last executing test programs: 4.666641638s ago: executing program 1 (id=2080): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 4.444326857s ago: executing program 1 (id=2085): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x8, 0x1ff, 0x4}}]}]}}}]}, 0x80}}, 0x0) 4.202871357s ago: executing program 1 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@dellinkprop={0x24, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) 4.093833882s ago: executing program 1 (id=2091): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, '&\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 3.425269067s ago: executing program 3 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="6800000010000100ffffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0001040000000000340016803000018024000c800d0001"], 0x68}}, 0x20040800) 2.822720782s ago: executing program 3 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 2.521550071s ago: executing program 3 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 2.510170011s ago: executing program 4 (id=2114): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.374390735s ago: executing program 0 (id=2115): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000002200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x5, 0x1}}, {@mpls_mc}}, 0x0) 2.324175363s ago: executing program 1 (id=2116): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.19268304s ago: executing program 0 (id=2117): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa0240, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) fanotify_mark(r0, 0x2, 0x4800003e, r1, 0x0) 2.097527389s ago: executing program 3 (id=2118): syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xf0}]) 1.992924915s ago: executing program 2 (id=2119): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.932523078s ago: executing program 0 (id=2120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) 1.749425882s ago: executing program 0 (id=2121): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring) 1.746886078s ago: executing program 3 (id=2122): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x2) 1.579457064s ago: executing program 2 (id=2123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 1.392406471s ago: executing program 4 (id=2124): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="00c2", 0x2}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00h'], 0x9) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0), 0x1}, 0x0) 1.348922988s ago: executing program 2 (id=2125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c015}, 0x0) 1.174683102s ago: executing program 4 (id=2126): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x2000) 1.137872356s ago: executing program 2 (id=2127): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x91) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000040)) 971.528533ms ago: executing program 2 (id=2128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3c4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x60}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x35c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x338, 0x6, [@m_connmark={0xac, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x6, 0x3ff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8f70, 0xfffffffb, 0x2, 0x1, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x14d3, 0x5, 0x1, 0x61745c9, 0x7}, 0xca4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff49, 0x3, 0x10000000, 0xb, 0x95}, 0x4}}]}, {0xa, 0x6, "39f3f47f6cce"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0x101, 0x6, "57eb9c56054fd807513303b3f4cf2159c55e35510c777ffa2014e7e694230809b9eb1ed7f293245aebba45a1ea878c207ab5b8ff73b3b3448048e6cac141f39cbeee17794690ddf0bca2ac2a249d9e877c1123d0f06c27f3ebee9569460b9f4d9f5b7b06cfe2883ba47b6dc50a2c7a24c96c854e7df0374432374ea02f1a278cd2549b201fcd47c4e8405d197cf796492ae564779963f8e2dc1ac00bebdd180f84413cf421d0d08ee85dd48de73726ee74cb6f594aaa44c7645d154f3842abed854c484699dc036cf24205945eaf7b6d85c0842b496dc1943550dcf4ae37ee65555edadd06e27f4f5372c472f21ce91275745c36ce61e979dcc36d8710"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x11c, 0xf, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c30604ab3100a6de878355a1bfb0f58b"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x9d, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a368aae1f7da8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x2c, 0x15, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 904.309588ms ago: executing program 1 (id=2129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fchdir(0xffffffffffffffff) 903.491577ms ago: executing program 4 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 613.276154ms ago: executing program 2 (id=2131): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='S', 0x1) syz_usb_disconnect(r0) 489.288677ms ago: executing program 3 (id=2132): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000104000000010000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058006000200000000000500010001"], 0x4c}}, 0x0) 444.635736ms ago: executing program 4 (id=2133): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 368.22294ms ago: executing program 0 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000100000000000000000000100000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080007000000000008000300100000000800030001"], 0x4c}}, 0x0) 107.435661ms ago: executing program 4 (id=2135): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000380)=0xffffffff, 0x4) 0s ago: executing program 0 (id=2136): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.261986][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.281919][ T5330] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 265.310232][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.336710][ T5330] usb 5-1: config 0 descriptor?? [ 265.780424][ T5330] microsoft 0003:045E:009D.0011: unbalanced delimiter at end of report description [ 265.806007][ T5330] microsoft 0003:045E:009D.0011: parse failed [ 265.812241][ T5330] microsoft 0003:045E:009D.0011: probe with driver microsoft failed with error -22 [ 265.941764][ T5230] Bluetooth: hci2: command tx timeout [ 265.983036][ T5330] usb 5-1: USB disconnect, device number 17 [ 266.169344][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.194401][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.211942][ T11] bond0 (unregistering): Released all slaves [ 266.462600][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.470420][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.496369][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.504840][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.551306][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 266.839923][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.863606][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.891084][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.984372][ T5276] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.122383][ T8969] hsr_slave_0: entered promiscuous mode [ 267.146177][ T8969] hsr_slave_1: entered promiscuous mode [ 267.163347][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 267.168611][ T8969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.178515][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.195575][ T8969] Cannot create hsr debugfs directory [ 267.204024][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.244870][ T5276] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 267.268566][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.331369][ T5276] usb 5-1: config 0 descriptor?? [ 267.403436][ T11] hsr_slave_0: left promiscuous mode [ 267.434426][ T11] hsr_slave_1: left promiscuous mode [ 267.452294][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.474786][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.524275][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.531789][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.650023][ T11] veth1_macvtap: left promiscuous mode [ 267.667875][ T11] veth0_macvtap: left promiscuous mode [ 267.677629][ T11] veth1_vlan: left promiscuous mode [ 267.683099][ T11] veth0_vlan: left promiscuous mode [ 267.762673][ T5276] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 267.784110][ T5276] hid-picolcd 0003:04D8:F002.0012: item fetching failed at offset 5/7 [ 267.808375][ T5276] hid-picolcd 0003:04D8:F002.0012: device report parse failed [ 267.832960][ T5276] hid-picolcd 0003:04D8:F002.0012: probe with driver hid-picolcd failed with error -22 [ 267.977363][ T5276] usb 5-1: USB disconnect, device number 18 [ 268.003639][ T5230] Bluetooth: hci2: command tx timeout [ 269.048618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 269.194216][ T11] team0 (unregistering): Port device team_slave_0 removed [ 270.254673][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.408467][ T8871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.489417][ T9160] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 270.508034][ T9160] netlink: 'syz.2.1213': attribute type 4 has an invalid length. [ 270.523734][ T9160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1213'. [ 270.572603][ T9160] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 270.601586][ T8871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.621895][ T8871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.683371][ T8871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.887119][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 271.401886][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.523935][ T2635] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 271.538171][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.570070][ T9191] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1224'. [ 271.595209][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.602436][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.604237][ T9191] openvswitch: netlink: Multiple metadata blocks provided [ 271.645157][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.652360][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.793665][ T2635] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 271.802789][ T2635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.842878][ T2635] usb 4-1: Product: syz [ 271.854188][ T2635] usb 4-1: Manufacturer: syz [ 271.863291][ T2635] usb 4-1: SerialNumber: syz [ 271.895979][ T2635] usb 4-1: config 0 descriptor?? [ 271.978810][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.038873][ T8969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.077005][ T8969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.110072][ T8969] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.118458][ T2635] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 272.151835][ T8969] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.183082][ T8871] veth0_vlan: entered promiscuous mode [ 272.245792][ T8871] veth1_vlan: entered promiscuous mode [ 272.399009][ T8871] veth0_macvtap: entered promiscuous mode [ 272.434385][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.446086][ T8871] veth1_macvtap: entered promiscuous mode [ 272.534777][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.554956][ T2635] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 272.604499][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.621654][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.655126][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.668705][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.679068][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.700390][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.719187][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.736712][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.768430][ T2635] usb 4-1: USB disconnect, device number 11 [ 272.780931][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.836666][ T8969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.847185][ T8969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.876912][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.912381][ T8969] veth0_vlan: entered promiscuous mode [ 272.924659][ T8969] veth1_vlan: entered promiscuous mode [ 272.948856][ T8969] veth0_macvtap: entered promiscuous mode [ 272.958837][ T8969] veth1_macvtap: entered promiscuous mode [ 273.087548][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.094780][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.103890][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.111042][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.152724][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.168209][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.180211][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.192570][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.203002][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.215252][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.241177][ T8871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.282288][ T8871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.305831][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.366244][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.387153][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.403851][ T9222] sctp: [Deprecated]: syz.4.1231 (pid 9222) Use of int in maxseg socket option. [ 273.403851][ T9222] Use struct sctp_assoc_value instead [ 273.413515][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.439014][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.463730][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.483344][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.503320][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.524293][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.534316][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.544840][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.556447][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.585857][ T8871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.648472][ T8871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.686862][ T8871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.704795][ T8871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.799263][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.858892][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.901693][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.925702][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.962280][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.996532][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.027469][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.073314][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.099779][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.124189][ T29] audit: type=1326 audit(1727303004.054:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.147964][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.180965][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.195594][ T29] audit: type=1326 audit(1727303004.054:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.216608][ T8969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.261671][ T8969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.275186][ T29] audit: type=1326 audit(1727303004.074:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.286951][ T8969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.310508][ T8969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.351409][ T29] audit: type=1326 audit(1727303004.074:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.396666][ T29] audit: type=1326 audit(1727303004.074:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.479668][ T29] audit: type=1326 audit(1727303004.074:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.537365][ T29] audit: type=1326 audit(1727303004.074:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.538112][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 274.571740][ T29] audit: type=1326 audit(1727303004.074:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.602998][ T29] audit: type=1326 audit(1727303004.074:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.629234][ T29] audit: type=1326 audit(1727303004.074:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x7ffc0000 [ 274.873101][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.903388][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.938619][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.951915][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.993178][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.021962][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.175797][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.224259][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.844227][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.005381][ T9295] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.103554][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 276.153347][ T46] usb 1-1: config 0 has no interfaces? [ 276.176359][ T46] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 276.193409][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.269552][ T46] usb 1-1: Product: syz [ 276.291226][ T46] usb 1-1: Manufacturer: syz [ 276.321293][ T46] usb 1-1: SerialNumber: syz [ 276.354888][ T46] usb 1-1: config 0 descriptor?? [ 276.593486][ T5330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.622197][ T9275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.651793][ T46] usb 1-1: USB disconnect, device number 10 [ 276.837581][ T5330] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 276.871261][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.890906][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 276.943288][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.027057][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.036398][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.047917][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.072147][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.088822][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.102340][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.127398][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.139835][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.180086][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.191523][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.222067][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.248995][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.270559][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.289901][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.343381][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.366428][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.388917][ T9339] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 277.400746][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.446155][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.462286][ T5330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.499189][ T5330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.541054][ T5330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.579860][ T5330] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.613384][ T5330] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 277.652358][ T5330] usb 4-1: Product: syz [ 277.665262][ T5330] usb 4-1: Manufacturer: syz [ 277.669942][ T5330] usb 4-1: SerialNumber: syz [ 277.708181][ T5330] usb 4-1: config 0 descriptor?? [ 277.743835][ T5330] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 277.959023][ T9] usb 4-1: USB disconnect, device number 12 [ 277.972448][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 277.983737][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 278.225367][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.241295][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 278.255824][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.277881][ T46] usb 2-1: config 0 descriptor?? [ 278.295066][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 278.413495][ T5330] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 278.505378][ T46] pwc: send_video_command error -71 [ 278.523320][ T46] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 278.539373][ T46] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 278.551360][ T46] usb 2-1: USB disconnect, device number 10 [ 278.583415][ T5330] usb 5-1: Using ep0 maxpacket: 8 [ 278.591808][ T5330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.629419][ T5330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.660430][ T5330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.689606][ T5330] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.733350][ T5330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.774643][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.004071][ T5330] usb 5-1: GET_CAPABILITIES returned 0 [ 279.031197][ T5330] usbtmc 5-1:16.0: can't read capabilities [ 279.083321][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.229799][ T5276] usb 5-1: USB disconnect, device number 19 [ 279.380193][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.401577][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 279.416146][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.469788][ T46] usb 2-1: config 0 descriptor?? [ 279.493160][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 279.892956][ T46] pwc: recv_control_msg error -71 req 02 val 2b00 [ 279.928751][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 279.975826][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 280.005599][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 280.023704][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 280.030566][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 280.057146][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 280.074942][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 280.088022][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 280.129813][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.150365][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 280.170545][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.187479][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 280.200943][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 280.208935][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.217234][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.229398][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 280.246291][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.257009][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 280.273847][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.283184][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 280.303505][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.313690][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 280.328918][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.353354][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.362091][ T46] pwc: Registered as video71. [ 280.368583][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.377564][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 280.401657][ T5330] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 280.411714][ T5273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.432551][ T46] usb 2-1: USB disconnect, device number 11 [ 280.457672][ T5330] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 280.599059][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 280.625743][ T5273] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.635449][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.661808][ T5273] usb 5-1: Product: syz [ 280.668359][ T5273] usb 5-1: Manufacturer: syz [ 280.673038][ T5273] usb 5-1: SerialNumber: syz [ 280.705826][ T5273] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.772542][ T5330] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.785268][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.806766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.857512][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.904467][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.913343][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 280.913365][ T29] audit: type=1326 audit(1727303010.864:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.0.1316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x0 [ 280.941949][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.962278][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 280.978737][ T9] usb 3-1: config 0 descriptor?? [ 281.044408][ T2635] usb 5-1: USB disconnect, device number 20 [ 281.154042][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 281.170160][ T46] usb 2-1: config 0 has no interfaces? [ 281.177559][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.194006][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.212154][ T46] usb 2-1: config 0 descriptor?? [ 281.228939][ T9430] raw_sendmsg: syz.3.1318 forgot to set AF_INET. Fix it! [ 281.415943][ T9] plantronics 0003:047F:FFFF.0014: unbalanced collection at end of report description [ 281.453151][ T9] plantronics 0003:047F:FFFF.0014: parse failed [ 281.461309][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.478718][ T9] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 281.492527][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.510776][ T9] usb 2-1: USB disconnect, device number 12 [ 281.617489][ T5277] usb 3-1: USB disconnect, device number 19 [ 281.847311][ T5330] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 281.872523][ T5330] ath9k_htc: Failed to initialize the device [ 281.905418][ T2635] usb 5-1: ath9k_htc: USB layer deinitialized [ 281.963722][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 282.093452][ T5273] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 282.124847][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 282.134492][ T9] usb 2-1: config 0 interface 0 has no altsetting 1 [ 282.154704][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=25.e8 [ 282.183521][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.191606][ T9] usb 2-1: Product: syz [ 282.231549][ T9] usb 2-1: Manufacturer: syz [ 282.253162][ T9] usb 2-1: SerialNumber: syz [ 282.260620][ T9] usb 2-1: config 0 descriptor?? [ 282.277636][ T9] ttusbir 2-1:0.0: cannot find expected altsetting [ 282.281681][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.321629][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 282.363698][ T5273] usb 1-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 282.380844][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.426458][ T5273] usb 1-1: config 0 descriptor?? [ 282.479439][ T9] usb 2-1: USB disconnect, device number 13 [ 282.612275][ T9461] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1332'. [ 282.648172][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.683654][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.710371][ T5273] usbhid 1-1:0.0: can't add hid device: -71 [ 282.746835][ T5273] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.774083][ T5273] usb 1-1: USB disconnect, device number 11 [ 283.255263][ T5273] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 283.341995][ T9485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.413820][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 283.428505][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.451624][ T5273] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 283.470800][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.501152][ T5273] usb 1-1: config 0 descriptor?? [ 283.633614][ T5273] rc_core: IR keymap rc-xbox-dvd not found [ 283.652462][ T5273] Registered IR keymap rc-empty [ 283.687503][ T5273] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 283.728937][ T5273] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 283.770099][ T5273] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 283.803922][ T9493] netlink: 972 bytes leftover after parsing attributes in process `syz.4.1345'. [ 283.827319][ T5273] input: failed to attach handler kbd to device input16, error: -5 [ 283.845689][ T4668] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 283.863678][ T5273] usb 1-1: USB disconnect, device number 12 [ 284.128084][ T9500] input: syz1 as /devices/virtual/input/input17 [ 284.304827][ T9505] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1351'. [ 284.323565][ T9505] openvswitch: netlink: VXLAN extension 101 out of range max 1 [ 284.421314][ T9509] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.1352'. [ 284.648111][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.680454][ T9513] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.854681][ T5273] IPVS: starting estimator thread 0... [ 284.908112][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.963537][ T9521] IPVS: using max 18 ests per chain, 43200 per kthread [ 