][ T9607] bridge_slave_1: entered promiscuous mode [ 253.834054][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.893881][ T9580] team0: Port device team_slave_0 added [ 253.911485][ T9580] team0: Port device team_slave_1 added [ 253.985388][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.033721][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.118148][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.158219][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.176098][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.207379][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.268608][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.276540][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.285136][ T9646] bridge_slave_0: entered allmulticast mode [ 254.303857][ T9646] bridge_slave_0: entered promiscuous mode [ 254.373378][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.389682][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.418930][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.445854][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.464709][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.474624][ T9646] bridge_slave_1: entered allmulticast mode [ 254.496564][ T9646] bridge_slave_1: entered promiscuous mode [ 254.579575][ T9607] team0: Port device team_slave_0 added [ 254.605955][ T9607] team0: Port device team_slave_1 added [ 254.737493][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.802318][ T9580] hsr_slave_0: entered promiscuous mode [ 254.818173][ T9580] hsr_slave_1: entered promiscuous mode [ 254.826700][ T9580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.834297][ T9580] Cannot create hsr debugfs directory [ 254.853289][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.866355][ T5111] Bluetooth: hci4: command tx timeout [ 254.905334][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.923996][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.950960][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.026764][ T5111] Bluetooth: hci1: command tx timeout [ 255.050722][ T9646] team0: Port device team_slave_0 added [ 255.057649][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.064610][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.092038][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.249620][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.285413][ T9646] team0: Port device team_slave_1 added [ 255.466480][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.592783][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.620525][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.648803][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.685174][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.699751][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.732807][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.746288][ T5111] Bluetooth: hci2: command tx timeout [ 255.785299][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.862874][ T9607] hsr_slave_0: entered promiscuous mode [ 255.884997][ T9607] hsr_slave_1: entered promiscuous mode [ 255.903755][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.911544][ T9607] Cannot create hsr debugfs directory [ 255.990002][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.996674][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.067399][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.411496][ T9646] hsr_slave_0: entered promiscuous mode [ 256.426668][ T9646] hsr_slave_1: entered promiscuous mode [ 256.439758][ T9646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.458742][ T9646] Cannot create hsr debugfs directory [ 256.914682][ T12] bridge_slave_1: left allmulticast mode [ 256.930933][ T12] bridge_slave_1: left promiscuous mode [ 256.946172][ T5111] Bluetooth: hci4: command tx timeout [ 256.948922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.037869][ T12] bridge_slave_0: left allmulticast mode [ 257.043562][ T12] bridge_slave_0: left promiscuous mode [ 257.081069][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.095181][ T12] bridge_slave_1: left allmulticast mode [ 257.101202][ T12] bridge_slave_1: left promiscuous mode [ 257.109230][ T5111] Bluetooth: hci1: command tx timeout [ 257.114110][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.135546][ T12] bridge_slave_0: left allmulticast mode [ 257.141371][ T12] bridge_slave_0: left promiscuous mode [ 257.147167][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.168880][ T9833] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 257.181942][ T9833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 257.656488][ T12] bridge0 (unregistering): left allmulticast mode [ 257.717247][ T12] bridge0 (unregistering): left allmulticast mode [ 257.829544][ T5111] Bluetooth: hci2: command tx timeout [ 257.872786][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.894630][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.921131][ T12] bond0 (unregistering): Released all slaves [ 258.076160][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.091492][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.104572][ T12] bond0 (unregistering): Released all slaves [ 258.719293][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.190991][ T5111] Bluetooth: hci1: command tx timeout [ 259.280116][ T9580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.369402][ T9580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.474987][ T9580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.517137][ T12] hsr_slave_0: left promiscuous mode [ 259.535742][ T12] hsr_slave_1: left promiscuous mode [ 259.546529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.553976][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.564508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.573644][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.598383][ T12] hsr_slave_0: left promiscuous mode [ 259.612689][ T12] hsr_slave_1: left promiscuous mode [ 