last executing test programs: 1m45.740437625s ago: executing program 0 (id=192): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b8e42d08da05990082d50102030109022d00010007000009040200030456fb00090502000000000000090506c2000000"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0xfffffffffffffc69) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000000c0)={0xff, 0x2, 0xf41, 0x80000000, 0xff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) close(r2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={0x0, r1, 0x4000, r3}, 0x14) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r6, 0x100300) 1m43.820880735s ago: executing program 0 (id=202): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x408, @vifc_lcl_ifindex, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 1m43.651565734s ago: executing program 0 (id=203): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 1m43.437781692s ago: executing program 0 (id=204): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000040)=0x8) 1m43.252809178s ago: executing program 0 (id=205): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m42.884901276s ago: executing program 0 (id=208): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x600002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) openat(r3, &(0x7f0000000080)='./cgroup/../file0\x00', 0x2201, 0x34) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) inotify_init1(0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 5.324829011s ago: executing program 4 (id=777): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001070000000000000000"], 0x18}], 0x1}, 0x0) 5.21156797s ago: executing program 4 (id=780): syz_open_procfs(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 4.896072875s ago: executing program 2 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 4.89515359s ago: executing program 4 (id=786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000c040)={0x0, 0x0, &(0x7f000000c000)={&(0x7f0000000900)=@newchain={0x24}, 0x24}}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/35, 0x23) 4.596835477s ago: executing program 2 (id=787): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @dev}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 4.569154873s ago: executing program 4 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001070000000000000000"], 0x18}], 0x1}, 0x0) 4.27593469s ago: executing program 4 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 1.664854721s ago: executing program 1 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 1.518907955s ago: executing program 1 (id=810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000000c040)={0x0, 0x0, &(0x7f000000c000)={&(0x7f0000000900)=@newchain={0x24}, 0x24}}, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 1.460871184s ago: executing program 2 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 1.257832435s ago: executing program 1 (id=813): syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7927f3", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0) 1.185090406s ago: executing program 2 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 991.003144ms ago: executing program 1 (id=815): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000780)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000010c0)}], 0x1, 0x3, 0x0) 906.007139ms ago: executing program 3 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) 856.797148ms ago: executing program 2 (id=817): getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f0000000280)) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0}) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@private2, 0x1, 0x0, 0x4e23, 0x0, 0xa}, {}, {0x0, 0x0, 0x99}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 709.305264ms ago: executing program 1 (id=818): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="8e77ca338978", 0x6, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 677.463661ms ago: executing program 3 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 595.185977ms ago: executing program 2 (id=820): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x408, @vifc_lcl_ifindex, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 432.859779ms ago: executing program 1 (id=821): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @dev}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 417.880757ms ago: executing program 3 (id=822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x8001, {{0x2, 0x4, 0x4}}}, 0x18) 283.271575ms ago: executing program 3 (id=823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000000c040)={0x0, 0x0, &(0x7f000000c000)={&(0x7f0000000900)=@newchain={0x24}, 0x24}}, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 146.158739ms ago: executing program 3 (id=824): syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @random="89ab9b4c72ca", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7927f3", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0) 145.498544ms ago: executing program 4 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=826): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c35000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) kernel console output (not intermixed with test programs): 464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.737568][ T5464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.763038][ T5284] usb 3-1: USB disconnect, device number 3 [ 285.770981][ T5284] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 285.784148][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.842045][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.864581][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.886074][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.913056][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.929624][ T5688] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.948010][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.974379][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.997011][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.027233][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.052375][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.067878][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.078379][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.099516][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.109879][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.120753][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.131383][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.143991][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.160041][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.188019][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.204420][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.220979][ T5283] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 286.230854][ T5465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.247160][ T5465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.257866][ T5465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.275229][ T5465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.341106][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.370886][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.389731][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 286.423277][ T5283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.433024][ T5283] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 286.443653][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.468830][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.480525][ T5283] usb 1-1: config 0 descriptor?? [ 286.513472][ T5283] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 286.521703][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.555169][ T5283] usb 1-1: selecting invalid altsetting 0 [ 286.569820][ T5283] cxusb: set interface failed [ 286.575013][ T5283] dvb-usb: bulk message failed: -22 (1/0) [ 286.626349][ T5283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.654114][ T5283] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 286.671194][ T5283] usb 1-1: media controller created [ 286.705650][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.707531][ T5283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.760115][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.837363][ T29] audit: type=1326 audit(1726929095.591:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.2.67" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4abc97def9 code=0x0 [ 286.842182][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.937682][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.976643][ T5283] DVB: Unable to find symbol lgdt330x_attach() [ 286.984891][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.002887][ T5283] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 287.037616][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.059371][ T5283] dvb-usb: bulk message failed: -22 (1/0) [ 287.075211][ T5283] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 287.134527][ T5283] usb 1-1: USB disconnect, device number 2 [ 287.277027][ T5283] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 287.383594][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 287.627209][ T5726] pimreg: entered allmulticast mode [ 287.919574][ T5741] process 'syz.0.73' launched './file0' with NULL argv: empty string added [ 288.211154][ T5283] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 288.376986][ T5283] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.404289][ T5283] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 288.434055][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.466038][ T5283] usb 5-1: Product: syz [ 288.486947][ T5283] usb 5-1: Manufacturer: syz [ 288.498796][ T5283] usb 5-1: SerialNumber: syz [ 288.540327][ T5283] usb 5-1: config 0 descriptor?? [ 288.577796][ T5769] input: syz0 as /devices/virtual/input/input6 [ 288.719941][ T5284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 288.822220][ T25] usb 5-1: USB disconnect, device number 2 [ 288.889308][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 288.906891][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.945005][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 288.990501][ T5284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.025947][ T5782] pimreg: entered allmulticast mode [ 289.031634][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.041478][ T5284] usb 3-1: SerialNumber: syz [ 289.282348][ T5284] usb 3-1: USB disconnect, device number 4 [ 289.379542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.389497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.397870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.407029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.700206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.711537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.786402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.795651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.805849][ T29] audit: type=1326 audit(1726929098.531:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5799 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80dc37def9 code=0x0 [ 289.919267][ T5284] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.103455][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 290.127371][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.143566][ T5284] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 290.171809][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.197354][ T5284] usb 4-1: config 0 descriptor?? [ 290.239475][ T5284] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 290.274570][ T5284] usb 4-1: selecting invalid altsetting 0 [ 290.295374][ T5284] cxusb: set interface failed [ 290.306498][ T5284] dvb-usb: bulk message failed: -22 (1/0) [ 290.338479][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.352735][ T5284] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 290.368014][ T5284] usb 4-1: media controller created [ 290.369573][ T5283] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 290.432937][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.559468][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 290.574506][ T5284] DVB: Unable to find symbol lgdt330x_attach() [ 290.581176][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.587937][ T5284] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 290.611175][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 290.635291][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.644109][ T5284] dvb-usb: bulk message failed: -22 (1/0) [ 290.662858][ T5283] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.669209][ T5284] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 290.687012][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.712350][ T5284] usb 4-1: USB disconnect, device number 5 [ 290.718813][ T5283] usb 5-1: config 0 descriptor?? [ 290.759570][ T5818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 290.778180][ T5283] hub 5-1:0.0: USB hub found [ 290.806330][ T5838] pimreg: entered allmulticast mode [ 290.824880][ T5284] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 290.988658][ T5283] hub 5-1:0.0: 2 ports detected [ 291.610446][ T58] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 291.668110][ T2890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.781133][ T58] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.818368][ T58] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 291.849364][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.861928][ T2890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.885517][ T58] usb 2-1: Product: syz [ 291.899712][ T58] usb 2-1: Manufacturer: syz [ 291.904374][ T58] usb 2-1: SerialNumber: syz [ 291.952847][ T58] usb 2-1: config 0 descriptor?? [ 292.010027][ T5283] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 292.018072][ T2890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.036867][ T29] audit: type=1326 audit(1726929100.791:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.3.