285.110248][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.337002][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.347063][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.356121][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.365908][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.377520][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.385408][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.596039][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.642023][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 286.127041][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 286.338401][ T12] bridge_slave_1: left allmulticast mode [ 286.344680][ T12] bridge_slave_1: left promiscuous mode [ 286.350444][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.581641][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.595298][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.597384][ T12] bridge_slave_0: left allmulticast mode [ 286.620339][ T12] bridge_slave_0: left promiscuous mode [ 286.621921][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.635610][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.639914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.654158][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.661599][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.494969][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.521225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.530608][ T5230] Bluetooth: hci1: command tx timeout [ 287.556030][ T12] bond0 (unregistering): Released all slaves [ 287.793417][ T12] ɶƣ0GCTw: left promiscuous mode [ 287.963474][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.983451][ T5273] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 288.013511][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.021108][ T9536] bridge_slave_0: entered allmulticast mode [ 288.051321][ T9536] bridge_slave_0: entered promiscuous mode [ 288.094613][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.101793][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.141391][ T9536] bridge_slave_1: entered allmulticast mode [ 288.148804][ T9536] bridge_slave_1: entered promiscuous mode [ 288.174178][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 288.191408][ T12] tipc: Left network mode [ 288.212368][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.243560][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.309805][ T5273] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.363350][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.404069][ T5273] usb 5-1: config 0 descriptor?? [ 288.427416][ T9585] netlink: 'syz.0.1382': attribute type 2 has an invalid length. [ 288.445985][ T5273] hub 5-1:0.0: USB hub found [ 288.548791][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.672987][ T5273] hub 5-1:0.0: 1 port detected [ 288.680218][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.723388][ T5230] Bluetooth: hci0: command tx timeout [ 288.893461][ T5273] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 288.900256][ T5273] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 288.919335][ T5273] usbhid 5-1:0.0: can't add hid device: -71 [ 288.931692][ T5273] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.982289][ T5273] usb 5-1: USB disconnect, device number 21 [ 289.045705][ T9536] team0: Port device team_slave_0 added [ 289.087899][ T9536] team0: Port device team_slave_1 added [ 289.246126][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.263489][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.296678][ T2635] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 289.328817][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.496828][ T2635] usb 4-1: config 0 has no interfaces? [ 289.502401][ T2635] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.553318][ T2635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.582992][ T12] hsr_slave_0: left promiscuous mode [ 289.597036][ T2635] usb 4-1: config 0 descriptor?? [ 289.603380][ T5230] Bluetooth: hci1: command tx timeout [ 289.622791][ T12] hsr_slave_1: left promiscuous mode [ 289.637897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.646528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.674304][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.692327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.765228][ T12] veth1_macvtap: left promiscuous mode [ 289.772075][ T12] veth0_macvtap: left promiscuous mode [ 289.784595][ T12] veth1_vlan: left promiscuous mode [ 289.808511][ T12] veth0_vlan: left promiscuous mode [ 290.807335][ T5230] Bluetooth: hci0: command tx timeout [ 290.993857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.040821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.671569][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.678754][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.704876][ T5230] Bluetooth: hci1: command tx timeout [ 291.723356][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.991333][ T9536] hsr_slave_0: entered promiscuous mode [ 292.012160][ T9536] hsr_slave_1: entered promiscuous mode [ 292.075998][ T9557] chnl_net:caif_netlink_parms(): no params data found [ 292.256585][ T9642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1397'. [ 292.303864][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 292.475398][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.514461][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 292.537355][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.562187][ T25] usb 5-1: config 0 descriptor?? [ 292.646038][ T9650] tap0: tun_chr_ioctl cmd 2147767507 [ 292.778780][ T25] usb 5-1: string descriptor 0 read error: -71 [ 292.824542][ T25] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 292.831517][ T25] usb 5-1: No valid video chain found. [ 292.885986][ T5230] Bluetooth: hci0: command tx timeout [ 292.889972][ T25] usb 5-1: USB disconnect, device number 22 [ 293.096652][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.104320][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.133510][ T29] audit: type=1326 audit(1727303023.094:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.137973][ T9557] bridge_slave_0: entered allmulticast mode [ 293.163011][ T9662] delete_channel: no stack [ 293.188496][ T29] audit: type=1326 audit(1727303023.114:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.204427][ T9557] bridge_slave_0: entered promiscuous mode [ 293.235892][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.262603][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.262829][ T29] audit: type=1326 audit(1727303023.114:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.283649][ T9557] bridge_slave_1: entered allmulticast mode [ 293.314258][ T29] audit: type=1326 audit(1727303023.114:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.347488][ T29] audit: type=1326 audit(1727303023.114:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.370538][ T9557] bridge_slave_1: entered promiscuous mode [ 293.391198][ T29] audit: type=1326 audit(1727303023.114:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.429536][ T29] audit: type=1326 audit(1727303023.114:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.502948][ T29] audit: type=1326 audit(1727303023.114:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.560332][ T29] audit: type=1326 audit(1727303023.114:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.589291][ T29] audit: type=1326 audit(1727303023.124:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9661 comm="syz.0.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x7ffc0000 [ 293.616262][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 293.775985][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.787480][ T25] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 293.796944][ T5230] Bluetooth: hci1: command tx timeout [ 293.904892][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.914465][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.933637][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.941960][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.954906][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.965910][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.987108][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.996777][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.015073][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.029142][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.041249][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.053654][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.082956][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.104127][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.129516][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.141861][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.162357][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.191147][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.204508][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.212381][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.229139][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.252924][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.269592][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.288326][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.305321][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.322589][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 294.343900][ T25] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 294.372827][ T25] usb 5-1: Product: syz [ 294.383981][ T25] usb 5-1: Manufacturer: syz [ 294.388646][ T25] usb 5-1: SerialNumber: syz [ 294.446297][ T25] usb 5-1: config 0 descriptor?? [ 294.470200][ T25] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 294.613404][ T5277] usb 4-1: USB disconnect, device number 13 [ 294.713113][ T25] usb 5-1: USB disconnect, device number 23 [ 294.750133][ T25] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 294.964425][ T5230] Bluetooth: hci0: command tx timeout [ 295.131388][ T9557] team0: Port device team_slave_0 added [ 295.410187][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.458146][ T9557] team0: Port device team_slave_1 added [ 295.493166][ T9693] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1414'. [ 295.519146][ T9693] ipvlan2: entered promiscuous mode [ 295.591576][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.653130][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.668487][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.695301][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.697168][ T9699] kernel profiling enabled (shift: 6) [ 295.799113][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.841210][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.850175][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.900032][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.997607][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.256962][ T9557] hsr_slave_0: entered promiscuous mode [ 296.294237][ T9557] hsr_slave_1: entered promiscuous mode [ 296.316200][ T9557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.328264][ T9557] Cannot create hsr debugfs directory [ 296.383572][ T9712] input: syz1 as /devices/virtual/input/input19 [ 296.485556][ T9536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.510967][ T9536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.634871][ T9536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.671264][ T9536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.799627][ T12] bridge_slave_1: left allmulticast mode [ 296.805796][ T12] bridge_slave_1: left promiscuous mode [ 296.811578][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.864891][ T12] bridge_slave_0: left allmulticast mode [ 296.870609][ T12] bridge_slave_0: left promiscuous mode [ 296.900163][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.927959][ T9724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.827982][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.841543][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.859564][ T12] bond0 (unregistering): Released all slaves [ 297.902166][ T9744] netlink: 'syz.4.1437': attribute type 9 has an invalid length. [ 297.931621][ T9744] bond_slave_0: entered promiscuous mode [ 297.937455][ T9744] bond_slave_1: entered promiscuous mode [ 297.993513][ T9744] macvlan2: entered promiscuous mode [ 298.015988][ T9744] bond0: entered promiscuous mode [ 298.026552][ T9744] macvlan2: entered allmulticast mode [ 298.050357][ T9744] bond0: entered allmulticast mode [ 298.070107][ T9744] bond_slave_0: entered allmulticast mode [ 298.086755][ T9744] bond_slave_1: entered allmulticast mode [ 298.106637][ T9744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.883165][ T12] hsr_slave_0: left promiscuous mode [ 298.892442][ T12] hsr_slave_1: left promiscuous mode [ 298.972506][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.984145][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.014286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.021788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.143154][ T12] veth1_macvtap: left promiscuous mode [ 299.159789][ T12] veth0_macvtap: left promiscuous mode [ 299.181533][ T12] veth1_vlan: left promiscuous mode [ 299.228999][ T12] veth0_vlan: left promiscuous mode [ 300.655386][ T12] team0 (unregistering): Port device team_slave_1 removed [ 300.781921][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.580401][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1451'. [ 301.591508][ T9791] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1451'. [ 301.867384][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.014733][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.061859][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.069127][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.094968][ T5276] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 302.121213][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.128444][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.273391][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 302.294722][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.323417][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.369125][ T5276] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.387202][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.424303][ T5276] usb 1-1: Product: syz [ 302.428553][ T5276] usb 1-1: Manufacturer: syz [ 302.468073][ T5276] usb 1-1: SerialNumber: syz [ 302.484179][ T5276] usb 1-1: config 0 descriptor?? [ 302.492519][ T5276] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.496653][ T9557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.522307][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'. [ 302.531530][ T5276] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 302.541418][ T9557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.573413][ T9557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.604805][ T9557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.760296][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.917639][ T9536] veth0_vlan: entered promiscuous mode [ 302.972584][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.025704][ T9536] veth1_vlan: entered promiscuous mode [ 303.087223][ T9557] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.135902][ T5276] em28xx 1-1:0.0: chip ID is em28178 [ 303.185122][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.192298][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.231442][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.238680][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.310890][ T9536] veth0_macvtap: entered promiscuous mode [ 303.347367][ T5277] usb 1-1: USB disconnect, device number 13 [ 303.367916][ T5277] em28xx 1-1:0.0: Disconnecting em28xx [ 303.378232][ T9557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.395025][ T5277] em28xx 1-1:0.0: Freeing device [ 303.416711][ T9536] veth1_macvtap: entered promiscuous mode [ 303.502574][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.525463][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.535683][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.555199][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.571451][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.602431][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.621829][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.632994][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.644728][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.728450][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.739754][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.763274][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.784018][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.795818][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.831678][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.856261][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.873741][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.895653][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.921634][ T9536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.963154][ T9536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.977265][ T9536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.997788][ T9536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.012429][ T29] audit: type=1800 audit(1727303033.964:43): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1469" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 304.101172][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.252485][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.280825][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.386559][ T9557] veth0_vlan: entered promiscuous mode [ 304.396014][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.413167][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.427343][ T9557] veth1_vlan: entered promiscuous mode [ 304.552443][ T9557] veth0_macvtap: entered promiscuous mode [ 304.562367][ T9557] veth1_macvtap: entered promiscuous mode [ 304.579209][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.589825][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.600056][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.611739][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.622348][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.632966][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.643275][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.654729][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.665497][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.676057][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.687429][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.711877][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.730189][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.751289][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.763336][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.788500][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.821541][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.833388][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 304.846569][ T9904] input: syz1 as /devices/virtual/input/input21 [ 304.851860][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.871067][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.882233][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.903376][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.929985][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.995316][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.006039][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.032974][ T9557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.087245][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.097948][ T9557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.122094][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.143161][ T9557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.152017][ T9557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.177081][ T25] usb 1-1: SerialNumber: syz [ 305.417008][ T25] usb 1-1: 0:2 : does not exist [ 305.467215][ T9913] tap0: tun_chr_ioctl cmd 2147767521 [ 305.470489][ T25] usb 1-1: USB disconnect, device number 14 [ 305.517602][ T9089] udevd[9089]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.631470][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.670133][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.795598][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.824912][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.122282][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 306.491771][ T9946] tipc: Started in network mode [ 306.512730][ T9946] tipc: Node identity ac14140f, cluster identity 4711 [ 306.546702][ T9946] tipc: New replicast peer: 255.255.255.255 [ 306.594744][ T9946] tipc: Enabled bearer , priority 10 [ 306.784179][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'. [ 306.985347][ T5330] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 307.046243][ T29] audit: type=1326 audit(1727303037.004:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63a877def9 code=0x0 [ 307.356363][ T5330] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 307.365881][ T5330] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 307.376616][ T5330] usb 1-1: Manufacturer: syz [ 307.391684][ T5330] usb 1-1: config 0 descriptor?? [ 307.566220][ T25] tipc: Node number set to 2886997007 [ 307.830330][ T5330] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 307.837518][ T5330] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 307.868144][ T5330] usb 1-1: USB disconnect, device number 15 [ 308.097964][ T9992] netlink: 'syz.2.1506': attribute type 4 has an invalid length. [ 308.303417][ T5277] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 308.403865][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 308.443573][ T5264] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 308.464205][ T5277] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 308.478634][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.491510][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.507720][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.517404][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.527754][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.539483][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.549068][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.559042][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.571065][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 308.584342][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.603312][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.615476][ T5264] usb 3-1: Using ep0 maxpacket: 32 [ 308.625733][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.646320][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.659251][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.670561][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.683268][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.698838][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.711012][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.732552][ T5264] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 308.742215][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.749285][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.758885][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.768802][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.777905][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.787674][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.799772][ T5264] usb 3-1: config 0 descriptor?? [ 308.845280][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.861356][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.885714][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.897005][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.907152][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.918052][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.929226][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.941107][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.953037][ T5277] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.965110][ T5277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.042821][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 309.070161][ T5277] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.079534][ T5277] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.088326][ T5277] usb 2-1: Product: syz [ 309.092563][ T5277] usb 2-1: Manufacturer: syz [ 309.097289][ T5277] usb 2-1: SerialNumber: syz [ 309.104017][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 309.109635][ T9] usbtmc 5-1:16.0: can't read capabilities [ 309.120083][ T5277] usb 2-1: config 0 descriptor?? [ 309.142318][ T5277] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 309.250022][ T5264] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 309.287348][ T25] usb 5-1: USB disconnect, device number 24 [ 309.371172][ T5330] usb 2-1: USB disconnect, device number 14 [ 309.394293][ T5330] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 309.446304][ T5264] ft260 0003:0403:6030.0015: chip code: 5e81 abf2 [ 309.649398][ T5264] ft260 0003:0403:6030.0015: failed to retrieve system status [ 309.657611][ T5264] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -71 [ 309.697817][ T5264] usb 3-1: USB disconnect, device number 20 [ 309.781549][T10023] tap0: tun_chr_ioctl cmd 2147767511 [ 310.523935][ T5273] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.703365][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 310.793699][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.813351][ T5273] usb 3-1: config 0 has no interfaces? [ 310.818905][ T5273] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 310.830136][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.860814][ T5273] usb 3-1: config 0 descriptor?? [ 311.105985][ T5273] usb 3-1: USB disconnect, device number 21 [ 311.663007][T10081] ALSA: mixer_oss: invalid OSS volume '' [ 311.742384][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 312.273364][ T5273] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.443811][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 312.464690][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.502130][ T5273] usb 3-1: config 0 has no interfaces? [ 312.519689][ T5273] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 312.540261][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.583453][ T5273] usb 3-1: SerialNumber: syz [ 312.602207][ T5273] usb 3-1: config 0 descriptor?? [ 312.723370][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 312.844080][T10095] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1562'. [ 312.867562][ T5273] usb 3-1: USB disconnect, device number 22 [ 312.893318][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 312.918871][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 312.941080][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.983855][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.003959][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.023503][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.047883][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.066632][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.305640][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 313.326009][ T25] usbtmc 4-1:16.0: can't read capabilities [ 313.522589][ T25] usb 4-1: USB disconnect, device number 14 [ 313.582112][T10120] MPI: mpi too large (181568 bits) [ 314.068849][ T29] audit: type=1326 audit(1727303044.024:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.091184][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.173310][ T29] audit: type=1326 audit(1727303044.024:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.200807][ T29] audit: type=1326 audit(1727303044.024:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.223054][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.263998][ T29] audit: type=1326 audit(1727303044.024:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.342071][ T29] audit: type=1326 audit(1727303044.024:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.430461][ T29] audit: type=1326 audit(1727303044.024:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.518995][ T29] audit: type=1326 audit(1727303044.024:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.541410][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.623670][ T29] audit: type=1326 audit(1727303044.024:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.740965][ T29] audit: type=1326 audit(1727303044.024:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 314.811474][ T29] audit: type=1326 audit(1727303044.024:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x7ffc0000 [ 315.081565][T10153] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 315.163389][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 