last executing test programs: 5.604860664s ago: executing program 0 (id=2307): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r0 = syz_open_dev$video(&(0x7f0000000500), 0x7, 0x12481) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000840)) r1 = syz_usb_connect$hid(0x3, 0x0, 0xfffffffffffffffc, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)={0x0, r9, r10}) close_range(r3, 0xffffffffffffffff, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r11, 0x6, 0x10, &(0x7f0000000100)=0x6, 0x4) listen(r11, 0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) syz_usb_control_io$hid(r12, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00231b0000001b011e1b12648f9220287889bf2ae817d2188dc8e458e4f7b8b517"], &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f00000001c0)={0x0, 0x22, 0x10, {[@main=@item_012={0x1, 0x0, 0x9, '\v'}, @main=@item_012={0x1, 0x0, 0xc, "bd"}, @global=@item_4={0x3, 0x1, 0x0, "7ee5fbe7"}, @local=@item_4={0x3, 0x2, 0x9, "c2316710"}, @main=@item_012={0x1, 0x0, 0x9, "a4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x3, 0x1, {0x22, 0xc83}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000eb1000000ca864010abbf98faaaf6f5d2424f57dadfa7c5d595f699b7d4f0413c36268166806b1365f0224f83c3792240a821b72b0a311625f62050808d549904bfb68394c4512816f9e3f192cf1930a4fc5ab9ba504a3cf956b328d8f43458cfb005245e84044d142e763a1186a1080000009c903aa902f0e1c346e1892389c2a466b9ee1078e05b984ba0255c0a5b07cae10c598a033fe0f6e57952d13b125977dbb33429b272b2897fd3f8aebde3c0ef87249ade"], &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xbb}, &(0x7f00000003c0)={0x20, 0x1, 0x3b, "d2025f1e32431f6726596b8d4bfea72e64289e55c204f5c8c1e7378759509752721228908830907e0eda1942af665a957f103319a6f222d42be0a3"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x5e}}) r14 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0, @ANYRESDEC=r11], 0xfffffdef}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.542608937s ago: executing program 1 (id=2308): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000040000000002000100000000fffffffb1600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 5.429552108s ago: executing program 1 (id=2309): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/120, 0x78}, {&(0x7f0000001100)=""/243, 0xf3}, {&(0x7f0000001200)=""/178, 0xb2}], 0x5, 0x200, 0x8) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001340)={0x2, 0x6}, 0x2) r1 = open$dir(&(0x7f0000001380)='./file0\x00', 0x14400, 0x8) r2 = openat(r1, &(0x7f00000013c0)='./file0\x00', 0x40c1, 0x18c) openat$vmci(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000001480)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000014c0)={0x2, r4}) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000001500)=""/144, &(0x7f00000015c0)=0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001680)={'ip6tnl0\x00', &(0x7f0000001600)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x2, 0xff, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7800, 0x5, 0x1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0xf28, 0x1, 0x1000, 0x80, r2, 0xffffffff, '\x00', r5, r2, 0x2, 0x1, 0x2, 0xb, @void, @value, @void, @value}, 0x50) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001740)={{r6}, 0x9, 0x63, 0xffffffffffffffff}) r8 = syz_open_dev$sg(&(0x7f0000001780), 0x0, 0x200000) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f00000017c0)) close_range(0xffffffffffffffff, r1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000001800)={0x1, 0x0, 0x2, 0x2, {0x80, 0x4, 0x5, 0x3}}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x1c, &(0x7f0000001840)=0x1, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x74, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000019c0)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001a00)='pids.current\x00', 0x0, 0x0) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r13, 0x40045612, &(0x7f0000001a80)=0x2) syz_io_uring_setup(0x141a, &(0x7f0000001ac0)={0x0, 0x9506, 0x20, 0x1, 0x389, 0x0, r12}, &(0x7f0000001b40), &(0x7f0000001b80)=0x0) r15 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_io_uring_submit(r9, r14, &(0x7f0000001c00)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[r15, r8], 0x2}) 4.562656611s ago: executing program 1 (id=2320): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x23939904284bff71, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@deltaction={0x30, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x30}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000010002104000001060100000000000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) flock(0xffffffffffffffff, 0x5) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) 4.133618364s ago: executing program 2 (id=2322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a050000000000000000000100000808000240000000010900010073797a300000000014000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x200008f5}, 0x4000000) 4.088792729s ago: executing program 3 (id=2323): creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0x20) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) splice(r1, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x808, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x32000000, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffd}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) unshare(0x2060000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f0000000140), 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 4.0119017s ago: executing program 2 (id=2324): memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) 3.812765674s ago: executing program 2 (id=2325): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fffffc300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) 3.605693732s ago: executing program 2 (id=2326): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0xfff5, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 3.475829642s ago: executing program 2 (id=2327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xa3) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a531cef5"}]}}, 0x0}, 0x0) 3.101802636s ago: executing program 4 (id=2329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x1f}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x900000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x142098}) 2.813505678s ago: executing program 4 (id=2330): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x26}}) socket$netlink(0x10, 0x3, 0x10) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.534296743s ago: executing program 0 (id=2331): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x800000000000000}, 0x0) 2.323982506s ago: executing program 0 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3401000010000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000004100000084001680800001807c000c"], 0x134}}, 0x4008000) 2.271427888s ago: executing program 4 (id=2333): shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) syz_io_uring_setup(0x93, &(0x7f0000000440)={0x0, 0xdd31, 0x2, 0x3, 0x15b}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xb, 0x30}, 0xc) unshare(0xa000080) 2.099573727s ago: executing program 4 (id=2334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2082, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f00000000c0)=0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008801) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e7365740000280002800800034000000000080009b7b619e22243483c240adf04400000000f08000940000000030900010073797a32000000000900010073797a30000000000900020073797a32000000001400000100000000"], 0x90}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0xfffffff0, 0x0}], 0x1, 0x0) (async, rerun: 64) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1b, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) (async) r7 = io_uring_setup(0x55ec, &(0x7f0000000100)={0x0, 0xfffffffd, 0x100, 0x8000002, 0xffffffff}) io_uring_enter(r7, 0x4155, 0xd1dc, 0x7, 0x0, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_send_signal(r10, 0x21, 0x0, 0x4) 2.017754426s ago: executing program 0 (id=2335): memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) 1.832941894s ago: executing program 0 (id=2336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="d9f0f20f1ade0f322ed9f60cdc0f1d7cfe0f20e06635040000000f22e03e817c1057000f01c366b80500000066b9490000000f01c1", 0x35}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000007f000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000004c0)=[@cr4={0x1, 0x14242e}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x4b00000000000000) 1.697410162s ago: executing program 2 (id=2337): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000180)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x4e24, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x2, 0x80, 0xfffffffffffffffc}, {0x5, 0x0, 0x8}, {0x7fffffff}, 0x70bd2d, 0x34ff, 0x2, 0x4}}, 0xf0}}, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_io_uring_setup(0x2000010e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@deltfilter={0x43c, 0x2d, 0xc31, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x5, 0x38, 0x2, 0x9, 0x6, 0xd, 0xccd0, 0x6, 0x51d, 0x5, 0x0, 0x7, 0x101, 0x1, 0x3, 0x6, 0x1, 0x4, 0xba, 0x4, 0xffffffff, 0x0, 0x8000, 0x2, 0xb730, 0x10, 0x3, 0x7, 0x1ab, 0x1, 0x0, 0x5, 0x0, 0x7f, 0x8, 0x10000, 0x80000000, 0x3, 0xb8a, 0x58, 0x7, 0x100, 0x4, 0x2, 0x6, 0x2, 0x9, 0x6, 0x1, 0x5, 0x6, 0x171d, 0x1, 0x4, 0x9, 0x5, 0x4, 0xfb, 0x15dba3c, 0x0, 0x7, 0xe7, 0x4, 0xc, 0x1ff, 0x6, 0x6, 0x8, 0x400, 0xffffffff, 0x2, 0x0, 0x2, 0x28e, 0x40, 0x1a6d, 0x8, 0x7, 0x401, 0x7f, 0x8, 0x146, 0x6, 0x81, 0x884, 0x8, 0x5, 0x7, 0x80, 0xffff, 0x3, 0x4, 0x26, 0x9, 0x80, 0x3ff, 0x3, 0x7fff, 0x9, 0x9, 0x7, 0x2, 0x40, 0x7, 0x88af, 0x2, 0x5, 0x4, 0x6b, 0x0, 0x3ff, 0x1ff, 0xeaa, 0x8, 0x8, 0x1, 0x1, 0x5, 0x0, 0xc6, 0xff, 0x6, 0x1000, 0x0, 0x9, 0x6, 0x30eb, 0xfffffffc, 0x8, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x7, 0xdc, 0x4, 0xff, 0x40, 0x81, 0xa4bf, 0x8, 0x2, 0x6, 0x4, 0x1, 0x101, 0x5, 0x0, 0x0, 0x7, 0xff, 0x3ff, 0x2, 0x5125, 0x4545df64, 0xc, 0x2, 0x7, 0x7, 0x10000, 0x0, 0x3, 0x1, 0x8, 0x2, 0x9, 0x7, 0x5, 0x40, 0xcea0, 0x2, 0x1, 0x400, 0x0, 0x4, 0x1, 0x400, 0x9, 0x1, 0x8, 0x0, 0x8, 0x7, 0xb80, 0x0, 0x4b65, 0xffff, 0x4a520182, 0x7fffffff, 0x5, 0x3, 0x101, 0xfffffff8, 0x0, 0x9, 0x1, 0x5, 0x7ff, 0xfffffffc, 0x5, 0x3, 0x2, 0x1000, 0x9, 0x9, 0x5, 0x5, 0x6, 0x2, 0x9, 0x2, 0x6, 0xa89, 0xd, 0x2, 0x40, 0x2400, 0x6, 0x3, 0x81, 0x0, 0x3, 0x6, 0x8, 0xc4fe, 0x4, 0x8, 0x1, 0x4, 0xb50, 0x240, 0x6, 0x7, 0x5, 0xbfa, 0x80000001, 0xfffffffc, 0x8000, 0x5, 0x6, 0x1, 0x34, 0x6, 0x1ff, 0xfffffbe5, 0x0, 0x8001, 0x6, 0x1, 0x8, 0x0, 0x7, 0xae]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x6, 0xffff, {{0x19, 0x4, 0x3, 0x30, 0x64, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty, {[@cipso={0x86, 0x23, 0x7ffffffffffffffd, [{0x6, 0x8, "2facae1bdfad"}, {0x7, 0x5, "f880ec"}, {0x6, 0x10, "a0adbd78a2f338012662c2b21bb7"}]}, @timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x6, [{@private=0xa010100, 0x3}, {@multicast2, 0x7}, {@broadcast, 0x9a}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcdd}]}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x15, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000280)=""/239, 0xef) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r7 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000340)=0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet(0x2, 0x3, 0x10) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x85f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) io_pgetevents(r8, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={0x0}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, 0x0, 0x240008d0) 1.481689656s ago: executing program 0 (id=2338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x0, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000100001"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000004800010038b97000f4dbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000500)='d', 0x1}], 0x1, 0x9, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000000)) 1.427997933s ago: executing program 4 (id=2339): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x800000, 0x0, 0xffffffff, 0x5, 0xa}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x3, 0x0, 0x2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x57574410}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2c, 0xf8, 0x4, 0x10, 0x6cd, 0x110, 0x53f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe9, 0xbd, 0xfa, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x800000, 0x0, 0xffffffff, 0x5, 0xa}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x3, 0x0, 0x2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x57574410}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2c, 0xf8, 0x4, 0x10, 0x6cd, 0x110, 0x53f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe9, 0xbd, 0xfa, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0) (async) 1.187348169s ago: executing program 1 (id=2340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2f54}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.090753762s ago: executing program 1 (id=2341): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18007fffffff00000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.033528713s ago: executing program 1 (id=2342): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x6}, 0x1}) r2 = gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) creat(0x0, 0x1de) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_open_dev$dri(0x0, 0xab, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, &(0x7f0000000180)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0x38, r7, 0x10ada85e65c25349, 0x70bd27, 0x0, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}, 0x1, 0xffffff97, 0x0, 0x8040818}, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x1, 0x20000) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) 905.531713ms ago: executing program 3 (id=2343): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0xc040480) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (fail_nth: 1) 484.831153ms ago: executing program 3 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000200038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 225.700014ms ago: executing program 3 (id=2345): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 208.687765ms ago: executing program 3 (id=2346): memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) 9.616533ms ago: executing program 4 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5000000010000104000000002100000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000500", @ANYRES32=0x0, @ANYBLOB="08000a00a841423f61fc559d6c58072391274aae6732da0b0f0c65aa64f45cfbf8b106eb3fc1a5cce59eba225ee4f3060bdf5775115e04d6a7b0a31d25acd9fa628f940014f537803185ac70bd329f7032eced14c5e3ea8bb5dcea680d1391025251a851553db26ce29b5889fc75defae5e39b3d74e66dc348bb52be9bfd460bfce236e8a53effcb1c34d685d5733e56ceba88178622b0cffcd89b88d464fd918b2b83431d46c19944e38a"], 0x50}}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 3 (id=2348): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x2800, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) kernel console output (not intermixed with test programs): ain item tag 0x0 [ 