last executing test programs: 7.011748151s ago: executing program 2 (id=3): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x15, 0x3, 0x10c4, 0xea90}}, 0x12d) 6.996186447s ago: executing program 4 (id=6): syz_usb_connect(0x1, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)="090000000100"/28}) 6.58728573s ago: executing program 2 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) 6.495364403s ago: executing program 2 (id=8): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, ' \x00'}, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.344605768s ago: executing program 3 (id=10): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) 5.286057825s ago: executing program 3 (id=11): madvise(&(0x7f00003ff000/0x1000)=nil, 0x1000, 0x19) 5.175198926s ago: executing program 3 (id=13): syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040ffffffff0001010200010902200001010080320904000002000000000905010240000009058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x15, 0x2) 3.926896825s ago: executing program 4 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000220), &(0x7f0000000240), 0x18, 0xfffffffffffffffd) r1 = socket$rxrpc(0x2, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x111, 0x2, &(0x7f0000000220)='syz\x00', 0x4) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000000500)="000000000000000000000001060000020000000100000002000000010000000000000000", 0x24) read(r2, &(0x7f0000000308), 0x24) sendto$inet(r0, &(0x7f0000000300), 0x2c, 0x0, &(0x7f00000000e0)={0x2, 0x1234, @loopback}, 0x10) recvfrom$inet(r0, &(0x7f0000000600)=""/256, 0x100, 0x0, 0x0, 0x0) 3.643355545s ago: executing program 2 (id=21): nanosleep(&(0x7f0000000300), 0x0) 3.637651987s ago: executing program 2 (id=22): syz_usb_connect(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffffff40f30c70910801010203010902480001010080fa0904000006ff000000090501020002000000090582020002000000090583034000010000090504034000010000090505020002000000090506020002000000"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 3.342653642s ago: executing program 3 (id=23): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.243229162s ago: executing program 3 (id=25): r0 = syz_usb_connect(0x1, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b538100300000000109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.149028073s ago: executing program 1 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a3100"], 0x88}}, 0x0) 3.090636815s ago: executing program 1 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffff080211"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 3.033569193s ago: executing program 1 (id=28): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 2.97074356s ago: executing program 1 (id=29): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 2.965722698s ago: executing program 4 (id=30): nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) 2.679333538s ago: executing program 4 (id=31): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) read(r0, &(0x7f0000000180)=""/10, 0xa) 1.963394751s ago: executing program 4 (id=34): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 1.915585888s ago: executing program 4 (id=35): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.396311124s ago: executing program 2 (id=36): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x10, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x3, 0x4, {0x7, 0x25, 0x1, 0x8, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0xfc, 0xe, {0x7, 0x25, 0x1, 0x8, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f00000001e0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 870.56836ms ago: executing program 0 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a3100"], 0x88}}, 0x0) 822.671787ms ago: executing program 0 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffff080211"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 766.475711ms ago: executing program 0 (id=39): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') read(r0, &(0x7f0000000000), 0x1000) 667.611802ms ago: executing program 0 (id=40): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x81b6, 0xaec) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)) 667.376926ms ago: executing program 1 (id=41): openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x0, 0x0) 651.659241ms ago: executing program 0 (id=42): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x19, 0x0, @void}, 0x30) close(r4) close(r3) close(r2) close(r1) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 536.242658ms ago: executing program 1 (id=43): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402a1101000001010200010902270001010080320904000003ff000000070582024000000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 147.511924ms ago: executing program 3 (id=44): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 0 (id=45): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) read(r0, &(0x7f0000000400), 0x1) read(r0, &(0x7f0000000400), 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 76.491770][ T5604] cgroup: Unknown subsys name 'net' [ 76.607100][ T5604] cgroup: Unknown subsys name 'cpuset' [ 