315.343386][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 315.359557][ T25] usb 3-1: config 0 has no interfaces? [ 315.384007][ T25] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 315.402957][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.421315][ T25] usb 3-1: Product: syz [ 315.431445][ T25] usb 3-1: Manufacturer: syz [ 315.441572][ T25] usb 3-1: SerialNumber: syz [ 315.471106][ T25] usb 3-1: config 0 descriptor?? [ 315.666276][T10116] syz.1.1571 (10116): drop_caches: 1 [ 315.708437][T10148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.735466][ T25] usb 3-1: USB disconnect, device number 23 [ 316.482652][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 316.646035][T10195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.874013][ T2635] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 317.054120][ T2635] usb 3-1: Using ep0 maxpacket: 16 [ 317.065326][ T2635] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 317.092029][ T2635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 317.140532][ T2635] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 317.170716][ T2635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.190581][ T2635] usb 3-1: Product: syz [ 317.199913][ T2635] usb 3-1: Manufacturer: syz [ 317.215614][ T2635] usb 3-1: SerialNumber: syz [ 317.241239][ T2635] usb 3-1: config 0 descriptor?? [ 317.268910][ T2635] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 317.308823][ T2635] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 317.448825][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.456394][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.634501][T10218] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1618'. [ 317.750483][T10222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.866534][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 317.872825][ T2635] em28xx 3-1:0.0: chip ID is em28178 [ 318.114159][ T5276] usb 3-1: USB disconnect, device number 24 [ 318.124595][ T5276] em28xx 3-1:0.0: Disconnecting em28xx [ 318.148095][ T5276] em28xx 3-1:0.0: Freeing device [ 318.947794][ T25] IPVS: starting estimator thread 0... [ 318.957854][T10264] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 319.054743][T10265] IPVS: using max 15 ests per chain, 36000 per kthread [ 319.130374][T10274] input: syz1 as /devices/virtual/input/input22 [ 319.548531][T10282] netlink: 'syz.4.1645': attribute type 8 has an invalid length. [ 319.571628][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'. [ 320.143589][ T5277] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 320.313883][ T5277] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 320.390672][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.421269][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.473543][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.500359][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.545468][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.570811][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.594464][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.617332][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.650977][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.679892][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.708104][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.724136][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.732307][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.742652][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.772075][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.795410][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.823381][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.843358][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.859796][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.877761][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.919761][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.954468][ T5277] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.982751][ T5277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.008970][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.034770][ T5277] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 321.062417][ T5277] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 321.078412][ T5277] usb 4-1: Product: syz [ 321.085226][ T5277] usb 4-1: Manufacturer: syz [ 321.089891][ T5277] usb 4-1: SerialNumber: syz [ 321.121406][ T5277] usb 4-1: config 0 descriptor?? [ 321.145613][ T5277] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.444705][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 321.452424][ T2635] usb 4-1: USB disconnect, device number 15 [ 321.493739][ T2635] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 322.487547][T10359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1676'. [ 323.073357][ T5277] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 323.239946][ T5277] usb 2-1: config 0 has no interfaces? [ 323.273436][ T5277] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.292230][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.304400][ T5277] usb 2-1: config 0 descriptor?? [ 323.495232][T10388] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 323.548346][ T25] usb 2-1: USB disconnect, device number 15 [ 323.760336][T10398] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1693'. [ 325.018209][ T5273] IPVS: starting estimator thread 0... [ 325.125320][T10438] IPVS: using max 19 ests per chain, 45600 per kthread [ 325.306529][T10446] unknown channel width for channel at 907000KHz? [ 325.402159][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 326.378797][T10479] input: syz1 as /devices/virtual/input/input23 [ 326.504461][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 326.691356][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.702681][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.764993][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.804372][ T25] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 326.841046][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 326.841066][ T29] audit: type=1326 audit(1727303056.784:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x0 [ 326.870276][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.899323][ T25] usb 3-1: config 0 descriptor?? [ 327.333709][ T25] betop 0003:11C2:2208.0016: item fetching failed at offset 4/5 [ 327.371388][ T25] betop 0003:11C2:2208.0016: parse failed [ 327.393402][ T25] betop 0003:11C2:2208.0016: probe with driver betop failed with error -22 [ 327.535506][ T25] usb 3-1: USB disconnect, device number 25 [ 327.601949][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 329.338522][T10561] sctp: [Deprecated]: syz.2.1762 (pid 10561) Use of int in maxseg socket option. [ 329.338522][T10561] Use struct sctp_assoc_value instead [ 330.304046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.434294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.577653][T10599] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1778'. [ 330.591681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.783611][ T5277] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 332.899861][T10671] input: syz1 as /devices/virtual/input/input24 [ 332.968028][ T5277] usb 4-1: config 0 has no interfaces? [ 333.002269][ T5277] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.035274][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.094434][ T5277] usb 4-1: config 0 descriptor?? [ 333.453585][ T5264] usb 4-1: USB disconnect, device number 16 [ 334.201338][T10697] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1818'. [ 335.033582][ T5264] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 335.224035][ T5264] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 335.238837][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.275721][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.374727][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.409673][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.419020][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.430374][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.456674][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.466131][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.477215][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.494378][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.511288][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.558395][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.584357][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.618540][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.633025][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.642505][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.651740][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.664287][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.683791][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.699960][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.720744][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.731914][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.744507][ T5264] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.753563][ T5264] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.765050][ T5264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.775544][ T5264] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 335.784796][ T5264] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 335.793271][ T5264] usb 3-1: Product: syz [ 335.797675][ T5264] usb 3-1: Manufacturer: syz [ 335.802357][ T5264] usb 3-1: SerialNumber: syz [ 335.809184][ T5264] usb 3-1: config 0 descriptor?? [ 335.837936][ T5264] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 335.857561][ T25] usb 5-1: config 0 has no interfaces? [ 335.863118][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.894949][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.918500][ T25] usb 5-1: config 0 descriptor?? [ 335.979220][T10749] syz.0.1841 uses obsolete (PF_INET,SOCK_PACKET) [ 336.142027][ T5273] usb 3-1: USB disconnect, device number 26 [ 336.181006][ T5273] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 336.286304][ T5264] usb 5-1: USB disconnect, device number 25 [ 336.549787][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.717652][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 336.731621][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.854137][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.874797][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.886172][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.895123][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.904930][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.912390][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.942501][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.297191][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.823868][ T52] bridge_slave_1: left allmulticast mode [ 337.837299][ T52] bridge_slave_1: left promiscuous mode [ 337.854534][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.914065][ T52] bridge_slave_0: left allmulticast mode [ 337.920122][ T52] bridge_slave_0: left promiscuous mode [ 337.947107][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.967532][ T5230] Bluetooth: hci0: command tx timeout [ 339.454007][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.468088][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.488931][ T52] bond0 (unregistering): Released all slaves [ 339.512149][T10763] chnl_net:caif_netlink_parms(): no params data found [ 339.532386][T10789] netlink: 'syz.0.1857': attribute type 8 has an invalid length. [ 340.471386][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.501390][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.522361][T10763] bridge_slave_0: entered allmulticast mode [ 340.555457][T10763] bridge_slave_0: entered promiscuous mode [ 340.642431][T10763] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.660211][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.704090][T10763] bridge_slave_1: entered allmulticast mode [ 340.736488][T10763] bridge_slave_1: entered promiscuous mode [ 340.845669][ T52] hsr_slave_0: left promiscuous mode [ 340.863365][ T52] hsr_slave_1: left promiscuous mode [ 340.871184][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.910524][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.942935][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.951183][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.002062][ T52] veth1_macvtap: left promiscuous mode [ 341.007971][ T52] veth0_macvtap: left promiscuous mode [ 341.016760][ T52] veth1_vlan: left promiscuous mode [ 341.022185][ T52] veth0_vlan: left promiscuous mode [ 341.043405][ T5230] Bluetooth: hci0: command tx timeout [ 341.898464][T10865] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 342.185408][ T52] team0 (unregistering): Port device team_slave_1 removed [ 342.306431][ T52] team0 (unregistering): Port device team_slave_0 removed [ 342.689836][T10876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.133438][ T5230] Bluetooth: hci0: command tx timeout [ 343.328457][T10763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.446512][T10763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.609968][T10763] team0: Port device team_slave_0 added [ 343.625528][T10763] team0: Port device team_slave_1 added [ 343.916345][T10763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.927997][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.021759][T10763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.077441][T10763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.109350][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.226817][T10763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.494790][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.507587][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.517110][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.525562][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.535620][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.545330][ T5273] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 344.570118][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.784247][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 344.816774][ T5273] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 344.859581][ T5273] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 344.890791][ T5273] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 344.891812][T10763] hsr_slave_0: entered