last executing test programs: 1m37.792133371s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 1m34.072452333s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 1m18.994002437s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 1m18.413639336s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 1m0.394932742s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 59.188568332s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 39.112666288s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 38.352981566s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 20.190238087s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 18.628518642s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 5.164043516s ago: executing program 1 (id=1482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 4.856937222s ago: executing program 1 (id=1483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r2, 0xd}, 0x8) 3.943120576s ago: executing program 1 (id=1490): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) 3.8286308s ago: executing program 1 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.73788784s ago: executing program 4 (id=1492): open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x200808, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x801c581f, 0x0) 3.644367286s ago: executing program 1 (id=1493): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190880"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) 3.585241466s ago: executing program 4 (id=1494): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e19, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x0) 3.261941709s ago: executing program 4 (id=1495): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000680)) r2 = dup2(r0, r0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000340)={0xe0000005}) 3.072581149s ago: executing program 4 (id=1496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000480)=""/212, 0xd4}], 0x1, 0x7f, 0x8) 2.810142567s ago: executing program 4 (id=1498): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000003c0)="01fb", 0x2, 0x0, &(0x7f0000000200), 0x10) 2.491078652s ago: executing program 0 (id=1500): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x0, 0x3000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.283670877s ago: executing program 0 (id=1501): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x5) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/124, 0x7c}], 0x1) 2.083237544s ago: executing program 2 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x4c}}, 0x0) 2.040070768s ago: executing program 3 (id=891): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff01], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.025400776s ago: executing program 0 (id=1502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.023591927s ago: executing program 1 (id=1503): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 1.022917256s ago: executing program 4 (id=1504): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x31) 897.257356ms ago: executing program 0 (id=1505): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000005, 0x13, r0, 0xd2a66000) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_emit_ethernet(0x1046, &(0x7f000001a600)=ANY=[], 0x0) 573.093889ms ago: executing program 0 (id=1506): r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x2) 0s ago: executing program 0 (id=1507): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 161.943118][ T7598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.997595][ T5224] Bluetooth: hci4: command 0x040f tx timeout [ 162.110517][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.128734][ T7598] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.166658][ T7598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.177532][ T7598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.205096][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.212455][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.257552][ T5330] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.267532][ T5330] em28xx 5-1:0.0: Config register raw data: 0x41 [ 162.287024][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.294321][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.413167][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.479822][ T8] usb 5-1: USB disconnect, device number 9 [ 162.488232][ T5279] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.509170][ T8] em28xx 5-1:0.0: Disconnecting em28xx [ 162.562313][ T8] em28xx 5-1:0.0: Freeing device [ 162.572463][ T7493] veth0_vlan: entered promiscuous mode [ 162.641114][ T7493] veth1_vlan: entered promiscuous mode [ 162.663451][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.672314][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.703159][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.734424][ T5279] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.743848][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.765974][ T5279] usb 2-1: config 0 descriptor?? [ 162.825951][ T7493] veth0_macvtap: entered promiscuous mode [ 162.873777][ T7598] veth0_vlan: entered promiscuous mode [ 162.892299][ T7493] veth1_macvtap: entered promiscuous mode [ 162.936322][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.963209][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.985008][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.010947][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.021941][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.057549][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.105436][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.134241][ T7598] veth1_vlan: entered promiscuous mode [ 163.153030][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.184970][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.217202][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.237700][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.263875][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.284109][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.296698][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.381252][ T7493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.404974][ T7493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.423734][ T7493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.433671][ T5279] usb 2-1: string descriptor 0 read error: -22 [ 163.435070][ T7493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.606079][ T7598] veth0_macvtap: entered promiscuous mode [ 163.640468][ T5279] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input16 [ 163.682186][ T7598] veth1_macvtap: entered promiscuous mode [ 163.727711][ T5279] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input17 [ 163.828104][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.837893][ T5279] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input18 [ 163.885574][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.937816][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.967696][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.977615][ T5279] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input19 [ 164.044369][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.093838][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.096548][ T5279] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 164.151620][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.164399][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.177587][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.222268][ T5279] usb 2-1: USB disconnect, device number 11 [ 164.281553][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.334353][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.362074][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.389824][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.431722][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.464288][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.476611][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.494989][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.507173][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.687154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.697086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.706022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.915482][ T7598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.987539][ T7598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.996325][ T7598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.053142][ T7598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.112627][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.148034][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.293869][ T2501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.318765][ T2501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.444010][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.497138][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.709084][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.741921][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.096080][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.375259][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.612683][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.844301][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.874553][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.907533][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.947683][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.979104][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.989060][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.996423][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.187491][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 167.267925][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.279163][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.288711][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.299715][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.314408][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.322097][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.406795][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.426070][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.439586][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.450082][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.458320][ T8] usb 2-1: SerialNumber: syz [ 167.709128][ T8] usb 2-1: 0:2 : does not exist [ 167.727915][ T8] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 167.750478][ T61] bridge_slave_1: left allmulticast mode [ 167.756215][ T61] bridge_slave_1: left promiscuous mode [ 167.778199][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.839513][ T8] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 167.860009][ T61] bridge_slave_0: left allmulticast mode [ 167.865970][ T61] bridge_slave_0: left promiscuous mode [ 167.872061][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.915885][ T8] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 167.949680][ T8] usb 2-1: USB disconnect, device number 12 [ 168.036999][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.039019][ T5224] Bluetooth: hci1: command tx timeout [ 169.055231][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.076359][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.096179][ T61] bond0 (unregistering): Released all slaves [ 169.367706][ T5224] Bluetooth: hci4: command tx timeout [ 169.525975][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 169.810770][ T8057] vlan2: entered allmulticast mode [ 169.815980][ T8057] vlan1: entered allmulticast mode [ 169.829157][ T8057] veth0_vlan: entered allmulticast mode [ 169.852062][ T8057] bridge0: port 3(vlan2) entered blocking state [ 169.889803][ T8057] bridge0: port 3(vlan2) entered disabled state [ 169.897266][ T8057] vlan2: entered promiscuous mode [ 169.907492][ T8057] vlan1: entered promiscuous mode [ 169.913609][ T8057] bridge0: port 3(vlan2) entered blocking state [ 169.920190][ T8057] bridge0: port 3(vlan2) entered forwarding state [ 169.983356][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 170.130745][ T61] hsr_slave_0: left promiscuous mode [ 170.155190][ T61] hsr_slave_1: left promiscuous mode [ 170.207935][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.227553][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.273508][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.301016][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.387544][ T61] veth1_macvtap: left promiscuous mode [ 170.407559][ T61] veth0_macvtap: left promiscuous mode [ 170.413249][ T61] veth1_vlan: left promiscuous mode [ 170.440306][ T61] veth0_vlan: left promiscuous mode [ 170.478679][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 170.657487][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 170.666673][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.686995][ T8] usb 1-1: config 0 has no interface number 0 [ 170.696676][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.724385][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.736819][ T8] usb 1-1: Product: syz [ 170.749874][ T8] usb 1-1: Manufacturer: syz [ 170.754675][ T8] usb 1-1: SerialNumber: syz [ 170.786453][ T8] usb 1-1: config 0 descriptor?? [ 170.794043][ T8] smsc95xx v2.0.0 [ 171.117797][ T5224] Bluetooth: hci1: command tx timeout [ 171.438139][ T5224] Bluetooth: hci4: command tx timeout [ 171.560065][ T61] team0 (unregistering): Port device team_slave_1 removed [ 171.656886][ T61] team0 (unregistering): Port device team_slave_0 removed [ 171.841315][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 171.852446][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 171.871352][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 171.882790][ T8] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 171.898558][ T8] usb 1-1: USB disconnect, device number 16 [ 172.372243][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.381251][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.389198][ T7954] bridge_slave_0: entered allmulticast mode [ 172.396249][ T7954] bridge_slave_0: entered promiscuous mode [ 172.426890][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.436029][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.445452][ T7954] bridge_slave_1: entered allmulticast mode [ 172.473304][ T7954] bridge_slave_1: entered promiscuous mode [ 172.490539][ T8090] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1066'. [ 172.696700][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.759875][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.936643][ T8124] trusted_key: syz.4.1079 sent an empty control message without MSG_MORE. [ 173.057672][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.079895][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.087244][ T7965] bridge_slave_0: entered allmulticast mode [ 173.099057][ T7965] bridge_slave_0: entered promiscuous mode [ 173.117163][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.134787][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.158325][ T7965] bridge_slave_1: entered allmulticast mode [ 173.165481][ T7965] bridge_slave_1: entered promiscuous mode [ 173.198278][ T5224] Bluetooth: hci1: command tx timeout [ 173.254231][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 173.254251][ T29] audit: type=1326 audit(1729116739.698:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8129 comm="syz.0.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3c697dff9 code=0x0 [ 173.289649][ T7954] team0: Port device team_slave_0 added [ 173.321627][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.354649][ T7954] team0: Port device team_slave_1 added [ 173.371625][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.518113][ T5224] Bluetooth: hci4: command tx timeout [ 173.550495][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.563861][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.630246][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.807971][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.872154][ T7965] team0: Port device team_slave_0 added [ 173.886770][ T7965] team0: Port device team_slave_1 added [ 173.903273][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.918603][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.952373][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.053992][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.258276][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.275479][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.294627][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.321138][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.334342][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.341442][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.367833][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.393961][ T5355] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.510011][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.534996][ T7965] hsr_slave_0: entered promiscuous mode [ 174.555664][ T7965] hsr_slave_1: entered promiscuous mode [ 174.607135][ T5355] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 174.615778][ T5355] usb 2-1: config 0 has no interface number 0 [ 174.622089][ T5355] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.622793][ T7954] hsr_slave_0: entered promiscuous mode [ 174.633317][ T5355] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.636752][ T5355] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 174.667998][ T5355] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 174.676279][ T5355] usb 2-1: Manufacturer: syz [ 174.679590][ T7954] hsr_slave_1: entered promiscuous mode [ 174.688666][ T5355] usb 2-1: config 0 descriptor?? [ 174.701088][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.728042][ T7954] Cannot create hsr debugfs directory [ 175.149383][ T5355] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.000B/input/input21 [ 175.250841][ T5355] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 175.281633][ T5224] Bluetooth: hci1: command tx timeout [ 175.359494][ T5355] usb 2-1: USB disconnect, device number 13 [ 175.450935][ T61] bridge_slave_1: left allmulticast mode [ 175.456673][ T61] bridge_slave_1: left promiscuous mode [ 175.496253][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.565171][ T61] bridge_slave_0: left allmulticast mode [ 175.586505][ T61] bridge_slave_0: left promiscuous mode [ 175.598035][ T5224] Bluetooth: hci4: command tx timeout [ 175.601625][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.247522][ T5277] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.453428][ T5277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.498271][ T5277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.529618][ T5277] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.544813][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.564067][ T5277] usb 1-1: SerialNumber: syz [ 176.790531][ T5277] usb 1-1: 0:2 : does not exist [ 176.827023][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.840681][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.852157][ T61] bond0 (unregistering): Released all slaves [ 177.246970][ T5330] usb 1-1: USB disconnect, device number 17 [ 177.429025][ T61] hsr_slave_0: left promiscuous mode [ 177.436134][ T61] hsr_slave_1: left promiscuous mode [ 177.449341][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.456963][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.468037][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.475591][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.498324][ T61] veth1_macvtap: left promiscuous mode [ 177.504105][ T61] veth0_macvtap: left promiscuous mode [ 177.510528][ T61] veth1_vlan: left promiscuous mode [ 177.515966][ T61] veth0_vlan: left promiscuous mode [ 177.579976][ T8247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 177.586578][ T8247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.597028][ T8247] vhci_hcd vhci_hcd.0: Device attached [ 177.606269][ T8248] vhci_hcd: connection closed [ 177.614802][ T35] vhci_hcd: stop threads [ 177.634563][ T35] vhci_hcd: release socket [ 177.645582][ T35] vhci_hcd: disconnect device [ 178.107942][ T5330] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.272321][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 178.280740][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.291990][ T5330] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 178.293817][ T61] team0 (unregistering): Port device team_slave_1 removed [ 178.302862][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.336806][ T5330] usb 1-1: config 0 descriptor?? [ 178.352232][ T5330] appletouch 1-1:0.0: Could not find int-in endpoint [ 178.361680][ T5330] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 178.371196][ T5330] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.398810][ T61] team0 (unregistering): Port device team_slave_0 removed [ 178.447688][ T5277] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.495517][ T5278] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.575174][ T5330] usb 1-1: USB disconnect, device number 18 [ 178.613697][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 178.620761][ T5277] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.629796][ T5277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.641832][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.647637][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 178.654854][ T5277] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.676824][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.685038][ T5277] usb 2-1: Product: syz [ 178.690012][ T5278] usb 5-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 178.697534][ T5277] usb 2-1: Manufacturer: syz [ 178.699563][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.703771][ T5277] usb 2-1: SerialNumber: syz [ 178.743828][ T5278] usb 5-1: config 0 descriptor?? [ 178.751021][ T5278] usb 5-1: bad CDC descriptors [ 178.759473][ T5278] cdc_acm 5-1:0.0: Zero length descriptor references [ 178.778821][ T5278] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 178.971413][ T5278] usb 5-1: USB disconnect, device number 10 [ 179.147986][ T5277] usb 2-1: 0:2 : does not exist [ 179.311096][ T7965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.384540][ T7965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.421900][ T7965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.538658][ T7965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.773667][ T5277] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 179.831220][ T5277] usb 2-1: USB disconnect, device number 14 [ 179.885948][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.109807][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.148315][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.172036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.179289][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.252310][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.259580][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.455410][ T8295] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.494296][ T29] audit: type=1326 audit(1729116746.938:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.4.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x0 [ 180.586443][ T7965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.606472][ T7954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.621304][ T7954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.633532][ T7954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.651448][ T8314] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 180.663532][ T7954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.000731][ T8328] binder: 8326:8328 ioctl c0306201 20000080 returned -22 [ 181.005381][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.077326][ T7954] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.164785][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.172046][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.197320][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.235798][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.243044][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.279848][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.297244][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.316124][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.353599][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.382967][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.394358][ T7965] veth0_vlan: entered promiscuous mode [ 181.403353][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.438347][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.446178][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.469779][ T7965] veth1_vlan: entered promiscuous mode [ 181.489172][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.496648][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.530344][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.538540][ T5277] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.566583][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.577628][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.600507][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.625108][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.646553][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.668538][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.676053][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.699124][ T7965] veth0_macvtap: entered promiscuous mode [ 181.727702][ T5277] usb 2-1: config 0 has no interfaces? [ 181.733516][ T5277] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 181.757864][ T7965] veth1_macvtap: entered promiscuous mode [ 181.764673][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.784873][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.797855][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.821960][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.832702][ T5277] usb 2-1: config 0 descriptor?? [ 181.849203][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.868214][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.875696][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.887948][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.909955][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.920120][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.937794][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.947723][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.959667][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 181.969750][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.985226][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.003880][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.012205][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.027523][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.038970][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.056742][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.089497][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.106976][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.119458][ T5277] usb 2-1: USB disconnect, device number 15 [ 182.139476][ T1178] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 182.149726][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.184517][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.210346][ T1178] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 182.227453][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.249300][ T7965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.277436][ T7965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.315623][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.401913][ T7965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.435529][ T7965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.447751][ T7965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.463134][ T7965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.501265][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.744760][ T7954] veth0_vlan: entered promiscuous mode [ 182.893419][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.919171][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.927720][ T7954] veth1_vlan: entered promiscuous mode [ 183.125590][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.164167][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.244569][ T7954] veth0_macvtap: entered promiscuous mode [ 183.301903][ T7954] veth1_macvtap: entered promiscuous mode [ 183.416407][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.458177][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.501627][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.537194][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.576246][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.607585][ T5279] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.624524][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.643831][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.663510][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.702801][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.753900][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.777550][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 183.784019][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.796293][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.807592][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.818289][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.839107][ T5279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.847578][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.876932][ T5279] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 183.898676][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.907475][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.927463][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.941762][ T5279] usb 5-1: config 0 descriptor?? [ 183.967124][ T5279] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 183.975333][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.040535][ T7954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.067655][ T7954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.107150][ T7954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.147476][ T7954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.567053][ T8391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.785833][ T8391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.923511][ T8391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.949617][ T8402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.950940][ T8494] netlink: 'syz.0.1157': attribute type 29 has an invalid length. [ 184.964488][ T8402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.000436][ T8498] netlink: 'syz.0.1157': attribute type 29 has an invalid length. [ 185.009863][ T5279] gspca_vc032x: reg_r err -71 [ 185.014673][ T5279] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 185.039490][ T8494] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1157'. [ 185.058651][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.066549][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.066607][ T5279] usb 5-1: USB disconnect, device number 11 [ 185.320509][ T8391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.342280][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.354212][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.372470][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.382850][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.404938][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.413139][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.601560][ T8537] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 185.783214][ T8391] bridge_slave_1: left allmulticast mode [ 185.789876][ T8391] bridge_slave_1: left promiscuous mode [ 185.795716][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.833602][ T8391] bridge_slave_0: left allmulticast mode [ 185.856723][ T8391] bridge_slave_0: left promiscuous mode [ 185.877919][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.630689][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.654061][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.671195][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.685416][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.695918][ T8] kernel write not supported for file /664/timerslack_ns (pid: 8 comm: kworker/0:0) [ 186.711768][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.720919][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.747541][ T5330] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.918867][ T5330] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 186.928020][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.956713][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.977954][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.985982][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.017489][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.048911][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.060617][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.070322][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.096793][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.115698][ T29] audit: type=1326 audit(1729116753.558:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8610 comm="syz.4.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x0 [ 187.136722][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.147251][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.158030][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.174307][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.184580][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.197237][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.227640][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.239639][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.253268][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.265635][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.293012][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.317456][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.334514][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.361292][ T5330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 187.377748][ T5330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 187.388821][ T5330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.409147][ T5330] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 187.424868][ T5330] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.433363][ T5330] usb 2-1: Product: syz [ 187.437742][ T5330] usb 2-1: Manufacturer: syz [ 187.442376][ T5330] usb 2-1: SerialNumber: syz [ 187.452776][ T5330] usb 2-1: config 0 descriptor?? [ 187.490660][ T5330] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.502457][ T8391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.518135][ T5238] Bluetooth: hci1: command tx timeout [ 187.525622][ T8391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.554313][ T8391] bond0 (unregistering): Released all slaves [ 187.814952][ T8] usb 2-1: USB disconnect, device number 16 [ 187.859477][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 187.927516][ T51] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 188.089192][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 188.118366][ T51] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.165864][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.193420][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.237860][ T51] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.278432][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 188.288250][ T51] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.311928][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.459671][ T8391] hsr_slave_0: left promiscuous mode [ 188.506454][ T8391] hsr_slave_1: left promiscuous mode [ 188.547766][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.561401][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.573323][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.591405][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.608028][ T51] usb 1-1: GET_CAPABILITIES returned 0 [ 188.617569][ T51] usbtmc 1-1:16.0: can't read capabilities [ 188.679989][ T8391] veth1_macvtap: left promiscuous mode [ 188.686758][ T8391] veth0_macvtap: left promiscuous mode [ 188.694548][ T8391] veth1_vlan: left promiscuous mode [ 188.703665][ T8391] veth0_vlan: left promiscuous mode [ 188.798286][ T5238] Bluetooth: hci4: command tx timeout [ 188.838690][ T5330] usb 1-1: USB disconnect, device number 19 [ 189.510001][ T8391] team0 (unregistering): Port device team_slave_1 removed [ 189.602530][ T5238] Bluetooth: hci1: command tx timeout [ 189.656260][ T8391] team0 (unregistering): Port device team_slave_0 removed [ 190.716367][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.750367][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.778144][ T8516] bridge_slave_0: entered allmulticast mode [ 190.800345][ T8516] bridge_slave_0: entered promiscuous mode [ 190.833824][ T8595] chnl_net:caif_netlink_parms(): no params data found [ 190.885777][ T5238] Bluetooth: hci4: command tx timeout [ 190.919035][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.929685][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.943564][ T8516] bridge_slave_1: entered allmulticast mode [ 190.953332][ T8516] bridge_slave_1: entered promiscuous mode [ 191.081575][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.157192][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.378381][ T8516] team0: Port device team_slave_0 added [ 191.425202][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.433478][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.442623][ T8595] bridge_slave_0: entered allmulticast mode [ 191.454775][ T8595] bridge_slave_0: entered promiscuous mode [ 191.478115][ T8516] team0: Port device team_slave_1 added [ 191.502741][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.515407][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.538749][ T8595] bridge_slave_1: entered allmulticast mode [ 191.549377][ T8595] bridge_slave_1: entered promiscuous mode [ 191.677820][ T5238] Bluetooth: hci1: command tx timeout [ 191.820763][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.848679][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.863835][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.937399][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.025462][ T8391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.133556][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.208730][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.217519][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.295370][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.401642][ T8391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.554211][ T8595] team0: Port device team_slave_0 added [ 192.643433][ T8516] hsr_slave_0: entered promiscuous mode [ 192.650939][ T8516] hsr_slave_1: entered promiscuous mode [ 192.794055][ T8391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.835226][ T8595] team0: Port device team_slave_1 added [ 192.953878][ T9326] netlink: 'syz.0.1203': attribute type 9 has an invalid length. [ 192.963456][ T5238] Bluetooth: hci4: command tx timeout [ 192.978945][ T9326] netlink: 391 bytes leftover after parsing attributes in process `syz.0.1203'. [ 193.034148][ T8391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.101250][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.117759][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.157484][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.199586][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.217267][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.294686][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.716211][ T8595] hsr_slave_0: entered promiscuous mode [ 193.731846][ T9407] netlink: 'syz.1.1209': attribute type 11 has an invalid length. [ 193.749486][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 193.759888][ T8595] hsr_slave_1: entered promiscuous mode [ 193.768637][ T5238] Bluetooth: hci1: command tx timeout [ 193.792546][ T8595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.800503][ T8595] Cannot create hsr debugfs directory [ 194.514421][ T8391] bridge_slave_1: left allmulticast mode [ 194.532317][ T8391] bridge_slave_1: left promiscuous mode [ 194.552363][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.602396][ T8391] bridge_slave_0: left allmulticast mode [ 194.617482][ T8391] bridge_slave_0: left promiscuous mode [ 194.634873][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.650855][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.657219][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.038309][ T5238] Bluetooth: hci4: command tx timeout [ 195.547598][ T5279] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.693696][ T8391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.706339][ T8391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.718420][ T8391] bond0 (unregistering): Released all slaves [ 195.727577][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 195.734787][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.747463][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.759358][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 195.773851][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 195.784840][ T5279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.804161][ T5279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.843137][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.127556][ T5279] usb 1-1: GET_CAPABILITIES returned 0 [ 196.143431][ T5279] usbtmc 1-1:16.0: can't read capabilities [ 196.429885][ T8] usb 1-1: USB disconnect, device number 20 [ 196.443686][ T9531] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 196.599883][ T5330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.768677][ T9603] veth0_to_bond: entered promiscuous mode [ 196.777614][ T5330] usb 5-1: Using ep0 maxpacket: 8 [ 196.782265][ T9603] macsec1: entered promiscuous mode [ 196.791856][ T9603] macsec1: entered allmulticast mode [ 196.803396][ T9603] veth0_to_bond: entered allmulticast mode [ 196.808914][ T5330] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 196.818979][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.827068][ T5330] usb 5-1: Product: syz [ 196.831400][ T5330] usb 5-1: Manufacturer: syz [ 196.836090][ T5330] usb 5-1: SerialNumber: syz [ 196.847679][ T9603] veth0_to_bond: left allmulticast mode [ 196.853468][ T9603] veth0_to_bond: left promiscuous mode [ 197.065525][ T8391] hsr_slave_0: left promiscuous mode [ 197.089180][ T5330] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 197.119322][ T8391] hsr_slave_1: left promiscuous mode [ 197.180722][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.188791][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.211190][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.235685][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.290123][ T8391] veth1_macvtap: left promiscuous mode [ 197.295717][ T8391] veth0_macvtap: left promiscuous mode [ 197.327627][ T8391] veth1_vlan: left promiscuous mode [ 197.333111][ T8391] veth0_vlan: left promiscuous mode [ 197.873468][ T5279] usb 5-1: USB disconnect, device number 12 [ 197.893519][ T5279] usblp0: removed [ 197.928967][ T9684] input: syz0 as /devices/virtual/input/input22 [ 198.204703][ T9707] syz.1.1238 (9707): drop_caches: 4 [ 198.310823][ T5277] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 198.509235][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.553991][ T5277] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.595271][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.617728][ T5277] usb 1-1: config 0 descriptor?? [ 199.055406][ T5277] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 199.093284][ T8391] team0 (unregistering): Port device team_slave_1 removed [ 199.103330][ T5277] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input23 [ 199.206498][ T8391] team0 (unregistering): Port device team_slave_0 removed [ 199.345139][ T5277] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 199.515459][ T9741] netlink: 'syz.1.1244': attribute type 3 has an invalid length. [ 199.526076][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 199.546100][ T5278] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 199.643966][ T5277] usb 1-1: USB disconnect, device number 21 [ 199.698129][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 199.711162][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.744468][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.778830][ T5278] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 199.792509][ T5278] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 199.801308][ T5278] usb 5-1: Manufacturer: syz [ 199.825947][ T5278] usb 5-1: config 0 descriptor?? [ 200.298756][ T5278] wacom 0003:056A:00C5.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 200.520952][ T8] usb 5-1: USB disconnect, device number 13 [ 200.882392][ T8516] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.912931][ T8516] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.934619][ T8516] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.965629][ T8516] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.119614][ T5309] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 201.283630][ T5309] usb 2-1: Using ep0 maxpacket: 32 [ 201.337930][ T5309] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 201.359409][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.367702][ T5309] usb 2-1: Product: syz [ 201.371956][ T5309] usb 2-1: Manufacturer: syz [ 201.376593][ T5309] usb 2-1: SerialNumber: syz [ 201.398770][ T5309] usb 2-1: config 0 descriptor?? [ 201.506847][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.617006][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.662464][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.669732][ T8406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.712013][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.719317][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.826974][ T5309] airspy 2-1:0.0: Board ID: 00 [ 201.832465][ T5309] airspy 2-1:0.0: Firmware version: [ 201.839234][ T8595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.903678][ T8595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.936975][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.958600][ T8595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.978366][ T8595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.089196][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.153312][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.181835][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.189132][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.209287][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.216480][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.441371][ T5309] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 202.455029][ T5309] airspy 2-1:0.0: Registered as swradio16 [ 202.465555][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.473014][ T5309] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 202.494716][ T5309] usb 2-1: USB disconnect, device number 17 [ 202.585331][ T8516] veth0_vlan: entered promiscuous mode [ 202.679017][ T8516] veth1_vlan: entered promiscuous mode [ 202.762286][ T8516] veth0_macvtap: entered promiscuous mode [ 202.789815][ T8516] veth1_macvtap: entered promiscuous mode [ 202.849326][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.868248][ T5308] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 202.876033][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.901707][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.925577][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.947235][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.976586][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.999587][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.055857][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.100439][ T5308] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 203.115447][ T5308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.129510][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.130963][ T9935] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1264'. [ 203.155533][ T5308] usb 1-1: Product: syz [ 203.160520][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.171211][ T5308] usb 1-1: Manufacturer: syz [ 203.175861][ T5308] usb 1-1: SerialNumber: syz [ 203.188646][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.202835][ T5308] usb 1-1: config 0 descriptor?? [ 203.228832][ T5308] ch341 1-1:0.0: ch341-uart converter detected [ 