259.619867][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.628921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.637735][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.645162][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.702806][ T12] veth1_macvtap: left promiscuous mode [ 259.708630][ T12] veth0_macvtap: left promiscuous mode [ 259.714337][ T12] veth1_vlan: left promiscuous mode [ 259.720754][ T12] veth0_vlan: left allmulticast mode [ 259.731298][ T12] veth0_vlan: left promiscuous mode [ 259.748162][ T12] veth1_macvtap: left promiscuous mode [ 259.753731][ T12] veth0_macvtap: left promiscuous mode [ 259.768608][ T12] veth1_vlan: left promiscuous mode [ 259.774064][ T12] veth0_vlan: left promiscuous mode [ 260.121815][ T12] team0 (unregistering): Port device vlan0 removed [ 260.354430][ T12] team0 (unregistering): Port device team_slave_1 removed [ 260.393977][ T12] team0 (unregistering): Port device team_slave_0 removed [ 261.084679][ T12] team0 (unregistering): Port device team_slave_1 removed [ 261.166908][ T12] team0 (unregistering): Port device team_slave_0 removed [ 261.714383][ T9580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.912122][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.209711][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.353886][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.428489][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.435645][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.497012][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.504175][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.543613][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.794494][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.992155][ T9646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.023233][ T9646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.062778][ T9646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.080078][ T9646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.249343][ T9580] veth0_vlan: entered promiscuous mode [ 263.328876][ T9607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.338554][ T9607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.362439][ T9607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.383661][ T9607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.445606][ T9580] veth1_vlan: entered promiscuous mode [ 263.637770][ T9580] veth0_macvtap: entered promiscuous mode [ 263.697986][ T9580] veth1_macvtap: entered promiscuous mode [ 263.781616][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.805383][ T9950] kvm: kvm [9949]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 263.814110][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.824854][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.849243][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.887088][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.954636][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.985474][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.015446][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.043709][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.069094][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.125982][ T9580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.135898][ T9580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.166472][ T9580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.175214][ T9580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.201716][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.292669][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.332994][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.364227][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.371431][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.429940][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.437136][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.498165][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.596063][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.603236][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.630452][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.638840][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.692912][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.700127][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.799146][ T5218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.828667][ T5218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.988674][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.050563][ T9992] vlan0: entered promiscuous mode [ 265.055652][ T9992] vlan0: entered allmulticast mode [ 265.105240][ T9992] veth0_vlan: entered allmulticast mode [ 265.152773][ T9992] team0: Port device vlan0 added [ 265.250882][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.496942][ T9646] veth0_vlan: entered promiscuous mode [ 265.544753][ T9607] veth0_vlan: entered promiscuous mode [ 265.585368][ T9646] veth1_vlan: entered promiscuous mode [ 265.618322][ T9607] veth1_vlan: entered promiscuous mode [ 265.774075][ T9646] veth0_macvtap: entered promiscuous mode [ 265.837723][ T9646] veth1_macvtap: entered promiscuous mode [ 265.901782][ T9607] veth0_macvtap: entered promiscuous mode [ 265.967870][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.046962][ T9607] veth1_macvtap: entered promiscuous mode [ 266.156751][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.168054][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.180962][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.191804][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.209204][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.237481][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.261705][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.283579][T10033] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 266.358921][T10038] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 