76.610582][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.230245][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.431908][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.442028][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.453164][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.462569][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.463419][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.552245][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.554054][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.561334][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.577395][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.578121][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.681749][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.683246][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.705286][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.705930][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.708104][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.709311][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.711399][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.712766][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.717765][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.737726][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.789538][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.790786][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.792929][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.817331][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.819416][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.750507][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.751303][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.751470][ T5620] bridge_slave_0: entered allmulticast mode [ 81.754350][ T5620] bridge_slave_0: entered promiscuous mode [ 81.799153][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.799305][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.799507][ T5620] bridge_slave_1: entered allmulticast mode [ 81.802688][ T5620] bridge_slave_1: entered promiscuous mode [ 81.927896][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.967401][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.079501][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.079685][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.080134][ T5626] bridge_slave_0: entered allmulticast mode [ 82.081941][ T5626] bridge_slave_0: entered promiscuous mode [ 82.145120][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145246][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.145692][ T5629] bridge_slave_0: entered allmulticast mode [ 82.148873][ T5629] bridge_slave_0: entered promiscuous mode [ 82.178668][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.178811][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.178954][ T5626] bridge_slave_1: entered allmulticast mode [ 82.182371][ T5626] bridge_slave_1: entered promiscuous mode [ 82.232662][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.232787][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.248613][ T5619] bridge_slave_0: entered allmulticast mode [ 82.250838][ T5619] bridge_slave_0: entered promiscuous mode [ 82.268883][ T5620] team0: Port device team_slave_0 added [ 82.269124][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.269267][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.269730][ T5629] bridge_slave_1: entered allmulticast mode [ 82.272803][ T5629] bridge_slave_1: entered promiscuous mode [ 82.347942][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.348076][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.348458][ T5619] bridge_slave_1: entered allmulticast mode [ 82.349910][ T5619] bridge_slave_1: entered promiscuous mode [ 82.353490][ T5620] team0: Port device team_slave_1 added [ 82.439248][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.441980][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.442224][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.442366][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.442828][ T5628] bridge_slave_0: entered allmulticast mode [ 82.445547][ T5628] bridge_slave_0: entered promiscuous mode [ 82.487523][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.487840][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.487942][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.488059][ T5628] bridge_slave_1: entered allmulticast mode [ 82.490218][ T5628] bridge_slave_1: entered promiscuous mode [ 82.495377][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.515189][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.516109][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.516124][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.516154][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.549278][ T5622] Bluetooth: hci0: command tx timeout [ 82.608205][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.609498][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.609512][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.609535][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.629629][ T5622] Bluetooth: hci1: command tx timeout [ 82.630428][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.641994][ T5626] team0: Port device team_slave_0 added [ 82.648371][ T5626] team0: Port device team_slave_1 added [ 82.682275][ T5629] team0: Port device team_slave_0 added [ 82.687926][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.720023][ T5619] team0: Port device team_slave_0 added [ 82.723002][ T5619] team0: Port device team_slave_1 added [ 82.726008][ T5629] team0: Port device team_slave_1 added [ 82.784294][ T5622] Bluetooth: hci2: command tx timeout [ 82.792628][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.792647][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.792672][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.804544][ T5628] team0: Port device team_slave_0 added [ 82.858340][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.858360][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.858384][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.861353][ T5628] team0: Port device team_slave_1 added [ 82.870172][ T5620] hsr_slave_0: entered promiscuous mode [ 82.871446][ T5620] hsr_slave_1: entered promiscuous mode [ 82.875241][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.875256][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.875277][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.879298][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.879313][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.879365][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.898634][ T5622] Bluetooth: hci4: command tx timeout [ 82.899238][ T5614] Bluetooth: hci3: command tx timeout [ 82.941983][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.942001][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.942024][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.955338][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.955355][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.955377][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.980252][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.980269][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.980291][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.069257][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.069285][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.069309][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.135428][ T5629] hsr_slave_0: entered promiscuous mode [ 83.137222][ T5629] hsr_slave_1: entered promiscuous mode [ 83.137985][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 83.138062][ T5629] Cannot create hsr debugfs directory [ 83.179072][ T5626] hsr_slave_0: entered promiscuous mode [ 83.181613][ T5626] hsr_slave_1: entered promiscuous mode [ 83.182370][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 83.182388][ T5626] Cannot create hsr debugfs directory [ 83.305736][ T5619] hsr_slave_0: entered promiscuous mode [ 83.306481][ T5619] hsr_slave_1: entered promiscuous mode [ 83.306939][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 83.306959][ T5619] Cannot create hsr debugfs directory [ 83.369408][ T5628] hsr_slave_0: entered promiscuous mode [ 83.370470][ T5628] hsr_slave_1: entered promiscuous mode [ 83.370983][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 83.371003][ T5628] Cannot create hsr debugfs directory [ 83.877002][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.883052][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.884718][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.910087][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.914397][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.930255][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.931414][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.946111][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.028442][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.037797][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.039060][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.045536][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.049242][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.057435][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.058343][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.069152][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.194274][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.199774][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.200787][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.227771][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.228758][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.231270][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.232656][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.257610][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.361881][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.402057][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.414512][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.416535][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.419069][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.452350][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.463775][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.464747][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.467346][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.501464][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.567431][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.567528][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.609843][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.609959][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.629331][ T5614] Bluetooth: hci0: command tx timeout [ 84.648065][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.651763][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.652595][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.657154][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.685769][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.702595][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.703908][ T5614] Bluetooth: hci1: command tx timeout [ 84.713124][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.715523][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.736441][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.841096][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.866436][ T5614] Bluetooth: hci2: command tx timeout [ 84.886404][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.886529][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.915256][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.935955][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.936021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.944604][ T5614] Bluetooth: hci4: command tx timeout [ 84.944641][ T5614] Bluetooth: hci3: command tx timeout [ 85.027362][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.066999][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.091763][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.122023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.122093][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.150216][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.150341][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.151848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.151912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.196782][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.227335][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.227456][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.307812][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.309948][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.399526][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.422882][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.422948][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.470906][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.471493][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.492778][ T5620] veth0_vlan: entered promiscuous mode [ 85.506615][ T5629] veth0_vlan: entered promiscuous mode [ 85.554469][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.562145][ T5629] veth1_vlan: entered promiscuous mode [ 85.586513][ T5620] veth1_vlan: entered promiscuous mode [ 85.625249][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.709007][ T5629] veth0_macvtap: entered promiscuous mode [ 85.730698][ T5629] veth1_macvtap: entered promiscuous mode [ 85.769893][ T5620] veth0_macvtap: entered promiscuous mode [ 85.777747][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.788752][ T5619] veth0_vlan: entered promiscuous mode [ 85.806472][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.835790][ T5626] veth0_vlan: entered promiscuous mode [ 85.837728][ T5620] veth1_macvtap: entered promiscuous mode [ 85.862796][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.868096][ T5619] veth1_vlan: entered promiscuous mode [ 85.911863][ T5626] veth1_vlan: entered promiscuous mode [ 85.978623][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.021980][ T5619] veth0_macvtap: entered promiscuous mode [ 86.035634][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.041410][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.041456][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.041737][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.046483][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.065622][ T5619] veth1_macvtap: entered promiscuous mode [ 86.124275][ T5628] veth0_vlan: entered promiscuous mode [ 86.138667][ T5626] veth0_macvtap: entered promiscuous mode [ 86.144545][ T5626] veth1_macvtap: entered promiscuous mode [ 86.184977][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.209966][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.234998][ T5628] veth1_vlan: entered promiscuous mode [ 86.237502][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.237524][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.263834][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.302844][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.333861][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.372946][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.417896][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.417920][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.447017][ T1121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447069][ T1121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447106][ T1121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447142][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447179][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.510538][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.510561][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.614016][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.632197][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.632220][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.642297][ T5629] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.643732][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.643907][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.644102][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.644409][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.644571][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.653913][ T5629] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.654333][ T5629] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.654872][ T5629] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.720097][ T5622] Bluetooth: hci0: command tx timeout [ 86.758239][ T5628] veth0_macvtap: entered promiscuous mode [ 86.783735][ T5622] Bluetooth: hci1: command tx timeout [ 86.909141][ T5628] veth1_macvtap: entered promiscuous mode [ 86.919492][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.919514][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.953536][ T5622] Bluetooth: hci2: command tx timeout [ 86.995756][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995802][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995827][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995850][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995875][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995898][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995921][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995945][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995970][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 