603.150183][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.157655][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.165117][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.172552][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.180323][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.187808][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.198078][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.205555][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.213008][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.220777][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.228582][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.236036][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.243480][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.250896][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.258326][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.266000][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.282150][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.293278][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.300779][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.308227][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.315820][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.323555][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.331376][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.338879][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.346353][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.354103][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.361530][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.368986][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.377118][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.381891][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.384653][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.401421][ T5298] hid-generic 000A:0008:0005.0021: unknown main item tag 0x0 [ 603.413010][ T5298] hid-generic 000A:0008:0005.0021: hidraw0: HID vc.aa Device [syz1] on syz1 [ 603.425475][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.438627][T15604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.509706][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.553007][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.575557][T15604] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.638961][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.646314][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.687670][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.694867][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.752379][ T5235] Bluetooth: hci1: command tx timeout [ 603.798824][ T5235] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 603.803215][T15760] geneve2: entered promiscuous mode [ 603.812511][T15760] geneve2: entered allmulticast mode [ 603.952674][T15604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.049655][T15604] veth0_vlan: entered promiscuous mode [ 604.063668][ T5282] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 604.088519][T15604] veth1_vlan: entered promiscuous mode [ 604.147730][T15604] veth0_macvtap: entered promiscuous mode [ 604.180706][T15604] veth1_macvtap: entered promiscuous mode [ 604.196664][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.207538][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.217510][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.228062][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.238131][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.248688][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.259029][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.269843][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.281116][T15604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.302054][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.314802][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 604.320048][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.331538][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.345335][ T5282] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 604.355223][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.364066][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.382277][ T5282] usb 4-1: Product: syz [ 604.386473][ T5282] usb 4-1: Manufacturer: syz [ 604.391099][ T5282] usb 4-1: SerialNumber: syz [ 604.402657][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.423722][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.435169][ T5282] usb 4-1: config 0 descriptor?? [ 604.451270][ T5282] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 604.474743][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.484821][T15604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.495436][T15604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.513221][T15604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.531154][T15604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.547361][T15604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.559229][T15604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.575910][T15604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.734299][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.759588][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.804114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.812379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.928533][T15799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.935882][T15799] IPv6: NLM_F_CREATE should be set when creating new route [ 604.979553][T15799] netlink: 'syz.0.2154': attribute type 27 has an invalid length. [ 605.134023][T15799] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.141499][T15799] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.389804][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 605.467010][T15813] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 605.557094][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 605.607133][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.668902][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.733746][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.771028][T15799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.857337][ T5282] gspca_sunplus: reg_r err -32 [ 605.881203][T15799] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.893222][T15799] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.902096][T15799] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.911080][T15799] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.017748][T15825] geneve2: entered promiscuous mode [ 606.023183][T15825] geneve2: entered allmulticast mode [ 606.134696][T15830] FAULT_INJECTION: forcing a failure. [ 606.134696][T15830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.152918][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz.1.2158 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 606.163802][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 606.173883][T15830] Call Trace: [ 606.177188][T15830] [ 606.180142][T15830] dump_stack_lvl+0x241/0x360 [ 606.184854][T15830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.190084][T15830] ? __pfx__printk+0x10/0x10 [ 606.194720][T15830] ? snprintf+0xda/0x120 [ 606.198997][T15830] should_fail_ex+0x3b0/0x4e0 [ 606.203725][T15830] _copy_to_user+0x2f/0xb0 [ 606.208182][T15830] simple_read_from_buffer+0xca/0x150 [ 606.213613][T15830] proc_fail_nth_read+0x1e9/0x250 [ 606.218684][T15830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.224269][T15830] ? rw_verify_area+0x55e/0x6f0 [ 606.229143][T15830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.234705][T15830] vfs_read+0x201/0xbc0 [ 606.238877][T15830] ? __pfx_lock_release+0x10/0x10 [ 606.243927][T15830] ? __pfx_vfs_read+0x10/0x10 [ 606.248614][T15830] ? __fget_files+0x3f3/0x470 [ 606.253315][T15830] ? fdget_pos+0x24e/0x320 [ 606.257736][T15830] ksys_read+0x183/0x2b0 [ 606.261975][T15830] ? __pfx_ksys_read+0x10/0x10 [ 606.266740][T15830] ? do_syscall_64+0x100/0x230 [ 606.271523][T15830] ? do_syscall_64+0xb6/0x230 [ 606.276209][T15830] do_syscall_64+0xf3/0x230 [ 606.280719][T15830] ? clear_bhb_loop+0x35/0x90 [ 606.285425][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.291335][T15830] RIP: 0033:0x7fc81457ca3c [ 606.295761][T15830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 606.315371][T15830] RSP: 002b:00007fc81531d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.323794][T15830] RAX: ffffffffffffffda RBX: 00007fc814735f80 RCX: 00007fc81457ca3c [ 606.331781][T15830] RDX: 000000000000000f RSI: 00007fc81531d0a0 RDI: 0000000000000006 [ 606.339761][T15830] RBP: 00007fc81531d090 R08: 0000000000000000 R09: 0000000000000000 [ 606.347729][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.355699][T15830] R13: 0000000000000000 R14: 00007fc814735f80 R15: 00007fc81485fa28 [ 606.363678][T15830] [ 606.368659][T15833] netlink: 'syz.3.2147': attribute type 32 has an invalid length. [ 606.396295][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2147'. [ 606.690945][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.726847][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.796185][T15850] input: syz0 as /devices/virtual/input/input89 [ 606.917824][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.931322][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.012392][ T5282] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 607.012690][ T5286] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 607.183862][ T5286] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 607.192964][ T5286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.203264][ T5286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 607.218418][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.231302][ T5286] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 607.240591][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 607.248738][ T5286] usb 2-1: Product: syz [ 607.253135][ T5286] usb 2-1: Manufacturer: syz [ 607.263909][ T5286] cdc_wdm 2-1:1.0: skipping garbage [ 607.269284][ T5286] cdc_wdm 2-1:1.0: skipping garbage [ 607.276480][ T5286] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 607.282853][ T5286] cdc_wdm 2-1:1.0: Unknown control protocol [ 607.464902][ T5282] usb 2-1: USB disconnect, device number 91 [ 607.615450][T15869] netlink: 'syz.4.2168': attribute type 3 has an invalid length. [ 607.888687][ T938] usb 4-1: USB disconnect, device number 79 [ 607.934491][T15872] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 608.460373][ T5907] bridge_slave_1: left allmulticast mode [ 608.489130][ T5907] bridge_slave_1: left promiscuous mode [ 608.524015][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.603538][ T5907] bridge_slave_0: left allmulticast mode [ 608.640437][ T5907] bridge_slave_0: left promiscuous mode [ 608.646812][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 608.673118][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 608.681324][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 608.689198][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.699202][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.712470][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 608.720797][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.242444][ T938] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 609.348810][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.360953][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.371047][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.383639][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.391520][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.399185][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.473297][ T938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.500298][ T938] usb 4-1: not running at top speed; connect to a high speed hub [ 609.553724][ T938] usb 4-1: config 6 has an invalid interface number: 30 but max is 0 [ 609.576114][ T938] usb 4-1: config 6 has no interface number 0 [ 609.590834][ T938] usb 4-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 609.636222][ T938] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 609.661763][ T938] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 609.684042][ T938] usb 4-1: config 6 interface 30 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 609.775135][ T938] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 609.786982][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.801417][ T938] usb 4-1: Product: syz [ 609.808859][ T938] usb 4-1: Manufacturer: syz [ 609.813851][ T938] usb 4-1: SerialNumber: syz [ 609.821091][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.830465][T15887] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 609.868538][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.905593][ T5907] bond0 (unregistering): Released all slaves [ 610.345446][ T5907] hsr_slave_0: left promiscuous mode [ 610.365584][ T5907] hsr_slave_1: left promiscuous mode [ 610.386961][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.475374][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.798100][ T5240] Bluetooth: hci5: command tx timeout [ 611.283714][ T938] usbtest 4-1:6.30: usb test device [ 611.288974][ T938] usbtest 4-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 611.303728][ T938] usb 4-1: USB disconnect, device number 80 [ 611.392742][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.404158][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.414635][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.432590][ T5235] Bluetooth: hci1: command tx timeout [ 611.432720][T15525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.448309][T15525] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 611.456651][T15525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 611.681285][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 611.728746][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 612.166736][T15934] geneve2: entered promiscuous mode [ 612.171968][T15934] geneve2: entered allmulticast mode [ 612.240516][T15945] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.249973][T15945] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.260286][T15945] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.269455][T15945] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.278600][T15945] geneve2: entered promiscuous mode [ 612.286017][T15945] geneve2: entered allmulticast mode [ 612.294525][T15945] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.303561][T15945] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.313491][T15945] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.322642][T15945] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 612.506447][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 612.655449][T15907] chnl_net:caif_netlink_parms(): no params data found [ 612.697202][T15891] chnl_net:caif_netlink_parms(): no params data found [ 612.789687][T15966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2190'. [ 612.872357][ T5240] Bluetooth: hci5: command tx timeout [ 613.087241][T15907] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.094644][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.101920][T15907] bridge_slave_0: entered allmulticast mode [ 613.109609][T15907] bridge_slave_0: entered promiscuous mode [ 613.148743][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.157307][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.166778][T15891] bridge_slave_0: entered allmulticast mode [ 613.175185][T15891] bridge_slave_0: entered promiscuous mode [ 613.184584][T15943] chnl_net:caif_netlink_parms(): no params data found [ 