last executing test programs: 11.069528914s ago: executing program 2 (id=2671): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 10.493927091s ago: executing program 1 (id=2675): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 10.432151952s ago: executing program 2 (id=2676): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="ecfa2a"}) 10.241209564s ago: executing program 1 (id=2680): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="822f99743d", 0x5}], 0x2) 9.981268654s ago: executing program 3 (id=2682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17a}]}) 8.877477529s ago: executing program 2 (id=2684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 8.589553725s ago: executing program 3 (id=2685): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4b, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) 8.468789312s ago: executing program 3 (id=2686): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 7.99515665s ago: executing program 1 (id=2687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x70, 0x3a, 0xc0, 0x20, 0x458, 0x7006, 0x6991, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0x76, 0x98}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.798384326s ago: executing program 4 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe7}]}]}, 0x30}}, 0x0) 6.711837221s ago: executing program 3 (id=2689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)=@x86={0xa, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x6}) 6.350593642s ago: executing program 3 (id=2690): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0) 5.881659381s ago: executing program 1 (id=2692): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setfsgid(0x0) 5.406903842s ago: executing program 2 (id=2693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) 5.37138133s ago: executing program 4 (id=2694): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="ecfa2a"}) 5.371049419s ago: executing program 0 (id=2695): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3b0}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "cfb2"}]}, 0x4c}}, 0x0) 4.790798616s ago: executing program 0 (id=2696): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) 4.773311579s ago: executing program 2 (id=2697): openat$mice(0xffffffffffffff9c, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff44, &(0x7f0000000300)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup3(r1, r2, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 4.352135467s ago: executing program 4 (id=2698): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 4.21010537s ago: executing program 0 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x3c}}, 0x0) 4.009273656s ago: executing program 1 (id=2700): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.901069519s ago: executing program 4 (id=2701): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}]}}]}, 0xa4}}, 0x0) 3.800926795s ago: executing program 0 (id=2702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 3.687127941s ago: executing program 4 (id=2703): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x180, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/223, 0xdf) r7 = fsopen(&(0x7f0000000380)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet6(r8, &(0x7f00000027c0), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 3.619792026s ago: executing program 2 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a0001007265646972000000140000001100", @ANYRES16], 0xc4}}, 0x0) 3.561324552s ago: executing program 0 (id=2705): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x8a, &(0x7f00000000c0)=0xfffffffc, 0x4) 72.453369ms ago: executing program 0 (id=2706): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0) 49.515354ms ago: executing program 3 (id=2707): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setresuid(0xee01, 0xee00, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 5.564767ms ago: executing program 1 (id=2708): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e0001000200"], 0x8) 0s ago: executing program 4 (id=2709): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) kernel console output (not intermixed with test programs): out [ 2173.509169][T18726] team0 (unregistering): Port device team_slave_1 removed [ 2173.588460][T18726] team0 (unregistering): Port device team_slave_0 removed [ 2173.807805][T21055] Bluetooth: hci1: command tx timeout [ 2174.391225][T21048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2174.471491][T21048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2174.530529][T21052] team0: Port device team_slave_0 added [ 2174.581600][T21071] bridge0: port 1(bridge_slave_0) entered blocking state [ 2174.588951][T21071] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.596360][T21071] bridge_slave_0: entered allmulticast mode [ 2174.605302][T21071] bridge_slave_0: entered promiscuous mode [ 2174.637737][T21048] team0: Port device team_slave_0 added [ 2174.652764][T21052] team0: Port device team_slave_1 added [ 2174.659185][T21071] bridge0: port 2(bridge_slave_1) entered blocking state [ 2174.669697][T21071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.699752][T21071] bridge_slave_1: entered allmulticast mode [ 2174.708050][T21071] bridge_slave_1: entered promiscuous mode [ 2174.745300][T21048] team0: Port device team_slave_1 added [ 2174.801915][T21071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2174.864326][T21071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2174.885576][T21052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2174.893804][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2174.922184][T21052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2174.933135][T21055] Bluetooth: hci5: command tx timeout [ 2174.944267][T21052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2174.951214][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2174.981094][T21052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.008327][T21048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.016736][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.042971][T21048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.056331][T21048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.063383][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.089788][T21048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.100506][T21055] Bluetooth: hci0: command tx timeout [ 2175.197253][T21071] team0: Port device team_slave_0 added [ 2175.259996][T21052] hsr_slave_0: entered promiscuous mode [ 2175.275229][T21052] hsr_slave_1: entered promiscuous mode [ 2175.281737][T21052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2175.292284][T21052] Cannot create hsr debugfs directory [ 2175.303407][T21071] team0: Port device team_slave_1 added [ 2175.329913][T21048] hsr_slave_0: entered promiscuous mode [ 2175.340125][T21048] hsr_slave_1: entered promiscuous mode [ 2175.349153][T21048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2175.357429][T21048] Cannot create hsr debugfs directory [ 2175.496990][T21071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.504742][T21071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.534966][T21071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.669165][T18726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.700295][T21071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.709671][T21071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.738067][T21071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.840109][T18726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.882321][T21055] Bluetooth: hci1: command tx timeout [ 2175.981324][T18726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2176.021938][T21071] hsr_slave_0: entered promiscuous mode [ 2176.029827][T21071] hsr_slave_1: entered promiscuous mode [ 2176.041895][T21071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2176.051964][T21071] Cannot create hsr debugfs directory [ 2176.139419][T18726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2176.692947][T18726] bridge_slave_1: left allmulticast mode [ 2176.698672][T18726] bridge_slave_1: left promiscuous mode [ 2176.706111][T18726] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.719531][T18726] bridge_slave_0: left allmulticast mode [ 2176.725840][T18726] bridge_slave_0: left promiscuous mode [ 2176.731588][T18726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2177.290496][T18726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2177.302653][T18726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2177.319641][T18726] bond0 (unregistering): Released all slaves [ 2177.639703][T21052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2177.728294][T21048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.764460][T21052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2177.790224][T21052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2177.904981][T21048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.949508][T18726] hsr_slave_0: left promiscuous mode [ 2177.956832][T18726] hsr_slave_1: left promiscuous mode [ 2177.963596][T21055] Bluetooth: hci1: command tx timeout [ 2178.003869][T18726] veth1_macvtap: left promiscuous mode [ 2178.009497][T18726] veth0_macvtap: left promiscuous mode [ 2178.016210][T18726] veth1_vlan: left promiscuous mode [ 2178.021532][T18726] veth0_vlan: left promiscuous mode [ 2178.736391][T18726] team0 (unregistering): Port device team_slave_1 removed [ 2178.809716][T18726] team0 (unregistering): Port device team_slave_0 removed [ 2179.527047][T21052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2179.589019][T21048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.756087][T21048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.923149][T21052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2180.095436][T21052] 8021q: adding VLAN 0 to HW filter on device team0 [ 2180.139047][T21048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2180.163832][T21048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2180.226679][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.233915][T12606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2180.270005][T21048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2180.386539][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.393871][T12606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2180.418702][T21048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2180.535443][T21052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2180.837341][T21048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2180.899167][T21052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2180.918648][T21071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2180.945455][T21071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2180.966473][T21048] 8021q: adding VLAN 0 to HW filter on device team0 [ 2180.979702][T21071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2181.043632][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.050830][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.073375][T21071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2181.118797][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.126049][T18726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2181.390960][T21071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2181.457302][T21071] 8021q: adding VLAN 0 to HW filter on device team0 [ 2181.514499][T18726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.521691][T18726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.555235][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.562493][T18726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2181.689972][T21048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2181.698303][T21052] veth0_vlan: entered promiscuous mode [ 2181.743501][T21052] veth1_vlan: entered promiscuous mode [ 2181.842158][T21052] veth0_macvtap: entered promiscuous mode [ 2181.875294][T21052] veth1_macvtap: entered promiscuous mode [ 2181.903658][T21048] veth0_vlan: entered promiscuous mode [ 2181.956186][T21048] veth1_vlan: entered promiscuous mode [ 2181.973450][T21052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2181.984804][T21052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.014620][T21052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2182.047033][T21052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2182.072575][T21052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.094180][T21052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2182.157353][T21052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.176885][T21052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.187522][T21052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.201380][T21052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.231809][T21048] veth0_macvtap: entered promiscuous mode [ 2182.249514][T21048] veth1_macvtap: entered promiscuous mode [ 2182.267969][T21071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2182.310048][T21048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2182.320918][T21048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.333753][T21048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2182.349442][T21048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.361651][T21048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2182.407692][T21048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2182.439617][T21048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.452364][T21048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2182.463280][T21048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.475332][T21048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2182.520560][T21048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.529454][T21048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.542862][T21048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.556260][T21048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.631654][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2182.655529][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2182.739081][T21071] veth0_vlan: entered promiscuous mode [ 2182.760845][T18726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2182.789068][T18726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2182.805419][T21071] veth1_vlan: entered promiscuous mode [ 2182.845836][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2182.862823][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2183.473449][T12606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2183.882085][T12606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2184.135482][T21071] veth0_macvtap: entered promiscuous mode [ 2184.874331][T21071] veth1_macvtap: entered promiscuous mode [ 2185.305559][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.316869][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.331270][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2186.822475][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'. [ 2188.992107][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.053788][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2189.091154][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.150842][T21071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2189.190907][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.382264][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.452549][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.465784][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.272093][T21071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.308660][ T58] libceph: connect (1)[c::]:6789 error -101 [ 2192.315059][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 2192.322109][T21071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.453703][T21071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2192.928826][T12474] libceph: connect (1)[c::]:6789 error -101 [ 2192.990812][T12474] libceph: mon0 (1)[c::]:6789 connect error [ 2193.441532][T21250] ceph: No mds server is up or the cluster is laggy [ 2193.768944][T12474] libceph: connect (1)[c::]:6789 error -101 [ 2193.961601][T12474] libceph: mon0 (1)[c::]:6789 connect error [ 2195.204096][T12474] libceph: connect (1)[c::]:6789 error -101 [ 2195.278683][T12474] libceph: mon0 (1)[c::]:6789 connect error [ 2195.686926][T21071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.875789][T21071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.931818][T21071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.989867][T21071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.308730][ T29] audit: type=1326 audit(1726557019.303:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21277 comm="syz.1.2411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff34b7def9 code=0x0 [ 2196.514592][T21055] Bluetooth: hci5: command tx timeout [ 2200.166110][T12618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2200.252624][T12618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2200.594811][T21305] xt_HMARK: spi-set and port-set can't be combined [ 2203.879238][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2203.894202][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2203.989165][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.106534][ T8072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2205.134058][ T8072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2205.147766][ T8072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2205.178365][ T8072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2205.187711][ T8072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2205.195445][ T8072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2205.841191][ T29] audit: type=1326 audit(1726557028.833:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21324 comm="syz.4.2418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb146d7def9 code=0x0 [ 2208.915538][ T8072] Bluetooth: hci4: command tx timeout [ 2209.302586][T15390] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2209.470373][ T1046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.932104][ T8072] Bluetooth: hci0: command tx timeout [ 2210.980708][T21359] xt_HMARK: spi-set and port-set can't be combined [ 2211.002215][ T8072] Bluetooth: hci4: command tx timeout [ 2211.106593][ T1046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.743194][T21370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2426'. [ 2212.752426][T21370] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2426'. [ 2212.761486][T21370] netlink: 'syz.2.2426': attribute type 6 has an invalid length. [ 2212.769454][T21370] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2426'. [ 2213.082405][ T8072] Bluetooth: hci4: command tx timeout [ 2213.239152][ T1046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.399257][ T1046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.152431][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2215.162216][ T8072] Bluetooth: hci4: command tx timeout [ 2215.344244][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2215.370214][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2215.396324][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.415712][ T9] usb 1-1: config 0 descriptor?? [ 2215.695476][ T9] (null): keene_cmd_main failed (-71) [ 2215.776066][ T9] video4linux radio32: keene_cmd_main failed (-71) [ 2215.847216][ T9] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 2215.899659][ T9] usb 1-1: USB disconnect, device number 38 [ 2217.082877][ T8072] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2217.258449][ T8072] Bluetooth: hci5: Injecting HCI hardware error event [ 2217.618003][T21055] Bluetooth: hci5: hardware error 0x00 [ 2219.603465][ T25] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2219.701062][T21420] bad cache= option: none [ 2219.701062][T21420] [ 2219.723303][T21420] CIFS: VFS: bad cache= option: none [ 2221.047292][T21428] program syz.1.2435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2221.656040][T21055] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2222.032481][ T1046] bond0 (unregistering): Released all slaves [ 2222.083565][ T8072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2222.094054][ T8072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2222.120609][ T8072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2222.127997][T21429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2436'. [ 2222.154697][ T8072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2222.188160][T21429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2222.197123][ T8072] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2222.209777][T21429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2222.234801][ T8072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2222.245998][T21429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2222.258716][T21429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2222.359609][T21318] chnl_net:caif_netlink_parms(): no params data found [ 2223.562306][T21460] xt_HMARK: spi-set and port-set can't be combined [ 2224.362394][T21055] Bluetooth: hci6: command tx timeout [ 2224.468054][ T1046] hsr_slave_0: left promiscuous mode [ 2224.582161][ T1046] hsr_slave_1: left promiscuous mode [ 2224.683667][ T1046] veth1_macvtap: left promiscuous mode [ 2224.689475][ T1046] veth0_macvtap: left promiscuous mode [ 2224.697946][ T1046] veth1_vlan: left promiscuous mode [ 2224.752569][ T1046] veth0_vlan: left promiscuous mode [ 2224.802235][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2224.918584][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'. [ 2225.013166][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2225.040503][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2225.079725][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2225.125003][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2225.147895][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2225.159514][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2225.174297][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.001372][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.020002][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.035876][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.066434][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.083466][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.111648][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.144638][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.186578][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.201082][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.227495][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.239556][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.260313][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.288326][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.321918][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.322782][T21489] netlink: 'syz.0.2446': attribute type 3 has an invalid length. [ 2226.333642][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.346941][T21489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2446'. [ 2226.377863][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2226.387526][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2226.398244][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2226.441190][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2226.444554][T21055] Bluetooth: hci6: command tx timeout [ 2226.464348][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2226.483977][ T9] usb 2-1: Product: syz [ 2226.518582][ T9] usb 2-1: Manufacturer: syz [ 2226.535129][ T9] usb 2-1: SerialNumber: syz [ 2226.568164][ T9] usb 2-1: config 0 descriptor?? [ 2226.584029][ T9] yurex 2-1:0.0: Could not find endpoints [ 2226.811473][ T9] usb 2-1: USB disconnect, device number 52 [ 2228.402308][ T58] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2228.522540][T21055] Bluetooth: hci6: command tx timeout [ 2228.632108][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 2228.643236][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2228.657780][ T58] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2228.671072][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.679620][ T58] usb 1-1: Product: syz [ 2228.684310][ T58] usb 1-1: Manufacturer: syz [ 2228.691673][ T58] usb 1-1: SerialNumber: syz [ 2228.718853][ T58] usb 1-1: config 0 descriptor?? [ 2228.821164][ T58] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2228.959575][ T1046] team0 (unregistering): Port device wg2 removed [ 2229.024204][ T25] usb 1-1: USB disconnect, device number 39 [ 2229.046894][ T1116] usb 1-1: Failed to submit usb control message: -71 [ 2229.065481][ T1116] usb 1-1: unable to send the bmi data to the device: -71 [ 2229.076728][ T1116] usb 1-1: unable to get target info from device [ 2229.111334][ T1116] usb 1-1: could not get target info (-71) [ 2229.118329][ T1116] usb 1-1: could not probe fw (-71) [ 2229.926420][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 2229.954672][T21318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.975182][T21318] bridge_slave_0: entered allmulticast mode [ 2229.989011][T21318] bridge_slave_0: entered promiscuous mode [ 2230.062279][T21318] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.092483][ T5277] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2230.138605][T21318] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.166150][T21318] bridge_slave_1: entered allmulticast mode [ 2230.216865][T21318] bridge_slave_1: entered promiscuous mode [ 2230.308581][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 2230.328735][ T5277] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 2230.341829][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.351343][ T5277] usb 1-1: Product: syz [ 2230.356193][ T5277] usb 1-1: Manufacturer: syz [ 2230.360979][ T5277] usb 1-1: SerialNumber: syz [ 2230.368765][ T5277] usb 1-1: config 0 descriptor?? [ 2230.396634][ T5277] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 2230.542915][T21318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2230.568930][T21318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2230.603234][T21055] Bluetooth: hci6: command tx timeout [ 2230.723884][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 2230.801151][T21318] team0: Port device team_slave_0 added [ 2230.811388][ T5277] usb 1-1: USB disconnect, device number 40 [ 2230.872891][T21318] team0: Port device team_slave_1 added [ 2231.026396][T21318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2231.038132][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.108743][T21318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2231.123200][T21318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2231.130460][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.193776][T21318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.373765][ T1046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.487971][T21434] chnl_net:caif_netlink_parms(): no params data found [ 2231.759514][ T1046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.859599][T21318] hsr_slave_0: entered promiscuous mode [ 2231.885721][T21318] hsr_slave_1: entered promiscuous mode [ 2231.895823][T21318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2231.907194][T21318] Cannot create hsr debugfs directory [ 2232.002167][ T58] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2232.063215][ T1046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.214410][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 2232.228975][ T58] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.241657][ T1046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2232.243630][ T58] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2232.266330][ T58] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 2232.277163][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.299114][ T58] usb 1-1: config 0 descriptor?? [ 2232.431462][T21434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2232.439251][T21434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.447671][T21434] bridge_slave_0: entered allmulticast mode [ 2232.457100][T21434] bridge_slave_0: entered promiscuous mode [ 2232.466951][T21434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2232.474308][T21434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.481575][T21434] bridge_slave_1: entered allmulticast mode [ 2232.499084][T21434] bridge_slave_1: entered promiscuous mode [ 2232.570559][T21434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2232.625088][T21434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2232.672393][T15160] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2232.724342][T21434] team0: Port device team_slave_0 added [ 2232.755888][T21434] team0: Port device team_slave_1 added [ 2232.771618][ T58] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 2232.779305][ T58] kye 0003:0458:0138.000E: unknown main item tag 0x0 [ 2232.795232][ T58] kye 0003:0458:0138.000E: unexpected long global item [ 2232.810112][ T58] kye 0003:0458:0138.000E: parse failed [ 2232.817519][ T58] kye 0003:0458:0138.000E: probe with driver