266.411885][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.429143][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.444150][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.455234][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.468133][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.480193][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.493476][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.519813][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.540056][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.553750][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.578126][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.592417][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.603698][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.615796][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.627395][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.645390][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.664117][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.675268][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.687018][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.700075][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.710749][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.721762][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.732242][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.743176][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.755486][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.780289][ T9646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.795637][ T9646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.812660][ T9646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.823517][ T9646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.849439][ T9607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.859332][ T9607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.871342][ T9607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.882612][ T9607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.059034][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.072901][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.155844][ T5155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.185607][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.206720][ T5155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.216710][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.310340][ T5155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.348378][ T5155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.779738][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.850152][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.075663][T10093] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.113872][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.303245][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.479841][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.498719][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.851304][ T11] bridge_slave_1: left allmulticast mode [ 268.883725][ T11] bridge_slave_1: left promiscuous mode [ 268.899878][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.925086][ T11] bridge_slave_0: left allmulticast mode [ 268.945704][ T11] bridge_slave_0: left promiscuous mode [ 268.959162][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.970571][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.979388][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.984837][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.998841][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.011117][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.020826][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.235342][T10146] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.804859][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.823149][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.848832][ T11] bond0 (unregistering): Released all slaves [ 269.868465][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.810597][ T11] hsr_slave_0: left promiscuous mode [ 270.855057][ T11] hsr_slave_1: left promiscuous mode [ 270.888862][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.919009][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.945919][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.990834][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.080025][ T11] veth1_macvtap: left promiscuous mode [ 271.085579][ T11] veth0_macvtap: left promiscuous mode [ 271.104499][ T11] veth1_vlan: left promiscuous mode [ 271.110724][ T5111] Bluetooth: hci3: command tx timeout [ 271.128680][ T11] veth0_vlan: left promiscuous mode [ 271.404007][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.434736][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.443121][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.452583][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.464696][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.478006][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.862370][ T11] team0 (unregistering): Port device team_slave_1 removed [ 271.911392][ T11] team0 (unregistering): Port device team_slave_0 removed [ 272.453958][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.605624][T10140] chnl_net:caif_netlink_parms(): no params data found [ 272.659730][T10234] input: syz0 as /devices/virtual/input/input9 [ 272.662805][T10235] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.013327][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.043682][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.068559][T10140] bridge_slave_0: entered allmulticast mode [ 273.102722][T10140] bridge_slave_0: entered promiscuous mode [ 273.177026][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.186454][ T5113] Bluetooth: hci3: command tx timeout [ 273.202475][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.224828][T10140] bridge_slave_1: entered allmulticast mode [ 273.259854][T10140] bridge_slave_1: entered promiscuous mode [ 