613.195423][T15907] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.207102][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.215958][T15907] bridge_slave_1: entered allmulticast mode [ 613.223303][T15907] bridge_slave_1: entered promiscuous mode [ 613.248281][T15891] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.258458][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.266582][T15891] bridge_slave_1: entered allmulticast mode [ 613.273656][T15891] bridge_slave_1: entered promiscuous mode [ 613.347727][T15907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.366215][T15907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.390602][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.501975][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.512404][T15525] Bluetooth: hci1: command tx timeout [ 613.512417][ T5240] Bluetooth: hci0: command tx timeout [ 613.561980][ T5907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.599421][T16002] geneve2: entered promiscuous mode [ 613.611754][T16002] geneve2: entered allmulticast mode [ 613.656541][T15907] team0: Port device team_slave_0 added [ 613.667867][T15907] team0: Port device team_slave_1 added [ 613.750993][ T5907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.818771][T15891] team0: Port device team_slave_0 added [ 613.833155][T15891] team0: Port device team_slave_1 added [ 613.839144][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.863174][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.890331][T15943] bridge_slave_0: entered allmulticast mode [ 613.903377][T15943] bridge_slave_0: entered promiscuous mode [ 613.925996][T15907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.942302][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.023109][T15907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.050676][T15907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.057986][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.094894][T15907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.230264][ T5907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.267198][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.295664][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.305332][T15943] bridge_slave_1: entered allmulticast mode [ 614.313973][T15943] bridge_slave_1: entered promiscuous mode [ 614.341693][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.349375][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.376673][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.460737][ T5907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.535601][T15525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 614.550246][T15525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 614.570139][T15525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 614.580606][T15525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 614.587601][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.587617][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.587642][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.649852][T15525] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.659735][T15525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.696297][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.750653][T15907] hsr_slave_0: entered promiscuous mode [ 614.761374][T15907] hsr_slave_1: entered promiscuous mode [ 614.773379][T15907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.781709][T15907] Cannot create hsr debugfs directory [ 614.800808][T16031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.808082][T16031] IPv6: NLM_F_CREATE should be set when creating new route [ 614.839889][T15891] hsr_slave_0: entered promiscuous mode [ 614.852151][T15891] hsr_slave_1: entered promiscuous mode [ 614.860413][T15891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.874527][T15891] Cannot create hsr debugfs directory [ 614.898672][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.957531][ T5240] Bluetooth: hci5: command tx timeout [ 615.127166][T15943] team0: Port device team_slave_0 added [ 615.207091][T15943] team0: Port device team_slave_1 added [ 615.537042][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.564724][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.616140][ T5240] Bluetooth: hci0: command tx timeout [ 615.621579][ T5240] Bluetooth: hci1: command tx timeout [ 615.630530][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.743446][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.802350][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.852222][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.026271][ T5907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.088458][T15943] hsr_slave_0: entered promiscuous mode [ 616.113622][T15943] hsr_slave_1: entered promiscuous mode [ 616.133953][T15943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.158172][T15943] Cannot create hsr debugfs directory [ 616.215707][ T5907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.356242][ T5907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.490373][ T5907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.712350][T15525] Bluetooth: hci3: command tx timeout [ 616.773235][T11569] usb 3-1: USB disconnect, device number 70 [ 616.831660][T16034] chnl_net:caif_netlink_parms(): no params data found [ 617.033238][T15525] Bluetooth: hci5: command tx timeout [ 617.064809][ T5907] bridge_slave_1: left allmulticast mode [ 617.070604][ T5907] bridge_slave_1: left promiscuous mode [ 617.092917][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.104645][ T5907] bridge_slave_0: left allmulticast mode [ 617.110314][ T5907] bridge_slave_0: left promiscuous mode [ 617.121493][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.144890][ T5907] bridge_slave_1: left allmulticast mode [ 617.162397][ T5907] bridge_slave_1: left promiscuous mode [ 617.168119][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.203840][ T5907] bridge_slave_0: left allmulticast mode [ 617.209518][ T5907] bridge_slave_0: left promiscuous mode [ 617.273157][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.673357][T15525] Bluetooth: hci1: command tx timeout [ 617.678820][T15525] Bluetooth: hci0: command tx timeout [ 617.975545][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 617.994448][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.011101][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.022941][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.032754][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 618.040448][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 618.310526][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.322536][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.333687][ T5907] bond0 (unregistering): Released all slaves [ 618.464793][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.481333][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.500286][ T5907] bond0 (unregistering): Released all slaves [ 618.605686][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.613026][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.620221][T16034] bridge_slave_0: entered allmulticast mode [ 618.627889][T16034] bridge_slave_0: entered promiscuous mode [ 618.637276][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.644768][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.651949][T16034] bridge_slave_1: entered allmulticast mode [ 618.661595][T16034] bridge_slave_1: entered promiscuous mode [ 618.731981][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.746204][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.791804][T16034] team0: Port device team_slave_0 added [ 618.801938][T16034] team0: Port device team_slave_1 added [ 618.807653][T15525] Bluetooth: hci3: command tx timeout [ 618.887067][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.895338][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.930043][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.942648][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.949594][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.984363][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.189572][T16034] hsr_slave_0: entered promiscuous mode [ 619.199071][T16034] hsr_slave_1: entered promiscuous mode [ 619.206174][T16034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.214109][T16034] Cannot create hsr debugfs directory [ 619.235259][T16080] chnl_net:caif_netlink_parms(): no params data found [ 619.293974][ T5907] hsr_slave_0: left promiscuous mode [ 619.303984][ T5907] hsr_slave_1: left promiscuous mode [ 619.309782][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.317999][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.328384][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.336774][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.347748][ T5907] hsr_slave_0: left promiscuous mode [ 619.353813][ T5907] hsr_slave_1: left promiscuous mode [ 619.359638][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.367138][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.375418][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.383271][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.420765][ T5907] veth1_macvtap: left promiscuous mode [ 619.426493][ T5907] veth0_macvtap: left promiscuous mode [ 619.432012][ T5907] veth1_vlan: left promiscuous mode [ 619.437593][ T5907] veth0_vlan: left promiscuous mode [ 619.444792][ T5907] veth1_macvtap: left promiscuous mode [ 619.450277][ T5907] veth0_macvtap: left promiscuous mode [ 619.455933][ T5907] veth1_vlan: left promiscuous mode [ 619.461210][ T5907] veth0_vlan: left promiscuous mode [ 619.762564][T15525] Bluetooth: hci0: command tx timeout [ 619.993260][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 620.040154][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 620.156721][T15525] Bluetooth: hci2: command tx timeout [ 620.834320][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 620.872351][T15525] Bluetooth: hci3: command tx timeout [ 620.882573][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 621.332607][T15907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.427460][T15907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.450186][T15907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.476149][T15907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.690931][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.701638][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.712455][T16080] bridge_slave_0: entered allmulticast mode [ 621.723467][T16080] bridge_slave_0: entered promiscuous mode [ 621.822883][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.830025][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.838753][T16080] bridge_slave_1: entered allmulticast mode [ 621.854376][T16080] bridge_slave_1: entered promiscuous mode [ 621.921921][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.961199][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.078818][T16080] team0: Port device team_slave_0 added [ 622.100839][T16080] team0: Port device team_slave_1 added [ 622.166662][T15907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.174264][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.181242][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.207305][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.219787][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.227317][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.253757][T15525] Bluetooth: hci2: command tx timeout [ 622.259249][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.329470][T16080] hsr_slave_0: entered promiscuous mode [ 622.336989][T16080] hsr_slave_1: entered promiscuous mode [ 622.346504][T16080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.354599][T16080] Cannot create hsr debugfs directory [ 622.411512][T15907] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.468232][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.475395][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.499435][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.506589][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.609019][ T5907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.730554][ T5907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.791835][T16034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.810492][T15943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.820106][T15943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.850827][ T5907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.889063][T16034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.908747][T15943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.918894][T15943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.952477][T15525] Bluetooth: hci3: command tx timeout [ 622.954359][ T5907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.023088][T16034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.042031][T15907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.088319][T16034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.242226][T15907] veth0_vlan: entered promiscuous mode [ 623.300522][ T5907] bridge_slave_1: left allmulticast mode [ 623.306721][ T5907] bridge_slave_1: left promiscuous mode [ 623.313577][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.324378][ T5907] bridge_slave_0: left allmulticast mode [ 623.330051][ T5907] bridge_slave_0: left promiscuous mode [ 623.336090][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.346401][ T5907] bridge_slave_1: left allmulticast mode [ 623.352077][ T5907] bridge_slave_1: left promiscuous mode [ 623.358277][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.367556][ T5907] bridge_slave_0: left allmulticast mode [ 623.373641][ T5907] bridge_slave_0: left promiscuous mode [ 623.379296][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.010085][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.022683][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.038350][ T5907] bond0 (unregistering): Released all slaves [ 624.164408][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.180048][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.191580][ T5907] bond0 (unregistering): Released all slaves [ 624.209878][T15943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.220838][T15907] veth1_vlan: entered promiscuous mode [ 624.274186][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.299592][ T5907] RE6G: left promiscuous mode [ 624.315345][T15525] Bluetooth: hci2: command tx timeout [ 624.320736][ T9] Plextor PX-TV402U (unknown tuner): unable to load firmware from file "go7007/go7007fw.bin" [ 624.320852][ T9] go7007 1-1:3.115: probe with driver go7007 failed with error -12 [ 624.333168][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.345688][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.401746][ T9] go7007 1-1:3.209: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 624.422362][T16034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.430233][ T9] go7007 1-1:3.209: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 624.443780][T16034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.479261][T16034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.508722][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.515853][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.539149][T15907] veth0_macvtap: entered promiscuous mode [ 