kye failed with error -22 [ 2232.848946][ T1046] bridge_slave_1: left allmulticast mode [ 2232.860416][ T1046] bridge_slave_1: left promiscuous mode [ 2232.867118][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2232.877460][ T1046] bridge_slave_0: left allmulticast mode [ 2232.883594][ T1046] bridge_slave_0: left promiscuous mode [ 2232.884245][T15160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2232.889392][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.913886][T15160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2232.945169][T15160] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 2232.959551][T15160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.977948][T15160] usb 2-1: Product: syz [ 2232.982547][T15160] usb 2-1: Manufacturer: syz [ 2232.987187][T15160] usb 2-1: SerialNumber: syz [ 2233.006009][T15160] usb 2-1: config 0 descriptor?? [ 2233.023455][T15160] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 2234.790671][ T5277] usb 2-1: USB disconnect, device number 53 [ 2234.886395][ T9] usb 1-1: USB disconnect, device number 41 [ 2235.415536][ T29] audit: type=1326 audit(1726557058.413:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.0.2458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdb617def9 code=0x0 [ 2235.559377][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2235.574683][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2235.590689][ T1046] bond0 (unregistering): Released all slaves [ 2235.619127][T21434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2235.626231][T21434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.653508][T21434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2235.764222][ T5277] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2235.818567][T21555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2458'. [ 2235.830174][T21556] sch_tbf: burst 88 is lower than device netdevsim0 mtu (1514) ! [ 2235.855703][T21434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2235.868666][T21434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2235.895668][T21434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.964089][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 2235.985114][ T5277] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 2235.999542][ T5277] usb 2-1: config 0 has no interface number 0 [ 2236.008749][ T5277] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2236.020400][ T5277] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2236.041282][ T5277] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 2236.049078][T21434] hsr_slave_0: entered promiscuous mode [ 2236.054638][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.064693][ T5277] usb 2-1: Product: syz [ 2236.068909][ T5277] usb 2-1: Manufacturer: syz [ 2236.076708][ T5277] usb 2-1: SerialNumber: syz [ 2236.089087][T21434] hsr_slave_1: entered promiscuous mode [ 2236.097160][ T5277] usb 2-1: config 0 descriptor?? [ 2236.102965][T21434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2236.110998][T21434] Cannot create hsr debugfs directory [ 2236.300122][T21551] infiniband syz2: set active [ 2236.307837][T21551] infiniband syz2: added team_slave_1 [ 2236.314185][T21551] syz2: rxe_create_cq: returned err = -12 [ 2236.322755][T21551] infiniband syz2: Couldn't create ib_mad CQ [ 2236.329760][T21551] infiniband syz2: Couldn't open port 1 [ 2236.390784][T21551] RDS/IB: syz2: added [ 2236.406821][T21551] smc: adding ib device syz2 with port count 1 [ 2236.414278][T21551] smc: ib device syz2 port 1 has pnetid [ 2236.454398][ T5277] usb 2-1: USB disconnect, device number 54 [ 2236.471275][ T1046] hsr_slave_0: left promiscuous mode [ 2236.490499][ T1046] hsr_slave_1: left promiscuous mode [ 2236.494388][T21396] udevd[21396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2236.524201][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2236.542855][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2236.561383][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2236.569065][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2236.602589][ T1046] veth1_macvtap: left promiscuous mode [ 2236.608207][ T1046] veth0_macvtap: left promiscuous mode [ 2236.614224][ T1046] veth1_vlan: left promiscuous mode [ 2236.619552][ T1046] veth0_vlan: left promiscuous mode [ 2237.352583][T12474] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2237.473409][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 2237.553820][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 2237.582185][T12474] usb 2-1: Using ep0 maxpacket: 32 [ 2237.597463][T12474] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2237.618851][T12474] usb 2-1: config 9 has too many interfaces: 151, using maximum allowed: 32 [ 2237.628478][T12474] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2237.638913][T12474] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 151 [ 2237.653349][T12474] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2237.662711][T12474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.670745][T12474] usb 2-1: Product: syz [ 2237.675153][T12474] usb 2-1: Manufacturer: syz [ 2237.679802][T12474] usb 2-1: SerialNumber: syz [ 2237.914818][T12474] usb 2-1: USB disconnect, device number 55 [ 2238.837473][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 2239.431610][T21318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2239.592363][T21318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2239.615354][T21318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2239.644343][T21318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2239.792460][ T5262] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 2239.980554][T21318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2240.005650][ T5262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2240.025108][ T5262] usb 2-1: not running at top speed; connect to a high speed hub [ 2240.072735][ T5262] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 2240.081515][ T5262] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.122201][ T5262] usb 2-1: config 11 has no interface number 0 [ 2240.128701][ T5262] usb 2-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2240.157260][T21318] 8021q: adding VLAN 0 to HW filter on device team0 [ 2240.176742][ T5262] usb 2-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2240.212252][ T5262] usb 2-1: config 11 interface 244 has no altsetting 0 [ 2240.221594][ T5262] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 2240.233430][ T5262] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2240.241524][ T5262] usb 2-1: Manufacturer: syz [ 2240.262061][ T5262] usb 2-1: SerialNumber: syz [ 2240.277364][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.284639][T12618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2240.351104][T21434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2240.388290][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.395524][T18726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2240.414071][T21434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2240.426030][T21434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2240.457024][T21434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2240.595637][ T5262] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 2240.612108][ T5262] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 2240.723976][ T5262] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 2240.774168][ T5262] usb 2-1: USB disconnect, device number 56 [ 2241.008275][T21434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2241.069536][T21434] 8021q: adding VLAN 0 to HW filter on device team0 [ 2241.111132][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.118376][T21385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2241.199700][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.206922][T12612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2241.385805][T21318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2242.736157][T21318] veth0_vlan: entered promiscuous mode [ 2242.824049][T21318] veth1_vlan: entered promiscuous mode [ 2244.086526][T21318] veth0_macvtap: entered promiscuous mode [ 2244.157374][T21318] veth1_macvtap: entered promiscuous mode [ 2245.687815][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.772123][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.812114][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.852505][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.899196][T21318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2245.973747][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2246.014647][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.057649][T21318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2246.082048][T21318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2246.103644][T21318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2246.138595][T21434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2246.155825][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2246.218269][T21318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.277195][T21318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.301646][T21318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.323432][T21318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.373593][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2246.399608][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2246.445721][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2246.511362][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2246.588598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.650500][ T9] usb 2-1: Product: syz [ 2246.665142][ T9] usb 2-1: Manufacturer: syz [ 2246.674667][T21434] veth0_vlan: entered promiscuous mode [ 2246.680628][ T9] usb 2-1: SerialNumber: syz [ 2246.736330][ T9] usb 2-1: config 0 descriptor?? [ 2246.758203][ T9] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 2246.796410][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2246.840442][T21385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.852174][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 2246.861459][T21434] veth1_vlan: entered promiscuous mode [ 2246.903646][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 2246.926361][T21385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2246.940313][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2246.968404][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2246.993270][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 2247.039570][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2247.040760][ T8072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2247.066246][ T8072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2247.097583][ T8072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2247.104653][ T9] usb 2-1: USB disconnect, device number 57 [ 2247.118699][ T8072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2247.131120][ T8072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2247.140834][T18726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.151061][ T8072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2247.158153][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2247.158917][ T9] keyspan 2-1:0.0: device disconnected [ 2247.318120][T21434] veth0_macvtap: entered promiscuous mode [ 2247.326083][T18726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2248.028255][T21434] veth1_macvtap: entered promiscuous mode [ 2248.194458][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.232050][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.252076][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.285766][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.322224][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.342011][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.368900][T21667] Failed to get privilege flags for destination (handle=0x0:0x0) [ 2248.374584][T21434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2248.449685][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.467527][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.478002][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.500369][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.511012][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.535052][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.574186][T21434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2249.677987][ T8072] Bluetooth: hci1: command tx timeout [ 2250.247459][T21434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.282596][T21434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.321139][T21434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.349850][T21434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.804883][T18726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.850554][T18726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.722979][T21055] Bluetooth: hci1: command tx timeout [ 2251.792502][T12618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2251.800398][T12618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2252.689758][T21695] can: request_module (can-proto-0) failed. [ 2253.205639][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.232252][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2253.350455][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.494546][ T9] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 2253.506377][ T9] usb 2-1: config 0 has no interface number 0 [ 2253.520464][ T9] usb 2-1: config 0 interface 126 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2253.537673][ T9] usb 2-1: config 0 interface 126 has no altsetting 0 [ 2253.559701][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 2253.571335][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.583579][ T9] usb 2-1: Product: syz [ 2253.588890][ T9] usb 2-1: Manufacturer: syz [ 2253.595428][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.596113][ T9] usb 2-1: SerialNumber: syz [ 2253.643940][ T9] usb 2-1: config 0 descriptor?? [ 2253.699275][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2253.802392][T21055] Bluetooth: hci1: command tx timeout [ 2253.883868][ T9] usb 2-1: USB disconnect, device number 58 [ 2253.892894][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.903642][T12618] usb 2-1: Failed to submit usb control message: -71 [ 2253.910901][T12618] usb 2-1: unable to send the bmi data to the device: -71 [ 2253.950615][T12618] usb 2-1: unable to get target info from device [ 2253.978229][T12618] usb 2-1: could not get target info (-71) [ 2254.008879][T12618] usb 2-1: could not probe fw (-71) [ 2254.094410][T15160] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2254.097897][T21654] chnl_net:caif_netlink_parms(): no params data found [ 2254.273540][ T2911] bridge_slave_1: left allmulticast mode [ 2254.279237][ T2911] bridge_slave_1: left promiscuous mode [ 2254.286785][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.300862][ T2911] bridge_slave_0: left allmulticast mode [ 2254.307118][ T2911] bridge_slave_0: left promiscuous mode [ 2254.315150][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.326669][T15160] usb 4-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 2254.337695][T15160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.346188][T15160] usb 4-1: Product: syz [ 2254.350583][T15160] usb 4-1: Manufacturer: syz [ 2254.355326][T15160] usb 4-1: SerialNumber: syz [ 2254.363120][T15160] usb 4-1: config 0 descriptor?? [ 2254.372992][T15160] usbtest 4-1:0.0: EZ-USB device [ 2254.378024][T15160] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2254.402180][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2254.615867][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 2254.625362][T15160] usb 4-1: USB disconnect, device number 25 [ 2254.636043][T21725] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 2254.648001][T21725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2490'. [ 2254.654873][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2254.683691][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2254.701358][ T25] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2254.713146][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.722118][ T25] usb 3-1: Product: syz [ 2254.726624][ T25] usb 3-1: Manufacturer: syz [ 2254.731383][ T25] usb 3-1: SerialNumber: syz [ 2254.739880][ T25] usb 3-1: config 0 descriptor?? [ 2254.975437][ T25] usb 3-1: USB disconnect, device number 35 [ 2255.893883][T21055] Bluetooth: hci1: command tx timeout [ 2256.264338][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2258.719415][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2258.740335][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2258.761883][ T2911] bond0 (unregistering): Released all slaves [ 2258.842138][ T5277] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2258.951218][T21654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2258.993985][T21654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.021716][T21654] bridge_slave_0: entered allmulticast mode [ 2259.082963][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 2259.102397][T21654] bridge_slave_0: entered promiscuous mode [ 2259.120288][ T5277] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=73.af [ 2259.154308][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.178285][ T5277] usb 3-1: Product: syz [ 2259.187852][ T5277] usb 3-1: Manufacturer: syz [ 2259.196826][ T5277] usb 3-1: SerialNumber: syz [ 2259.212916][T21654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.220104][T21654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.234754][ T5277] usb 3-1: config 0 descriptor?? [ 2259.250498][T21654] bridge_slave_1: entered allmulticast mode [ 2259.259070][ T5277] HFC-S_USB 3-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 2259.286958][T21654] bridge_slave_1: entered promiscuous mode [ 2259.342665][ T58] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2259.449476][ T5262] usb 3-1: USB disconnect, device number 36 [ 2259.478706][T21654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.550215][T21654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.561117][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 2259.599042][ T58] usb 2-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 2259.630450][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.738767][ T58] usb 2-1: config 0 descriptor?? [ 2259.757549][ T58] usb 2-1: bad CDC descriptors [ 2259.767315][ T58] cdc_acm 2-1:0.0: Zero length descriptor references [ 2259.794587][ T58] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 2259.840581][T21654] team0: Port device team_slave_0 added [ 2259.963101][T21654] team0: Port device team_slave_1 added [ 2260.014757][ T58] usb 2-1: USB disconnect, device number 59 [ 2260.199960][ T2911] hsr_slave_0: left promiscuous mode [ 2260.234318][ T2911] hsr_slave_1: left promiscuous mode [ 2260.268719][ T2911] veth1_macvtap: left promiscuous mode [ 2260.274562][ T2911] veth0_macvtap: left promiscuous mode [ 2260.280320][ T2911] veth1_vlan: left promiscuous mode [ 2260.289780][ T2911] veth0_vlan: left promiscuous mode [ 2260.383640][ T2911] infiniband syz2: set down [ 2260.392360][ T5262] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2260.404870][T15160] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2260.592449][ T5262] usb 4-1: Using ep0 maxpacket: 32 [ 2260.610731][ T5262] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2260.624415][T15160] usb 3-1: Using ep0 maxpacket: 8 [ 2260.629553][ T5262] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2260.644195][ T5262] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2260.655645][T15160] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 2260.656871][ T5262] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2260.678818][T15160] usb 3-1: config 0 has no interface number 0 [ 2260.702301][T15160] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=76.ff [ 2260.716529][ T5262] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2260.720799][T15160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.727947][ T5262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.766446][ T5262] usb 4-1: Product: syz [ 2260.768876][T15160] usb 3-1: config 0 descriptor?? [ 2260.771298][ T5262] usb 4-1: Manufacturer: syz [ 2260.785159][ T5262] usb 4-1: SerialNumber: syz [ 2260.856179][T21774] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2261.166576][ T5262] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 2261.458694][ T5262] usb 4-1: USB disconnect, device number 27 [ 2261.465231][T15160] usb 3-1: f81604_write: reg: 105 data: 29 failed: -EPROTO [ 2261.465270][T15160] f81604 3-1:0.211: Setting termination of CH#0 failed: -EPROTO [ 2261.465305][T15160] f81604 3-1:0.211: probe with driver f81604 failed with error -71 [ 2261.615409][T15160] usb 3-1: USB disconnect, device number 37 [ 2261.659480][T21740] udevd[21740]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2262.233554][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 2262.257592][ T35] smc: removing ib device syz2 [ 2262.357549][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 2262.545979][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2262.766986][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2262.776452][ T9] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2262.790566][ T9] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2262.824721][ T9] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2262.858024][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2262.884066][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.896289][ T9] usb 3-1: Product: syz [ 2262.901889][ T9] usb 3-1: Manufacturer: syz [ 2262.927094][ T9] usb 3-1: SerialNumber: syz [ 2262.942102][ T9] hso 3-1:6.0: Can't find BULK IN endpoint [ 2263.187549][ T5262] usb 3-1: USB disconnect, device number 38 [ 2263.408815][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 2263.432896][T21654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2263.466639][T21654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.518677][T21654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.591565][T21654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2263.600837][T21654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.633626][T21654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2264.991634][T21801] netlink: 'syz.3.2511': attribute type 3 has an invalid length. [ 2265.005324][T21801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2511'. [ 2265.055972][T21803] usb usb8: usbfs: process 21803 (syz.1.2512) did not claim interface 0 before use [ 2265.123089][ T58] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2265.157156][T21654] hsr_slave_0: entered promiscuous mode [ 2265.220548][T21654] hsr_slave_1: entered promiscuous mode [ 2265.297469][T21654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2265.340674][T21654] Cannot create hsr debugfs directory [ 2265.353334][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 2265.396604][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2265.416337][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2265.434525][ T58] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2265.466333][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.531096][ T58] usb 3-1: config 0 descriptor?? [ 2265.590647][ T58] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 2265.770417][T21817] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2265.820510][T21816] netlink: 'syz.1.2515': attribute type 3 has an invalid length. [ 2265.843950][T21816] netlink: 'syz.1.2515': attribute type 3 has an invalid length. [ 2265.871374][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 2265.962130][ T25] usb 3-1: USB disconnect, device number 39 [ 2266.075459][T21816] netlink: 'syz.1.2515': attribute type 1 has an invalid length. [ 2266.576657][T21831] netlink: 'syz.1.2519': attribute type 3 has an invalid length. [ 2267.218373][T15403] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2267.330420][T21845] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2267.455430][T15403] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2267.463966][T21848] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2267.473152][T15403] usb 3-1: config 0 has no interface number 0 [ 2267.488669][T15403] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2267.514239][T15403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.554936][T15403] usb 3-1: Product: syz [ 2267.583097][T15403] usb 3-1: Manufacturer: syz [ 2267.603254][T15403] usb 3-1: SerialNumber: syz [ 2267.636220][T15403] usb 3-1: config 0 descriptor?? [ 2267.665638][T15403] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 2267.846856][T21858] netlink: 'syz.1.2528': attribute type 27 has an invalid length. [ 2268.117295][ T5277] usb 3-1: USB disconnect, device number 40 [ 2275.266707][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 2279.904426][T21654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2280.066536][T21654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2280.135299][T21654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2280.195379][T21654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2281.541471][ T8072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2281.555527][ T8072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2281.564446][ T8072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2281.575727][ T8072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2281.583765][ T8072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2281.607169][ T8072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2281.726007][ T8072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2281.760114][ T8072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2281.769103][ T8072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2281.841474][ T8072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2281.862948][T15450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2281.878485][T15450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2281.887233][T15450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2281.918909][T21903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2281.928496][T21903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2281.941968][T21903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2281.957996][T21903] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2281.976846][T21903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2282.062070][ T8072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2282.080097][ T8072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2282.084458][T12635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.100551][ T8072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2282.109670][ T8072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2282.119043][ T8072] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2282.130855][ T8072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2282.291866][T12635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.415990][T12635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.551809][T12635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.630240][T21654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2282.874444][T21654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2283.056440][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.063617][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2283.170091][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.177335][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2283.577645][T21904] chnl_net:caif_netlink_parms(): no params data found [ 2283.595292][T12635] bridge_slave_1: left allmulticast mode [ 2283.601249][T12635] bridge_slave_1: left promiscuous mode [ 2283.608603][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.619867][T12635] bridge_slave_0: left allmulticast mode [ 2283.626249][T12635] bridge_slave_0: left promiscuous mode [ 2283.632012][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.725543][T21903] Bluetooth: hci0: command tx timeout [ 2283.968584][T21903] Bluetooth: hci2: command tx timeout [ 2284.125560][T21903] Bluetooth: hci4: command tx timeout [ 2284.205611][T21903] Bluetooth: hci5: command tx timeout [ 2284.513022][T12635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2284.529276][T12635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2284.544784][T12635] bond0 (unregistering): Released all slaves [ 2284.644831][T21900] chnl_net:caif_netlink_parms(): no params data found [ 2284.980330][T21894] chnl_net:caif_netlink_parms(): no params data found [ 2285.011558][T21895] chnl_net:caif_netlink_parms(): no params data found [ 2285.046733][T21904] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.053984][T21904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.061512][T21904] bridge_slave_0: entered allmulticast mode [ 2285.069894][T21904] bridge_slave_0: entered promiscuous mode [ 2285.194163][T21904] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.205520][T21904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.212797][T21904] bridge_slave_1: entered