273.394608][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.408531][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.464641][T10238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.473299][T10238] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 273.508207][ T5113] Bluetooth: hci4: command tx timeout [ 273.533609][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.685378][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.707759][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.723463][T10140] team0: Port device team_slave_0 added [ 273.739875][T10140] team0: Port device team_slave_1 added [ 273.787447][T10216] chnl_net:caif_netlink_parms(): no params data found [ 273.829831][T10238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.835869][T10238] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 273.859335][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.888334][T10238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.900747][T10238] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 273.950135][T10279] kvm: pic: non byte write [ 273.958806][T10277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 273.958912][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.984640][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.014191][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.055629][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.093868][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.102839][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.132661][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.192349][T10282] input: syz0 as /devices/virtual/input/input10 [ 274.399841][T10238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.418444][T10140] hsr_slave_0: entered promiscuous mode [ 274.431527][T10238] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 274.440839][T10140] hsr_slave_1: entered promiscuous mode [ 274.461294][T10238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.495320][T10238] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 274.733949][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.764696][T10216] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.785539][T10216] bridge_slave_0: entered allmulticast mode [ 274.797545][T10216] bridge_slave_0: entered promiscuous mode [ 274.862658][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.871776][T10216] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.883860][T10216] bridge_slave_1: entered allmulticast mode [ 274.892786][T10216] bridge_slave_1: entered promiscuous mode [ 275.017402][T10216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.063268][ T35] bridge_slave_1: left allmulticast mode [ 275.069516][ T35] bridge_slave_1: left promiscuous mode [ 275.086102][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.112981][ T35] bridge_slave_0: left allmulticast mode [ 275.124136][ T35] bridge_slave_0: left promiscuous mode [ 275.132924][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.610802][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.629281][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.650216][ T35] bond0 (unregistering): Released all slaves [ 275.654513][T10331] kvm: pic: non byte write [ 275.670557][T10331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 275.676769][T10216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.792812][T10216] team0: Port device team_slave_0 added [ 275.821964][T10216] team0: Port device team_slave_1 added [ 275.892687][T10216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.900318][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.929772][T10216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.969023][T10216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.976295][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.015383][T10216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.153514][T10343] input: syz0 as /devices/virtual/input/input11 [ 276.277485][T10216] hsr_slave_0: entered promiscuous mode [ 276.288923][T10216] hsr_slave_1: entered promiscuous mode [ 276.308047][T10216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.315646][T10216] Cannot create hsr debugfs directory [ 276.673882][ T35] hsr_slave_0: left promiscuous mode [ 276.695029][ T35] hsr_slave_1: left promiscuous mode [ 276.718459][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.732353][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.741532][T10370] input: syz0 as /devices/virtual/input/input12 [ 276.756978][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.780604][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.848699][ T35] veth1_macvtap: left promiscuous mode [ 276.854288][ T35] veth0_macvtap: left promiscuous mode [ 276.869900][ T35] veth1_vlan: left promiscuous mode [ 276.875365][ T35] veth0_vlan: left allmulticast mode [ 276.884620][ T35] veth0_vlan: left promiscuous mode [ 277.340842][ T35] team0 (unregistering): Port device vlan0 removed [ 277.702294][ T35] team0 (unregistering): Port device team_slave_1 removed [ 277.787703][ T35] team0 (unregistering): Port device team_slave_0 removed [ 278.172809][T10388] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.559511][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.579654][T10397] vlan2: entered promiscuous mode [ 278.602905][T10397] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 278.631347][T10397] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 278.698329][T10140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.726365][T10140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.850086][T10140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.881239][T10140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.023415][T10411] kvm: pic: non byte write [ 279.088259][T10414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 279.160129][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.394607][T10140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.462353][T10426] input: syz0 as /devices/virtual/input/input13 [ 