86.995999][ T5698] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 87.034008][ T5622] Bluetooth: hci3: command tx timeout [ 87.034045][ T5622] Bluetooth: hci4: command tx timeout [ 87.097989][ T5698] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 87.102417][ T5698] cp2112 0003:10C4:EA90.0001: error requesting version [ 87.145731][ T1012] cfg80211: failed to load regulatory.db [ 87.153084][ T5698] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -5 [ 87.168874][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.168900][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.172198][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.184940][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.266234][ T9] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 87.293801][ T5716] fido_id[5716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.383080][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.383103][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.383596][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.385144][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.385204][ T1121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.385238][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.443529][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 87.514524][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.514549][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.573384][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 87.679529][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.679553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.734660][ T3105] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.752329][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 87.753025][ T9] usb usb5-port1: attempt power cycle [ 87.818398][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.818422][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.897975][ T3105] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 87.908456][ T3105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.908483][ T3105] usb 3-1: Product: syz [ 87.908496][ T3105] usb 3-1: Manufacturer: syz [ 87.908508][ T3105] usb 3-1: SerialNumber: syz [ 88.082568][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.114384][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 88.134297][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 88.263848][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 88.284544][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 88.285915][ T9] usb usb5-port1: unable to enumerate USB device [ 88.293644][ T5690] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.455176][ T5690] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 88.458509][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.458536][ T5690] usb 1-1: Product: syz [ 88.458574][ T5690] usb 1-1: Manufacturer: syz [ 88.458583][ T5690] usb 1-1: SerialNumber: syz [ 88.707461][ T3105] usb 3-1: failed to set cport flags for port 0 [ 88.707581][ T3105] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 88.745053][ T5690] debugfs: 'apb_log_enable' already exists in 'greybus' [ 88.778355][ T3105] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 88.783798][ T5614] Bluetooth: hci0: command tx timeout [ 88.864179][ T5614] Bluetooth: hci1: command tx timeout [ 89.004388][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 89.022670][ T5698] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.025417][ T5614] Bluetooth: hci2: command tx timeout [ 89.105293][ T5622] Bluetooth: hci3: command tx timeout [ 89.105355][ T5614] Bluetooth: hci4: command tx timeout [ 89.187887][ T5698] usb 4-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 1.00 [ 89.189879][ T5698] usb 4-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 89.189979][ T5698] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 89.190003][ T5698] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.242766][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 89.242796][ T5698] usb 4-1: Product: syz [ 89.242810][ T5698] usb 4-1: Manufacturer: syz [ 89.277619][ T5742] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 89.285787][ T5690] usb 1-1: failed to set cport flags for port 0 [ 89.285867][ T5690] greybus greybus2: 0/0:0: failed to enable host cport: -110 [ 89.308216][ T5690] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 89.660403][ T5698] usb 3-1: USB disconnect, device number 2 [ 90.005228][ T5665] usb 4-1: USB disconnect, device number 2 [ 90.011920][ T5758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.503411][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.654896][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 90.663434][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.663462][ T25] usb 3-1: Product: syz [ 90.663475][ T25] usb 3-1: Manufacturer: syz [ 90.663488][ T25] usb 3-1: SerialNumber: syz [ 90.749617][ T5773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 90.854989][ T25] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 90.935738][ T3105] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 91.083413][ T3105] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.183876][ T5698] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.213486][ T3105] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 91.334145][ T5698] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 91.337782][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.337813][ T5698] usb 2-1: Product: syz [ 91.337827][ T5698] usb 2-1: Manufacturer: syz [ 91.337841][ T5698] usb 2-1: SerialNumber: syz [ 91.363386][ T3105] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.365436][ T3105] usb usb4-port1: attempt power cycle [ 91.427127][ T5675] usb 1-1: USB disconnect, device number 2 [ 91.523527][ T5698] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 91.705757][ T3105] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 91.724762][ T3105] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.792372][ T5698] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 91.792409][ T5698] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 91.855461][ T3105] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 91.874554][ T3105] usb 4-1: Invalid ep0 maxpacket: 64 [ 91.874866][ T3105] usb usb4-port1: unable to enumerate USB device [ 91.913400][ T5675] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.075992][ T5675] usb 1-1: New USB device found, idVendor=04b4, idProduct=2102, bcdDevice= 0.00 [ 92.078024][ T5675] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.078056][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.082849][ T5788] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 92.123996][ T5675] dvb-usb: found a 'DVBWorld DVB-S 2102 USB2.0' in cold state, will try to load a firmware [ 92.126383][ T5675] usb 1-1: Direct firmware load for dvb-usb-dw2102.fw failed with error -2 [ 92.126403][ T5675] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dw2102.fw [ 92.233793][ T3105] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.394928][ T3105] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 92.398626][ T3105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.398656][ T3105] usb 5-1: Product: syz [ 92.398670][ T3105] usb 5-1: Manufacturer: syz [ 92.398683][ T3105] usb 5-1: SerialNumber: syz [ 92.548459][ T3105] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 92.568599][ T49] usb 2-1: USB disconnect, device number 2 [ 92.570264][ C0] device 2-1 is not registered [ 92.712663][ T5721] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 92.712686][ T5721] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 92.865928][ T5698] usb 2-1: firmware upload failed (-110). [ 92.981116][ T5797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.006471][ T25] usb 3-1: USB disconnect, device number 3 [ 93.216189][ T25] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.367679][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.370210][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 93.370247][ T25] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 93.373054][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 93.386576][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.386605][ T25] usb 3-1: Product: syz [ 93.386621][ T25] usb 3-1: Manufacturer: syz [ 93.386730][ T25] usb 3-1: SerialNumber: syz [ 93.603547][ T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.744279][ T5721] usb 5-1: firmware upload failed (-110). [ 93.774276][ T49] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 93.775980][ T49] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.776013][ T49] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.776036][ T49] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 93.779333][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 93.779363][ T49] usb 2-1: Product: syz [ 93.779378][ T49] usb 2-1: Manufacturer: syz [ 93.845990][ T5809] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 93.846116][ T5809] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 93.846270][ T5809] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 93.940326][ T5698] usb 5-1: USB disconnect, device number 6 [ 94.168181][ T49] redrat3 2-1:1.0: Problem fetching firmware ID [ 94.198967][ T25] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 94.200303][ T25] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 94.201910][ T49] redrat3 2-1:1.0: Failed to read timeout from hardware [ 94.208576][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.211257][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.218076][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.218649][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.221942][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.222518][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.223073][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.226639][ T25] usb 3-1: unable to issue vendor read request (ret = -71) [ 94.333421][ T49] rc_core: IR keymap rc-hauppauge not found [ 94.333442][ T49] Registered IR keymap rc-empty [ 94.336683][ T49] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0 [ 94.339014][ T25] usb 3-1: USB disconnect, device number 4 [ 94.352322][ T49] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input9 [ 94.414280][ T49] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 94.414762][ T49] redrat3 2-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 94.414817][ T49] redrat3 2-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 94.464423][ T49] redrat3 2-1:1.0: probe with driver redrat3 failed with error -5 [ 94.470169][ T49] ** replaying previous printk message ** [ 94.470169][ T49] usb 2-1: USB disconnect, device number 3 [ 94.475146][ T5743] ================================================================== [ 94.475157][ T5743] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 94.475185][ T5743] Read of size 1 at addr ffff888030a4f758 by task udevd/5743 [ 94.475203][ T5743] [ 94.475213][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 94.475232][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.475242][ T5743] Call Trace: [ 94.475249][ T5743] [ 94.475256][ T5743] dump_stack_lvl+0xe8/0x150 [ 94.475281][ T5743] print_address_description+0x55/0x1e0 [ 94.475304][ T5743] ? string+0x216/0x2d0 [ 94.475324][ T5743] print_report+0x58/0x70 [ 94.475344][ T5743] kasan_report+0x117/0x150 [ 94.475366][ T5743] ? string+0x216/0x2d0 [ 94.475389][ T5743] string+0x216/0x2d0 [ 94.475413][ T5743] vsnprintf+0x74a/0xef0 [ 94.475439][ T5743] add_uevent_var+0x1ce/0x460 [ 94.475465][ T5743] ? __pfx_add_uevent_var+0x10/0x10 [ 94.475491][ T5743] input_dev_uevent+0x119/0x6e0 [ 94.475518][ T5743] dev_uevent+0x537/0x870 [ 94.475543][ T5743] ? __pfx_dev_uevent+0x10/0x10 [ 94.475563][ T5743] ? __kasan_kmalloc+0x93/0xb0 [ 94.475582][ T5743] ? __kmalloc_cache_noprof+0x321/0x600 [ 94.475599][ T5743] ? __kmalloc_cache_noprof+0x14d/0x600 [ 94.475615][ T5743] ? uevent_show+0x15c/0x310 [ 94.475638][ T5743] uevent_show+0x1a0/0x310 [ 94.475660][ T5743] dev_attr_show+0x58/0xc0 [ 94.475680][ T5743] ? __pfx_dev_attr_show+0x10/0x10 [ 94.475701][ T5743] sysfs_kf_seq_show+0x331/0x490 [ 94.475736][ T5743] seq_read_iter+0x463/0xca0 [ 94.475761][ T5743] vfs_read+0x595/0xa80 [ 94.475787][ T5743] ? __pfx_vfs_read+0x10/0x10 [ 94.475811][ T5743] ? do_sys_openat2+0x14e/0x200 [ 94.475837][ T5743] ksys_read+0x150/0x270 [ 94.475861][ T5743] ? __pfx_ksys_read+0x10/0x10 [ 94.475889][ T5743] do_syscall_64+0x166/0x520 [ 94.475906][ T5743] ? trace_irq_disable+0x3b/0x140 [ 94.475923][ T5743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.475940][ T5743] ? clear_bhb_loop+0x70/0xc0 [ 94.475958][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.475975][ T5743] RIP: 0033:0x7fab41ca7407 [ 94.475991][ T5743] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 94.476005][ T5743] RSP: 002b:00007ffd0db9ccf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 94.476025][ T5743] RAX: ffffffffffffffda RBX: 00007fab4234b880 RCX: 00007fab41ca7407 [ 94.476038][ T5743] RDX: 0000000000001000 RSI: 00005558fb4e1a00 RDI: 0000000000000008 [ 94.476050][ T5743] RBP: 00007fab41defff0 R08: 0000000000000000 R09: 0000000000000000 [ 94.476073][ T5743] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 94.476084][ T5743] R13: 00007fab41defea0 R14: 0000000000000000 R15: 00005558fb4df7a0 [ 94.476101][ T5743] [ 94.476108][ T5743] [ 94.476112][ T5743] Allocated by task 49: [ 94.476120][ T5743] kasan_save_track+0x3e/0x80 [ 94.476136][ T5743] __kasan_kmalloc+0x93/0xb0 [ 94.476161][ T5743] __kmalloc_cache_noprof+0x321/0x600 [ 94.476175][ T5743] redrat3_dev_probe+0x477/0x2570 [ 94.476196][ T5743] usb_probe_interface+0x788/0xe50 [ 94.476215][ T5743] really_probe+0x254/0xae0 [ 94.476232][ T5743] __driver_probe_device+0x1e8/0x360 [ 94.476248][ T5743] driver_probe_device+0x4f/0x240 [ 94.476265][ T5743] __device_attach_driver+0x270/0x410 [ 94.476282][ T5743] bus_for_each_drv+0x258/0x2f0 [ 94.476302][ T5743] __device_attach+0x2c4/0x450 [ 94.476317][ T5743] device_initial_probe+0xa1/0xd0 [ 94.476332][ T5743] bus_probe_device+0x12a/0x220 [ 94.476352][ T5743] device_add+0x7d7/0xb80 [ 94.476365][ T5743] usb_set_configuration+0x1ad8/0x2180 [ 94.476382][ T5743] usb_generic_driver_probe+0x8d/0x150 [ 94.476398][ T5743] usb_probe_device+0x1c3/0x3b0 [ 94.476416][ T5743] really_probe+0x254/0xae0 [ 94.476432][ T5743] __driver_probe_device+0x1e8/0x360 [ 94.476448][ T5743] driver_probe_device+0x4f/0x240 [ 94.476465][ T5743] __device_attach_driver+0x270/0x410 [ 94.476483][ T5743] bus_for_each_drv+0x258/0x2f0 [ 94.476503][ T5743] __device_attach+0x2c4/0x450 [ 94.476518][ T5743] device_initial_probe+0xa1/0xd0 [ 94.476533][ T5743] bus_probe_device+0x12a/0x220 [ 94.476553][ T5743] device_add+0x7d7/0xb80 [ 94.476566][ T5743] usb_new_device+0x9aa/0x1690 [ 94.476580][ T5743] hub_event+0x28e8/0x4d30 [ 94.476596][ T5743] process_scheduled_works+0xc3d/0x1630 [ 94.476616][ T5743] worker_thread+0xa47/0xfb0 [ 94.476634][ T5743] kthread+0x38b/0x480 [ 94.476648][ T5743] ret_from_fork+0x514/0xb70 [ 94.476662][ T5743] ret_from_fork_asm+0x1a/0x30 [ 94.476684][ T5743] [ 94.476688][ T5743] Freed by task 49: [ 94.476695][ T5743] kasan_save_track+0x3e/0x80 [ 94.476718][ T5743] kasan_save_free_info+0x40/0x50 [ 94.476739][ T5743] __kasan_slab_free+0x5c/0x80 [ 94.476755][ T5743] kfree+0x1c5/0x650 [ 94.476775][ T5743] redrat3_dev_probe+0x1bf4/0x2570 [ 94.476795][ T5743] usb_probe_interface+0x788/0xe50 [ 94.476814][ T5743] really_probe+0x254/0xae0 [ 94.476830][ T5743] __driver_probe_device+0x1e8/0x360 [ 94.476846][ T5743] driver_probe_device+0x4f/0x240 [ 94.476863][ T5743] __device_attach_driver+0x270/0x410 [ 94.476880][ T5743] bus_for_each_drv+0x258/0x2f0 [ 94.476900][ T5743] __device_attach+0x2c4/0x450 [ 94.476915][ T5743] device_initial_probe+0xa1/0xd0 [ 94.476930][ T5743] bus_probe_device+0x12a/0x220 [ 94.476950][ T5743] device_add+0x7d7/0xb80 [ 94.476963][ T5743] usb_set_configuration+0x1ad8/0x2180 [ 94.476980][ T5743] usb_generic_driver_probe+0x8d/0x150 [ 94.476996][ T5743] usb_probe_device+0x1c3/0x3b0 [ 94.477014][ T5743] really_probe+0x254/0xae0 [ 94.477030][ T5743] __driver_probe_device+0x1e8/0x360 [ 94.477045][ T5743] driver_probe_device+0x4f/0x240 [ 94.477062][ T5743] __device_attach_driver+0x270/0x410 [ 94.477078][ T5743] bus_for_each_drv+0x258/0x2f0 [ 94.477099][ T5743] __device_attach+0x2c4/0x450 [ 94.477114][ T5743] device_initial_probe+0xa1/0xd0 [ 94.477129][ T5743] bus_probe_device+0x12a/0x220 [ 94.477149][ T5743] device_add+0x7d7/0xb80 [ 94.477162][ T5743] usb_new_device+0x9aa/0x1690 [ 94.477175][ T5743] hub_event+0x28e8/0x4d30 [ 94.477191][ T5743] process_scheduled_works+0xc3d/0x1630 [ 94.477209][ T5743] worker_thread+0xa47/0xfb0 [ 94.477228][ T5743] kthread+0x38b/0x480 [ 94.477241][ T5743] ret_from_fork+0x514/0xb70 [ 94.477254][ T5743] ret_from_fork_asm+0x1a/0x30 [ 94.477276][ T5743] [ 94.477280][ T5743] The buggy address belongs to the object at ffff888030a4f000 [ 94.477280][ T5743] which belongs to the cache kmalloc-2k of size 2048 [ 94.477293][ T5743] The buggy address is located 1880 bytes inside of [ 94.477293][ T5743] freed 2048-byte region [ffff888030a4f000, ffff888030a4f800) [ 94.477310][ T5743] [ 94.477314][ T5743] The buggy address belongs to the physical page: [ 94.477324][ T5743] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30a48 [ 94.477340][ T5743] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.477354][ T5743] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 94.477369][ T5743] page_type: f5(slab) [ 94.477385][ T5743] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 94.477399][ T5743] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 94.477413][ T5743] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 94.477427][ T5743] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 94.477441][ T5743] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 94.477455][ T5743] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 94.477463][ T5743] page dumped because: kasan: bad access detected [ 94.477471][ T5743] page_owner tracks the page as allocated [ 94.477477][ T5743] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17424967068 [ 94.477503][ T5743] post_alloc_hook+0x1f9/0x250 [ 94.477525][ T5743] get_page_from_freelist+0x2209/0x2280 [ 94.477541][ T5743] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 94.477557][ T5743] allocate_slab+0x7d/0x620 [ 94.477575][ T5743] refill_objects+0x2d5/0x350 [ 94.477593][ T5743] __pcs_replace_empty_main+0x2c8/0x6c0 [ 94.477611][ T5743] __kvmalloc_node_noprof+0x63c/0x820 [ 94.477627][ T5743] v4l2_ctrl_new+0x103c/0x1820 [ 94.477646][ T5743] v4l2_ctrl_new_custom+0x5b4/0x7f0 [ 94.477665][ T5743] vivid_create_controls+0xdcb/0x3c50 [ 94.477681][ T5743] vivid_probe+0x410f/0x70c0 [ 94.477702][ T5743] platform_probe+0xf9/0x190 [ 94.477724][ T5743] really_probe+0x254/0xae0 [ 94.477740][ T5743] __driver_probe_device+0x1e8/0x360 [ 94.477756][ T5743] driver_probe_device+0x4f/0x240 [ 94.477773][ T5743] __driver_attach+0x339/0x600 [ 94.477788][ T5743] page_owner free stack trace missing [ 94.477794][ T5743] [ 94.477798][ T5743] Memory state around the buggy address: [ 94.477807][ T5743] ffff888030a4f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.477818][ T5743] ffff888030a4f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.477828][ T5743] >ffff888030a4f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.477836][ T5743] ^ [ 94.477845][ T5743] ffff888030a4f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.477856][ T5743] ffff888030a4f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.477864][ T5743] ================================================================== [ 94.484525][ T5743] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.428506][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 95.437367][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.447560][ T5743] Call Trace: [ 95.450847][ T5743] [ 95.453780][ T5743] vpanic+0x56d/0xa60 [ 95.457778][ T5743] ? rcu_is_watching+0x16/0xb0 [ 95.462548][ T5743] ? __pfx_vpanic+0x10/0x10 [ 95.467144][ T5743] ? __pfx___schedule+0x10/0x10 [ 95.472014][ T5743] panic+0xc5/0xd0 [ 95.475741][ T5743] ? __pfx_panic+0x10/0x10 [ 95.480343][ T5743] ? preempt_schedule_thunk+0x16/0x40 [ 95.485723][ T5743] ? string+0x216/0x2d0 [ 95.489888][ T5743] check_panic_on_warn+0x89/0xb0 [ 95.494829][ T5743] ? string+0x216/0x2d0 [ 95.498994][ T5743] end_report+0x73/0x170 [ 95.503248][ T5743] ? string+0x216/0x2d0 [ 95.507421][ T5743] kasan_report+0x128/0x150 [ 95.511939][ T5743] ? string+0x216/0x2d0 [ 95.516105][ T5743] string+0x216/0x2d0 [ 95.520190][ T5743] vsnprintf+0x74a/0xef0 [ 95.524538][ T5743] add_uevent_var+0x1ce/0x460 [ 95.529330][ T5743] ? __pfx_add_uevent_var+0x10/0x10 [ 95.534544][ T5743] input_dev_uevent+0x119/0x6e0 [ 95.539412][ T5743] dev_uevent+0x537/0x870 [ 95.543757][ T5743] ? __pfx_dev_uevent+0x10/0x10 [ 95.548618][ T5743] ? __kasan_kmalloc+0x93/0xb0 [ 95.553476][ T5743] ? __kmalloc_cache_noprof+0x321/0x600 [ 95.559024][ T5743] ? __kmalloc_cache_noprof+0x14d/0x600 [ 95.564587][ T5743] ? uevent_show+0x15c/0x310 [ 95.569213][ T5743] uevent_show+0x1a0/0x310 [ 95.573921][ T5743] dev_attr_show+0x58/0xc0 [ 95.578374][ T5743] ? __pfx_dev_attr_show+0x10/0x10 [ 95.583524][ T5743] sysfs_kf_seq_show+0x331/0x490 [ 95.588514][ T5743] seq_read_iter+0x463/0xca0 [ 95.593207][ T5743] vfs_read+0x595/0xa80 [ 95.597379][ T5743] ? __pfx_vfs_read+0x10/0x10 [ 95.602064][ T5743] ? do_sys_openat2+0x14e/0x200 [ 95.606928][ T5743] ksys_read+0x150/0x270 [ 95.611178][ T5743] ? __pfx_ksys_read+0x10/0x10 [ 95.615952][ T5743] do_syscall_64+0x166/0x520 [ 95.620552][ T5743] ? trace_irq_disable+0x3b/0x140 [ 95.625668][ T5743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.631750][ T5743] ? clear_bhb_loop+0x70/0xc0 [ 95.636544][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.642545][ T5743] RIP: 0033:0x7fab41ca7407 [ 95.647078][ T5743] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.666813][ T5743] RSP: 002b:00007ffd0db9ccf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 95.675548][ T5743] RAX: ffffffffffffffda RBX: 00007fab4234b880 RCX: 00007fab41ca7407 [ 95.683875][ T5743] RDX: 0000000000001000 RSI: 00005558fb4e1a00 RDI: 0000000000000008 [ 95.692193][ T5743] RBP: 00007fab41defff0 R08: 0000000000000000 R09: 0000000000000000 [ 95.700249][ T5743] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 95.708399][ T5743] R13: 00007fab41defea0 R14: 0000000000000000 R15: 00005558fb4df7a0 [ 95.716503][ T5743] [ 95.719669][ T5743] Kernel Offset: disabled [ 95.723991][ T5743] Rebooting in 86400 seconds..