allmulticast mode [ 2285.221254][T21904] bridge_slave_1: entered promiscuous mode [ 2285.329229][T21900] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.345512][T21900] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.352952][T21900] bridge_slave_0: entered allmulticast mode [ 2285.362246][T21900] bridge_slave_0: entered promiscuous mode [ 2285.371591][T21900] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.379416][T21900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.388255][T21900] bridge_slave_1: entered allmulticast mode [ 2285.395866][T21900] bridge_slave_1: entered promiscuous mode [ 2285.415069][T12635] hsr_slave_0: left promiscuous mode [ 2285.424499][T12635] hsr_slave_1: left promiscuous mode [ 2285.434405][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2285.442058][T12635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.451247][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.461636][T12635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.491897][T12635] veth1_macvtap: left promiscuous mode [ 2285.497603][T12635] veth0_macvtap: left promiscuous mode [ 2285.503215][T12635] veth1_vlan: left promiscuous mode [ 2285.508891][T12635] veth0_vlan: left promiscuous mode [ 2285.816864][T21903] Bluetooth: hci0: command tx timeout [ 2286.047510][T21903] Bluetooth: hci2: command tx timeout [ 2286.238574][T21903] Bluetooth: hci4: command tx timeout [ 2286.299434][T21903] Bluetooth: hci5: command tx timeout [ 2286.389226][T12635] team0 (unregistering): Port device team_slave_1 removed [ 2286.482491][T12635] team0 (unregistering): Port device team_slave_0 removed [ 2287.374528][T21904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.492953][T21904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.514462][T21900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.533365][T21900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.567905][T21894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.575113][T21894] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.595748][T21894] bridge_slave_0: entered allmulticast mode [ 2287.602836][T21894] bridge_slave_0: entered promiscuous mode [ 2287.624064][T21894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.634348][T21894] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.642708][T21894] bridge_slave_1: entered allmulticast mode [ 2287.651361][T21894] bridge_slave_1: entered promiscuous mode [ 2287.658482][T21895] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.666575][T21895] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.673869][T21895] bridge_slave_0: entered allmulticast mode [ 2287.681605][T21895] bridge_slave_0: entered promiscuous mode [ 2287.822671][T21895] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.836803][T21895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.844142][T21895] bridge_slave_1: entered allmulticast mode [ 2287.861402][T21895] bridge_slave_1: entered promiscuous mode [ 2287.920676][T21903] Bluetooth: hci0: command tx timeout [ 2287.944267][T21904] team0: Port device team_slave_0 added [ 2287.962973][T21900] team0: Port device team_slave_0 added [ 2287.980678][T21894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2288.000577][T21894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2288.032123][T21904] team0: Port device team_slave_1 added [ 2288.078134][T21900] team0: Port device team_slave_1 added [ 2288.134644][T21895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2288.148804][T21903] Bluetooth: hci2: command tx timeout [ 2288.186795][T21904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2288.193873][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.224324][T21904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2288.241701][T21904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2288.265864][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.295859][T21903] Bluetooth: hci4: command tx timeout [ 2288.343650][T21904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.369039][T21903] Bluetooth: hci5: command tx timeout [ 2288.435088][T21894] team0: Port device team_slave_0 added [ 2288.462976][T21895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2288.521254][T21900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2288.540852][T21900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.576093][T21900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2288.612388][T21900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2288.623886][T21900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.662010][T21900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.677006][T21894] team0: Port device team_slave_1 added [ 2288.868820][T21894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2288.893735][T21894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.934543][T21894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2288.948616][T21894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2288.955817][T21894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2288.981912][T21894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2289.002893][T21895] team0: Port device team_slave_0 added [ 2289.028304][T21904] hsr_slave_0: entered promiscuous mode [ 2289.034873][T21904] hsr_slave_1: entered promiscuous mode [ 2289.043017][T21904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2289.050850][T21904] Cannot create hsr debugfs directory [ 2289.090715][T21895] team0: Port device team_slave_1 added [ 2289.138945][T21654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2289.233202][T21895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2289.243110][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2289.276548][T21895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2289.343760][T21900] hsr_slave_0: entered promiscuous mode [ 2289.358995][T21900] hsr_slave_1: entered promiscuous mode [ 2289.375304][T21900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2289.385304][T21900] Cannot create hsr debugfs directory [ 2289.483321][T21895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2289.503644][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2289.532453][T21895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2289.590079][T21894] hsr_slave_0: entered promiscuous mode [ 2289.600299][T21894] hsr_slave_1: entered promiscuous mode [ 2289.608036][T21894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2289.615640][T21894] Cannot create hsr debugfs directory [ 2289.767542][T12635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2289.966259][T21903] Bluetooth: hci0: command tx timeout [ 2289.978871][T12635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.107752][T21895] hsr_slave_0: entered promiscuous mode [ 2290.114590][T21895] hsr_slave_1: entered promiscuous mode [ 2290.121504][T21895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2290.137461][T21895] Cannot create hsr debugfs directory [ 2290.201491][T12635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.216312][T21903] Bluetooth: hci2: command tx timeout [ 2290.351688][T12635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.371191][T21654] veth0_vlan: entered promiscuous mode [ 2290.376391][T21903] Bluetooth: hci4: command tx timeout [ 2290.446399][T21903] Bluetooth: hci5: command tx timeout [ 2290.499981][T21654] veth1_vlan: entered promiscuous mode [ 2290.972010][T12635] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.014255][T21654] veth0_macvtap: entered promiscuous mode [ 2291.035134][T21654] veth1_macvtap: entered promiscuous mode [ 2291.140594][T21894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.213940][T12635] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.268710][T21894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.358416][T12635] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.463520][T21894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.502774][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.525809][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.539415][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.559855][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.581270][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.596344][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.609034][T21654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.657755][T21894] bond0: (slave netdevsim0): Releasing backup interface [ 2291.674464][T21894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.759075][T12635] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.800265][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.813594][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.830118][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.840989][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.851479][T21654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2291.862255][T21654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.874437][T21654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.899286][T21654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.908453][T21654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.919303][T21654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.928351][T21654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.309398][T12635] bridge_slave_1: left allmulticast mode [ 2292.315291][T12635] bridge_slave_1: left promiscuous mode [ 2292.336966][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.355932][T12635] bridge_slave_0: left allmulticast mode [ 2292.361958][T12635] bridge_slave_0: left promiscuous mode [ 2292.370509][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.390140][T12635] bridge_slave_1: left allmulticast mode [ 2292.396979][T12635] bridge_slave_1: left promiscuous mode [ 2292.402777][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.413699][T12635] bridge_slave_0: left allmulticast mode [ 2292.419952][T12635] bridge_slave_0: left promiscuous mode [ 2292.425749][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.137974][T12635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.151614][T12635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.163039][T12635] bond0 (unregistering): Released all slaves [ 2294.395937][T12635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.408779][T12635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.425122][T12635] bond0 (unregistering): Released all slaves [ 2294.688722][T12635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2294.708974][T12635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2294.724275][T12635] bond0 (unregistering): Released all slaves [ 2294.738691][T12606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.758911][T12606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2294.792763][T21894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2294.822967][T21894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2295.128162][T21894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2295.138981][T21894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2295.256661][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.283938][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.898506][T21894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2295.913233][T22053] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2472'. [ 2295.947440][T22053] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2296.108725][T21894] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.246022][T21900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2296.481206][T12635] hsr_slave_0: left promiscuous mode [ 2296.488505][T12635] hsr_slave_1: left promiscuous mode [ 2296.533063][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2296.557032][T12635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.566161][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2296.574784][T12635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.603108][T12635] hsr_slave_0: left promiscuous mode [ 2296.610288][T12635] hsr_slave_1: left promiscuous mode [ 2296.617322][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2296.637045][T12635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.647902][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2296.665635][T12635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.699063][T12635] hsr_slave_0: left promiscuous mode [ 2296.735283][T12635] hsr_slave_1: left promiscuous mode [ 2296.942625][T12635] veth1_macvtap: left promiscuous mode [ 2296.957640][T12635] veth0_macvtap: left promiscuous mode [ 2296.963430][T12635] veth1_vlan: left promiscuous mode [ 2296.977797][T12635] veth0_vlan: left promiscuous mode [ 2296.985351][T12635] veth1_macvtap: left promiscuous mode [ 2296.992140][T12635] veth0_macvtap: left promiscuous mode [ 2296.997941][T12635] veth1_vlan: left promiscuous mode [ 2297.003522][T12635] veth0_vlan: left promiscuous mode [ 2297.012817][T12635] veth1_macvtap: left promiscuous mode [ 2297.018761][T12635] veth0_macvtap: left promiscuous mode [ 2297.024373][T12635] veth1_vlan: left promiscuous mode [ 2297.031209][T12635] veth0_vlan: left promiscuous mode [ 2300.449488][T12635] team0 (unregistering): Port device team_slave_1 removed [ 2300.555619][T12635] team0 (unregistering): Port device team_slave_0 removed [ 2301.297859][T22088] Falling back ldisc for ttyprintk. [ 2302.374451][T12635] team0 (unregistering): Port device team_slave_1 removed [ 2302.456917][T12635] team0 (unregistering): Port device team_slave_0 removed [ 2303.927126][T12635] team_slave_1 (unregistering): left promiscuous mode [ 2303.946169][T12635] team0 (unregistering): Port device team_slave_1 removed [ 2304.024180][T12635] team_slave_0 (unregistering): left promiscuous mode [ 2304.035260][T12635] team0 (unregistering): Port device team_slave_0 removed [ 2304.822080][T21900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2304.833444][T21900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2304.957491][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.964724][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2305.006804][T21900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2305.040443][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.047659][T18726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2305.548612][T21894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2305.559320][T21894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2306.644889][T21900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2306.773396][T21895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2306.809563][T21895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2306.843779][T21894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2306.894628][T21895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2306.938943][T21895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2307.012832][T21900] 