promiscuous mode [ 344.953386][ T5273] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 344.968230][T10763] hsr_slave_1: entered promiscuous mode [ 344.988220][ T5273] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.032728][ T5273] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 345.047615][ T5273] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 345.073385][T10763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.081026][T10763] Cannot create hsr debugfs directory [ 345.108202][ T5273] usb 4-1: Product: syz [ 345.156176][ T5273] usb 4-1: Manufacturer: syz [ 345.180400][ T5273] usb 4-1: SerialNumber: syz [ 345.212039][ T5273] usb 4-1: config 0 descriptor?? [ 345.214383][ T5227] Bluetooth: hci0: command tx timeout [ 345.280997][ T5273] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 345.300096][ T5273] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 345.454832][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.522429][ T25] usb 4-1: USB disconnect, device number 17 [ 345.528423][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 345.623572][ T25] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 345.687219][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.884120][T10929] ldusb: No device or device unplugged -19 [ 345.902428][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.136536][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.287730][ T29] audit: type=1326 audit(1727303076.244:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.2.1903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf1bb7def9 code=0x0 [ 346.614273][T10905] chnl_net:caif_netlink_parms(): no params data found [ 346.644017][ T5227] Bluetooth: hci4: command tx timeout [ 347.083414][ T52] bridge_slave_1: left allmulticast mode [ 347.089150][ T52] bridge_slave_1: left promiscuous mode [ 347.143431][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.188818][ T52] bridge_slave_0: left allmulticast mode [ 347.204419][ T52] bridge_slave_0: left promiscuous mode [ 347.231180][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.312722][ T29] audit: type=1400 audit(1727303077.264:59): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 347.572333][ T29] audit: type=1326 audit(1727303077.524:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.0.1913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc2297def9 code=0x0 [ 347.773349][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 347.787405][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.803273][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.822914][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 347.843265][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 347.866170][ T25] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 347.883292][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.911513][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 347.938791][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 347.953804][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 347.963901][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 347.991034][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 348.008705][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 348.296903][ T52] bond0 (unregistering): left allmulticast mode [ 348.305416][ T52] bond_slave_0: left allmulticast mode [ 348.311070][ T52] bond_slave_1: left allmulticast mode [ 348.317967][ T52] bond0 (unregistering): left promiscuous mode [ 348.324807][ T52] bond_slave_0: left promiscuous mode [ 348.330714][ T52] bond_slave_1: left promiscuous mode [ 348.358611][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.371365][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.388851][ T52] bond0 (unregistering): Released all slaves [ 348.456342][ T5273] usb 4-1: USB disconnect, device number 18 [ 348.463432][T10966] cdc_wdm 4-1:1.0: Error autopm - -16 [ 348.723790][ T5227] Bluetooth: hci4: command tx timeout [ 348.796773][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.833069][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.861834][T10905] bridge_slave_0: entered allmulticast mode [ 348.869287][T10905] bridge_slave_0: entered promiscuous mode [ 349.026998][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.051363][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.059506][T10905] bridge_slave_1: entered allmulticast mode [ 349.069467][T10905] bridge_slave_1: entered promiscuous mode [ 349.344805][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.362674][T10763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.386142][T10763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.535722][ T52] hsr_slave_0: left promiscuous mode [ 349.593401][ T52] hsr_slave_1: left promiscuous mode [ 349.615895][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.631754][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.640057][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.652846][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.700936][ T52] veth1_macvtap: left promiscuous mode [ 349.712440][ T52] veth0_macvtap: left promiscuous mode [ 349.720801][ T52] veth1_vlan: left promiscuous mode [ 349.732231][ T52] veth0_vlan: left promiscuous mode [ 350.243423][ T5227] Bluetooth: hci5: command 0x0406 tx timeout [ 350.805622][ T5230] Bluetooth: hci4: command tx timeout [ 351.043462][ T5276] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 351.082992][ T52] team0 (unregistering): Port device team_slave_1 removed [ 351.139471][ T52] team0 (unregistering): Port device team_slave_0 removed [ 351.229667][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 351.236497][ T5276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.247829][ T5276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.256942][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 351.280584][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 351.305491][ T5276] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 351.314810][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.351456][ T5276] hub 1-1:1.0: bad descriptor, ignoring hub [ 351.361308][ T5276] hub 1-1:1.0: probe with driver hub failed with error -5 [ 351.378819][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 351.393960][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 351.406578][ T5276] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 351.425830][ T5276] cdc_wdm 1-1:1.0: Unknown control protocol [ 352.097857][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.139067][T10763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.236512][T10905] team0: Port device team_slave_0 added [ 352.253161][T10763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.319352][T10905] team0: Port device team_slave_1 added [ 352.462028][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.513098][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.577437][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.598470][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.641003][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.682038][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.867043][ T52] IPVS: stop unused estimator thread 0... [ 352.877867][T10905] hsr_slave_0: entered promiscuous mode [ 352.891331][ T5230] Bluetooth: hci4: command tx timeout [ 352.938536][T10905] hsr_slave_1: entered promiscuous mode [ 352.979703][T10905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.988025][T10905] Cannot create hsr debugfs directory [ 353.119215][T11047] misc userio: Can't change port type on an already running userio instance [ 353.196920][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.368197][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.393041][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.400258][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.521185][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.528412][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.032412][T10763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.230898][T10763] veth0_vlan: entered promiscuous mode [ 354.329560][T10905] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.366899][T10905] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.408977][T10905] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.466677][T10905] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.507798][T10763] veth1_vlan: entered promiscuous mode [ 354.686699][T10763] veth0_macvtap: entered promiscuous mode [ 354.772896][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.791268][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.826045][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.833234][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.898878][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.906107][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.980118][T11021] cdc_wdm 1-1:1.0: Error autopm - -16 [ 354.985280][ T2635] usb 1-1: USB disconnect, device number 16 [ 354.994941][T10763] veth1_macvtap: entered promiscuous mode [ 355.129120][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.208182][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.239666][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.267773][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.303541][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.314441][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.333292][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.370635][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.382520][T10763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.409974][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.434047][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.469418][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.498355][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.541622][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.573402][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.591386][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.602283][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.622128][T10763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.650959][T10763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.670814][T10763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.681274][T10763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.699141][T10763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.773711][ T5299] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 355.809195][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.952414][ T5299] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 355.983082][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.009215][ T5299] usb 3-1: Product: syz [ 356.025216][ T5299] usb 3-1: Manufacturer: syz [ 356.037660][T10905] veth0_vlan: entered promiscuous mode [ 356.050908][ T5299] usb 3-1: SerialNumber: syz [ 356.061845][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.071174][ T5299] usb 3-1: config 0 descriptor?? [ 356.116399][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.155820][T10905] veth1_vlan: entered promiscuous mode [ 356.248752][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.273287][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.300804][T10905] veth0_macvtap: entered promiscuous mode [ 356.321545][T10905] veth1_macvtap: entered promiscuous mode [ 356.344652][ T5277] usb 3-1: USB disconnect, device number 27 [ 356.402339][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.470671][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.510771][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.551774][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.589724][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.623573][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.673448][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.699346][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.718913][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.753990][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.784734][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.820713][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.872457][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.910122][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.921078][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.943540][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.954112][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.964411][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.975204][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.985117][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.995783][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.007536][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.046952][T10905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.055892][T10905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.065262][T10905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.074319][T10905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.356837][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.385388][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.477381][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.525510][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.663488][T11193] io-wq is not configured for unbound workers [ 358.808451][ T1050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.042295][ T1050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.366141][ T1050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.632664][ T1050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.674256][ T5277] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 359.792336][T11229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.826971][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.852353][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.861271][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.870073][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 359.878690][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 359.890055][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.897428][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 359.913872][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.921190][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 359.935850][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.945872][ T5277] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 359.955467][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.965582][ T5277] usb 2-1: SerialNumber: syz [ 359.978469][T11218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.003124][ T5277] hub 2-1:1.0: bad descriptor, ignoring hub [ 360.021217][ T5277] hub 2-1:1.0: probe with driver hub failed with error -5 [ 360.118507][ T1050] bridge_slave_1: left allmulticast mode [ 360.164008][ T1050] bridge_slave_1: left promiscuous mode [ 360.169834][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.218739][T11218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.301364][ T1050] bridge_slave_0: left allmulticast mode [ 360.308941][ T1050] bridge_slave_0: left promiscuous mode [ 360.318440][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.272201][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.294276][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.316001][ T1050] bond0 (unregistering): Released all slaves [ 361.421106][ T5277] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 361.467200][T11261] vlan2: entered allmulticast mode [ 361.484455][ T5277] usb 2-1: USB disconnect, device number 16 [ 361.492067][ T5277] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 361.503446][T11261] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 361.548177][T11261] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 361.597664][T11265] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2001'. [ 362.011459][ T5230] Bluetooth: hci1: command tx timeout [ 362.400391][ T1050] hsr_slave_0: left promiscuous mode [ 362.449769][ T1050] hsr_slave_1: left promiscuous mode [ 362.520958][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.545434][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.573343][ T5277] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 362.582395][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.606967][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.688627][T11296] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 362.702992][ T1050] veth1_macvtap: left promiscuous mode [ 362.726046][ T1050] veth0_macvtap: left promiscuous mode [ 362.744220][ T1050] veth1_vlan: left promiscuous mode [ 362.749619][ T1050] veth0_vlan: left promiscuous mode [ 362.758183][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 362.785762][ T5277] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.803819][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.848629][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.894181][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.918068][ T5277] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.939298][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.186867][ T5277] usb 5-1: GET_CAPABILITIES returned 0 [ 363.199684][ T5277] usbtmc 5-1:16.0: can't read capabilities [ 363.359172][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 363.391833][ T5273] usb 5-1: USB disconnect, device number 26 [ 363.526676][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 363.551637][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.592063][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.613496][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.627709][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.637256][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.660866][ T25] usb 4-1: config 0 descriptor?? [ 364.002820][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 364.083370][ T5230] Bluetooth: hci1: command tx timeout [ 364.098356][ T25] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 364.138204][ T25] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 364.158902][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 364.187642][ T25] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 364.218453][ T25] microsoft 0003:045E:07DA.0017: no inputs found [ 364.227995][ T25] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 364.321569][ T5264] usb 4-1: USB disconnect, device number 19 [ 365.240081][T11236] chnl_net:caif_netlink_parms(): no params data found [ 365.497492][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.553551][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.561056][T11236] bridge_slave_0: entered allmulticast mode [ 365.569871][T11236] bridge_slave_0: entered promiscuous mode [ 365.595727][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.614212][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.633775][T11236] bridge_slave_1: entered allmulticast mode [ 365.655724][T11236] bridge_slave_1: entered promiscuous mode [ 365.672175][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 365.736190][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.775766][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.824879][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 365.847514][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 365.863658][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 365.864455][T11236] team0: Port device team_slave_0 added [ 365.912070][ T25] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 365.914659][T11236] team0: Port device team_slave_1 added [ 365.967096][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 366.000942][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 366.017867][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 366.027377][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 366.045740][ T25] usb 1-1: Product: syz [ 366.058183][ T25] usb 1-1: Manufacturer: syz [ 366.073572][ T25] usb 1-1: SerialNumber: syz [ 366.082143][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.100072][ T25] usb 1-1: config 0 descriptor?? [ 366.109549][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.121779][ T25] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 366.166496][ T5230] Bluetooth: hci1: command tx timeout [ 366.184720][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.270692][ T25] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 366.287043][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.310437][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.366108][T11342] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 366.405203][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.431527][ T5299] usb 1-1: USB disconnect, device number 17 [ 366.437518][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 366.475568][ T5299] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 366.632798][T11236] hsr_slave_0: entered promiscuous mode [ 366.647470][T11236] hsr_slave_1: entered promiscuous mode [ 366.798793][T11324] ldusb: No device or device unplugged -19 [ 367.481314][T11378] IPv6: addrconf: prefix option has invalid lifetime [ 367.488654][T11378] IPv6: addrconf: prefix option has invalid lifetime [ 367.526963][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 367.924342][T11236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.079452][T11236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.115127][T11236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.152042][T11236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.248051][ T5230] Bluetooth: hci1: command tx timeout [ 368.311501][T11407] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.2042'. [ 368.521077][T11413] openvswitch: netlink: nsh attr 14978 is out of range max 3 [ 368.564653][T11236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.642397][T11236] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.709260][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.716493][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.761167][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.768410][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.087077][T11236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.198974][T11236] veth0_vlan: entered promiscuous mode [ 369.215238][ T5299] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 369.240607][T11236] veth1_vlan: entered promiscuous mode [ 369.346444][T11236] veth0_macvtap: entered promiscuous mode [ 369.370777][T11236] veth1_macvtap: entered promiscuous mode [ 369.398609][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.428225][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.448376][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.480598][ T5299] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 369.490965][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.501551][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.525750][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.538258][ T5299] usb 1-1: config 0 descriptor?? [ 369.567600][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.583264][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.603252][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.626439][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.650248][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.683281][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.703238][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.727678][T11236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.768801][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.789704][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.813698][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.844194][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.873741][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.896611][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.925155][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.947999][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.968414][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.984440][ T5299] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 370.008421][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.020272][T11236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.031885][T11236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.041016][T11236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.051870][T11236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.063385][ T5299] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 370.095675][T11236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.117772][ T5299] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 370.199545][ T5299] usb 1-1: USB disconnect, device number 18 [ 370.241518][ T5299] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 370.362563][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.383351][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.420916][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.439574][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.664440][T11456] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 370.672263][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 370.805335][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.901298][T11467] dummy0: entered promiscuous mode [ 370.954572][T11467] dummy0: left promiscuous mode [ 371.273416][ T29] audit: type=1326 audit(1727303101.204:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.2.2071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba837def9 code=0x0 [ 372.001276][T11507] tun0: tun_chr_ioctl cmd 1074025680 [ 373.052302][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'. [ 373.138558][T11546] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 373.207900][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 373.744135][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 376.086380][ T5277] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 376.287257][ T5277] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 376.319689][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.379841][ T5277] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.386676][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.764241][ T16] sched: DL replenish lagged too much [ 481.433152][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 481.440355][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2948/1:b..l P11618/1:b..l [ 481.450125][ C1] rcu: (detected by 1, t=10503 jiffies, g=58397, q=427983 ncpus=2) [ 481.458146][ C1] task:syz.1.2129 state:R running task stack:22288 pid:11618 tgid:11606 ppid:10763 flags:0x00004002 [ 481.471344][ C1] Call Trace: [ 481.474691][ C1] [ 481.477658][ C1] __schedule+0x1895/0x4b30 [ 481.482226][ C1] ? __pfx___schedule+0x10/0x10 [ 481.487126][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.493166][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 481.498499][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 481.503670][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 481.509446][ C1] irqentry_exit+0x5e/0x90 [ 481.513921][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.519965][ C1] RIP: 0010:folio_mapcount+0x1/0x1e0 [ 481.525287][ C1] Code: ff ff e8 62 1c aa ff e9 16 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 49 89 fe 49 bf 00 00 00 00 00 fc ff df e8 28 1c aa [ 481.544939][ C1] RSP: 0018:ffffc9000323e728 EFLAGS: 00000246 [ 481.551049][ C1] RAX: 0000000000000002 RBX: 1ffffd40003d24bb RCX: ffff88802590da00 [ 481.559055][ C1] RDX: ffffc900104a9000 RSI: 0000000000000001 RDI: ffffea0001e925c0 [ 481.567064][ C1] RBP: 0000000000000001 R08: ffffffff81ea814e R09: 1ffffffff284d0f8 [ 481.575072][ C1] R10: dffffc0000000000 R11: fffffbfff284d0f9 R12: ffff888059f95cc1 [ 481.583083][ C1] R13: ffffea0001e925c0 R14: ffffea0001e925d8 R15: dffffc0000000000 [ 481.591103][ C1] ? folio_lock_anon_vma_read+0x10e/0x670 [ 481.596875][ C1] folio_lock_anon_vma_read+0x120/0x670 [ 481.602481][ C1] ? folio_lock_anon_vma_read+0x58/0x670 [ 481.608162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.613412][ C1] rmap_walk_anon+0x83/0x8a0 [ 481.618056][ C1] try_to_unmap+0x243/0x2e0 [ 481.622602][ C1] ? __pfx_try_to_unmap+0x10/0x10 [ 481.627663][ C1] ? __pfx_try_to_unmap_one+0x10/0x10 [ 481.633070][ C1] ? __pfx_folio_not_mapped+0x10/0x10 [ 481.638479][ C1] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 481.644585][ C1] ? noop_dirty_folio+0x103/0x2c0 [ 481.649651][ C1] ? folio_mapped+0xeb/0x390 [ 481.654287][ C1] shrink_folio_list+0x21e4/0x8cc0 [ 481.659476][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 481.664974][ C1] ? validate_chain+0x11e/0x5920 [ 481.669957][ C1] ? __pfx_validate_chain+0x10/0x10 [ 481.675194][ C1] ? __pfx_validate_chain+0x10/0x10 [ 481.680485][ C1] ? __pfx_validate_chain+0x10/0x10 [ 481.685731][ C1] ? __pfx_validate_chain+0x10/0x10 [ 481.690997][ C1] ? __lock_acquire+0x1384/0x2050 [ 481.696083][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 481.701854][ C1] reclaim_pages+0x916/0xc60 [ 481.706501][ C1] ? __pfx_reclaim_pages+0x10/0x10 [ 481.711686][ C1] ? madvise_cold_or_pageout_pte_range+0x2132/0x32a0 [ 481.718412][ C1] ? madvise_cold_or_pageout_pte_range+0x2931/0x32a0 [ 481.725138][ C1] ? __pfx_lock_release+0x10/0x10 [ 481.730220][ C1] ? folio_isolate_lru+0x754/0xee0 [ 481.735374][ C1] madvise_cold_or_pageout_pte_range+0x295a/0x32a0 [ 481.741919][ C1] ? mark_lock+0x9a/0x360 [ 481.746310][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 481.753222][ C1] ? mt_find+0x2a9/0x920 [ 481.757513][ C1] walk_pgd_range+0xb81/0x17f0 [ 481.762358][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 481.767610][ C1] __walk_page_range+0x132/0x720 [ 481.772593][ C1] ? find_vma+0xf9/0x170 [ 481.776881][ C1] ? __pfx_find_vma+0x10/0x10 [ 481.781608][ C1] ? process_vma_walk_lock+0x135/0x390 [ 481.787115][ C1] walk_page_range+0x58f/0x7c0 [ 481.791955][ C1] ? __pfx_walk_page_range+0x10/0x10 [ 481.797348][ C1] ? __pfx_lock_release+0x10/0x10 [ 481.802441][ C1] ? tlb_gather_mmu+0x24e/0x310 [ 481.807349][ C1] do_madvise+0x33cc/0x4720 [ 481.811944][ C1] ? __pfx_do_madvise+0x10/0x10 [ 481.816845][ C1] ? __pfx_lock_release+0x10/0x10 [ 481.821918][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.827952][ C1] ? mark_lock+0x9a/0x360 [ 481.832410][ C1] ? __lock_acquire+0x1384/0x2050 [ 481.837620][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 481.843492][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.849533][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 481.855927][ C1] ? exc_page_fault+0x590/0x8c0 [ 481.860825][ C1] __x64_sys_madvise+0xa6/0xc0 [ 481.865634][ C1] do_syscall_64+0xf3/0x230 [ 481.870184][ C1] ? clear_bhb_loop+0x35/0x90 [ 481.874913][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.880847][ C1] RIP: 0033:0x7effff77def9 [ 481.885307][ C1] RSP: 002b:00007f0000492038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 481.893765][ C1] RAX: ffffffffffffffda RBX: 00007effff936058 RCX: 00007effff77def9 [ 481.901770][ C1] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000000020000000 [ 481.909778][ C1] RBP: 00007effff7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 481.917808][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.925815][ C1] R13: 0000000000000001 R14: 00007effff936058 R15: 00007effffa5fa28 [ 481.933850][ C1] [ 481.936901][ C1] task:kworker/u8:8 state:R running task stack:21264 pid:2948 tgid:2948 ppid:2 flags:0x00004000 [ 481.948702][ C1] Workqueue: bat_events batadv_nc_worker [ 481.954408][ C1] Call Trace: [ 481.957716][ C1] [ 481.960700][ C1] __schedule+0x1895/0x4b30 [ 481.965267][ C1] ? __pfx___schedule+0x10/0x10 [ 481.970157][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.976227][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 481.981673][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 481.986835][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 481.992614][ C1] irqentry_exit+0x5e/0x90 [ 481.997077][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.003109][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 482.008437][ C1] Code: 2b 00 74 08 4c 89 f7 e8 fa 4a 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 482.028096][ C1] RSP: 0018:ffffc900099679e0 EFLAGS: 00000206 [ 482.034210][ C1] RAX: 0000000000000001 RBX: 1ffff9200132cf48 RCX: 725a5e54cce92900 [ 482.042223][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adbc0 RDI: ffffffff8c6100a0 [ 482.050237][ C1] RBP: ffffc90009967b40 R08: ffffffff942687c7 R09: 1ffffffff284d0f8 [ 482.058243][ C1] R10: dffffc0000000000 R11: fffffbfff284d0f9 R12: 1ffff9200132cf44 [ 482.066255][ C1] R13: dffffc0000000000 R14: ffffc90009967a40 R15: 0000000000000246 [ 482.074298][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 482.079382][ C1] ? batadv_nc_worker+0xcb/0x610 [ 482.084363][ C1] ? __pfx_lock_release+0x10/0x10 [ 482.089444][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.095489][ C1] batadv_nc_worker+0xec/0x610 [ 482.100296][ C1] ? batadv_nc_worker+0xcb/0x610 [ 482.105288][ C1] ? batadv_nc_worker+0xcb/0x610 [ 482.110261][ C1] ? process_scheduled_works+0x976/0x1850 [ 482.116035][ C1] process_scheduled_works+0xa63/0x1850 [ 482.121658][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.127696][ C1] ? assign_work+0x364/0x3d0 [ 482.132337][ C1] worker_thread+0x870/0xd30 [ 482.136983][ C1] ? __kthread_parkme+0x169/0x1d0 [ 482.142138][ C1] ? __pfx_worker_thread+0x10/0x10 [ 482.147378][ C1] kthread+0x2f0/0x390 [ 482.151493][ C1] ? __pfx_worker_thread+0x10/0x10 [ 482.156648][ C1] ? __pfx_kthread+0x10/0x10 [ 482.161273][ C1] ret_from_fork+0x4b/0x80 [ 482.165735][ C1] ? __pfx_kthread+0x10/0x10 [ 482.170364][ C1] ret_from_fork_asm+0x1a/0x30 [ 482.175196][ C1] [ 482.178269][ C1] rcu: rcu_preempt kthread starved for 10541 jiffies! g58397 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 482.189507][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 482.199522][ C1] rcu: RCU grace-period kthread stack dump: [ 482.205449][ C1] task:rcu_preempt state:R running task stack:24408 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 482.217268][ C1] Call Trace: [ 482.220583][ C1] [ 482.223562][ C1] __schedule+0x1895/0x4b30 [ 482.228129][ C1] ? __pfx___schedule+0x10/0x10 [ 482.233048][ C1] ? __pfx_lock_release+0x10/0x10 [ 482.238124][ C1] ? __asan_memset+0x23/0x50 [ 482.242769][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 482.248636][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.255047][ C1] ? schedule+0x90/0x320 [ 482.259344][ C1] schedule+0x14b/0x320 [ 482.263545][ C1] schedule_timeout+0x1be/0x310 [ 482.268445][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 482.273864][ C1] ? __pfx_process_timeout+0x10/0x10 [ 482.279205][ C1] ? prepare_to_swait_event+0x330/0x350 [ 482.284906][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 482.289806][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 482.295070][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 482.301272][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 482.306602][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.312544][ C1] ? finish_swait+0xd4/0x1e0 [ 482.317271][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 482.321905][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.327138][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.333076][ C1] ? __kthread_parkme+0x169/0x1d0 [ 482.338151][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.343387][ C1] kthread+0x2f0/0x390 [ 482.347499][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.352729][ C1] ? __pfx_kthread+0x10/0x10 [ 482.357353][ C1] ret_from_fork+0x4b/0x80 [ 482.361820][ C1] ? __pfx_kthread+0x10/0x10 [ 482.366460][ C1] ret_from_fork_asm+0x1a/0x30 [ 482.371283][ C1] [ 482.374338][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 482.380711][ C1] CPU: 1 UID: 0 PID: 5299 Comm: kworker/1:6 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 482.391193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 482.401295][ C1] Workqueue: events nsim_dev_trap_report_work [ 482.407446][ C1] RIP: 0010:fib_table_lookup+0x21c/0x1870 [ 482.413221][ C1] Code: 8d 7d 05 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 ef 01 00 00 45 0f b6 2f bf 40 00 00 00 <44> 89 ee e8 7c 76 57 f7 41 83 fd 3f 0f 87 5f 02 00 00 e8 6d 73 57 [ 482.432869][ C1] RSP: 0018:ffffc90000a17a60 EFLAGS: 00000246 [ 482.439075][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 482.447084][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000040 [ 482.455093][ C1] RBP: ffffc90000a17bc8 R08: ffffffff8a3d416f R09: 1ffffffff284d0f8 [ 482.463111][ C1] R10: dffffc0000000000 R11: fffffbfff284d0f9 R12: 1ffff1100e0aa9e4 [ 482.471115][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888070554f25 [ 482.479203][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 482.488260][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.494882][ C1] CR2: 0000001b2d01cff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 482.502895][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.510951][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.518966][ C1] Call Trace: [ 482.522276][ C1] [ 482.525151][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 482.531536][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 482.537233][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 482.543099][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 482.549395][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 482.554822][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 482.560502][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 482.565749][ C1] ? acct_account_cputime+0x207/0x210 [ 482.571205][ C1] ? update_process_times+0x1ce/0x230 [ 482.576626][ C1] ? tick_nohz_handler+0x37c/0x500 [ 482.581780][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 482.587280][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 482.592691][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 482.598730][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 482.604497][ C1] ? hrtimer_interrupt+0x396/0x990 [ 482.609662][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 482.615872][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 482.621735][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.627937][ C1] ? fib_table_lookup+0x1cf/0x1870 [ 482.633100][ C1] ? fib_table_lookup+0x21c/0x1870 [ 482.638257][ C1] ? __lock_acquire+0x1384/0x2050 [ 482.643354][ C1] ? __pfx_fib_table_lookup+0x10/0x10 [ 482.648788][ C1] fib_lookup+0x1c0/0x450 [ 482.653148][ C1] ? fib_lookup+0x81/0x450 [ 482.657601][ C1] ip_route_output_key_hash_rcu+0x284/0x2390 [ 482.663653][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 482.669239][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 482.674927][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 482.681038][ C1] ? __pfx_lock_release+0x10/0x10 [ 482.686111][ C1] ? kthread+0x2f0/0x390 [ 482.690409][ C1] ip_route_output_flow+0x29/0x140 [ 482.695564][ C1] ip_route_me_harder+0x80d/0x1300 [ 482.700738][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 482.706339][ C1] ? trace_kmalloc+0x1f/0xd0 [ 482.710974][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 482.717711][ C1] synproxy_send_tcp+0x356/0x6c0 [ 482.722695][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 482.728561][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 482.734930][ C1] ? synproxy_pernet+0x45/0x270 [ 482.739822][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 482.745068][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 482.750833][ C1] ? nf_ip_checksum+0x13a/0x500 [ 482.755725][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 482.760971][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 482.766735][ C1] ? __pfx_validate_chain+0x10/0x10 [ 482.771980][ C1] nft_do_chain+0x4ad/0x1da0 [ 482.776628][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 482.781692][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 482.787145][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 482.792403][ C1] nft_do_chain_inet+0x418/0x6b0 [ 482.797390][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 482.802889][ C1] ? ipt_do_table+0x312/0x1860 [ 482.807712][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 482.813207][ C1] nf_hook_slow+0xc3/0x220 [ 482.817670][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.823696][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.829731][ C1] NF_HOOK+0x29e/0x450 [ 482.833854][ C1] ? NF_HOOK+0x9a/0x450 [ 482.838072][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 482.842720][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 482.848759][ C1] ? ip_rcv_finish+0x406/0x560 [ 482.853570][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 482.858721][ C1] NF_HOOK+0x3a4/0x450 [ 482.862830][ C1] ? __lock_acquire+0x1384/0x2050 [ 482.867904][ C1] ? NF_HOOK+0x9a/0x450 [ 482.872114][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 482.876752][ C1] ? ip_rcv_core+0x801/0xd10 [ 482.881391][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 482.886563][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 482.891114][ C1] __netif_receive_skb+0x2bf/0x650 [ 482.896304][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 482.901382][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 482.907070][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.913117][ C1] ? __pfx_lock_release+0x10/0x10 [ 482.918185][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 482.923349][ C1] process_backlog+0x662/0x15b0 [ 482.928246][ C1] ? process_backlog+0x33b/0x15b0 [ 482.933331][ C1] ? __pfx_process_backlog+0x10/0x10 [ 482.938650][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.944692][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.951089][ C1] __napi_poll+0xcb/0x490 [ 482.955504][ C1] net_rx_action+0x89b/0x1240 [ 482.960247][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 482.965411][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 482.971163][ C1] handle_softirqs+0x2c5/0x980 [ 482.975986][ C1] ? do_softirq+0x11b/0x1e0 [ 482.980536][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 482.985879][ C1] do_softirq+0x11b/0x1e0 [ 482.990255][ C1] [ 482.993215][ C1] [ 482.996174][ C1] ? __pfx_do_softirq+0x10/0x10 [ 483.001066][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 483.006758][ C1] ? rcu_is_watching+0x15/0xb0 [ 483.011574][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 483.016822][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 483.022671][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 483.028440][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.033688][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 483.039548][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 483.045241][ C1] ? process_scheduled_works+0x976/0x1850 [ 483.051012][ C1] process_scheduled_works+0xa63/0x1850 [ 483.056637][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.062673][ C1] ? assign_work+0x364/0x3d0 [ 483.067353][ C1] worker_thread+0x870/0xd30 [ 483.072007][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 483.077942][ C1] ? __kthread_parkme+0x169/0x1d0 [ 483.083012][ C1] ? __pfx_worker_thread+0x10/0x10 [ 483.088180][ C1] kthread+0x2f0/0x390 [ 483.092279][ C1] ? __pfx_worker_thread+0x10/0x10 [ 483.097436][ C1] ? __pfx_kthread+0x10/0x10 [ 483.102061][ C1] ret_from_fork+0x4b/0x80 [ 483.106523][ C1] ? __pfx_kthread+0x10/0x10 [ 483.111181][ C1] ret_from_fork_asm+0x1a/0x30 [ 483.116006][ C1] [ 486.559603][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.573915][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 487.385742][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.400053][ T1268] ieee802154 phy1 wpan1: encryption failed: -22