279.485174][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.555610][T10140] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.584677][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.591933][ T5587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.630276][T10216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.649892][T10216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.665141][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.672407][ T5587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.682408][T10434] input: syz0 as /devices/virtual/input/input14 [ 279.689990][T10216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.720144][T10216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.982324][T10216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.015437][T10140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.042119][T10216] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.058981][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.066209][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.105295][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.112479][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.229975][T10140] veth0_vlan: entered promiscuous mode [ 280.291707][T10140] veth1_vlan: entered promiscuous mode [ 280.317745][T10216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.370020][T10449] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 280.421673][T10140] veth0_macvtap: entered promiscuous mode [ 280.457783][T10445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.511076][T10140] veth1_macvtap: entered promiscuous mode [ 280.578018][T10216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.618282][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.640769][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.662536][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.677986][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.715813][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.734448][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.762472][T10140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.817630][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.843442][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.855774][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.878829][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.898139][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.914990][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.929731][T10140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.961836][T10140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.980599][T10140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.996768][ T5155] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 281.016983][T10140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.035701][T10140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.063202][T10472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.151741][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.196236][ T5155] usb 3-1: Using ep0 maxpacket: 32 [ 281.224751][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.252274][ T5155] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 281.270652][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.310393][ T5155] usb 3-1: Product: syz [ 281.318309][ T5155] usb 3-1: Manufacturer: syz [ 281.329027][ T5155] usb 3-1: SerialNumber: syz [ 281.355603][ T5155] usb 3-1: config 0 descriptor?? [ 281.392420][T10216] veth0_vlan: entered promiscuous mode [ 281.441501][ T5587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.482158][T10216] veth1_vlan: entered promiscuous mode [ 281.489153][ T5587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.562861][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.574696][T10493] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 281.592285][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.622969][T10216] veth0_macvtap: entered promiscuous mode [ 281.685988][T10216] veth1_macvtap: entered promiscuous mode [ 281.751330][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.807469][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.846986][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.860903][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.874821][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.927520][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.974927][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.995093][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.018927][T10216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.033708][T10509] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.082494][ T5155] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 282.089455][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.103031][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.114426][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.146645][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.167777][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.176153][ T5587] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 282.190480][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.221857][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.256401][ T5180] usb 3-1: USB disconnect, device number 7 [ 282.264629][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.293201][T10216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.335792][T10216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.357526][T10216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.376438][ T5587] usb 5-1: Using ep0 maxpacket: 8 [ 282.380672][T10216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.384728][ T5587] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 282.402276][T10216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.412325][ T5587] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.431457][ T5587] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.469925][ T5587] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.486307][ T5587] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.527115][ T5587] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.574566][ T5587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.747780][ T5197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.812207][ T5197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.851041][ T5587] usb 5-1: GET_CAPABILITIES returned 0 [ 282.860146][ T5587] usbtmc 5-1:16.0: can't read capabilities [ 282.894772][ T5155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.919906][T10538] netlink: 448 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.935560][T10538] unsupported nla_type 14345 [ 282.947756][ T5155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.084088][T10547] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 283.112141][T10508] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 283.162959][ T5180] usb 5-1: USB disconnect, device number 9 [ 283.380797][T10559] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 283.404403][T10557] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 283.926213][ T5180] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 284.101140][T10597] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 284.122748][ T5180] usb 2-1: Using ep0 maxpacket: 8 [ 284.139486][ T5180] usb 2-1: New USB device found, idVendor=07ab, idProduct=fccd, bcdDevice=1f.24 [ 284.170288][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.217030][ T5180] usb 2-1: config 0 descriptor?? [ 284.251437][ T5180] usb-storage 2-1:0.0: USB Mass Storage device detected [ 284.349517][ T5180] usb-storage 2-1:0.0: Quirks match for vid 07ab pid fccd: 10 [ 284.557906][T10622] ALSA: mixer_oss: invalid OSS volume '' [ 284.714215][T10629] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 284.744807][T10629] __nla_validate_parse: 2 callbacks suppressed [ 284.744828][T10629] netlink: 2024 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.785275][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.852371][ T1146] usb 2-1: USB disconnect, device number 7 [ 285.180537][T10644] ------------[ cut here ]------------ [ 285.186456][T10644] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 285.204162][T10644] WARNING: CPU: 1 PID: 10644 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 285.215811][T10644] Modules linked in: [ 285.220242][T10644] CPU: 1 PID: 10644 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 2024/06/01 11:58:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 285.231545][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 285.242083][T10644] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 285.249325][T10644] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 a0 39 e1 8c 48 89 ee e8 2e 90 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 285.269229][T10644] RSP: 0018:ffffc90009827318 EFLAGS: 00010246 [ 285.275671][T10644] RAX: c76de0efa9424900 RBX: 1ffff11005544a9e RCX: 0000000000040000 [ 285.283732][T10644] RDX: ffffc90009ef9000 RSI: 000000000000473e RDI: 000000000000473f [ 285.291789][T10644] RBP: ffff88802aa24130 R08: ffffffff815847a2 R09: 1ffff110172a519a [ 285.299847][T10644] R10: dffffc0000000000 R11: ffffed10172a519b R12: dffffc0000000000 [ 285.307950][T10644] R13: 0000000002000000 R14: ffff88802aa24ca0 R15: ffff88802aa254f0 [ 285.315949][T10644] FS: 00007effdc2996c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 285.325324][T10644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.332354][T10644] CR2: 00007fa9b853dba8 CR3: 000000006254a000 CR4: 00000000003526f0 [ 285.340452][T10644] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 285.349655][T10644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.358185][T10644] Call Trace: [ 285.361497][T10644] [ 285.364445][T10644] ? __warn+0x163/0x4e0 [ 285.368735][T10644] ? ieee80211_link_info_change_notify+0x273/0x330 [ 285.375267][T10644] ? report_bug+0x2b3/0x500 [ 285.379871][T10644] ? ieee80211_link_info_change_notify+0x273/0x330 [ 285.386447][T10644] ? handle_bug+0x3e/0x70 [ 285.391034][T10644] ? exc_invalid_op+0x1a/0x50 [ 285.395745][T10644] ? asm_exc_invalid_op+0x1a/0x20 [ 285.400934][T10644] ? __warn_printk+0x292/0x360 [ 285.405733][T10644] ? ieee80211_link_info_change_notify+0x273/0x330 [ 285.412316][T10644] ? ieee80211_link_info_change_notify+0x272/0x330 [ 285.418914][T10644] ieee80211_set_mcast_rate+0x46/0x60 [ 285.424311][T10644] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 285.432751][T10644] nl80211_set_mcast_rate+0xaff/0xeb0 [ 285.439090][T10644] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 285.445041][T10644] genl_rcv_msg+0xb14/0xec0 [ 285.449654][T10644] ? mark_lock+0x9a/0x350 [ 285.454017][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.459226][T10644] ? __pfx_lock_acquire+0x10/0x10 [ 285.464276][T10644] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 285.469728][T10644] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 285.475648][T10644] ? __pfx_nl80211_post_doit+0x10/0x10 [ 285.481242][T10644] ? __pfx___might_resched+0x10/0x10 [ 285.486661][T10644] netlink_rcv_skb+0x1e3/0x430 [ 285.491449][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.496572][T10644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.501900][T10644] ? __netlink_deliver_tap+0x77e/0x7c0 [ 285.508292][T10644] genl_rcv+0x28/0x40 [ 285.512310][T10644] netlink_unicast+0x7ea/0x980 [ 285.517477][T10644] ? __pfx_netlink_unicast+0x10/0x10 [ 285.522796][T10644] ? __virt_addr_valid+0x183/0x520 [ 285.528348][T10644] ? __check_object_size+0x49c/0x900 [ 285.533664][T10644] ? bpf_lsm_netlink_send+0x9/0x10 [ 285.539227][T10644] netlink_sendmsg+0x8db/0xcb0 [ 285.544034][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.549402][T10644] ? __import_iovec+0x536/0x820 [ 285.554281][T10644] ? aa_sock_msg_perm+0x91/0x160 [ 285.559317][T10644] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.564621][T10644] ? security_socket_sendmsg+0x87/0xb0 [ 285.570169][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.575481][T10644] __sock_sendmsg+0x221/0x270 [ 285.580309][T10644] ____sys_sendmsg+0x525/0x7d0 [ 