8021q: adding VLAN 0 to HW filter on device team0 [ 2307.216682][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2307.224316][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2307.254166][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.261387][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2307.499539][T21904] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2307.548843][T21904] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2307.643323][T21904] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2307.720538][T21904] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2307.816189][T21894] veth0_vlan: entered promiscuous mode [ 2307.901578][T21894] veth1_vlan: entered promiscuous mode [ 2308.007266][T21895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2308.095957][T12635] IPVS: stop unused estimator thread 0... [ 2308.137111][T21895] 8021q: adding VLAN 0 to HW filter on device team0 [ 2308.275791][T21894] veth0_macvtap: entered promiscuous mode [ 2308.325436][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.332676][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2308.376399][T21894] veth1_macvtap: entered promiscuous mode [ 2308.452016][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.459244][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2308.530782][T21894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.548124][T21894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.568230][T21894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.584848][T21894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.597071][T21894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2308.674977][T21894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2308.689796][T21894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.700673][T21894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2308.711682][T21894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.730433][T21894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2308.775166][T21900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2308.799578][T21894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2308.808957][T21894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2308.823483][T21894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2308.832453][T21894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2308.905296][T21895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2309.151362][T21904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2309.180809][T21900] veth0_vlan: entered promiscuous mode [ 2309.232271][T21900] veth1_vlan: entered promiscuous mode [ 2309.273042][T21904] 8021q: adding VLAN 0 to HW filter on device team0 [ 2309.366724][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2309.390831][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2309.441170][T18726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.448405][T18726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2309.475872][T18726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.483145][T18726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2309.592002][T12606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2309.610159][T12606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2309.620677][T21900] veth0_macvtap: entered promiscuous mode [ 2309.652644][T21895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2309.672719][T21900] veth1_macvtap: entered promiscuous mode [ 2309.806167][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.851274][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.868252][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.884537][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.898528][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.916023][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.929264][T21900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.956476][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.973376][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.978432][ T5277] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2309.988692][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.010538][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.028879][T21900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.045924][T21900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.060155][T21900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2310.104732][T21900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.116280][T21900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.125642][T21900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.136283][T21900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.160735][ T7605] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2310.199244][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 2310.206614][T21895] veth0_vlan: entered promiscuous mode [ 2310.215112][ T5277] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2310.234597][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.259203][ T5277] usb 1-1: Product: syz [ 2310.263445][ T5277] usb 1-1: Manufacturer: syz [ 2310.268083][ T5277] usb 1-1: SerialNumber: syz [ 2310.278352][ T5277] usb 1-1: config 0 descriptor?? [ 2310.286778][ T5277] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 2310.358897][T21895] veth1_vlan: entered promiscuous mode [ 2310.382839][ T7605] usb 2-1: not running at top speed; connect to a high speed hub [ 2310.420216][ T7605] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 2310.430793][ T7605] usb 2-1: config 11 has no interface number 0 [ 2310.449358][ T7605] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2310.494669][ T7605] usb 2-1: config 11 interface 95 has no altsetting 0 [ 2310.529584][ T7605] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 2310.543796][T12635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.554821][ T7605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.576385][ T7605] usb 2-1: Product: syz [ 2310.589380][T12635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.606974][ T7605] usb 2-1: Manufacturer: syz [ 2310.613832][ T7605] usb 2-1: SerialNumber: syz [ 2310.639858][T22179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2310.709634][T12606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.726631][ T5277] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 2310.735763][T12606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.774651][T21895] veth0_macvtap: entered promiscuous mode [ 2310.821625][T21904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2310.843712][T21895] veth1_macvtap: entered promiscuous mode [ 2310.952642][ T7605] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 2310.961673][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.962156][ T25] usb 1-1: USB disconnect, device number 42 [ 2311.004752][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.025925][ T7605] usb 2-1: USB disconnect, device number 60 [ 2311.055577][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2311.069865][ T25] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 2311.107711][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.113066][ T25] visor 1-1:0.0: device disconnected [ 2311.175546][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2311.226524][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.268340][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2311.288480][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.317155][T21895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2311.384050][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2311.436925][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.460687][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2311.474451][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.493202][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2311.546941][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.557369][T21895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2311.577661][T21895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2311.598172][T21895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2311.621703][T21895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.675047][T21895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.704707][T21895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.751098][T21895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.409597][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.435627][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.538744][T12606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.538810][T12606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.542217][ T5276] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2313.697842][T21904] veth0_vlan: entered promiscuous mode [ 2313.737184][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2313.737224][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2313.737251][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2313.737299][ T5276] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2313.737355][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.740418][ T5276] usb 4-1: config 0 descriptor?? [ 2313.782074][T21904] veth1_vlan: entered promiscuous mode [ 2314.032259][T22244] netlink: 'syz.1.2566': attribute type 27 has an invalid length. [ 2314.150151][T21904] veth0_macvtap: entered promiscuous mode [ 2314.193385][T21904] veth1_macvtap: entered promiscuous mode [ 2314.239157][ T5276] redragon 0003:0C45:760B.000F: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 2314.344432][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2314.388519][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.403667][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2314.427108][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.437370][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2314.469171][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.488804][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2314.496913][T15403] usb 4-1: USB disconnect, device number 28 [ 2314.503336][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.517057][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2314.528586][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.544981][T21904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2314.582174][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.594726][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.605747][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.624197][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.634413][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.648852][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.662047][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.674995][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.685328][T21904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2314.696913][ T7605] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2314.721956][T21904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2314.735297][ T5276] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2314.747525][T21904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2314.774915][T21904] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.788080][T21904] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.805147][T21904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.814111][T21904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2314.903077][ T7605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.945838][ T7605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.946657][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.971147][ T7605] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2314.991410][ T7605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.007999][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2315.023369][ T5276] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 2315.024554][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.035038][ T7605] usb 1-1: config 0 descriptor?? [ 2315.064563][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.101178][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.110243][ T5276] usb 3-1: config 0 descriptor?? [ 2315.420599][T12618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2315.446912][T12618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2315.801659][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2315.818981][ T7605] zydacron 0003:13EC:0006.0011: item fetching failed at offset 4/5 [ 2315.892797][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2315.922487][ T7605] zydacron 0003:13EC:0006.0011: parse failed [ 2315.978448][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2315.992542][ T7605] zydacron 0003:13EC:0006.0011: probe with driver zydacron failed with error -22 [ 2316.026980][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.053336][T21903] Bluetooth: hci2: command tx timeout [ 2316.093305][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.119147][ T7605] usb 1-1: USB disconnect, device number 43 [ 2316.150898][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.182900][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.206517][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.222853][T22271] program syz.1.2578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2316.234422][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.247096][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.259525][T22190] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2316.267659][ T5276] waltop 0003:172F:0032.0010: unknown main item tag 0x0 [ 2316.293192][ T5276] waltop 0003:172F:0032.0010: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 2316.337335][ T5276] usb 3-1: USB disconnect, device number 41 [ 2316.448120][T22277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2580'. [ 2316.462422][T22190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.473717][T22190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.486557][T22190] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2316.503558][T22190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.519492][T22190] usb 4-1: config 0 descriptor?? [ 2316.554729][T22280] netlink: 'syz.4.2580': attribute type 3 has an invalid length. [ 2316.564407][T22280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2580'. [ 2316.977953][T22190] cypress 