624.555197][T16034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.572097][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.579221][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.611923][T15907] veth1_macvtap: entered promiscuous mode [ 624.669130][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.680060][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.689960][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.700781][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.712079][T15907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.775168][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.798537][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.822033][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.842021][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.854189][T15907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.968655][T15891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 624.987283][T15891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 625.061981][T15907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.071324][T15907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.081143][T15907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.091124][T15907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.106236][T15891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 625.118116][T15891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 625.221239][T15943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.241059][T15943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.428933][ T5907] hsr_slave_0: left promiscuous mode [ 625.446878][ T5907] hsr_slave_1: left promiscuous mode [ 625.454359][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.461804][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.480200][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.490100][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.509741][ T5907] hsr_slave_0: left promiscuous mode [ 625.528213][ T5907] hsr_slave_1: left promiscuous mode [ 625.539606][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.551584][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.564277][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.571709][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.639158][ T5907] veth1_macvtap: left promiscuous mode [ 625.647706][ T5907] veth0_macvtap: left promiscuous mode [ 625.658659][ T5907] veth1_vlan: left promiscuous mode [ 625.667861][ T5907] veth0_vlan: left promiscuous mode [ 625.681599][ T5907] veth1_macvtap: left promiscuous mode [ 625.690532][ T5907] veth0_macvtap: left promiscuous mode [ 625.701960][ T5907] veth1_vlan: left promiscuous mode [ 625.710922][ T5907] veth0_vlan: left promiscuous mode [ 626.392968][T15525] Bluetooth: hci2: command tx timeout [ 626.518446][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 626.558265][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 627.310486][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 627.367416][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 627.817984][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.826033][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.865156][T15943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.932992][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.940861][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.021669][T15891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.140644][T16157] tipc: Started in network mode [ 628.145827][T16157] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 628.165970][T16157] tipc: Enabled bearer , priority 10 [ 628.209411][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.244484][T16080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.269389][T16080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.327483][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.346558][T16080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.379849][T16080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.418885][T15891] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.478097][T15943] veth0_vlan: entered promiscuous mode [ 628.488515][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.495688][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.533617][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.540738][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.609804][T15943] veth1_vlan: entered promiscuous mode [ 628.631314][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.638499][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.672612][T16176] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 628.705082][T16176] PKCS7: Only support pkcs7_signedData type [ 628.727143][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.734285][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.801232][T15943] veth0_macvtap: entered promiscuous mode [ 628.817604][T15943] veth1_macvtap: entered promiscuous mode [ 628.969768][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.977695][T15943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.989530][T15943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.001460][T15943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.011571][T15943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.023347][T15943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.047683][T15943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.188443][T15943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.233035][T15943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.241968][T15943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.251283][T15943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.282981][ T938] tipc: Node number set to 9480874 [ 629.387053][T16034] veth0_vlan: entered promiscuous mode [ 629.502850][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.524666][T16034] veth1_vlan: entered promiscuous mode [ 629.569309][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.673204][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.681473][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.703024][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.751112][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.758269][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.859184][T16034] veth0_macvtap: entered promiscuous mode [ 629.871056][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.882882][T16034] veth1_macvtap: entered promiscuous mode [ 629.889404][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.898825][T15891] veth0_vlan: entered promiscuous mode [ 629.913932][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.921024][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.967831][T15891] veth1_vlan: entered promiscuous mode [ 630.016981][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.033009][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.043014][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.055465][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.098370][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.163955][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.197309][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.223623][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.254253][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.281576][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.327721][T16034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.345388][T16034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.355692][T16034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.368141][T16034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.386937][T15891] veth0_macvtap: entered promiscuous mode [ 630.455311][T15891] veth1_macvtap: entered promiscuous mode [ 630.528261][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.612997][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.635502][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.647942][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.658944][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.670251][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.681237][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.707386][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.751604][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.766976][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.785850][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.820764][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.844475][T15891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.864522][T15891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.883256][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.899833][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.921573][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.993628][T15891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.075544][T15891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.090284][T15891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.099088][T15891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.272004][T16080] veth0_vlan: entered promiscuous mode [ 631.391542][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.447302][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.589719][ T5902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.659833][T16080] veth1_vlan: entered promiscuous mode [ 631.774213][ T5902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.809112][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.825165][T16249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2215'. [ 631.833388][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.977478][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.985987][ T5902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.987640][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.006829][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.017272][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.025595][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.033902][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.207287][ T5902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.260667][T16080] veth0_macvtap: entered promiscuous mode [ 632.289119][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 632.442490][T16265] wireguard0: entered promiscuous mode [ 632.453506][T16265] wireguard0: entered allmulticast mode [ 632.526280][T16080] veth1_macvtap: entered promiscuous mode [ 632.538075][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.547729][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.607576][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.620145][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.638005][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.657802][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.669643][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.686081][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.718393][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.728984][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.740674][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.789850][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.806607][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.819513][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.834797][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.846996][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.858348][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.868832][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.880133][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.894341][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.919141][T16281] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 632.927237][T16281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2220'. [ 632.944869][T16281] team0: entered promiscuous mode [ 632.957020][T16281] team_slave_0: entered promiscuous mode [ 632.965426][T16281] team_slave_1: entered promiscuous mode [ 632.971409][T16281] team0: entered allmulticast mode [ 633.008353][T16281] team_slave_0: entered allmulticast mode [ 633.055377][T16281] team_slave_1: entered allmulticast mode [ 633.062027][T16288] xt_hashlimit: max too large, truncated to 1048576 [ 633.080100][T16281] bridge0: port 3(team0) entered blocking state [ 633.086946][T16281] bridge0: port 3(team0) entered disabled state [ 633.127124][T16281] bridge0: port 3(team0) entered blocking state [ 633.133508][T16281] bridge0: port 3(team0) entered forwarding state [ 633.154515][T16080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.184569][T16080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.224127][T16080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.250370][T16080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.507311][ T5902] bridge_slave_1: left allmulticast mode [ 633.541409][ T5902] bridge_slave_1: left promiscuous mode [ 633.558486][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.618355][ T5902] bridge_slave_0: left allmulticast mode [ 633.655762][ T5902] bridge_slave_0: left promiscuous mode [ 633.663571][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.152495][ T5240] Bluetooth: hci1: command tx timeout [ 634.576073][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.606058][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.640374][ T5902] bond0 (unregistering): Released all slaves [ 634.761658][ T5902] tipc: Disabling bearer [ 634.793462][ T5902] tipc: Left network mode [ 634.963107][T16259] chnl_net:caif_netlink_parms(): no params data found [ 635.026940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.049703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.490317][T16259] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.512784][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.538342][T16259] bridge_slave_0: entered allmulticast mode [ 635.561075][T16259] bridge_slave_0: entered promiscuous mode [ 635.580547][T16309] dummy0: entered promiscuous mode [ 635.608893][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.616895][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.648488][T16259] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.659850][T15525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.660176][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.680304][T15525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.696047][T16259] bridge_slave_1: entered allmulticast mode [ 635.702148][T15525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.707981][T16259] bridge_slave_1: entered promiscuous mode [ 635.718259][T15525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.740169][T15525] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.753113][T15525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.762097][ T5902] hsr_slave_0: left promiscuous mode [ 635.768394][ T5902] hsr_slave_1: left promiscuous mode [ 635.783125][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.791347][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.798882][ T5288] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 635.811153][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.818783][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.851124][ T5902] veth1_macvtap: left promiscuous mode [ 635.856924][ T5902] veth0_macvtap: left promiscuous mode [ 635.862613][ T5902] veth1_vlan: left promiscuous mode [ 635.867922][ T5902] veth0_vlan: left promiscuous mode [ 635.974550][ T5288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.001594][ T5288] usb 5-1: not running at top speed; connect to a high speed hub [ 636.013731][ T5288] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 636.021314][ T5288] usb 5-1: can't read configurations, error -61 [ 636.176317][ T5288] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 636.233388][ T5240] Bluetooth: hci1: command tx timeout [ 636.338366][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 636.344849][ T5288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.357254][ T5288] usb 5-1: not running at top speed; connect to a high speed hub [ 636.374436][ T5288] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 636.382027][ T5288] usb 5-1: can't read configurations, error -61 [ 636.394000][ T5288] usb usb5-port1: attempt power cycle [ 636.410208][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 636.762403][ T5288] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 636.817524][ T5288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.831387][ T5288] usb 5-1: not running at top speed; connect to a high speed hub [ 636.864914][ T5288] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 636.873606][ T5288] usb 5-1: can't read configurations, error -61 [ 636.896507][T16259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.921831][T16259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.973802][T16259] team0: Port device team_slave_0 added [ 637.014214][T16259] team0: Port device team_slave_1 added [ 637.022642][ T5288] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 637.074635][ T5288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.097835][ T5288] usb 5-1: not running at top speed; connect to a high speed hub [ 637.129002][T16259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.138500][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.174090][ T25] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 637.182755][ T5288] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 637.190379][ T5288] usb 5-1: can't read configurations, error -61 [ 637.198096][ T5288] usb usb5-port1: unable to enumerate USB device [ 637.212298][T16259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.234031][T16259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.241029][T16259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.274659][T16259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.352947][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 637.363640][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.382346][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.396194][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 637.423801][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.439721][T16259] hsr_slave_0: entered promiscuous mode [ 637.449978][ T25] usb 3-1: config 0 descriptor?? [ 637.462865][T16259] hsr_slave_1: entered promiscuous mode [ 637.481060][T16259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.490046][T16259] Cannot create hsr debugfs directory [ 637.763271][ T5902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.833321][ T5240] Bluetooth: hci3: command tx timeout [ 637.852684][T16336] chnl_net:caif_netlink_parms(): no params data found [ 637.920721][ T5902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.969814][T16312] dummy0: left promiscuous mode [ 638.134134][T16338] bridge1: entered promiscuous mode [ 638.143194][T16338] bridge1: entered allmulticast mode [ 638.156398][T16338] team0: Port device bridge1 added [ 638.170116][T11569] usb 3-1: USB disconnect, device number 71 [ 638.239940][ T5902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.310176][T16372] geneve2: entered promiscuous mode [ 638.318217][ T5240] Bluetooth: hci1: command tx timeout [ 638.326375][T16372] geneve2: entered allmulticast mode [ 638.418591][ T5902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.517175][T16336] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.535267][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.543352][T16336] bridge_slave_0: entered allmulticast mode [ 638.552722][T16336] bridge_slave_0: entered promiscuous mode [ 638.581553][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.596415][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.605311][T16336] bridge_slave_1: entered allmulticast mode [ 638.612377][T16336] bridge_slave_1: entered promiscuous mode [ 638.676853][T16387] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 638.732093][T16391] netlink: 'syz.0.2234': attribute type 10 has an invalid length. [ 638.981837][T16336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.189144][T16336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.204968][ T5902] bridge_slave_1: left allmulticast mode [ 639.230323][ T5902] bridge_slave_1: left promiscuous mode [ 639.236496][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.269766][ T5902] bridge_slave_0: left allmulticast mode [ 639.288469][ T5902] bridge_slave_0: left promiscuous mode [ 639.294626][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.922253][ T5240] Bluetooth: hci3: command tx timeout [ 640.301206][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.319466][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.337210][ T5902] bond0 (unregistering): Released all slaves [ 640.394360][ T5240] Bluetooth: hci1: command tx timeout [ 640.405421][T16439] geneve2: entered promiscuous mode [ 640.434903][T16439] geneve2: entered allmulticast mode [ 640.581650][T16336] team0: Port device team_slave_0 added [ 640.705422][T16336] team0: Port device team_slave_1 added [ 640.723212][T16259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 640.781309][T16456] netlink: 'syz.4.2245': attribute type 10 has an invalid length. [ 640.795142][T16459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'. [ 640.810281][T16456] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 640.822897][T16456] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 640.833857][T16456] team0: Failed to send options change via netlink (err -105) [ 640.841399][T16456] team0: Port device netdevsim0 added [ 640.856949][T16259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 640.870423][T16455] netlink: 'syz.4.2245': attribute type 10 has an invalid length. [ 640.886372][T16455] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 640.899321][T16336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.928231][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.966115][T16336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.990461][T16259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 641.048056][T16336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.063182][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.089492][T16336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.122284][T16259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 641.256751][ T5902] hsr_slave_0: left promiscuous mode [ 641.272778][ T5902] hsr_slave_1: left promiscuous mode [ 641.298755][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.316540][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.325517][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.333678][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.363017][ T5902] veth1_macvtap: left promiscuous mode [ 641.368728][ T5902] veth0_macvtap: left promiscuous mode [ 641.374401][ T5902] veth1_vlan: left promiscuous mode [ 641.379808][ T5902] veth0_vlan: left promiscuous mode [ 641.998890][ T5240] Bluetooth: hci3: command tx timeout [ 642.131623][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 642.177586][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 642.737057][T16336] hsr_slave_0: entered promiscuous mode [ 642.754831][T16336] hsr_slave_1: entered promiscuous mode [ 642.767917][T16336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.776269][T16336] Cannot create hsr debugfs directory [ 642.957082][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2253'. [ 643.236299][T16259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.338773][T16259] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.378934][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.386079][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.429629][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.436780][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.518937][ T5902] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.538991][T15525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.549168][T15525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.563249][T15525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.571623][T15525] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.579198][ T938] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 643.587509][T15525] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 643.595024][T15525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.718880][T16514] x_tables: unsorted underflow at hook 3 [ 643.750055][ T5902] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.761160][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 643.769538][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.783080][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.807339][ T938] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 643.817292][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.832627][ T938] usb 3-1: config 0 descriptor?? [ 643.872038][ T5902] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.969233][ T5902] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 643.979305][ T5902] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 643.994606][ T5902] team0: Port device netdevsim0 removed [ 644.003370][ T5902] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.042778][T16336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.074551][ T5240] Bluetooth: hci3: command tx timeout [ 644.080558][T16336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.109816][T16336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.126617][T16336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.253307][ T5902] bridge0: port 3(team0) entered disabled state [ 644.263704][ T5902] bridge_slave_1: left allmulticast mode [ 644.269426][ T5902] bridge_slave_1: left promiscuous mode [ 644.273336][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.276094][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.293983][ T5902] bridge_slave_0: left allmulticast mode [ 644.299701][ T5902] bridge_slave_0: left promiscuous mode [ 644.307518][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.309955][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.334784][T16506] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 644.475938][ T938] playstation 0003:054C:05C4.0023: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 644.687116][ T938] playstation 0003:054C:05C4.0023: Invalid reportID received, expected 18 got 72 [ 644.700676][ T938] playstation 0003:054C:05C4.0023: Failed to retrieve DualShock4 pairing info: -22 [ 644.728041][ T938] playstation 0003:054C:05C4.0023: Failed to get MAC address from DualShock4 [ 644.748043][ T938] playstation 0003:054C:05C4.0023: Failed to create dualshock4. [ 644.766516][ T938] playstation 0003:054C:05C4.0023: probe with driver playstation failed with error -22 [ 644.861252][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.889825][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.907253][ T5902] bond0 (unregistering): Released all slaves [ 644.928307][T16259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.938357][ T5288] usb 3-1: USB disconnect, device number 72 [ 645.087427][T16512] chnl_net:caif_netlink_parms(): no params data found [ 645.402027][ T5902] hsr_slave_0: left promiscuous mode [ 645.417420][ T5902] hsr_slave_1: left promiscuous mode [ 645.427489][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.436640][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.460432][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.471324][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.516802][ T5902] veth1_macvtap: left promiscuous mode [ 645.525161][ T5902] veth0_macvtap: left promiscuous mode [ 645.539755][ T5902] veth1_vlan: left promiscuous mode [ 645.549543][ T5902] veth0_vlan: left promiscuous mode [ 645.682442][ T5240] Bluetooth: hci0: command tx timeout [ 646.264492][ T5902] team_slave_1 (unregistering): left promiscuous mode [ 646.271613][ T5902] team_slave_1 (unregistering): left allmulticast mode [ 646.284199][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 646.328139][ T5902] team_slave_0 (unregistering): left promiscuous mode [ 646.335418][ T5902] team_slave_0 (unregistering): left allmulticast mode [ 646.345494][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 646.761422][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.771399][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.792027][T16512] bridge_slave_0: entered allmulticast mode [ 646.799391][T16512] bridge_slave_0: entered promiscuous mode [ 646.807570][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.814812][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.822067][T16512] bridge_slave_1: entered allmulticast mode [ 646.833294][T16512] bridge_slave_1: entered promiscuous mode [ 646.875115][T16259] veth0_vlan: entered promiscuous mode [ 646.935338][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.965577][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.995653][T16259] veth1_vlan: entered promiscuous mode [ 647.018621][T16336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.075485][T16336] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.232863][T16512] team0: Port device team_slave_0 added [ 647.270801][T16560] netlink: 'syz.0.2267': attribute type 27 has an invalid length. [ 647.586237][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.593625][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.752895][ T5240] Bluetooth: hci0: command tx timeout [ 647.922646][ T5288] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 648.102004][ T5288] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 648.129252][ T5288] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 648.160159][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.213647][ T5288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 648.235846][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.247485][ T5288] usb 3-1: Product: syz [ 648.251702][ T5288] usb 3-1: Manufacturer: syz [ 648.260972][ T5288] usb 3-1: SerialNumber: syz [ 648.273771][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.290449][ T5288] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 648.408984][T16560] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.418371][T16560] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.430198][T16560] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.439317][T16560] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.500804][T16512] team0: Port device team_slave_1 added [ 648.529475][T16569] netlink: 'syz.2.2268': attribute type 27 has an invalid length. [ 648.577163][T16569] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.584684][T16569] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.659342][T16569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.674569][T16569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.738511][T16569] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.748503][T16569] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.758355][T16569] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.767421][T16569] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.802105][T16569] bridge1: left promiscuous mode [ 648.807637][T16569] bridge1: left allmulticast mode [ 648.837833][T16573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.845809][T16573] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.855532][T16573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.873972][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.875667][ T25] usb 3-1: USB disconnect, device number 73 [ 648.881091][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.936624][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.943762][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.957829][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.967513][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.993405][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.000264][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.013912][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.021089][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.048049][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.188968][T16512] hsr_slave_0: entered promiscuous mode [ 649.203223][T16512] hsr_slave_1: entered promiscuous mode [ 649.209540][T16512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.222738][T16512] Cannot create hsr debugfs directory [ 649.239511][T16259] veth0_macvtap: entered promiscuous mode [ 649.298886][T16259] veth1_macvtap: entered promiscuous mode [ 649.433871][T16259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.459447][T16336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.505374][T16259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.594270][T16259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.603782][T16259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.612755][T16259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.621547][T16259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.833471][ T5240] Bluetooth: hci0: command tx timeout [ 649.865193][T16336] veth0_vlan: entered promiscuous mode [ 649.891548][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.906569][T16336] veth1_vlan: entered promiscuous mode [ 649.906898][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.966979][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.983613][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.093448][T16336] veth0_macvtap: entered promiscuous mode [ 650.114428][T16336] veth1_macvtap: entered promiscuous mode [ 650.155448][T16336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.176759][T16336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.198091][T16336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.222709][T16621] Cannot find add_set index 0 as target [ 650.246651][T16336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.268506][T16336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.303595][T16336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.329616][T16336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.348822][T16336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.369144][T16336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.389431][T16336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.482409][T11303] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 650.533945][T16512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 650.560092][T16512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 650.587335][T16512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.620138][T16512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 650.646812][T11303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.661834][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.673409][T11303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.686129][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.713621][T11303] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 650.746012][T11303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 650.756241][T11303] usb 2-1: SerialNumber: syz [ 650.789045][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.812977][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.893260][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.926146][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.937485][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.944629][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.977252][T11303] usb 2-1: 0:2 : does not exist [ 650.995234][T11303] usb 2-1: unit 5 not found! [ 651.024223][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.031345][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.033344][T11303] usb 2-1: USB disconnect, device number 92 [ 651.130447][ T7253] udevd[7253]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 651.170309][T16641] netlink: 'syz.3.2231': attribute type 27 has an invalid length. [ 651.475535][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.482963][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.912362][ T5240] Bluetooth: hci0: command tx timeout [ 652.162337][T11303] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 652.217463][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.229670][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.300885][T16641] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.310487][T16641] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.312423][T11303] usb 2-1: Using ep0 maxpacket: 16 [ 652.329010][T16641] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.334130][T11303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.348300][T16641] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.358491][T11303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.370526][T11303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 652.387363][T11303] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 652.400583][T11303] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.415077][T11303] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 652.424431][T11303] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 652.432610][T11303] usb 2-1: Manufacturer: syz [ 652.446672][T11303] usb 2-1: config 0 descriptor?? [ 652.555562][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.677145][T16512] veth0_vlan: entered promiscuous mode [ 652.725503][T16512] veth1_vlan: entered promiscuous mode [ 652.781149][T16512] veth0_macvtap: entered promiscuous mode [ 652.795842][T11303] rc_core: IR keymap rc-hauppauge not found [ 652.797505][T16512] veth1_macvtap: entered promiscuous mode [ 652.801759][T11303] Registered IR keymap rc-empty [ 652.812716][ T5288] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 652.819541][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.836977][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.848732][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.866424][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.872578][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.887317][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.898960][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.904111][T11303] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 652.910612][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.929758][T11303] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input90 [ 652.937799][T16512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.951639][T16512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.960892][T16512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.970035][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.970303][T16512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.982342][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 652.996452][ T5288] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 653.005128][ T5288] usb 3-1: config 0 has no interface number 0 [ 653.012294][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.026956][ T5288] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 653.038897][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.052828][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.069766][ T5288] usb 3-1: Product: syz [ 653.074430][ T5288] usb 3-1: Manufacturer: syz [ 653.079403][ T5288] usb 3-1: SerialNumber: syz [ 653.080858][T16415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.089666][ T5282] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 653.102720][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.107168][T16415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.119496][ T5288] usb 3-1: config 0 descriptor?? [ 653.129131][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.146094][ T5288] smsc95xx v2.0.0 [ 653.149037][T16415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.159023][T16415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.162689][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.194627][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.214292][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.242665][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.263214][T11303] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.303754][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 653.313752][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.325036][T11303] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 653.339949][ T5282] usb 4-1: config 0 descriptor?? [ 653.345132][T11303] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 653.363337][ T5282] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 653.571775][ T5288] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 653.582963][ T5288] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 653.652341][ T5285] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 653.802324][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 653.809784][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.821240][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.835947][ T5285] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 653.845389][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.855983][ T5285] usb 5-1: config 0 descriptor?? [ 654.273450][ T5285] nti 0003:0757:0A00.0024: unknown global tag 0xd [ 654.283623][ T5285] nti 0003:0757:0A00.0024: item 0 4 1 13 parsing failed [ 654.291376][ T5285] nti 0003:0757:0A00.0024: probe with driver nti failed with error -22 [ 654.474318][ T5300] usb 5-1: USB disconnect, device number 82 [ 654.776046][ T5282] gspca_stv06xx: HDCS-1020 sensor detected [ 654.940158][ T5300] usb 2-1: USB disconnect, device number 93 [ 655.042827][ T5282] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 655.064152][ T5282] usb 4-1: USB disconnect, device number 81 [ 655.282321][ T5286] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 655.302436][ T5300] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 655.437830][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 655.445634][ T5286] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.459492][ T5286] usb 5-1: config 3 has an invalid interface number: 32 but max is 0 [ 655.467682][ T5300] usb 2-1: Using ep0 maxpacket: 32 [ 655.473006][ T5286] usb 5-1: config 3 has no interface number 0 [ 655.479117][ T5286] usb 5-1: config 3 interface 32 has no altsetting 0 [ 655.489183][ T5286] usb 5-1: New USB device found, idVendor=069a, idProduct=0320, bcdDevice=8c.20 [ 655.498372][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.506567][ T5286] usb 5-1: Product: syz [ 655.510825][ T5286] usb 5-1: Manufacturer: syz [ 655.515753][ T5286] usb 5-1: SerialNumber: syz [ 655.522499][ T5300] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 655.531666][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.543222][ T5300] usb 2-1: Product: syz [ 655.553719][ T5300] usb 2-1: Manufacturer: syz [ 655.558374][ T5300] usb 2-1: SerialNumber: syz [ 655.565485][ T5300] usb 2-1: config 0 descriptor?? [ 655.579199][ T5300] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 655.766566][ T5286] usb 5-1: USB disconnect, device number 83 [ 655.832407][ T5282] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 655.982289][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 655.989235][ T5282] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 655.997563][ T5282] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 656.009237][ T5282] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 656.019275][ T5282] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 656.029537][ T5282] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.043008][ T5282] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 656.052082][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.209099][ T5288] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 656.221044][ T5288] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 656.240363][ T5288] usb 3-1: USB disconnect, device number 74 [ 656.276688][ T5282] usb 4-1: GET_CAPABILITIES returned 0 [ 656.283386][ T5282] usbtmc 4-1:16.0: can't read capabilities [ 656.386404][ T5300] gspca_stk1135: reg_w 0x5 err -71 [ 656.396757][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.403360][ T5300] gspca_stk1135: Sensor write failed [ 656.408746][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.415190][ T5300] gspca_stk1135: Sensor write failed [ 656.420558][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.427414][ T5300] gspca_stk1135: Sensor read failed [ 656.435361][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.441720][ T5300] gspca_stk1135: Sensor read failed [ 656.447065][ T5300] gspca_stk1135: Detected sensor type unknown (0x0) [ 656.454482][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.460902][ T5300] gspca_stk1135: Sensor read failed [ 656.466230][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.473396][ T5300] gspca_stk1135: Sensor read failed [ 656.480366][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.491572][ T5300] gspca_stk1135: Sensor write failed [ 656.497220][ T5300] gspca_stk1135: serial bus timeout: status=0x00 [ 656.503688][ T5300] gspca_stk1135: Sensor write failed [ 656.509030][ T5300] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 656.522420][ T5300] usb 2-1: USB disconnect, device number 94 [ 656.594562][ T5286] usb 4-1: USB disconnect, device number 82 [ 656.602594][T16695] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 656.609433][ T938] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 656.792642][ T938] usb 5-1: Using ep0 maxpacket: 32 [ 656.800801][ T938] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 656.809183][ T938] usb 5-1: config 0 has no interface number 0 [ 656.819172][ T938] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 656.828553][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.836785][ T938] usb 5-1: Product: syz [ 656.841062][ T938] usb 5-1: Manufacturer: syz [ 656.845761][ T938] usb 5-1: SerialNumber: syz [ 656.852047][ T938] usb 5-1: config 0 descriptor?? [ 656.860746][ T938] smsc95xx v2.0.0 [ 656.992275][ T5288] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 657.143668][ T5288] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 657.151820][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.168708][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 657.179639][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 657.191375][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.207113][ T5288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.216462][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.222314][ T5286] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 657.233512][ T5288] usb 3-1: config 0 descriptor?? [ 657.239088][T16703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.269093][ T938] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 657.280091][ T938] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 657.397020][ T5286] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 657.406369][ T5286] usb 2-1: config 0 has no interface number 0 [ 657.413023][ T5286] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.424067][ T5286] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 657.436107][ T5286] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 657.449467][ T5286] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 657.463104][ T5286] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 657.479445][ T5286] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 657.488756][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.497437][ T5286] usb 2-1: Product: syz [ 657.501681][ T5286] usb 2-1: Manufacturer: syz [ 657.506380][ T5286] usb 2-1: SerialNumber: syz [ 657.513772][ T5286] usb 2-1: config 0 descriptor?? [ 657.519717][T16705] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 657.528713][ T5286] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 657.555714][ T5286] scsi host1: usb-storage 2-1:0.189 [ 657.632378][T11303] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 657.652650][ T5288] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 657.662477][ T5288] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 657.681867][ T5288] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 657.789114][T11303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.799849][T11303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 657.809132][T11303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 657.820302][T11303] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 657.829538][T11303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.843550][T16707] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 657.857282][T11303] hub 4-1:1.0: bad descriptor, ignoring hub [ 657.866628][T11303] hub 4-1:1.0: probe with driver hub failed with error -5 [ 657.879910][T11303] cdc_wdm 4-1:1.0: skipping garbage [ 657.885698][T11303] cdc_wdm 4-1:1.0: skipping garbage [ 657.936560][ T5288] usb 3-1: USB disconnect, device number 75 [ 657.944867][T11303] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 657.950813][T11303] cdc_wdm 4-1:1.0: Unknown control protocol [ 658.087281][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.096369][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.105917][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.115155][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.124310][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.133151][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.147967][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.157493][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.165721][T11303] usb 4-1: USB disconnect, device number 83 [ 658.492383][T11303] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 658.639744][ T148] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 658.650483][ T148] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 658.662326][T11303] usb 4-1: Using ep0 maxpacket: 8 [ 658.677065][ T148] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 658.683423][T11303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.703339][ T148] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 658.706070][T11303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.712857][ T5286] usb 2-1: USB disconnect, device number 95 [ 658.725856][ T5907] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 658.735118][T11303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 658.741532][ T5901] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 658.749534][T11303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 658.765001][ T5288] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 658.798246][T11303] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 658.827409][ T5901] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 658.845535][ T5907] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 658.859927][ T7508] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 658.860307][T11303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.932355][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 658.940479][ T5288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 658.956141][T11303] hub 4-1:1.0: bad descriptor, ignoring hub [ 658.976534][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 658.990351][T11303] hub 4-1:1.0: probe with driver hub failed with error -5 [ 659.005339][T11303] cdc_wdm 4-1:1.0: skipping garbage [ 659.010864][ T5288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.034526][T11303] cdc_wdm 4-1:1.0: skipping garbage [ 659.057605][T13895] udevd[13895]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 659.067894][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.079307][T11303] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 659.088597][T11303] cdc_wdm 4-1:1.0: Unknown control protocol [ 659.098797][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 659.137397][ T5288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 659.154292][T11303] usb 4-1: USB disconnect, device number 84 [ 659.170421][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 659.198085][ T7508] udevd[7508]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 659.198434][ T5288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.226588][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.244862][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 659.259298][ T5288] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 659.267031][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 659.290223][T13895] udevd[13895]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 659.304080][ T5288] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.342892][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.369324][ T5288] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 659.414914][ T5288] usb 3-1: string descriptor 0 read error: -22 [ 659.421213][ T5288] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 659.458540][ T7508] udevd[7508]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 659.472540][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.498930][ T5288] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 659.620921][T16725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.630107][T16725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.639727][T16725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.649751][T16725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.675220][T16725] geneve2: entered promiscuous mode [ 659.685440][T16725] geneve2: entered allmulticast mode [ 659.724856][T16725] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.734401][T16725] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.758987][T16725] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.760739][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.786320][ T5240] Bluetooth: hci5: link tx timeout [ 659.793185][ T5240] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.798916][T16725] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.852757][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.949528][T16728] netlink: 'syz.1.2293': attribute type 27 has an invalid length. [ 659.978271][ T5286] usb 3-1: USB disconnect, device number 76 [ 659.999505][T16731] adutux: No device or device unplugged -19 [ 660.039571][T16736] adutux: No device or device unplugged -19 [ 660.160157][ T938] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 660.223595][T16728] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.230972][T16728] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.238665][ T938] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 660.256135][ T938] usb 5-1: USB disconnect, device number 84 [ 660.482404][ T5282] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 660.593318][ T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 660.657831][T16728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.688149][T16728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.710774][ T5282] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 660.718377][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 660.732389][ T5282] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.744183][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 660.755379][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 660.777138][ T5282] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 660.781682][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 660.784708][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 660.804242][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.805373][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 660.833752][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 660.841935][ T8] usb 4-1: Manufacturer: syz [ 660.849014][ T8] usb 4-1: config 0 descriptor?? [ 660.920365][ T5282] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 660.942647][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 660.952547][T16748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2296'. [ 660.954164][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 660.983022][ T5282] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 660.992896][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 661.009014][ T5282] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.022960][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 661.035175][ T5282] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 661.035815][T16748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2296'. [ 661.058500][ T8] rc_core: IR keymap rc-hauppauge not found [ 661.064908][ T8] Registered IR keymap rc-empty [ 661.073248][ T5282] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 661.073885][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 661.108796][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.130909][ T5282] usb 3-1: Product: syz [ 661.135373][ T5282] usb 3-1: Manufacturer: syz [ 661.141963][ T5282] usb 3-1: SerialNumber: syz [ 661.157772][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input92 [ 661.174670][T16733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.228005][T16733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.244522][T16728] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.290208][T16728] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.327612][T16728] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.349746][T16728] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.370355][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 661.394397][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.434824][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.457150][ T5282] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 661.480380][ T5282] usb 3-1: USB disconnect, device number 77 [ 661.631021][T16743] netlink: 'syz.0.2295': attribute type 27 has an invalid length. [ 661.664842][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 661.833191][T15525] Bluetooth: hci5: command 0x0406 tx timeout [ 662.182370][ T5282] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 662.243904][T16768] fuse: Bad value for 'rootmode' [ 662.325805][ T5300] usb 4-1: USB disconnect, device number 85 [ 662.332248][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 662.339002][ T5282] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 662.348411][ T5282] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 662.358616][ T5282] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 662.370357][ T5282] usb 5-1: config 250 has no interface number 0 [ 662.387808][ T5282] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 662.413531][ T5282] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 662.429948][ T5282] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 662.457200][ T5282] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 662.487991][ T5282] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 662.503212][T16777] ɶƣ0GCTw: entered promiscuous mode [ 662.511355][ T5282] usb 5-1: config 250 interface 228 has no altsetting 0 [ 662.530326][ T5282] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 662.542321][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 662.568573][ T5282] usb 5-1: Product: syz [ 662.579756][ T5282] usb 5-1: SerialNumber: syz [ 662.590957][ T5282] hub 5-1:250.228: bad descriptor, ignoring hub [ 662.602280][ T5282] hub 5-1:250.228: probe with driver hub failed with error -5 [ 662.799882][ T5282] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 85 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 663.130992][T16792] bond0: up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 663.148995][T16792] bond0: entered allmulticast mode [ 663.157350][T16792] bond_slave_0: entered allmulticast mode [ 663.169736][T16792] bond_slave_1: entered allmulticast mode [ 663.186979][T16792] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 663.206800][T16792] bridge0: entered allmulticast mode [ 663.209399][T16796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2313'. [ 663.212636][T16792] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 663.295790][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2314'. [ 663.560095][T16755] usb 5-1: reset high-speed USB device number 85 using dummy_hcd [ 663.580026][T16755] usb 5-1: device reset changed ep0 maxpacket size! [ 663.604691][ T5288] usb 5-1: USB disconnect, device number 85 [ 663.614315][ T5288] usblp0: removed [ 663.782427][ T5288] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 663.870307][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'. [ 663.885530][T16819] wireguard0: entered promiscuous mode [ 663.891246][T16819] wireguard0: entered allmulticast mode [ 663.933755][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 663.945113][ T5288] usb 5-1: config 0 has no interfaces? [ 663.955308][ T5288] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.970140][T16822] netlink: 'syz.2.2321': attribute type 10 has an invalid length. [ 663.980684][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.025383][T16822] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.034862][ T5288] usb 5-1: Product: syz [ 664.040294][ T5288] usb 5-1: Manufacturer: syz [ 664.046894][T16822] bond0: (slave team0): Enslaving as an active interface with an up link [ 664.057144][ T5288] usb 5-1: SerialNumber: syz [ 664.069211][ T5288] usb 5-1: config 0 descriptor?? [ 664.293160][T16828] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 664.310457][ T5300] usb 5-1: USB disconnect, device number 86 [ 664.534097][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 664.602373][ T8] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 664.706136][T16834] netlink: 'syz.2.2326': attribute type 11 has an invalid length. [ 664.774093][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.788765][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 664.818732][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 