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502917def9 code=0x0 [ 292.058362][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.198131][ T2890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.278303][ T5286] usb 5-1: Failed to suspend device, error -71 [ 292.280355][ T5284] usb 5-1: USB disconnect, device number 3 [ 292.291258][ T58] usb 2-1: USB disconnect, device number 3 [ 292.314420][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.324823][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.338480][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.355120][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.366781][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.376058][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.643631][ T2890] bridge_slave_1: left allmulticast mode [ 292.658500][ T2890] bridge_slave_1: left promiscuous mode [ 292.666072][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.687875][ T2890] bridge_slave_0: left allmulticast mode [ 292.694140][ T2890] bridge_slave_0: left promiscuous mode [ 292.700060][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.540928][ T5917] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 293.557705][ T5917] kvm: pic: non byte read [ 293.563290][ T5917] kvm: pic: level sensitive irq not supported [ 293.563606][ T5917] kvm: pic: non byte read [ 293.577494][ T5917] kvm: pic: level sensitive irq not supported [ 293.577657][ T5917] kvm: pic: non byte read [ 293.608723][ T5917] kvm: pic: level sensitive irq not supported [ 293.608922][ T5917] kvm: pic: non byte read [ 293.636055][ T5917] kvm: pic: level sensitive irq not supported [ 293.636162][ T5917] kvm: pic: non byte read [ 293.649061][ T5917] kvm: pic: level sensitive irq not supported [ 293.649396][ T5917] kvm: pic: non byte read [ 293.663641][ T5917] kvm: pic: level sensitive irq not supported [ 293.663879][ T5917] kvm: pic: non byte read [ 293.680276][ T5917] kvm: pic: level sensitive irq not supported [ 293.680475][ T5917] kvm: pic: non byte read [ 293.698665][ T5917] kvm: pic: level sensitive irq not supported [ 293.698884][ T5917] kvm: pic: non byte read [ 293.797902][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.822774][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.838413][ T2890] bond0 (unregistering): Released all slaves [ 293.864436][ T5908] macvlan2: entered allmulticast mode [ 293.883152][ T5908] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 293.898337][ T5908] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 293.911964][ T5908] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 293.948853][ T5911] bond0: entered promiscuous mode [ 293.964495][ T5911] bond_slave_0: entered promiscuous mode [ 293.973036][ T5911] bond_slave_1: entered promiscuous mode [ 293.979842][ T5911] macvlan2: entered promiscuous mode [ 294.456624][ T4621] Bluetooth: hci0: command tx timeout [ 294.712949][ T5285] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 294.729480][ T5944] netlink: 'syz.4.128': attribute type 3 has an invalid length. [ 294.747006][ T5944] netlink: 3285 bytes leftover after parsing attributes in process `syz.4.128'. [ 294.835764][ T2890] hsr_slave_0: left promiscuous mode [ 294.854336][ T2890] hsr_slave_1: left promiscuous mode [ 294.882810][ T5285] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.905460][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.914572][ T5285] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 294.934933][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.946772][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.964399][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.989272][ T5285] usb 1-1: Product: syz [ 294.998896][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.008878][ T5285] usb 1-1: Manufacturer: syz [ 295.029842][ T5285] usb 1-1: SerialNumber: syz [ 295.049941][ T5285] usb 1-1: config 0 descriptor?? [ 295.098634][ T2890] veth1_macvtap: left promiscuous mode [ 295.107953][ T2890] veth0_macvtap: left promiscuous mode [ 295.114293][ T2890] veth1_vlan: left promiscuous mode [ 295.117360][ T5965] fuse: root generation should be zero [ 295.119840][ T2890] veth0_vlan: left promiscuous mode [ 295.302156][ T58] usb 1-1: USB disconnect, device number 3 [ 295.853061][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 295.927679][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 296.218122][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 296.350875][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 296.379306][ T5285] usb 1-1: Using ep0 maxpacket: 32 [ 296.412012][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.425715][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.437014][ T5285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 296.493037][ T5285] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 296.529532][ T4621] Bluetooth: hci0: command tx timeout [ 296.531780][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.611924][ T5285] usb 1-1: config 0 descriptor?? [ 296.832646][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.863348][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.877159][ T5886] bridge_slave_0: entered allmulticast mode [ 296.885278][ T5886] bridge_slave_0: entered promiscuous mode [ 296.895826][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.903861][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.911784][ T5886] bridge_slave_1: entered allmulticast mode [ 296.920048][ T5886] bridge_slave_1: entered promiscuous mode [ 297.026602][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.063419][ T5285] hid (null): unknown global tag 0xc [ 297.078060][ T5285] hid (null): global environment stack underflow [ 297.090768][ T5285] hid (null): report_id 2250602168 is invalid [ 297.104486][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.117514][ T5285] hid (null): unknown global tag 0xc [ 297.141716][ T5285] hid (null): unknown global tag 0xf3 [ 297.157582][ T5285] hid (null): invalid report_size 2036631993 [ 297.185855][ T5285] hid (null): report_id 3944742287 is invalid [ 297.230594][ T5886] team0: Port device team_slave_0 added [ 297.272478][ T5285] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input7 [ 297.300035][ T5886] team0: Port device team_slave_1 added [ 297.345897][ T5285] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input8 [ 297.538985][ T5285] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 297.588829][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.630841][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.632361][ T5285] usb 1-1: USB disconnect, device number 4 [ 297.733844][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.798475][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.817729][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.829455][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.837646][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.846035][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.855455][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.864318][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.894484][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.050678][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.402990][ T5886] hsr_slave_0: entered promiscuous mode [ 298.419826][ T5886] hsr_slave_1: entered promiscuous mode [ 298.537074][ T2955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.609529][ T4621] Bluetooth: hci0: command tx timeout [ 298.686502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 298.915174][ T2955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.966053][ T6051] syzkaller1: entered promiscuous mode [ 298.971938][ T6051] syzkaller1: entered allmulticast mode [ 299.133968][ T2955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.303233][ T2955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.890225][ T4621] Bluetooth: hci1: command tx timeout [ 299.917365][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 300.000873][ T5285] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 300.002535][ T2955] bridge_slave_1: left allmulticast mode [ 300.014494][ T2955] bridge_slave_1: left promiscuous mode [ 300.022745][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.042118][ T2955] bridge_slave_0: left allmulticast mode [ 300.047824][ T2955] bridge_slave_0: left promiscuous mode [ 300.057830][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.154659][ T5285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.166057][ T5285] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.176768][ T5285] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 300.186091][ T5285] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 300.194302][ T5285] usb 1-1: Manufacturer: syz [ 300.202129][ T5285] usb 1-1: config 0 descriptor?? [ 300.570588][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.584026][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.596235][ T2955] bond0 (unregistering): Released all slaves [ 300.707390][ T4621] Bluetooth: hci0: command tx timeout [ 300.725117][ T5285] usb 1-1: USB disconnect, device number 5 [ 301.163495][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.174632][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.184097][ T6023] bridge_slave_0: entered allmulticast mode [ 301.200445][ T6023] bridge_slave_0: entered promiscuous mode [ 301.228014][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.257552][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.259334][ T5302] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.273062][ T6023] bridge_slave_1: entered allmulticast mode [ 301.290632][ T6023] bridge_slave_1: entered promiscuous mode [ 301.453330][ T5302] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.465149][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.467482][ T5302] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 301.499983][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.514377][ T5302] usb 2-1: Product: syz [ 301.521140][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.534125][ T5302] usb 2-1: Manufacturer: syz [ 301.538803][ T5302] usb 2-1: SerialNumber: syz [ 301.557919][ T5302] usb 2-1: config 0 descriptor?? [ 301.587011][ T2955] hsr_slave_0: left promiscuous mode [ 301.624078][ T2955] hsr_slave_1: left promiscuous mode [ 301.640193][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.669333][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.696761][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.714648][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.755680][ T2955] veth1_macvtap: left promiscuous mode [ 301.764386][ T2955] veth0_macvtap: left promiscuous mode [ 301.770433][ T2955] veth1_vlan: left promiscuous mode [ 301.776245][ T2955] veth0_vlan: left promiscuous mode [ 301.801690][ T5302] usb 2-1: USB disconnect, device number 4 [ 301.979822][ T4621] Bluetooth: hci1: command tx timeout [ 302.317200][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 302.381718][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 302.851488][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.862175][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.914150][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.955048][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.106628][ T6023] team0: Port device team_slave_0 added [ 303.152061][ T6023] team0: Port device team_slave_1 added [ 303.181499][ T6154] netlink: 6 bytes leftover after parsing attributes in process `syz.0.180'. [ 303.198017][ T6154] netlink: 6 bytes leftover after parsing attributes in process `syz.0.180'. [ 303.243663][ T6156] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 303.251891][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 303.320041][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.344291][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.405829][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.432158][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.439498][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.537870][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.868372][ T6023] hsr_slave_0: entered promiscuous mode [ 303.896551][ T6023] hsr_slave_1: entered promiscuous mode [ 303.906129][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.927897][ T6023] Cannot create hsr debugfs directory [ 304.049611][ T4621] Bluetooth: hci1: command tx timeout [ 304.281870][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.462103][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.559335][ T5283] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 304.568660][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.575912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.650863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.658026][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.758025][ T5283] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.769563][ T5284] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 304.777008][ T5283] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 304.791752][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.802221][ T5283] usb 4-1: Product: syz [ 304.806485][ T5283] usb 4-1: Manufacturer: syz [ 304.813963][ T5283] usb 4-1: SerialNumber: syz [ 304.824012][ T5283] usb 4-1: config 0 descriptor?? [ 304.939394][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 304.988508][ T5284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 305.003622][ T5284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.025310][ T5284] usb 1-1: config 0 has no interface number 0 [ 305.041954][ T5284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.060431][ T46] usb 4-1: USB disconnect, device number 6 [ 305.084719][ T5284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 305.115720][ T5284] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 305.156708][ T5284] usb 1-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.205846][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.220349][ T5284] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 305.248814][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.264736][ T5284] usb 1-1: Product: syz [ 305.268969][ T5284] usb 1-1: Manufacturer: syz [ 305.294695][ T5284] usb 1-1: SerialNumber: syz [ 305.328226][ T5886] veth0_vlan: entered promiscuous mode [ 305.334683][ T5284] usb 1-1: config 0 descriptor?? [ 305.340650][ T5886] veth1_vlan: entered promiscuous mode [ 305.426603][ T5886] veth0_macvtap: entered promiscuous mode [ 305.462497][ T6023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.483022][ T5886] veth1_macvtap: entered promiscuous mode [ 305.499624][ T6023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.542134][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.557499][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.577657][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.610832][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.622389][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.644573][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.666283][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.675937][ T6023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.728388][ T6023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.793390][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.814095][ T5284] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 305.829109][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.856670][ T5284] usb 1-1: USB disconnect, device number 6 [ 305.875700][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.902335][ T29] audit: type=1326 audit(1726929114.