285.585109][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.590489][T10644] __sys_sendmsg+0x2b0/0x3a0 [ 285.595109][T10644] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.600375][T10644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.606794][T10644] ? do_syscall_64+0x100/0x230 [ 285.611594][T10644] ? do_syscall_64+0xb6/0x230 [ 285.616392][T10644] do_syscall_64+0xf3/0x230 [ 285.620933][T10644] ? clear_bhb_loop+0x35/0x90 [ 285.625644][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.632021][T10644] RIP: 0033:0x7effdb47cee9 [ 285.636919][T10644] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 285.656631][T10644] RSP: 002b:00007effdc2990c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.665086][T10644] RAX: ffffffffffffffda RBX: 00007effdb5b3fa0 RCX: 00007effdb47cee9 [ 285.673540][T10644] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 285.681618][T10644] RBP: 00007effdb4c947f R08: 0000000000000000 R09: 0000000000000000 [ 285.689695][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.697773][T10644] R13: 000000000000000b R14: 00007effdb5b3fa0 R15: 00007effdb6dfa98 [ 285.705788][T10644] [ 285.708886][T10644] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.716178][T10644] CPU: 1 PID: 10644 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 285.726688][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 285.736757][T10644] Call Trace: [ 285.740073][T10644] [ 285.743010][T10644] dump_stack_lvl+0x241/0x360 [ 285.747705][T10644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.752913][T10644] ? __pfx__printk+0x10/0x10 [ 285.757497][T10644] ? _printk+0xd5/0x120 [ 285.761650][T10644] ? vscnprintf+0x5d/0x90 [ 285.765978][T10644] panic+0x349/0x860 [ 285.769868][T10644] ? __warn+0x172/0x4e0 [ 285.774018][T10644] ? __pfx_panic+0x10/0x10 [ 285.778426][T10644] ? show_trace_log_lvl+0x4e6/0x520 [ 285.783635][T10644] __warn+0x346/0x4e0 [ 285.787609][T10644] ? ieee80211_link_info_change_notify+0x273/0x330 [ 285.794107][T10644] report_bug+0x2b3/0x500 [ 285.798430][T10644] ? ieee80211_link_info_change_notify+0x273/0x330 [ 285.804926][T10644] handle_bug+0x3e/0x70 [ 285.809074][T10644] exc_invalid_op+0x1a/0x50 [ 285.813573][T10644] asm_exc_invalid_op+0x1a/0x20 [ 285.818416][T10644] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 285.825519][T10644] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 a0 39 e1 8c 48 89 ee e8 2e 90 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 285.845129][T10644] RSP: 0018:ffffc90009827318 EFLAGS: 00010246 [ 285.851201][T10644] RAX: c76de0efa9424900 RBX: 1ffff11005544a9e RCX: 0000000000040000 [ 285.859164][T10644] RDX: ffffc90009ef9000 RSI: 000000000000473e RDI: 000000000000473f [ 285.867130][T10644] RBP: ffff88802aa24130 R08: ffffffff815847a2 R09: 1ffff110172a519a [ 285.875097][T10644] R10: dffffc0000000000 R11: ffffed10172a519b R12: dffffc0000000000 [ 285.883078][T10644] R13: 0000000002000000 R14: ffff88802aa24ca0 R15: ffff88802aa254f0 [ 285.891051][T10644] ? __warn_printk+0x292/0x360 [ 285.895911][T10644] ? ieee80211_link_info_change_notify+0x272/0x330 [ 285.902407][T10644] ieee80211_set_mcast_rate+0x46/0x60 [ 285.907772][T10644] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 285.913836][T10644] nl80211_set_mcast_rate+0xaff/0xeb0 [ 285.919212][T10644] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 285.925113][T10644] genl_rcv_msg+0xb14/0xec0 [ 285.929610][T10644] ? mark_lock+0x9a/0x350 [ 285.933938][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.939064][T10644] ? __pfx_lock_acquire+0x10/0x10 [ 285.944085][T10644] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 285.949453][T10644] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 285.955343][T10644] ? __pfx_nl80211_post_doit+0x10/0x10 [ 285.960798][T10644] ? __pfx___might_resched+0x10/0x10 [ 285.966096][T10644] netlink_rcv_skb+0x1e3/0x430 [ 285.970858][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.975880][T10644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.981167][T10644] ? __netlink_deliver_tap+0x77e/0x7c0 [ 285.986634][T10644] genl_rcv+0x28/0x40 [ 285.990614][T10644] netlink_unicast+0x7ea/0x980 [ 285.995382][T10644] ? __pfx_netlink_unicast+0x10/0x10 [ 286.000663][T10644] ? __virt_addr_valid+0x183/0x520 [ 286.005773][T10644] ? __check_object_size+0x49c/0x900 [ 286.011059][T10644] ? bpf_lsm_netlink_send+0x9/0x10 [ 286.016171][T10644] netlink_sendmsg+0x8db/0xcb0 [ 286.020937][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.026232][T10644] ? __import_iovec+0x536/0x820 [ 286.031102][T10644] ? aa_sock_msg_perm+0x91/0x160 [ 286.036052][T10644] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.041347][T10644] ? security_socket_sendmsg+0x87/0xb0 [ 286.046822][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.052108][T10644] __sock_sendmsg+0x221/0x270 [ 286.056788][T10644] ____sys_sendmsg+0x525/0x7d0 [ 286.061572][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.066867][T10644] __sys_sendmsg+0x2b0/0x3a0 [ 286.071454][T10644] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.076594][T10644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.082916][T10644] ? do_syscall_64+0x100/0x230 [ 286.087677][T10644] ? do_syscall_64+0xb6/0x230 [ 286.092349][T10644] do_syscall_64+0xf3/0x230 [ 286.096849][T10644] ? clear_bhb_loop+0x35/0x90 [ 286.101523][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.107412][T10644] RIP: 0033:0x7effdb47cee9 [ 286.111820][T10644] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 286.131420][T10644] RSP: 002b:00007effdc2990c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.139853][T10644] RAX: ffffffffffffffda RBX: 00007effdb5b3fa0 RCX: 00007effdb47cee9 [ 286.147822][T10644] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 286.155795][T10644] RBP: 00007effdb4c947f R08: 0000000000000000 R09: 0000000000000000 [ 286.163760][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.171727][T10644] R13: 000000000000000b R14: 00007effdb5b3fa0 R15: 00007effdb6dfa98 [ 286.179704][T10644] [ 286.182861][T10644] Kernel Offset: disabled [ 286.187265][T10644] Rebooting in 86400 seconds..