664.887438][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.908588][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.949710][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.095309][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.128395][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 665.292583][ T5288] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 665.452481][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 665.467473][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.481428][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.510788][ T5288] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 665.561649][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.589727][T16844] geneve2: entered promiscuous mode [ 665.596019][ T5288] usb 3-1: config 0 descriptor?? [ 665.603532][T16844] geneve2: entered allmulticast mode [ 665.819560][ T5288] kye 0003:0458:5017.0026: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 665.883780][ T5288] kye 0003:0458:5017.0026: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 665.904630][ T5288] kye 0003:0458:5017.0026: tablet-enabling feature report not found [ 665.917255][ T5288] kye 0003:0458:5017.0026: tablet enabling failed [ 666.019313][ T5288] usb 3-1: USB disconnect, device number 78 [ 666.130831][T16854] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2332'. [ 666.952460][ T5300] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 667.112608][ T5300] usb 3-1: Using ep0 maxpacket: 8 [ 667.119922][ T5300] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 667.150298][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 667.182311][ T5300] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.220354][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 667.256429][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.285014][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2338'. [ 667.302431][ T5300] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 667.309888][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 667.337347][ T5282] usb 4-1: USB disconnect, device number 86 [ 667.342230][ T5300] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.368324][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 667.400099][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.426541][T16890] FAULT_INJECTION: forcing a failure. [ 667.426541][T16890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.441014][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.3.2343 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 667.451804][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 667.461869][T16890] Call Trace: [ 667.465142][T16890] [ 667.468062][T16890] dump_stack_lvl+0x241/0x360 [ 667.472735][T16890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.477941][T16890] ? __pfx__printk+0x10/0x10 [ 667.482577][T16890] ? snprintf+0xda/0x120 [ 667.486906][T16890] should_fail_ex+0x3b0/0x4e0 [ 667.491587][T16890] _copy_to_user+0x2f/0xb0 [ 667.496011][T16890] simple_read_from_buffer+0xca/0x150 [ 667.501400][T16890] proc_fail_nth_read+0x1e9/0x250 [ 667.506434][T16890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.511978][T16890] ? rw_verify_area+0x55e/0x6f0 [ 667.516826][T16890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.522370][T16890] vfs_read+0x201/0xbc0 [ 667.526523][T16890] ? __pfx_packet_setsockopt+0x10/0x10 [ 667.532003][T16890] ? __pfx_packet_setsockopt+0x10/0x10 [ 667.537462][T16890] ? __pfx_vfs_read+0x10/0x10 [ 667.542137][T16890] ? __pfx_packet_setsockopt+0x10/0x10 [ 667.547630][T16890] ? do_sock_setsockopt+0x3e2/0x720 [ 667.552828][T16890] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 667.558371][T16890] ? fdget_pos+0x265/0x320 [ 667.562781][T16890] ksys_read+0x183/0x2b0 [ 667.567016][T16890] ? __pfx_ksys_read+0x10/0x10 [ 667.571772][T16890] ? do_syscall_64+0x100/0x230 [ 667.576548][T16890] ? do_syscall_64+0xb6/0x230 [ 667.581220][T16890] do_syscall_64+0xf3/0x230 [ 667.585723][T16890] ? clear_bhb_loop+0x35/0x90 [ 667.590396][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.596290][T16890] RIP: 0033:0x7f7f5a97ca3c [ 667.600698][T16890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 667.620298][T16890] RSP: 002b:00007f7f5b6bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.628705][T16890] RAX: ffffffffffffffda RBX: 00007f7f5ab35f80 RCX: 00007f7f5a97ca3c [ 667.636686][T16890] RDX: 000000000000000f RSI: 00007f7f5b6bc0a0 RDI: 0000000000000004 [ 667.644667][T16890] RBP: 00007f7f5b6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 667.652646][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.660628][T16890] R13: 0000000000000000 R14: 00007f7f5ab35f80 R15: 00007f7f5ac5fa28 [ 667.668617][T16890] [ 667.672627][ T5288] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 667.713637][ T5300] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 667.721038][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 667.759353][ T5300] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.787358][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 667.832853][T11303] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 667.841041][ T5300] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.872284][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 667.879554][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 667.883681][ T5300] usb 3-1: string descriptor 0 read error: -22 [ 667.890703][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 667.915481][ T5288] usb 5-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=53.f0 [ 667.924645][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.932694][ T5288] usb 5-1: Product: syz [ 667.936946][ T5288] usb 5-1: Manufacturer: syz [ 667.939071][ T5300] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 667.941551][ T5288] usb 5-1: SerialNumber: syz [ 667.973362][ T5288] usb 5-1: config 0 descriptor?? [ 667.983058][ T5288] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 667.992837][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 668.004806][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 668.030529][T11303] usb 2-1: config 0 has no interfaces? [ 668.036913][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 668.047009][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 668.062327][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 668.082410][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 668.092505][ T5300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.116244][T11303] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 668.135214][ T5288] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 668.146197][T11303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.150673][ T5300] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 668.183959][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 668.192014][T11303] usb 2-1: Product: syz [ 668.200507][T11303] usb 2-1: Manufacturer: syz [ 668.209668][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 668.217877][T11303] usb 2-1: SerialNumber: syz [ 668.228789][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 668.238899][T11303] usb 2-1: config 0 descriptor?? [ 668.260380][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 668.271863][ T5288] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 668.297048][ T5288] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 668.315540][ T5288] usb 5-1: USB disconnect, device number 87 [ 668.346125][ T5288] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 668.399952][ T5288] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 668.413226][T16901] ------------[ cut here ]------------ [ 668.418721][T16901] WARNING: CPU: 1 PID: 16901 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 668.428026][T16901] Modules linked in: [ 668.431951][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.3.2348 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 668.442819][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.452971][T16901] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 668.459158][T16901] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 9f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 51 e9 b9 ff e9 3b ff ff ff e8 47 e9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 668.479200][T16901] RSP: 0018:ffffc900098b7930 EFLAGS: 00010283 [ 668.485355][T16901] RAX: ffffffff81dafe09 RBX: 00000000da6b5000 RCX: 0000000000040000 [ 668.493489][T16901] RDX: ffffc90004209000 RSI: 000000000000082b RDI: 000000000000082c [ 668.501583][T16901] RBP: 0000000000000000 R08: ffffffff81dafdf1 R09: 00000000ffffffff [ 668.509647][T16901] R10: ffffc900098b77a0 R11: fffff52001316ef9 R12: 00000000da6b5000 [ 668.517750][T16901] R13: ffffc900098b7a60 R14: 00000000ffffffff R15: 0000000000000000 [ 668.525788][T16901] FS: 00007f7f5b6bc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 668.534810][T16901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.541422][T16901] CR2: 0000001b2fc1fffc CR3: 0000000048902000 CR4: 00000000003526f0 [ 668.549531][T16901] DR0: 0000000000000005 DR1: 0000000000000000 DR2: 0000000000000002 [ 668.557585][T16901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 668.558469][T16903] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.565611][T16901] Call Trace: [ 668.565625][T16901] [ 668.565637][T16901] ? __warn+0x168/0x4e0 [ 668.565666][T16901] ? __kvmalloc_node_noprof+0x17a/0x190 [ 668.565692][T16901] ? report_bug+0x2b3/0x500 [ 668.565730][T16901] ? __kvmalloc_node_noprof+0x17a/0x190 [ 668.565757][T16901] ? handle_bug+0x60/0x90 [ 668.600708][T16903] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.605018][T16901] ? exc_invalid_op+0x1a/0x50 [ 668.605053][T16901] ? asm_exc_invalid_op+0x1a/0x20 [ 668.605082][T16901] ? __kvmalloc_node_noprof+0x161/0x190 [ 668.605106][T16901] ? __kvmalloc_node_noprof+0x179/0x190 [ 668.605132][T16901] ? __kvmalloc_node_noprof+0x17a/0x190 [ 668.605160][T16901] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 668.605193][T16901] ? tpg_update_mv_step+0x361/0x4f0 [ 668.605231][T16901] vivid_update_format_cap+0x133c/0x2090 [ 668.605282][T16901] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 668.605318][T16901] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 668.605379][T16901] __video_do_ioctl+0xc23/0xdd0 [ 668.605426][T16901] ? __pfx___video_do_ioctl+0x10/0x10 [ 668.645562][T16903] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.647053][T16901] ? __might_fault+0xc6/0x120 [ 668.675864][T16903] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.679981][T16901] video_usercopy+0x89b/0x1180 [ 668.680030][T16901] ? __pfx___video_do_ioctl+0x10/0x10 [ 668.712609][T16901] ? __pfx_video_usercopy+0x10/0x10 [ 668.717854][T16901] ? __fget_files+0x29/0x470 [ 668.722525][T16901] ? __fget_files+0x3f3/0x470 [ 668.727230][T16901] v4l2_ioctl+0x189/0x1e0 [ 668.731572][T16901] ? __pfx_v4l2_ioctl+0x10/0x10 [ 668.736467][T16901] __se_sys_ioctl+0xf9/0x170 [ 668.741086][T16901] do_syscall_64+0xf3/0x230 [ 668.745711][T16901] ? clear_bhb_loop+0x35/0x90 [ 668.750393][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.756389][T16901] RIP: 0033:0x7f7f5a97dff9 [ 668.760828][T16901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.780491][T16901] RSP: 002b:00007f7f5b6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.788968][T16901] RAX: ffffffffffffffda RBX: 00007f7f5ab35f80 RCX: 00007f7f5a97dff9 [ 668.797001][T16901] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 668.804999][T16901] RBP: 00007f7f5a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 668.813112][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.821116][T16901] R13: 0000000000000000 R14: 00007f7f5ab35f80 R15: 00007f7f5ac5fa28 [ 668.829160][T16901] [ 668.832231][T16901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 668.839506][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.3.2348 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 668.850258][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.860320][T16901] Call Trace: [ 668.863629][T16901] [ 668.866557][T16901] dump_stack_lvl+0x241/0x360 [ 668.871242][T16901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.876449][T16901] ? __pfx__printk+0x10/0x10 [ 668.881059][T16901] ? _printk+0xd5/0x120 [ 668.885225][T16901] ? __init_begin+0x41000/0x41000 [ 668.890249][T16901] ? vscnprintf+0x5d/0x90 [ 668.894579][T16901] panic+0x349/0x880 [ 668.898474][T16901] ? __warn+0x177/0x4e0 [ 668.902630][T16901] ? __pfx_panic+0x10/0x10 [ 668.907046][T16901] ? show_trace_log_lvl+0x3b2/0x410 [ 668.912264][T16901] __warn+0x34b/0x4e0 [ 668.916254][T16901] ? __kvmalloc_node_noprof+0x17a/0x190 [ 668.921792][T16901] report_bug+0x2b3/0x500 [ 668.926121][T16901] ? __kvmalloc_node_noprof+0x17a/0x190 [ 668.931668][T16901] handle_bug+0x60/0x90 [ 668.935853][T16901] exc_invalid_op+0x1a/0x50 [ 668.940357][T16901] asm_exc_invalid_op+0x1a/0x20 [ 668.945207][T16901] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 668.951380][T16901] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 9f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 51 e9 b9 ff e9 3b ff ff ff e8 47 e9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 668.970992][T16901] RSP: 0018:ffffc900098b7930 EFLAGS: 00010283 [ 668.977067][T16901] RAX: ffffffff81dafe09 RBX: 00000000da6b5000 RCX: 0000000000040000 [ 668.985030][T16901] RDX: ffffc90004209000 RSI: 000000000000082b RDI: 000000000000082c [ 668.992993][T16901] RBP: 0000000000000000 R08: ffffffff81dafdf1 R09: 00000000ffffffff [ 669.000962][T16901] R10: ffffc900098b77a0 R11: fffff52001316ef9 R12: 00000000da6b5000 [ 669.008945][T16901] R13: ffffc900098b7a60 R14: 00000000ffffffff R15: 0000000000000000 [ 669.016932][T16901] ? __kvmalloc_node_noprof+0x161/0x190 [ 669.022483][T16901] ? __kvmalloc_node_noprof+0x179/0x190 [ 669.028031][T16901] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 669.034009][T16901] ? tpg_update_mv_step+0x361/0x4f0 [ 669.039297][T16901] vivid_update_format_cap+0x133c/0x2090 [ 669.044934][T16901] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 669.050923][T16901] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 669.056743][T16901] __video_do_ioctl+0xc23/0xdd0 [ 669.061610][T16901] ? __pfx___video_do_ioctl+0x10/0x10 [ 669.066999][T16901] ? __might_fault+0xc6/0x120 [ 669.071686][T16901] video_usercopy+0x89b/0x1180 [ 669.076479][T16901] ? __pfx___video_do_ioctl+0x10/0x10 [ 669.081849][T16901] ? __pfx_video_usercopy+0x10/0x10 [ 669.087052][T16901] ? __fget_files+0x29/0x470 [ 669.091643][T16901] ? __fget_files+0x3f3/0x470 [ 669.096331][T16901] v4l2_ioctl+0x189/0x1e0 [ 669.100680][T16901] ? __pfx_v4l2_ioctl+0x10/0x10 [ 669.105540][T16901] __se_sys_ioctl+0xf9/0x170 [ 669.110131][T16901] do_syscall_64+0xf3/0x230 [ 669.114625][T16901] ? clear_bhb_loop+0x35/0x90 [ 669.119295][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.125187][T16901] RIP: 0033:0x7f7f5a97dff9 [ 669.129594][T16901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.149199][T16901] RSP: 002b:00007f7f5b6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.157612][T16901] RAX: ffffffffffffffda RBX: 00007f7f5ab35f80 RCX: 00007f7f5a97dff9 [ 669.165583][T16901] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 669.173562][T16901] RBP: 00007f7f5a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 669.181530][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.189511][T16901] R13: 0000000000000000 R14: 00007f7f5ab35f80 R15: 00007f7f5ac5fa28 [ 669.197500][T16901] [ 669.200805][T16901] Kernel Offset: disabled [ 669.205142][T16901] Rebooting in 86400 seconds..