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 305.934457][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.946773][ T29] audit: type=1326 audit(1726929114.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 305.947895][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.988519][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.002020][ T29] audit: type=1326 audit(1726929114.661:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.027112][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.082997][ T5886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.104260][ T29] audit: type=1326 audit(1726929114.661:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.122747][ T5886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.149218][ T4621] Bluetooth: hci1: command tx timeout [ 306.177421][ T29] audit: type=1326 audit(1726929114.661:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.199629][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.200226][ T5886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.217375][ T5886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.232302][ T29] audit: type=1326 audit(1726929114.711:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.257636][ T29] audit: type=1326 audit(1726929114.711:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.290930][ T29] audit: type=1326 audit(1726929114.711:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.1.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8477def9 code=0x7ffc0000 [ 306.471861][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.503351][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.574957][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.596862][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.608503][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.648432][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.684659][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.692706][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.736917][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.744203][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.988610][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.161136][ T6023] veth0_vlan: entered promiscuous mode [ 307.242369][ T6023] veth1_vlan: entered promiscuous mode [ 307.342524][ T6023] veth0_macvtap: entered promiscuous mode [ 307.382423][ T6023] veth1_macvtap: entered promiscuous mode [ 307.446190][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.484089][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.503227][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.541869][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.568867][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.602230][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.617108][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.634001][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.661039][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.721389][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.753464][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.766641][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.777622][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.791801][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.802869][ T5283] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 307.821841][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.832390][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.843690][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.863051][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.877009][ T6023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.888012][ T6023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.906792][ T6023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.917004][ T6023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.996153][ T5283] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.012756][ T5283] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.031492][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.060887][ T5283] usb 3-1: Product: syz [ 308.064727][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.067043][ T5283] usb 3-1: Manufacturer: syz [ 308.100392][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.117017][ T5283] usb 3-1: SerialNumber: syz [ 308.137990][ T5283] usb 3-1: config 0 descriptor?? [ 308.192979][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.229882][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.375655][ T46] usb 3-1: USB disconnect, device number 5 [ 308.541799][ T6302] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 308.559290][ T6302] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 308.641114][ T6302] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 308.653318][ T6302] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 308.675611][ T6302] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 308.697542][ T6302] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 308.744940][ T6302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.759230][ T6302] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 308.794632][ T6302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.811340][ T6302] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 309.412727][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.427813][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.439763][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.460195][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.468095][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.475628][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.488145][ T4621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.497786][ T4621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.506676][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.516652][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.529665][ T5450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.553512][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.563460][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.612280][ T6322] pimreg: entered allmulticast mode [ 309.619948][ T6314] bridge0: port 3(syz_tun) entered blocking state [ 309.648530][ T6314] bridge0: port 3(syz_tun) entered disabled state [ 309.679812][ T6314] syz_tun: entered allmulticast mode [ 309.715225][ T6314] syz_tun: entered promiscuous mode [ 309.720762][ T6337] random: crng reseeded on system resumption [ 309.721993][ T6314] bridge0: port 3(syz_tun) entered blocking state [ 309.734590][ T6314] bridge0: port 3(syz_tun) entered forwarding state [ 309.862193][ T5450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.007625][ T5450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.164573][ T5450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.442328][ T5450] bridge_slave_1: left allmulticast mode [ 310.459009][ T5450] bridge_slave_1: left promiscuous mode [ 310.481017][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.497003][ T5450] bridge_slave_0: left allmulticast mode [ 310.503497][ T5450] bridge_slave_0: left promiscuous mode [ 310.513303][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.530088][ T58] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 310.709312][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 310.721359][ T58] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.743039][ T58] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.762089][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.789679][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.829301][ T58] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.849746][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.867808][ T58] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 310.877555][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.892408][ T58] usb 2-1: config 0 descriptor?? [ 311.112302][ T58] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 311.130930][ T58] usb 2-1: USB disconnect, device number 5 [ 311.154112][ T58] usblp0: removed [ 311.269402][ T5283] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 311.277647][ T5450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.292509][ T5450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.307644][ T5450] bond0 (unregistering): Released all slaves [ 311.472240][ T5283] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.545601][ T5283] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 311.574221][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.580685][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 311.597002][ T5283] usb 3-1: Product: syz [ 311.604319][ T5283] usb 3-1: Manufacturer: syz [ 311.609979][ T5283] usb 3-1: SerialNumber: syz [ 311.617355][ T5283] usb 3-1: config 0 descriptor?? [ 311.643648][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 311.662151][ T5243] Bluetooth: hci2: command tx timeout [ 311.766433][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 311.774740][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.787456][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.810068][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.831402][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.833884][ T5283] usb 3-1: USB disconnect, device number 6 [ 311.868281][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.893560][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.928969][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.945854][ T5450] hsr_slave_0: left promiscuous mode [ 311.954052][ T5450] hsr_slave_1: left promiscuous mode [ 311.960679][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.969098][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.976792][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.985338][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.986836][ T46] usb 2-1: config 0 descriptor?? [ 312.009357][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.061347][ T5450] veth1_macvtap: left promiscuous mode [ 312.067003][ T5450] veth0_macvtap: left promiscuous mode [ 312.082456][ T5450] veth1_vlan: left promiscuous mode [ 312.087895][ T5450] veth0_vlan: left promiscuous mode [ 312.223166][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.347034][ T5450] pimreg (unregistering): left allmulticast mode [ 312.507950][ T6408] trusted_key: syz.2.236 sent an empty control message without MSG_MORE. [ 312.716881][ T5283] usb 2-1: USB disconnect, device number 6 [ 312.732599][ T5283] usblp0: removed [ 312.889310][ T58] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 312.907065][ T5450] team0 (unregistering): Port device team_slave_1 removed [ 312.953403][ T5450] team0 (unregistering): Port device team_slave_0 removed [ 313.067842][ T58] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 313.087840][ T58] usb 3-1: config 1 has no interface number 1 [ 313.112302][ T58] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 313.131942][ T58] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.145343][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.154806][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.163047][ T58] usb 3-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 313.651184][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.658387][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.666246][ T58] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 313.672453][ T6334] bridge_slave_0: entered allmulticast mode [ 313.708796][ T6334] bridge_slave_0: entered promiscuous mode [ 313.726376][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.733796][ T5243] Bluetooth: hci2: command tx timeout [ 313.747375][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.755336][ T6334] bridge_slave_1: entered allmulticast mode [ 313.763075][ T6334] bridge_slave_1: entered promiscuous mode [ 313.789430][ T58] usb 3-1: USB disconnect, device number 7 [ 313.876365][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.919050][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.024610][ T6334] team0: Port device team_slave_0 added [ 314.033854][ T6334] team0: Port device team_slave_1 added [ 314.134699][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.156451][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.219189][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.245786][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.265652][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.329298][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.546138][ T6334] hsr_slave_0: entered promiscuous mode [ 314.553552][ T6334] hsr_slave_1: entered promiscuous mode [ 314.564538][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.573365][ T6334] Cannot create hsr debugfs directory [ 314.583845][ T6442] pimreg: entered allmulticast mode [ 315.139295][ T5284] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 315.204664][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.321516][ T5284] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.341606][ T5284] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 315.364590][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.395394][ T5284] usb 3-1: Product: syz [ 315.400035][ T5284] usb 3-1: Manufacturer: syz [ 315.400717][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.404664][ T5284] usb 3-1: SerialNumber: syz [ 315.445808][ T5284] usb 3-1: config 0 descriptor?? [ 315.618607][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.693017][ T5284] usb 3-1: USB disconnect, device number 8 [ 315.737314][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.809387][ T5243] Bluetooth: hci2: command tx timeout [ 315.881309][ T6334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.892137][ T6334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.914558][ T6334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.953885][ T4621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.963010][ T4621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.971488][ T4621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.978606][ T6334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.986487][ T4621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.997951][ T4621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.007560][ T4621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.068056][ T12] bridge_slave_1: left allmulticast mode [ 316.074136][ T12] bridge_slave_1: left promiscuous mode [ 316.085462][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.101296][ T12] bridge_slave_0: left allmulticast mode [ 316.106996][ T12] bridge_slave_0: left promiscuous mode [ 316.113140][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.688331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.704896][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.718497][ T12] bond0 (unregistering): Released all slaves [ 317.333066][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340491][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.366997][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.405603][ T12] hsr_slave_0: left promiscuous mode [ 317.418151][ T12] hsr_slave_1: left promiscuous mode [ 317.425886][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.433997][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.442190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.450197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.470275][ T46] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 317.486531][ T12] veth1_macvtap: left promiscuous mode [ 317.511938][ T12] veth0_macvtap: left promiscuous mode [ 317.517676][ T12] veth1_vlan: left promiscuous mode [ 317.533284][ T12] veth0_vlan: left promiscuous mode [ 317.620316][ T5283] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 317.643420][ T46] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 317.652962][ T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 317.669439][ T46] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 317.699207][ T46] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 317.727167][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.751379][ T12] pimreg (unregistering): left allmulticast mode [ 317.761263][ T46] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 317.780203][ T46] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 317.780980][ T5283] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.788668][ T46] usb 3-1: Product: syz [ 317.788691][ T46] usb 3-1: Manufacturer: syz [ 317.788710][ T46] usb 3-1: SerialNumber: syz [ 317.807192][ T5283] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 317.815005][ T46] usb 3-1: config 0 descriptor?? [ 317.828134][ T46] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 317.839041][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.848471][ T5283] usb 2-1: Product: syz [ 317.854401][ T5283] usb 2-1: Manufacturer: syz [ 317.863023][ T46] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 317.864646][ T5283] usb 2-1: SerialNumber: syz [ 317.894766][ T5243] Bluetooth: hci2: command tx timeout [ 317.914606][ T5283] usb 2-1: config 0 descriptor?? [ 318.036666][ T46] usb 3-1: USB disconnect, device number 9 [ 318.056834][ T46] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 318.132272][ T5243] Bluetooth: hci1: command tx timeout [ 318.160277][ T25] usb 2-1: USB disconnect, device number 7 [ 318.470733][ T12] team0 (unregistering): Port device team_slave_1 removed [ 318.601260][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.614635][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.624953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 318.633447][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.679863][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.691235][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 318.698995][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.305554][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 319.394729][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.438153][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.445365][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.471976][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.479223][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.780798][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.787952][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.804857][ T6483] bridge_slave_0: entered allmulticast mode [ 319.808155][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 319.837832][ T6483] bridge_slave_0: entered promiscuous mode [ 319.850718][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.867369][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.881833][ T6483] bridge_slave_1: entered allmulticast mode [ 319.900769][ T6483] bridge_slave_1: entered promiscuous mode [ 319.980524][ T58] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.997753][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.014773][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.029586][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.037530][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.049529][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.062861][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.071056][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.080688][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.092576][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.106287][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.115834][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.127345][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.135673][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.145173][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.154567][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.170748][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.181502][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.191281][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.207924][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.215010][ T4621] Bluetooth: hci1: command tx timeout [ 320.231317][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.245496][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.247918][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.256908][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.273658][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.282810][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.294837][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.308913][ T58] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.355302][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.355436][ T58] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.373846][ T58] usb 2-1: Product: syz [ 320.378057][ T58] usb 2-1: Manufacturer: syz [ 320.386270][ T58] usb 2-1: SerialNumber: syz [ 320.413060][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 320.423971][ T58] usb 2-1: config 0 descriptor?? [ 320.446501][ T58] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 320.575998][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.676255][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 320.698377][ T6483] team0: Port device team_slave_0 added [ 320.724226][ T6483] team0: Port device team_slave_1 added [ 320.763234][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 320.763676][ T25] usb 2-1: USB disconnect, device number 8 [ 320.771684][ T4621] Bluetooth: hci3: command tx timeout [ 320.786180][ T6577] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 320.824161][ T25] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 320.884059][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.979062][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.014041][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.021339][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.047924][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.062859][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.081102][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.124764][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.147281][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.155197][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.163498][ T6539] bridge_slave_0: entered allmulticast mode [ 321.171720][ T6539] bridge_slave_0: entered promiscuous mode [ 321.195337][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.209281][ T5284] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 321.234919][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.243397][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.251840][ T6539] bridge_slave_1: entered allmulticast mode [ 321.258935][ T6539] bridge_slave_1: entered promiscuous mode [ 321.308433][ T6483] hsr_slave_0: entered promiscuous mode [ 321.318331][ T6483] hsr_slave_1: entered promiscuous mode [ 321.325087][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.335903][ T6483] Cannot create hsr debugfs directory [ 321.393352][ T5284] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.408801][ T5284] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 321.429312][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.446822][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.456222][ T5284] usb 3-1: Product: syz [ 321.470254][ T5284] usb 3-1: Manufacturer: syz [ 321.474909][ T5284] usb 3-1: SerialNumber: syz [ 321.488491][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.501464][ T5284] usb 3-1: config 0 descriptor?? [ 321.522280][ T6334] veth0_vlan: entered promiscuous mode [ 321.685496][ T6539] team0: Port device team_slave_0 added [ 321.716374][ T5283] usb 3-1: USB disconnect, device number 10 [ 321.750350][ T6334] veth1_vlan: entered promiscuous mode [ 321.774213][ T6539] team0: Port device team_slave_1 added [ 321.854452][ T12] bridge_slave_1: left allmulticast mode [ 321.871449][ T12] bridge_slave_1: left promiscuous mode [ 321.877235][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.896883][ T12] bridge_slave_0: left allmulticast mode [ 321.905228][ T12] bridge_slave_0: left promiscuous mode [ 321.918890][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.301640][ T4621] Bluetooth: hci1: command tx timeout [ 322.615488][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.628762][ T12] bond_slave_0: left promiscuous mode [ 322.640899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.663238][ T12] bond_slave_1: left promiscuous mode [ 322.703950][ T12] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 322.740460][ T12] macvlan2: left promiscuous mode [ 322.752760][ T12] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 322.770310][ T12] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 322.804835][ T12] bond0 (unregistering): Released all slaves [ 322.849865][ T4621] Bluetooth: hci3: command tx timeout [ 322.860748][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.867733][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.909920][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.086145][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.103369][ T6652] netlink: 148 bytes leftover after parsing attributes in process `syz.1.281'. [ 323.117518][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.188438][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.400354][ T6539] hsr_slave_0: entered promiscuous mode [ 323.412468][ T6539] hsr_slave_1: entered promiscuous mode [ 323.430510][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.438699][ T6539] Cannot create hsr debugfs directory [ 323.513285][ T6334] veth0_macvtap: entered promiscuous mode [ 323.689369][ T5283] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.715484][ T6334] veth1_macvtap: entered promiscuous mode [ 323.861741][ T12] hsr_slave_0: left promiscuous mode [ 323.874336][ T12] hsr_slave_1: left promiscuous mode [ 323.887862][ T5283] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.898685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.913217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.922402][ T5283] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 323.943360][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.951021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.958827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.963308][ T5283] usb 3-1: Product: syz [ 323.987141][ T5283] usb 3-1: Manufacturer: syz [ 324.003701][ T6670] delete_channel: no stack [ 324.013315][ T5283] usb 3-1: SerialNumber: syz [ 324.023912][ T12] veth1_macvtap: left promiscuous mode [ 324.040262][ T5283] usb 3-1: config 0 descriptor?? [ 324.050327][ T12] veth0_macvtap: left promiscuous mode [ 324.055959][ T12] veth1_vlan: left promiscuous mode [ 324.081460][ T12] veth0_vlan: left promiscuous mode [ 324.253353][ T12] pimreg (unregistering): left allmulticast mode [ 324.269049][ T46] usb 3-1: USB disconnect, device number 11 [ 324.380690][ T4621] Bluetooth: hci1: command tx timeout [ 324.696622][ T12] team0 (unregistering): Port device team_slave_1 removed [ 324.747732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.934922][ T4621] Bluetooth: hci3: command tx timeout [ 325.595051][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.607100][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.620413][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.634736][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.646499][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.663135][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.686119][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.718662][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.741834][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.761031][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.853381][ T6334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.887146][ T6334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.915159][ T6334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.934666][ T6334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.268668][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.284731][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.436601][ T6483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.464992][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.466208][ T6483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.480368][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.498193][ T6483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.573856][ T6483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.747566][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.749390][ T5302] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.813821][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.837535][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.844746][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.867798][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.875020][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.945120][ T5302] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.997769][ T5302] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 327.009374][ T4621] Bluetooth: hci3: command tx timeout [ 327.048272][ T6483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.062362][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.096084][ T5302] usb 3-1: Product: syz [ 327.098236][ T6483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.100589][ T5302] usb 3-1: Manufacturer: syz [ 327.148661][ T5302] usb 3-1: SerialNumber: syz [ 327.171862][ T5302] usb 3-1: config 0 descriptor?? [ 327.205880][ T6539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.233109][ T6539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.252845][ T6539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.287713][ T6539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.328328][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.370842][ T6750] raw_sendmsg: syz.1.301 forgot to set AF_INET. Fix it! [ 327.385855][ T5283] usb 3-1: USB disconnect, device number 12 [ 327.490930][ T6483] veth0_vlan: entered promiscuous mode [ 327.533627][ T6483] veth1_vlan: entered promiscuous mode [ 327.605840][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.643047][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.681490][ T6483] veth0_macvtap: entered promiscuous mode [ 327.691475][ T6483] veth1_macvtap: entered promiscuous mode [ 327.707159][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.717795][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.727751][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.739660][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.749896][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.760525][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.772545][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.814849][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.822031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.878390][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.909040][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.919515][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.930580][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.941714][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.957206][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.981562][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.000697][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.007847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.060706][ T6483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.069930][ T6483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.088121][ T6483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.106825][ T6483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.277378][ T6539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.644734][ T6778] tipc: Started in network mode [ 328.658171][ T6778] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 328.679549][ T6778] tipc: Enabled bearer , priority 0 [ 328.740925][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.752353][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.787657][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.047675][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.062321][ T6785] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 329.079904][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.167237][ T6539] veth0_vlan: entered promiscuous mode [ 329.301070][ T6539] veth1_vlan: entered promiscuous mode [ 329.513832][ T6539] veth0_macvtap: entered promiscuous mode [ 329.624365][ T6539] veth1_macvtap: entered promiscuous mode [ 329.781860][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.801579][ T58] tipc: Node number set to 11578026 [ 329.877458][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.954545][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.030431][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.083822][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.137571][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.185234][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.257592][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.326626][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.424826][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.498865][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.529717][ T58] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 330.558908][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.592773][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.623640][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.642224][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.657692][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.680104][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.707161][ T58] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.717519][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.746370][ T58] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 330.766492][ T6809] pimreg: entered allmulticast mode [ 330.775457][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.823368][ T6539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.835370][ T58] usb 4-1: Product: syz [ 330.864137][ T58] usb 4-1: Manufacturer: syz [ 330.872887][ T6539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.891404][ T58] usb 4-1: SerialNumber: syz [ 330.911188][ T6539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.956864][ T58] usb 4-1: config 0 descriptor?? [ 330.964999][ T6539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.230298][ T5302] usb 4-1: USB disconnect, device number 7 [ 331.405171][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.464503][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.413790][ T6814] lo: entered allmulticast mode [ 335.969520][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.977417][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.821980][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 337.283873][ T6850] syzkaller0: entered promiscuous mode [ 337.315557][ T6850] syzkaller0: entered allmulticast mode [ 337.361758][ T6850] syzkaller0: create flow: hash 999704697 index 1 [ 337.409413][ T5302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 337.534026][ T6849] syzkaller0: delete flow: hash 999704697 index 1 [ 337.570894][ T5302] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.599109][ T5302] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 337.608838][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.624746][ T5302] usb 5-1: Product: syz [ 337.636325][ T5302] usb 5-1: Manufacturer: syz [ 337.641518][ T5302] usb 5-1: SerialNumber: syz [ 337.648294][ T5302] usb 5-1: config 0 descriptor?? [ 337.695986][ T6858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.861266][ T5302] usb 5-1: USB disconnect, device number 4 [ 339.484909][ T6862] pimreg: entered allmulticast mode [ 339.662084][ T6875] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.344'. [ 339.950423][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 340.115355][ T8] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 340.127202][ T8] usb 4-1: config 0 has no interface number 0 [ 340.141202][ T8] usb 4-1: config 0 interface 79 has no altsetting 0 [ 340.156431][ T8] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 340.166397][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.175125][ T8] usb 4-1: Product: syz [ 340.179389][ T8] usb 4-1: Manufacturer: syz [ 340.184020][ T8] usb 4-1: SerialNumber: syz [ 340.221299][ T8] usb 4-1: config 0 descriptor?? [ 340.232202][ T8] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 340.242133][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 340.247895][ T8] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 340.261494][ T8] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 340.271875][ T8] usb 4-1: media controller created [ 340.278377][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.320942][ T8] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 340.330837][ T8] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 340.468118][ T58] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 340.479276][ T8] rc_core: IR keymap rc-dtt200u not found [ 340.485048][ T8] Registered IR keymap rc-empty [ 340.491541][ T8] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 340.510047][ T8] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 340.534085][ T8] dvb-usb: schedule remote query interval to 300 msecs. [ 340.543645][ T8] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 340.569651][ T8] usb 4-1: USB disconnect, device number 8 [ 340.637402][ T58] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.653332][ T8] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 340.668472][ T58] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 340.681427][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.697839][ T58] usb 2-1: Product: syz [ 340.713137][ T58] usb 2-1: Manufacturer: syz [ 340.719251][ T58] usb 2-1: SerialNumber: syz [ 340.729821][ T58] usb 2-1: config 0 descriptor?? [ 340.939529][ T8] usb 2-1: USB disconnect, device number 9 [ 341.343066][ T29] audit: type=1326 audit(1726929150.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f486f77def9 code=0x0 [ 341.366011][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 341.379181][ T6911] vlan2: entered promiscuous mode [ 341.384262][ T6911] vlan2: entered allmulticast mode [ 341.717295][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 341.974847][ T5464] bridge0: port 3(syz_tun) entered disabled state [ 342.015437][ T5464] syz_tun (unregistering): left allmulticast mode [ 342.022690][ T5464] syz_tun (unregistering): left promiscuous mode [ 342.029189][ T5464] bridge0: port 3(syz_tun) entered disabled state [ 342.158284][ T754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.380970][ T754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.584622][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.590754][ T754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.593111][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 342.614117][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.626692][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.637455][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.646819][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.655549][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.751775][ T754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.812692][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.831661][ T46] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 342.851217][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.867108][ T46] usb 4-1: Product: syz [ 342.881731][ T46] usb 4-1: Manufacturer: syz [ 342.892673][ T46] usb 4-1: SerialNumber: syz [ 342.925799][ T46] usb 4-1: config 0 descriptor?? [ 343.044061][ T754] bridge_slave_1: left allmulticast mode [ 343.050416][ T754] bridge_slave_1: left promiscuous mode [ 343.056167][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.066236][ T754] bridge_slave_0: left allmulticast mode [ 343.073304][ T754] bridge_slave_0: left promiscuous mode [ 343.079195][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.178652][ T46] usb 4-1: USB disconnect, device number 9 [ 343.869756][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.914397][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.949774][ T754] bond0 (unregistering): Released all slaves [ 344.562157][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 344.689399][ T5243] Bluetooth: hci4: command tx timeout [ 344.742545][ T754] hsr_slave_0: left promiscuous mode [ 344.772025][ T754] hsr_slave_1: left promiscuous mode [ 344.809240][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.839266][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.889908][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.897366][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.002735][ T754] veth1_macvtap: left promiscuous mode [ 345.008336][ T754] veth0_macvtap: left promiscuous mode [ 345.014070][ T754] veth1_vlan: left promiscuous mode [ 345.019446][ T754] veth0_vlan: left promiscuous mode [ 345.455079][ T754] pimreg (unregistering): left allmulticast mode [ 346.310847][ T754] team0 (unregistering): Port device team_slave_1 removed [ 346.388879][ T754] team0 (unregistering): Port device team_slave_0 removed [ 346.769819][ T5243] Bluetooth: hci4: command tx timeout [ 346.895341][ T5296] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 347.081770][ T5296] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.102447][ T5296] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 347.124381][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.133670][ T5296] usb 3-1: Product: syz [ 347.142877][ T5296] usb 3-1: Manufacturer: syz [ 347.157256][ T5296] usb 3-1: SerialNumber: syz [ 347.167964][ T5296] usb 3-1: config 0 descriptor?? [ 347.371650][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.379999][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.389486][ T6952] bridge_slave_0: entered allmulticast mode [ 347.396647][ T6952] bridge_slave_0: entered promiscuous mode [ 347.398928][ T5296] usb 3-1: USB disconnect, device number 13 [ 347.457967][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.506313][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.529099][ T6952] bridge_slave_1: entered allmulticast mode [ 347.551306][ T6952] bridge_slave_1: entered promiscuous mode [ 347.697886][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.741939][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.853529][ T6952] team0: Port device team_slave_0 added [ 347.875519][ T6952] team0: Port device team_slave_1 added [ 347.988558][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.002425][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.058506][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.073422][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.095988][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.122305][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.158308][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 348.199199][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 348.313796][ T6952] hsr_slave_0: entered promiscuous mode [ 348.356155][ T6952] hsr_slave_1: entered promiscuous mode [ 348.369018][ T6952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.392913][ T6952] Cannot create hsr debugfs directory [ 348.639287][ T5296] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 348.840942][ T5296] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 348.852625][ T5243] Bluetooth: hci4: command tx timeout [ 348.869327][ T5296] usb 3-1: config 16 has no interfaces? [ 348.874949][ T5296] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 348.899940][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.140381][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.180881][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.252620][ T6952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.291269][ T6952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.304760][ T7041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.331050][ T6952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.346672][ T6952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.354181][ T7041] kvm: pic: non byte read [ 349.379657][ T7041] kvm: pic: level sensitive irq not supported [ 349.379752][ T7041] kvm: pic: non byte read [ 349.572894][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.611470][ T46] usb 3-1: USB disconnect, device number 14 [ 349.648717][ T6952] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.673683][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.680871][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.721459][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.728649][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.856471][ T6952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.916619][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.043768][ T6952] veth0_vlan: entered promiscuous mode [ 350.071521][ T6952] veth1_vlan: entered promiscuous mode [ 350.140562][ T6952] veth0_macvtap: entered promiscuous mode [ 350.165443][ T6952] veth1_macvtap: entered promiscuous mode [ 350.231491][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.262052][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.279266][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.301950][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.339306][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.359539][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.400538][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.439234][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.463121][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.511631][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.556263][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.586601][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.619239][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.654788][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.676207][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.701843][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.739962][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.772188][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.803734][ T6952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.846067][ T6952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.879301][ T6952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.908373][ T6952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.929260][ T5243] Bluetooth: hci4: command tx timeout [ 351.130540][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.158013][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.204216][ T5450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.273531][ T5450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.219251][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 353.412308][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.441381][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 353.463225][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.529443][ T8] usb 2-1: Product: syz [ 353.540649][ T8] usb 2-1: Manufacturer: syz [ 353.561534][ T8] usb 2-1: SerialNumber: syz [ 353.582388][ T8] usb 2-1: config 0 descriptor?? [ 353.899215][ T5286] usb 2-1: USB disconnect, device number 10 [ 354.419381][ T5286] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 354.571931][ T7168] pimreg: entered allmulticast mode [ 354.614199][ T5286] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 354.628748][ T5286] usb 4-1: config 0 has no interface number 0 [ 354.642040][ T5286] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.669468][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.706609][ T5286] usb 4-1: config 0 descriptor?? [ 354.741408][ T5286] cp210x 4-1:0.108: cp210x converter detected [ 355.143806][ T5286] cp210x 4-1:0.108: failed to get vendor val 0x000e size 3: -71 [ 355.173179][ T5286] usb 4-1: cp210x converter now attached to ttyUSB0 [ 355.203310][ T5286] usb 4-1: USB disconnect, device number 10 [ 355.232111][ T5286] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.266272][ T5286] cp210x 4-1:0.108: device disconnected [ 356.699552][ T5286] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.900152][ T5286] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.923575][ T5286] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 356.939191][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.949759][ T5286] usb 4-1: Product: syz [ 356.955236][ T5286] usb 4-1: Manufacturer: syz [ 356.983468][ T5286] usb 4-1: SerialNumber: syz [ 357.001273][ T5286] usb 4-1: config 0 descriptor?? [ 357.220789][ T25] usb 4-1: USB disconnect, device number 11 [ 358.429338][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 358.620767][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.637351][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.654092][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.675876][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.706633][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 358.718809][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 358.762798][ T25] usb 3-1: Product: syz [ 358.773246][ T25] usb 3-1: Manufacturer: syz [ 358.807539][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 358.820025][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 358.838050][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 358.845998][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 359.037623][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.044369][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.050606][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.057220][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.063369][ C1] hrtimer: interrupt took 25880188 ns [ 359.068871][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.075511][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.081825][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.088478][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.094826][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.101442][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.107779][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.114396][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.120673][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.127292][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.133560][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.140180][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.146458][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.153109][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.159575][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 359.166214][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 359.203684][ T25] usb 3-1: USB disconnect, device number 15 [ 359.203770][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 359.961419][ T5283] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 360.151390][ T5283] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.175549][ T5283] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 360.195589][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.219646][ T5283] usb 4-1: Product: syz [ 360.234075][ T5283] usb 4-1: Manufacturer: syz [ 360.249810][ T5283] usb 4-1: SerialNumber: syz [ 360.265627][ T5283] usb 4-1: config 0 descriptor?? [ 360.500986][ T5283] usb 4-1: USB disconnect, device number 12 [ 360.680041][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 360.686613][ T5243] Bluetooth: Wrong link type (-22) [ 360.692529][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 360.699833][ T5243] Bluetooth: Wrong link type (-22) [ 360.705774][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 360.712392][ T5243] Bluetooth: Wrong link type (-22) [ 360.717524][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 360.724736][ T5243] Bluetooth: Wrong link type (-22) [ 360.903047][ T7290] bridge0: port 3(syz_tun) entered blocking state [ 360.923262][ T7290] bridge0: port 3(syz_tun) entered disabled state [ 360.934767][ T7290] syz_tun: entered allmulticast mode [ 360.950002][ T7290] syz_tun: entered promiscuous mode [ 360.963864][ T7290] bridge0: port 3(syz_tun) entered blocking state [ 360.970488][ T7290] bridge0: port 3(syz_tun) entered forwarding state [ 361.945304][ T7315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.457'. [ 361.954835][ T7315] tipc: Invalid UDP bearer configuration [ 361.954906][ T7315] tipc: Enabling of bearer rejected, failed to enable media [ 362.856442][ T7341] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.439280][ T5286] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 363.600775][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.614199][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.634762][ T5286] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.644288][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.668628][ T5286] usb 4-1: config 0 descriptor?? [ 363.893625][ T5286] usbhid 4-1:0.0: can't add hid device: -71 [ 363.911774][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 363.937245][ T5286] usb 4-1: USB disconnect, device number 13 [ 365.871256][ T7400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.362233][ T7417] netlink: 'syz.1.492': attribute type 3 has an invalid length. [ 367.378238][ T7417] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.492'. [ 367.900744][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 367.911404][ T5286] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 367.950628][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 368.114549][ T5286] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.139686][ T5286] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 368.150261][ T7445] bridge0: port 3(syz_tun) entered blocking state [ 368.156659][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.171960][ T7445] bridge0: port 3(syz_tun) entered disabled state [ 368.175391][ T5286] usb 2-1: Product: syz [ 368.178668][ T7445] syz_tun: entered allmulticast mode [ 368.184890][ T5286] usb 2-1: Manufacturer: syz [ 368.203240][ T5286] usb 2-1: SerialNumber: syz [ 368.217236][ T5286] usb 2-1: config 0 descriptor?? [ 368.222222][ T7445] syz_tun: entered promiscuous mode [ 368.226832][ T7445] bridge0: port 3(syz_tun) entered blocking state [ 368.234271][ T7445] bridge0: port 3(syz_tun) entered forwarding state [ 368.446329][ T5286] usb 2-1: USB disconnect, device number 11 [ 370.068973][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 370.295118][ T7466] hsr_slave_1 (unregistering): left promiscuous mode [ 371.519276][ T5286] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 371.673567][ T5286] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.704447][ T5286] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 371.724186][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.744554][ T5286] usb 4-1: Product: syz [ 371.748778][ T5286] usb 4-1: Manufacturer: syz [ 371.759371][ T5286] usb 4-1: SerialNumber: syz [ 371.776550][ T5286] usb 4-1: config 0 descriptor?? [ 372.006616][ T5286] usb 4-1: USB disconnect, device number 14 [ 375.169245][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 375.331680][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.344673][ T25] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 375.379229][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.389475][ T25] usb 2-1: Product: syz [ 375.393722][ T25] usb 2-1: Manufacturer: syz [ 375.398346][ T25] usb 2-1: SerialNumber: syz [ 375.452376][ T25] usb 2-1: config 0 descriptor?? [ 375.695349][ T25] usb 2-1: USB disconnect, device number 12 [ 376.448776][ T7566] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 377.904020][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 378.259312][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 378.289186][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 378.349438][ T5302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 378.565634][ T5302] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.576839][ T5302] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 378.580690][ T25] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 378.595857][ T4621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.605845][ T4621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.613896][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.619371][ T4621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.629198][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.637229][ T5302] usb 4-1: Product: syz [ 378.641512][ T5302] usb 4-1: Manufacturer: syz [ 378.646142][ T5302] usb 4-1: SerialNumber: syz [ 378.655657][ T5302] usb 4-1: config 0 descriptor?? [ 378.668400][ T4621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.677442][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 378.684377][ T25] usb 5-1: Product: syz [ 378.688860][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.723598][ T25] usb 5-1: Manufacturer: syz [ 378.739590][ T25] usb 5-1: SerialNumber: syz [ 378.746371][ T25] usb 5-1: config 0 descriptor?? [ 378.773310][ T7578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.782228][ T7578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.899918][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.906272][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.008183][ T5302] usb 4-1: USB disconnect, device number 15 [ 379.009736][ T7578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 379.079542][ T7578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 379.232089][ T7553] coredump: 1(syz.4.537): written to core: VMAs: 35, size 97345536; core: 59945982 bytes, pos 97353728 [ 379.370752][ T2955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.543897][ T25] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 379.672476][ T2955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.733529][ T25] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 379.756344][ T25] usb 5-1: USB disconnect, device number 5 [ 379.878680][ T2955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.954072][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 380.023456][ T2955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.399851][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.408139][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.456446][ T7599] bridge_slave_0: entered allmulticast mode [ 380.480870][ T7599] bridge_slave_0: entered promiscuous mode [ 380.517482][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.529596][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.547190][ T7599] bridge_slave_1: entered allmulticast mode [ 380.558400][ T7599] bridge_slave_1: entered promiscuous mode [ 380.754267][ T2955] bridge_slave_1: left allmulticast mode [ 380.762984][ T2955] bridge_slave_1: left promiscuous mode [ 380.768749][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.781287][ T4621] Bluetooth: hci5: command tx timeout [ 380.812872][ T2955] bridge_slave_0: left allmulticast mode [ 380.818584][ T2955] bridge_slave_0: left promiscuous mode [ 380.855023][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.240202][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.250058][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.258575][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.266802][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.274657][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 381.282091][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.274567][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.335448][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.366669][ T2955] bond0 (unregistering): Released all slaves [ 382.400142][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.455177][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.650658][ T5286] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 382.830810][ T5286] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.845326][ T5286] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 382.856214][ T5238] Bluetooth: hci5: command tx timeout [ 382.866054][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.877655][ T5286] usb 5-1: Product: syz [ 382.882227][ T5286] usb 5-1: Manufacturer: syz [ 382.886970][ T5286] usb 5-1: SerialNumber: syz [ 382.902971][ T5286] usb 5-1: config 0 descriptor?? [ 383.012082][ T7599] team0: Port device team_slave_0 added [ 383.092681][ T7599] team0: Port device team_slave_1 added [ 383.137965][ T8] usb 5-1: USB disconnect, device number 6 [ 383.339384][ T5238] Bluetooth: hci2: command tx timeout [ 383.700983][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.748626][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.846536][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.019450][ T2955] hsr_slave_0: left promiscuous mode [ 384.030744][ T2955] hsr_slave_1: left promiscuous mode [ 384.037054][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.074998][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.124100][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.140569][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.198816][ T2955] veth1_macvtap: left promiscuous mode [ 384.205382][ T2955] veth0_macvtap: left promiscuous mode [ 384.211178][ T2955] veth1_vlan: left promiscuous mode [ 384.216794][ T2955] veth0_vlan: left promiscuous mode [ 384.929483][ T5238] Bluetooth: hci5: command tx timeout [ 385.086285][ T7669] program syz.1.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.187731][ T7671] mmap: syz.1.572 (7671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 385.312728][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 385.407705][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 385.409402][ T5238] Bluetooth: hci2: command tx timeout [ 385.911676][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 385.979856][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.986845][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.013403][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.101999][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.123000][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 386.146994][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.155614][ T8] usb 2-1: Product: syz [ 386.161375][ T8] usb 2-1: Manufacturer: syz [ 386.166099][ T8] usb 2-1: SerialNumber: syz [ 386.173036][ T8] usb 2-1: config 0 descriptor?? [ 386.270445][ T7599] hsr_slave_0: entered promiscuous mode [ 386.284619][ T7599] hsr_slave_1: entered promiscuous mode [ 386.300597][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.308221][ T7599] Cannot create hsr debugfs directory [ 386.392596][ T5302] usb 2-1: USB disconnect, device number 13 [ 386.766587][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 386.905245][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.009418][ T5238] Bluetooth: hci5: command tx timeout [ 387.143428][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.291592][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.518074][ T5238] Bluetooth: hci2: command tx timeout [ 387.692484][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.709270][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.716616][ T7631] bridge_slave_0: entered allmulticast mode [ 387.734329][ T7631] bridge_slave_0: entered promiscuous mode [ 387.811572][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.046461][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 388.160941][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.175002][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.182514][ T7631] bridge_slave_1: entered allmulticast mode [ 388.191563][ T7631] bridge_slave_1: entered promiscuous mode [ 388.331750][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.411624][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.522004][ T7631] team0: Port device team_slave_0 added [ 388.593627][ T7631] team0: Port device team_slave_1 added [ 388.715896][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.723945][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.751883][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.763636][ T2955] bridge_slave_1: left allmulticast mode [ 388.769866][ T2955] bridge_slave_1: left promiscuous mode [ 388.776500][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.785349][ T2955] bridge_slave_0: left allmulticast mode [ 388.792463][ T2955] bridge_slave_0: left promiscuous mode [ 388.801001][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.219061][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.232503][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.246079][ T2955] bond0 (unregistering): Released all slaves [ 389.275410][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.304213][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.366273][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.425694][ T7599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.437390][ T7599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.458086][ T7599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.579557][ T5238] Bluetooth: hci2: command tx timeout [ 389.587875][ T7599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.670600][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.687305][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.702601][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.709773][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.774066][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.781245][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.852827][ T7631] hsr_slave_0: entered promiscuous mode [ 389.888016][ T7631] hsr_slave_1: entered promiscuous mode [ 389.904817][ T7631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.925201][ T7631] Cannot create hsr debugfs directory [ 390.243738][ T2955] hsr_slave_0: left promiscuous mode [ 390.244838][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.244888][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.247492][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.247526][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.300173][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 390.304481][ T2955] veth1_macvtap: left promiscuous mode [ 390.304549][ T2955] veth0_macvtap: left promiscuous mode [ 390.304671][ T2955] veth1_vlan: left promiscuous mode [ 390.304760][ T2955] veth0_vlan: left promiscuous mode [ 390.452338][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.463136][ T25] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.463172][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.463198][ T25] usb 2-1: Product: syz [ 390.463217][ T25] usb 2-1: Manufacturer: syz [ 390.463236][ T25] usb 2-1: SerialNumber: syz [ 390.465667][ T25] usb 2-1: config 0 descriptor?? [ 390.670683][ T25] usb 2-1: USB disconnect, device number 14 [ 390.686008][ T2955] pimreg (unregistering): left allmulticast mode [ 391.900318][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 392.013054][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 392.855349][ T7599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.881833][ T7599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.050304][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.440817][ T7599] veth0_vlan: entered promiscuous mode [ 393.467167][ T7599] veth1_vlan: entered promiscuous mode [ 393.549343][ T5288] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 393.688612][ T7599] veth0_macvtap: entered promiscuous mode [ 393.725320][ T7599] veth1_macvtap: entered promiscuous mode [ 393.759840][ T5288] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.784744][ T5288] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 393.815880][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.849270][ T5288] usb 5-1: Product: syz [ 393.858696][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.868096][ T5288] usb 5-1: Manufacturer: syz [ 393.876868][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.894552][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.906444][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.926746][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.943945][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.954183][ T5288] usb 5-1: SerialNumber: syz [ 393.956697][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.002328][ T5288] usb 5-1: config 0 descriptor?? [ 394.054700][ T7631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.086167][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.133031][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.153235][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.192719][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.219356][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.244073][ T25] usb 5-1: USB disconnect, device number 7 [ 394.262012][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.277738][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.314839][ T7599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.333081][ T7599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.343505][ T7599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.364394][ T7599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.391144][ T7631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.423621][ T7631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.440557][ T7631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.640840][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.669006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.765739][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.780612][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.979729][ T7631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.042205][ T7631] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.084319][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.091521][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.133978][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.141210][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.286165][ T7631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.394466][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.533514][ T7631] veth0_vlan: entered promiscuous mode [ 395.553150][ T7631] veth1_vlan: entered promiscuous mode [ 395.630634][ T7631] veth0_macvtap: entered promiscuous mode [ 395.670192][ T7631] veth1_macvtap: entered promiscuous mode [ 395.705219][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.744324][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.779207][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.779235][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.779256][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.779274][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.779293][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.779311][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.780813][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.791996][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.792023][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.792039][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.792057][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.792072][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.792089][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.792112][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.792130][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.793329][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.797310][ T7631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.797346][ T7631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.797376][ T7631] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.797404][ T7631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.841483][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 396.142725][ T7871] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 396.152568][ T7871] team0: Port device netdevsim0 added [ 396.172968][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.173012][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.250793][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.250821][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.798251][ T7902] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 397.851594][ T7902] team0: Port device netdevsim0 added [ 398.594595][ T7930] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 398.645090][ T7930] team0: Port device netdevsim0 added [ 399.006520][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 399.988451][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 401.164992][ T8044] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 401.917638][ T8078] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 402.695836][ T8111] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 402.777413][ T8111] team0: Port device netdevsim0 added [ 403.526943][ T8149] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 404.170282][ T8181] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 404.831647][ T8210] netlink: 'syz.1.775': attribute type 10 has an invalid length. [ 407.124416][ T8238] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 408.259521][ T8273] netlink: 'syz.3.804': attribute type 10 has an invalid length. [ 408.471989][ T8277] pimreg: entered allmulticast mode [ 409.435567][ T8297] netlink: 'syz.2.817': attribute type 10 has an invalid length. [ 516.129076][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.136173][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7631/1:b..l [ 516.144827][ C1] rcu: (detected by 1, t=10503 jiffies, g=35185, q=1318802 ncpus=2) [ 516.152923][ C1] task:syz-executor state:R running task stack:20856 pid:7631 tgid:7631 ppid:7625 flags:0x00000000 [ 516.165940][ C1] Call Trace: [ 516.169278][ C1] [ 516.172273][ C1] __schedule+0x1893/0x4b50 [ 516.176881][ C1] ? __pfx___schedule+0x10/0x10 [ 516.181778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 516.187810][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 516.193136][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 516.198291][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 516.204063][ C1] irqentry_exit+0x5e/0x90 [ 516.208566][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.214596][ C1] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 516.220354][ C1] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 516.240002][ C1] RSP: 0018:ffffc90004a9f808 EFLAGS: 00000206 [ 516.246111][ C1] RAX: df8e75c37edaa500 RBX: 0000000000000001 RCX: 0000000080000000 [ 516.254127][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ae940 RDI: ffffffff8c60e0c0 [ 516.262133][ C1] RBP: 0000000000000002 R08: ffffffff8208c25e R09: 1ffffffff2849ef0 [ 516.270138][ C1] R10: dffffc0000000000 R11: fffffbfff2849ef1 R12: 0000000000000246 [ 516.278319][ C1] R13: ffff8880276dda00 R14: 00000000ffffffff R15: ffffffff8e9389e0 [ 516.286329][ C1] ? page_ext_get+0xee/0x2a0 [ 516.290969][ C1] ? page_ext_get+0x20/0x2a0 [ 516.295626][ C1] page_ext_get+0x192/0x2a0 [ 516.300167][ C1] __reset_page_owner+0x30/0x430 [ 516.305150][ C1] free_unref_page+0xd22/0xea0 [ 516.309963][ C1] __slab_free+0x31b/0x3d0 [ 516.314438][ C1] ? __phys_addr+0xba/0x170 [ 516.318985][ C1] qlist_free_all+0x9e/0x140 [ 516.324007][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 516.329507][ C1] __kasan_slab_alloc+0x23/0x80 [ 516.334397][ C1] ? tomoyo_encode+0x26f/0x540 [ 516.339207][ C1] __kmalloc_noprof+0x1a6/0x400 [ 516.344189][ C1] tomoyo_encode+0x26f/0x540 [ 516.348828][ C1] tomoyo_realpath_from_path+0x59e/0x5e0 [ 516.354528][ C1] tomoyo_path_number_perm+0x23a/0x880 [ 516.360034][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 516.365116][ C1] ? tomoyo_path_number_perm+0x208/0x880 [ 516.370797][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 516.376959][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 516.383080][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.389467][ C1] security_file_ioctl+0xc6/0x2a0 [ 516.394535][ C1] __se_sys_ioctl+0x47/0x170 [ 516.399165][ C1] do_syscall_64+0xf3/0x230 [ 516.403719][ C1] ? clear_bhb_loop+0x35/0x90 [ 516.408449][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.414387][ C1] RIP: 0033:0x7f6f5bd7dafb [ 516.418845][ C1] RSP: 002b:00007f6f5c05fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.427308][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6f5bd7dafb [ 516.435318][ C1] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 516.443331][ C1] RBP: 00007f6f5c05fdec R08: 0000000000000000 R09: 00007f6f5c05fb07 [ 516.451336][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 516.459348][ C1] R13: 00000000000641e6 R14: 00000000000641b6 R15: 00007f6f5c05fe40 [ 516.467393][ C1] [ 516.470449][ C1] rcu: rcu_preempt kthread starved for 7701 jiffies! g35185 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 516.481764][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 516.491759][ C1] rcu: RCU grace-period kthread stack dump: [ 516.497840][ C1] task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 516.509628][ C1] Call Trace: [ 516.513041][ C1] [ 516.516006][ C1] __schedule+0x1893/0x4b50 [ 516.520572][ C1] ? __pfx___schedule+0x10/0x10 [ 516.525466][ C1] ? __pfx_lock_release+0x10/0x10 [ 516.530534][ C1] ? __asan_memset+0x23/0x50 [ 516.535166][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 516.541014][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.547390][ C1] ? schedule+0x90/0x320 [ 516.551675][ C1] schedule+0x14b/0x320 [ 516.555903][ C1] schedule_timeout+0x1be/0x310 [ 516.560820][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 516.566238][ C1] ? __pfx_process_timeout+0x10/0x10 [ 516.571610][ C1] ? prepare_to_swait_event+0x330/0x350 [ 516.577206][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 516.582087][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 516.587335][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 516.593524][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 516.598843][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.604812][ C1] ? finish_swait+0xd4/0x1e0 [ 516.609468][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 516.614202][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.619433][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 516.625373][ C1] ? __kthread_parkme+0x169/0x1d0 [ 516.630449][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.635691][ C1] kthread+0x2f0/0x390 [ 516.639804][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 516.645037][ C1] ? __pfx_kthread+0x10/0x10 [ 516.649665][ C1] ret_from_fork+0x4b/0x80 [ 516.654122][ C1] ? __pfx_kthread+0x10/0x10 [ 516.658756][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.663581][ C1] [ 516.666628][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 516.672976][ C1] Sending NMI from CPU 1 to CPUs 0: [ 516.678234][ C0] NMI backtrace for cpu 0 [ 516.678265][ C0] CPU: 0 UID: 0 PID: 5302 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 516.678287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 516.678298][ C0] Workqueue: events nsim_dev_trap_report_work [ 516.678320][ C0] RIP: 0010:ip_finish_output2+0xff0/0x1390 [ 516.678348][ C0] Code: 04 25 28 00 00 00 48 3b 84 24 e0 00 00 00 0f 85 55 03 00 00 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc <83> fb 0a 75 47 e8 86 3a 78 f7 49 81 c4 a4 00 00 00 4c 89 ff 4c 89 [ 516.678364][ C0] RSP: 0018:ffffc90000006f00 EFLAGS: 00000293 [ 516.678378][ C0] RAX: 0000000000000100 RBX: 0000000000000000 RCX: dffffc0000000000 [ 516.678391][ C0] RDX: 0000000000000002 RSI: ffffffff8fd8f180 RDI: 0000000000000000 [ 516.678403][ C0] RBP: ffffc90000007040 R08: 0000000000000001 R09: ffffffff8a1c7a59 [ 516.678415][ C0] R10: 0000000000000002 R11: ffff8880249b3c00 R12: ffff8881ecf20900 [ 516.678427][ C0] R13: 0000000000000010 R14: ffffffff8a1c78ff R15: ffff888078d98000 [ 516.678441][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 516.678456][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.678469][ C0] CR2: 00007f1b92826866 CR3: 000000007b088000 CR4: 00000000003506f0 [ 516.678484][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.678495][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.678524][ C0] Call Trace: [ 516.678530][ C0] [ 516.678538][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 516.678559][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 516.678589][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.678608][ C0] ? nmi_handle+0x2a/0x5a0 [ 516.678633][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 516.678658][ C0] ? nmi_handle+0x14f/0x5a0 [ 516.678674][ C0] ? nmi_handle+0x2a/0x5a0 [ 516.678693][ C0] ? ip_finish_output2+0xff0/0x1390 [ 516.678718][ C0] ? default_do_nmi+0x63/0x160 [ 516.678738][ C0] ? exc_nmi+0x123/0x1f0 [ 516.678757][ C0] ? end_repeat_nmi+0xf/0x53 [ 516.678783][ C0] ? ip_finish_output2+0x45f/0x1390 [ 516.678809][ C0] ? ip_finish_output2+0x5b9/0x1390 [ 516.678835][ C0] ? ip_finish_output2+0xff0/0x1390 [ 516.678861][ C0] ? ip_finish_output2+0xff0/0x1390 [ 516.678887][ C0] ? ip_finish_output2+0xff0/0x1390 [ 516.678912][ C0] [ 516.678918][ C0] [ 516.678925][ C0] ? nf_hook+0x9e/0x450 [ 516.678950][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 516.678977][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 516.679002][ C0] ? __ip_finish_output+0x349/0x400 [ 516.679029][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 516.679063][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 516.679088][ C0] ? synproxy_pernet+0x45/0x270 [ 516.679119][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 516.679147][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 516.679173][ C0] ? nf_ip_checksum+0x13a/0x500 [ 516.679200][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 516.679227][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 516.679251][ C0] ? validate_chain+0x11e/0x5920 [ 516.679272][ C0] ? __pfx_validate_chain+0x10/0x10 [ 516.679296][ C0] nft_do_chain+0x4ad/0x1da0 [ 516.679327][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 516.679351][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 516.679388][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 516.679418][ C0] nft_do_chain_inet+0x418/0x6b0 [ 516.679444][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.679467][ C0] ? ipt_do_table+0x312/0x1860 [ 516.679499][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 516.679522][ C0] nf_hook_slow+0xc3/0x220 [ 516.679543][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.679562][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.679581][ C0] NF_HOOK+0x29e/0x450 [ 516.679599][ C0] ? NF_HOOK+0x9a/0x450 [ 516.679616][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 516.679634][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 516.679656][ C0] ? ip_rcv_finish+0x406/0x560 [ 516.679674][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.679692][ C0] NF_HOOK+0x3a4/0x450 [ 516.679721][ C0] ? __lock_acquire+0x1384/0x2050 [ 516.679747][ C0] ? NF_HOOK+0x9a/0x450 [ 516.679763][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 516.679778][ C0] ? ip_rcv_core+0x801/0xd10 [ 516.679796][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 516.679817][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 516.679834][ C0] __netif_receive_skb+0x2bf/0x650 [ 516.679855][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 516.679881][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 516.679899][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 516.679925][ C0] ? __pfx_lock_release+0x10/0x10 [ 516.679950][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 516.679978][ C0] process_backlog+0x662/0x15b0 [ 516.680001][ C0] ? process_backlog+0x33b/0x15b0 [ 516.680026][ C0] ? __pfx_process_backlog+0x10/0x10 [ 516.680046][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 516.680072][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.680100][ C0] __napi_poll+0xcb/0x490 [ 516.680127][ C0] net_rx_action+0x89b/0x1240 [ 516.680158][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 516.680179][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 516.680219][ C0] handle_softirqs+0x2c5/0x980 [ 516.680244][ C0] ? do_softirq+0x11b/0x1e0 [ 516.680267][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 516.680294][ C0] do_softirq+0x11b/0x1e0 [ 516.680315][ C0] [ 516.680320][ C0] [ 516.680327][ C0] ? __pfx_do_softirq+0x10/0x10 [ 516.680349][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 516.680376][ C0] ? rcu_is_watching+0x15/0xb0 [ 516.680396][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 516.680419][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 516.680436][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 516.680459][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 516.680482][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 516.680501][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 516.680525][ C0] ? process_scheduled_works+0x976/0x1850 [ 516.680549][ C0] process_scheduled_works+0xa63/0x1850 [ 516.680585][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.680613][ C0] ? assign_work+0x364/0x3d0 [ 516.680637][ C0] worker_thread+0x870/0xd30 [ 516.680668][ C0] ? __kthread_parkme+0x169/0x1d0 [ 516.680694][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.680719][ C0] kthread+0x2f0/0x390 [ 516.680734][ C0] ? __pfx_worker_thread+0x10/0x10 [ 516.680758][ C0] ? __pfx_kthread+0x10/0x10 [ 516.680774][ C0] ret_from_fork+0x4b/0x80 [ 516.680798][ C0] ? __pfx_kthread+0x10/0x10 [ 516.680814][ C0] ret_from_fork_asm+0x1a/0x30 [ 516.680845][ C0]