0003:04B4:DE61.0012: unknown main item tag 0x7 [ 2317.025364][T22190] cypress 0003:04B4:DE61.0012: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 2317.154616][T12474] usb 4-1: USB disconnect, device number 29 [ 2317.209125][T15403] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2317.421953][T15403] usb 1-1: Using ep0 maxpacket: 32 [ 2317.431001][T15403] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.455736][T15403] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2317.474497][T15403] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2317.486540][T15403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.521980][T15403] hub 1-1:4.0: USB hub found [ 2317.799281][T15403] hub 1-1:4.0: 2 ports detected [ 2317.988691][T15403] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 2318.030952][T15403] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 2318.044507][T22315] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 2318.070170][T22315] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.2596'. [ 2318.101687][T15403] usb 1-1: USB disconnect, device number 44 [ 2318.119038][T22315] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 2318.158013][T22315] netlink: 'syz.1.2596': attribute type 2 has an invalid length. [ 2318.178694][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 2318.361929][T22323] netlink: 'syz.3.2600': attribute type 3 has an invalid length. [ 2318.375959][T22323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2600'. [ 2318.510134][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2318.570085][T22330] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2591'. [ 2318.589260][T22330] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2318.698007][T22332] kernel read not supported for file /eth0 (pid: 22332 comm: syz.3.2603) [ 2318.739582][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.750829][ T29] audit: type=1800 audit(1726557141.726:619): pid=22332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2603" name="eth0" dev="mqueue" ino=113576 res=0 errno=0 [ 2318.778253][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2318.798391][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2318.820823][T22190] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2318.829294][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 2318.844195][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.866649][ T9] usb 3-1: config 0 descriptor?? [ 2318.989478][ T5277] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2319.029561][T22190] usb 2-1: Using ep0 maxpacket: 16 [ 2319.038930][T22190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2319.059348][T22190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2319.069133][T22190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2319.094371][T22190] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2319.103614][T22190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.127930][T22190] usb 2-1: config 0 descriptor?? [ 2319.189583][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 2319.197445][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2319.215501][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2319.227361][ T5277] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2319.247084][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.283356][ T5277] usb 1-1: config 0 descriptor?? [ 2319.334016][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 2319.352774][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 2319.361370][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 2319.368790][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 2319.377035][ T9] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 2319.390002][ T9] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 2319.588479][T22190] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input44 [ 2319.611079][ T9] usb 3-1: USB disconnect, device number 42 [ 2319.735738][ T5277] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 2319.780097][ T5277] konepure 0003:1E7D:2DB4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 2319.811428][T22190] microsoft 0003:045E:07DA.0014: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2319.856769][T22190] usb 2-1: USB disconnect, device number 61 [ 2319.972870][ T9] usb 1-1: USB disconnect, device number 45 [ 2320.315040][T22348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.339653][T21683] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2320.537295][T21683] usb 4-1: Using ep0 maxpacket: 16 [ 2320.564931][T21683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.601347][T21683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.796292][T21683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2320.810872][T21683] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 2321.401319][T21683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.432420][T21683] usb 4-1: config 0 descriptor?? [ 2321.639351][T22362] netlink: 'syz.1.2614': attribute type 3 has an invalid length. [ 2321.693342][T22362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2614'. [ 2328.772356][T21683] usbhid 4-1:0.0: can't add hid device: -32 [ 2328.811230][T21683] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 2328.927524][T21683] usb 4-1: USB disconnect, device number 30 [ 2329.551215][T21683] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2329.700653][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2329.708454][T15403] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2329.744543][T21683] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2329.773354][T21683] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2329.795277][T21683] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 2329.809179][T21683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.826767][T21683] usb 4-1: config 0 descriptor?? [ 2329.872199][T22390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2622'. [ 2329.910975][T15403] usb 3-1: Using ep0 maxpacket: 16 [ 2329.922074][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2329.938501][T15403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2329.960089][T22394] netlink: 'syz.4.2622': attribute type 3 has an invalid length. [ 2329.968228][T22394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2622'. [ 2329.968375][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2329.993935][T15403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.050298][T15403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2330.092700][ T9] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 2330.114870][T15403] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2330.125388][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.137578][T15403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.165003][ T9] usb 2-1: config 0 descriptor?? [ 2330.197544][T15403] usb 3-1: config 0 descriptor?? [ 2330.254609][T21683] aquacomputer_d5next 0003:0C70:F003.0016: unknown main item tag 0x0 [ 2330.294622][T21683] aquacomputer_d5next 0003:0C70:F003.0016: unknown main item tag 0x0 [ 2330.311249][T21683] aquacomputer_d5next 0003:0C70:F003.0016: unknown main item tag 0x0 [ 2330.325943][T21683] aquacomputer_d5next 0003:0C70:F003.0016: unknown main item tag 0x0 [ 2330.338243][T21683] aquacomputer_d5next 0003:0C70:F003.0016: unknown main item tag 0x0 [ 2330.395845][T21683] aquacomputer_d5next 0003:0C70:F003.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 2330.602532][T21683] usb 4-1: USB disconnect, device number 31 [ 2330.642620][ T9] elo 0003:04E7:0030.0017: unknown main item tag 0xd [ 2330.716223][ T9] elo 0003:04E7:0030.0017: hidraw1: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 2330.732171][T15403] microsoft 0003:045E:07DA.0018: unbalanced collection at end of report description [ 2330.772128][T15403] microsoft 0003:045E:07DA.0018: parse failed [ 2330.801711][T15403] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 2330.858113][T15403] usb 2-1: USB disconnect, device number 62 [ 2330.946934][T22404] netlink: 'syz.0.2628': attribute type 3 has an invalid length. [ 2330.954872][T22404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2628'. [ 2330.974789][T22190] usb 3-1: USB disconnect, device number 43 [ 2335.371254][T22439] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2636'. [ 2335.380698][T22439] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2336.532129][T21683] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2337.321522][T21683] usb 1-1: Using ep0 maxpacket: 8 [ 2337.805478][T21683] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2337.827222][T21683] usb 1-1: config 179 has no interface number 0 [ 2337.853303][T21683] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2337.893329][T21683] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2337.928357][T21683] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2337.992997][T21683] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2338.029160][T21683] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2338.072871][T22466] block nbd4: shutting down sockets [ 2338.100211][T21683] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2338.109838][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 2338.127851][T21683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2338.190228][T22453] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2338.431693][ T5277] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2338.814664][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2338.877596][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2338.928425][T22489] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2657'. [ 2338.938749][T22489] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2338.980763][T12474] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input46 [ 2339.268125][T22491] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2656'. [ 2339.278241][T22491] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2339.483992][T22190] usb 1-1: USB disconnect, device number 46 [ 2339.484106][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2339.497487][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2339.513154][ T5277] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 2339.523554][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.569626][ T5277] usb 2-1: config 0 descriptor?? [ 2339.584317][T22190] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2339.884828][T12612] bridge_slave_1: left allmulticast mode [ 2339.910897][T12612] bridge_slave_1: left promiscuous mode [ 2339.928745][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.976736][T12612] bridge_slave_0: left promiscuous mode [ 2339.993231][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2340.112324][ T5277] playstation 0003:054C:0BA0.0019: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 2340.451088][ T5277] playstation 0003:054C:0BA0.0019: Failed to retrieve feature with reportID 18: -71 [ 2340.481973][ T5277] playstation 0003:054C:0BA0.0019: Failed to retrieve DualShock4 pairing info: -71 [ 2340.491382][ T5277] playstation 0003:054C:0BA0.0019: Failed to get MAC address from DualShock4 [ 2340.595694][ T5277] playstation 0003:054C:0BA0.0019: Failed to create dualshock4. [ 2340.631694][ T5277] playstation 0003:054C:0BA0.0019: probe with driver playstation failed with error -71 [ 2340.651886][ T5277] usb 2-1: USB disconnect, device number 63 [ 2341.792728][T22512] netlink: 'syz.2.2666': attribute type 3 has an invalid length. [ 2341.822276][T22512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2666'. [ 2343.024264][T12612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2343.039085][T12612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2343.050743][T12612] bond0 (unregistering): Released all slaves [ 2343.069331][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2672'. [ 2343.625135][T22547] random: crng reseeded on system resumption [ 2344.420264][T12612] hsr_slave_0: left promiscuous mode [ 2344.513606][T12612] hsr_slave_1: left promiscuous mode [ 2344.540325][T22560] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2681'. [ 2344.603966][T22560] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 2344.690361][T12612] team_slave_1: left promiscuous mode [ 2344.721745][T12612] veth1_macvtap: left promiscuous mode [ 2344.779784][T12612] veth0_macvtap: left promiscuous mode [ 2344.790642][T12612] veth1_vlan: left promiscuous mode [ 2344.821492][T12612] veth0_vlan: left promiscuous mode [ 2344.979150][T22547] Unrecognized hibernate image header format! [ 2345.003358][T22547] PM: hibernation: Image mismatch: architecture specific data [ 2345.263303][ T5277] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2345.489414][ T5277] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2345.504504][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.538497][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.543028][T12474] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2345.550609][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.609032][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.634197][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.677774][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.686500][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.695890][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.731162][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.754202][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.755941][T12474] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.765119][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.805859][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.813655][T12474] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2345.827220][T12474] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2345.837079][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.837355][T12474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2345.875343][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.880330][T12474] usb 4-1: SerialNumber: syz [ 2345.895859][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.910040][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.932751][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.944702][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2345.953116][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2345.964898][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2345.976266][T15403] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2346.003404][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2346.017614][ T5277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2346.026921][ T5277] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2346.038638][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2346.049158][ T5277] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2346.060048][ T5277] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2346.068801][ T5277] usb 1-1: Product: syz [ 2346.073812][ T5277] usb 1-1: Manufacturer: syz [ 2346.085575][ T5277] usb 1-1: SerialNumber: syz [ 2346.093106][ T5277] usb 1-1: config 0 descriptor?? [ 2346.151313][T12474] usb 4-1: 0:2 : does not exist [ 2346.178690][T15403] usb 2-1: Using ep0 maxpacket: 32 [ 2346.185910][ T5277] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 2346.196534][T15403] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 2346.210430][T15403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.258220][T15403] usb 2-1: config 0 descriptor?? [ 2346.265706][T12474] usb 4-1: USB disconnect, device number 32 [ 2346.311575][T15403] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 2346.332223][T22416] udevd[22416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2346.530776][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 2346.562074][ T5277] usb 1-1: USB disconnect, device number 47 [ 2346.585504][ T5277] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 2346.760315][T12612] team0 (unregistering): Port device team_slave_1 removed [ 2347.129466][T15403] gspca_sunplus: reg_w_riv err -71 [ 2347.135362][T15403] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 2347.151489][T15403] usb 2-1: USB disconnect, device number 64 [ 2347.221354][T12612] bridge_slave_0 (unregistering): left allmulticast mode [ 2347.596435][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2347.782783][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2347.790359][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2347.818684][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2347.829725][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2347.840263][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2347.850670][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2347.864269][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2347.873613][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.896966][ T9] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 2348.570117][T22589] tipc: Started in network mode [ 2348.583432][T22589] tipc: Node identity ff, cluster identity 4711 [ 2348.593774][T22589] tipc: Enabling of bearer rejected, failed to enable media [ 2349.440265][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 2349.465895][T22601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2349.474365][T12612] IPVS: stop unused estimator thread 0... [ 2349.481123][T22601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2349.494173][T22603] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 2349.505559][T22603] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.2698'. [ 2349.527287][T22601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2349.537676][T22601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2349.553357][T22603] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 2349.614168][T22603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2698'. [ 2349.990210][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2350.215157][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2350.485771][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2350.498313][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2350.546133][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2350.573128][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.778925][ T9] usb 2-1: config 0 descriptor?? [ 2353.541304][ T25] usb 4-1: USB disconnect, device number 33 [ 2353.576750][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 2353.596229][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2353.643831][ T9] usb 2-1: USB disconnect, device number 65 [ 2353.795345][T22626] ================================================================== [ 2353.803468][T22626] BUG: KASAN: slab-use-after-free in smk_access+0xae/0x4e0 [ 2353.810716][T22626] Read of size 8 at addr ffff88805c8ffc60 by task syz.3.2707/22626 [ 2353.817527][T22627] Bluetooth: MGMT ver 1.23 [ 2353.818616][T22626] [ 2353.818629][T22626] CPU: 0 UID: 60928 PID: 22626 Comm: syz.3.2707 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2353.836168][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2353.846260][T22626] Call Trace: [ 2353.849574][T22626] [ 2353.852541][T22626] dump_stack_lvl+0x241/0x360 [ 2353.857266][T22626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2353.862508][T22626] ? __pfx__printk+0x10/0x10 [ 2353.867223][T22626] ? _printk+0xd5/0x120 [ 2353.871411][T22626] ? __virt_addr_valid+0x183/0x530 [ 2353.876559][T22626] ? __virt_addr_valid+0x183/0x530 [ 2353.881704][T22626] print_report+0x169/0x550 [ 2353.886258][T22626] ? __virt_addr_valid+0x183/0x530 [ 2353.891402][T22626] ? __virt_addr_valid+0x183/0x530 [ 2353.896547][T22626] ? __virt_addr_valid+0x45f/0x530 [ 2353.901706][T22626] ? __phys_addr+0xba/0x170 [ 2353.906249][T22626] ? smk_access+0xae/0x4e0 [ 2353.910718][T22626] kasan_report+0x143/0x180 [ 2353.915266][T22626] ? smk_access+0xae/0x4e0 [ 2353.919749][T22626] smk_access+0xae/0x4e0 [ 2353.924093][T22626] smack_watch_key+0x2f4/0x3a0 [ 2353.928897][T22626] ? __pfx_smack_watch_key+0x10/0x10 [ 2353.934225][T22626] ? __kasan_kmalloc+0x98/0xb0 [ 2353.939039][T22626] security_watch_key+0x86/0x250 [ 2353.944103][T22626] keyctl_watch_key+0x2b7/0x480 [ 2353.949020][T22626] __se_sys_keyctl+0x106/0xa50 [ 2353.953906][T22626] ? do_futex+0x33b/0x560 [ 2353.958274][T22626] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2353.963767][T22626] ? __pfx_do_futex+0x10/0x10 [ 2353.968522][T22626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2353.974553][T22626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2353.980922][T22626] ? do_syscall_64+0x100/0x230 [ 2353.985736][T22626] ? __x64_sys_keyctl+0x20/0xc0 [ 2353.990634][T22626] do_syscall_64+0xf3/0x230 [ 2353.995175][T22626] ? clear_bhb_loop+0x35/0x90 [ 2353.999884][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.005852][T22626] RIP: 0033:0x7f35dd77def9 [ 2354.010308][T22626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2354.030128][T22626] RSP: 002b:00007f35dd1ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2354.038567][T22626] RAX: ffffffffffffffda RBX: 00007f35dd935f80 RCX: 00007f35dd77def9 [ 2354.046558][T22626] RDX: 0000000000000004 RSI: 0000000002cb0f51 RDI: 0000000000000020 [ 2354.054549][T22626] RBP: 00007f35dd7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2354.062539][T22626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2354.070520][T22626] R13: 0000000000000000 R14: 00007f35dd935f80 R15: 00007ffdf7405ef8 [ 2354.078527][T22626] [ 2354.081565][T22626] [ 2354.083911][T22626] Allocated by task 15403: [ 2354.088340][T22626] kasan_save_track+0x3f/0x80 [ 2354.093041][T22626] __kasan_kmalloc+0x98/0xb0 [ 2354.097647][T22626] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 2354.104085][T22626] kvasprintf+0xdf/0x190 [ 2354.108346][T22626] kobject_set_name_vargs+0x61/0x120 [ 2354.113641][T22626] dev_set_name+0xd5/0x120 [ 2354.118063][T22626] usb_create_ep_devs+0x128/0x230 [ 2354.123123][T22626] usb_new_device+0x1168/0x19a0 [ 2354.128006][T22626] hub_event+0x2d6d/0x5150 [ 2354.132437][T22626] process_scheduled_works+0xa2c/0x1830 [ 2354.138009][T22626] worker_thread+0x870/0xd30 [ 2354.142617][T22626] kthread+0x2f0/0x390 [ 2354.146696][T22626] ret_from_fork+0x4b/0x80 [ 2354.151174][T22626] ret_from_fork_asm+0x1a/0x30 [ 2354.155965][T22626] [ 2354.158294][T22626] Freed by task 22190: [ 2354.162364][T22626] kasan_save_track+0x3f/0x80 [ 2354.167124][T22626] kasan_save_free_info+0x40/0x50 [ 2354.172198][T22626] poison_slab_object+0xe0/0x150 [ 2354.177150][T22626] __kasan_slab_free+0x37/0x60 [ 2354.181928][T22626] kfree+0x149/0x360 [ 2354.185881][T22626] kobject_put+0x272/0x480 [ 2354.190378][T22626] usb_remove_ep_devs+0x50/0x80 [ 2354.195242][T22626] usb_disconnect+0x5f9/0x950 [ 2354.199946][T22626] hub_event+0x1ebc/0x5150 [ 2354.204369][T22626] process_scheduled_works+0xa2c/0x1830 [ 2354.209925][T22626] worker_thread+0x870/0xd30 [ 2354.214529][T22626] kthread+0x2f0/0x390 [ 2354.218610][T22626] ret_from_fork+0x4b/0x80 [ 2354.223041][T22626] ret_from_fork_asm+0x1a/0x30 [ 2354.227835][T22626] [ 2354.230200][T22626] The buggy address belongs to the object at ffff88805c8ffc60 [ 2354.230200][T22626] which belongs to the cache kmalloc-8 of size 8 [ 2354.243916][T22626] The buggy address is located 0 bytes inside of [ 2354.243916][T22626] freed 8-byte region [ffff88805c8ffc60, ffff88805c8ffc68) [ 2354.257812][T22626] [ 2354.260142][T22626] The buggy address belongs to the physical page: [ 2354.266563][T22626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805c8ff560 pfn:0x5c8ff [ 2354.276633][T22626] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2354.284224][T22626] page_type: 0xfdffffff(slab) [ 2354.288912][T22626] raw: 00fff00000000000 ffff88801a841500 0000000000000000 dead000000000001 [ 2354.297506][T22626] raw: ffff88805c8ff560 000000008080006d 00000001fdffffff 0000000000000000 [ 2354.306097][T22626] page dumped because: kasan: bad access detected [ 2354.312519][T22626] page_owner tracks the page as allocated [ 2354.318259][T22626] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 21551, tgid 21549 (syz.0.2458), ts 2242523641014, free_ts 2242508714176 [ 2354.337804][T22626] post_alloc_hook+0x1f3/0x230 [ 2354.342586][T22626] get_page_from_freelist+0x2e4c/0x2f10 [ 2354.348146][T22626] __alloc_pages_noprof+0x256/0x6c0 [ 2354.353360][T22626] alloc_slab_page+0x5f/0x120 [ 2354.358051][T22626] allocate_slab+0x5a/0x2f0 [ 2354.362565][T22626] ___slab_alloc+0xcd1/0x14b0 [ 2354.367249][T22626] __slab_alloc+0x58/0xa0 [ 2354.371581][T22626] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 2354.378040][T22626] kstrdup+0x3a/0x80 [ 2354.381946][T22626] __kernfs_new_node+0x9d/0x870 [ 2354.386812][T22626] kernfs_new_node+0x137/0x240 [ 2354.391590][T22626] __kernfs_create_file+0x49/0x2e0 [ 2354.396707][T22626] sysfs_add_file_mode_ns+0x24a/0x310 [ 2354.402089][T22626] internal_create_group+0x7a7/0x11d0 [ 2354.407477][T22626] sysfs_create_groups+0x56/0x120 [ 2354.412861][T22626] ib_setup_port_attrs+0xfae/0x2440 [ 2354.418066][T22626] page last free pid 21613 tgid 21613 stack trace: [ 2354.424572][T22626] free_unref_folios+0x100f/0x1ac0 [ 2354.429697][T22626] folios_put_refs+0x76e/0x860 [ 2354.434470][T22626] free_pages_and_swap_cache+0x2ea/0x690 [ 2354.440129][T22626] tlb_flush_mmu+0x3a3/0x680 [ 2354.444725][T22626] tlb_finish_mmu+0xd4/0x200 [ 2354.449321][T22626] exit_mmap+0x44f/0xc80 [ 2354.453582][T22626] __mmput+0x115/0x380 [ 2354.457666][T22626] exec_mmap+0x651/0x6e0 [ 2354.461929][T22626] begin_new_exec+0x12c0/0x2050 [ 2354.466895][T22626] load_elf_binary+0x966/0x2680 [ 2354.471850][T22626] bprm_execve+0xaf8/0x1770 [ 2354.476366][T22626] do_execveat_common+0x55f/0x6f0 [ 2354.481483][T22626] __x64_sys_execve+0x92/0xb0 [ 2354.486174][T22626] do_syscall_64+0xf3/0x230 [ 2354.490680][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.496626][T22626] [ 2354.498955][T22626] Memory state around the buggy address: [ 2354.504617][T22626] ffff88805c8ffb00: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 2354.512680][T22626] ffff88805c8ffb80: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 2354.520919][T22626] >ffff88805c8ffc00: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 2354.529099][T22626] ^ [ 2354.536443][T22626] ffff88805c8ffc80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2354.544602][T22626] ffff88805c8ffd00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 2354.552752][T22626] ================================================================== [ 2354.589348][T22626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2354.596744][T22626] CPU: 0 UID: 60928 PID: 22626 Comm: syz.3.2707 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2354.607543][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2354.617634][T22626] Call Trace: [ 2354.620988][T22626] [ 2354.623947][T22626] dump_stack_lvl+0x241/0x360 [ 2354.628668][T22626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2354.633907][T22626] ? __pfx__printk+0x10/0x10 [ 2354.638541][T22626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2354.644577][T22626] ? vscnprintf+0x5d/0x90 [ 2354.648952][T22626] panic+0x349/0x860 [ 2354.652876][T22626] ? check_panic_on_warn+0x21/0xb0 [ 2354.658026][T22626] ? __pfx_panic+0x10/0x10 [ 2354.662482][T22626] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 2354.668510][T22626] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2354.674974][T22626] check_panic_on_warn+0x86/0xb0 [ 2354.680035][T22626] ? smk_access+0xae/0x4e0 [ 2354.684486][T22626] end_report+0x77/0x160 [ 2354.688768][T22626] kasan_report+0x154/0x180 [ 2354.693310][T22626] ? smk_access+0xae/0x4e0 [ 2354.697901][T22626] smk_access+0xae/0x4e0 [ 2354.702194][T22626] smack_watch_key+0x2f4/0x3a0 [ 2354.706999][T22626] ? __pfx_smack_watch_key+0x10/0x10 [ 2354.712325][T22626] ? __kasan_kmalloc+0x98/0xb0 [ 2354.717304][T22626] security_watch_key+0x86/0x250 [ 2354.722284][T22626] keyctl_watch_key+0x2b7/0x480 [ 2354.727307][T22626] __se_sys_keyctl+0x106/0xa50 [ 2354.732102][T22626] ? do_futex+0x33b/0x560 [ 2354.736482][T22626] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2354.741801][T22626] ? __pfx_do_futex+0x10/0x10 [ 2354.746528][T22626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2354.752635][T22626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2354.759089][T22626] ? do_syscall_64+0x100/0x230 [ 2354.763894][T22626] ? __x64_sys_keyctl+0x20/0xc0 [ 2354.768779][T22626] do_syscall_64+0xf3/0x230 [ 2354.773318][T22626] ? clear_bhb_loop+0x35/0x90 [ 2354.778026][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2354.783963][T22626] RIP: 0033:0x7f35dd77def9 [ 2354.788420][T22626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2354.808067][T22626] RSP: 002b:00007f35dd1ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2354.816616][T22626] RAX: ffffffffffffffda RBX: 00007f35dd935f80 RCX: 00007f35dd77def9 [ 2354.824630][T22626] RDX: 0000000000000004 RSI: 0000000002cb0f51 RDI: 0000000000000020 [ 2354.832630][T22626] RBP: 00007f35dd7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2354.840626][T22626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2354.848611][T22626] R13: 0000000000000000 R14: 00007f35dd935f80 R15: 00007ffdf7405ef8 [ 2354.856704][T22626] [ 2354.860043][T22626] Kernel Offset: disabled [ 2354.864378][T22626] Rebooting in 86400 seconds..