203.240750][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.267409][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.309041][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.376743][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.425361][ T8595] veth0_vlan: entered promiscuous mode [ 203.438460][ T8595] veth1_vlan: entered promiscuous mode [ 203.465706][ T8595] veth0_macvtap: entered promiscuous mode [ 203.476809][ T8595] veth1_macvtap: entered promiscuous mode [ 203.490854][ T8516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.501196][ T8516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.532169][ T8516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.585066][ T8516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.642866][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.662944][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.700325][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.724805][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.735022][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.758974][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.787681][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.820884][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.867712][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.982851][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.002885][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.028333][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.053352][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.064084][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.075565][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.090469][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.097682][ T9972] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 204.101808][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.121067][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.150364][ T8595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.173392][ T8595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.189394][ T8595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.198383][ T8595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.267576][ T5308] ch341-uart ttyUSB0: failed to read break control: -71 [ 204.275115][ T5308] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 204.305145][ T5308] usb 1-1: USB disconnect, device number 22 [ 204.314298][ T5308] ch341 1-1:0.0: device disconnected [ 204.483994][ T8411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.502048][ T8411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.616919][ T8411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.642800][ T8411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.707660][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.715558][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.778737][ T8391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.786666][ T8391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.952608][ T29] audit: type=1326 audit(1729116771.398:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.026959][ T29] audit: type=1326 audit(1729116771.398:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.105381][ T29] audit: type=1326 audit(1729116771.428:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.204380][ T29] audit: type=1326 audit(1729116771.428:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.292830][ T29] audit: type=1326 audit(1729116771.428:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.315577][ T29] audit: type=1326 audit(1729116771.448:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.373673][ T29] audit: type=1326 audit(1729116771.448:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.507488][ T29] audit: type=1326 audit(1729116771.458:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.567321][ T29] audit: type=1326 audit(1729116771.468:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.594089][ T29] audit: type=1326 audit(1729116771.468:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x7ffc0000 [ 205.974170][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.303707][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.477719][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.489838][ T51] IPVS: starting estimator thread 0... [ 206.592806][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.603609][T10096] IPVS: using max 18 ests per chain, 43200 per kthread [ 206.639430][T10094] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.647851][T10094] tipc: Enabled bearer , priority 10 [ 206.777637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.910462][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.047507][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.072525][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.090873][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.107913][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.115958][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.129681][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.137143][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.454022][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.465855][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.474586][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.490566][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.500972][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.517714][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.540416][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.577554][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.661484][T10167] netlink: 'syz.0.1290': attribute type 11 has an invalid length. [ 207.703204][T10167] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1290'. [ 207.713809][T10167] openvswitch: netlink: Message has 8 unknown bytes. [ 207.924355][ T61] bridge_slave_1: left allmulticast mode [ 207.930817][ T61] bridge_slave_1: left promiscuous mode [ 207.936754][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.127849][ T61] bridge_slave_0: left allmulticast mode [ 208.142019][ T61] bridge_slave_0: left promiscuous mode [ 208.161933][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.368291][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 208.547157][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 208.554214][ T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.564392][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.577490][ T5279] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 208.595665][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.606831][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.637602][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.647142][ T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.672348][ T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.696165][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.769017][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.792403][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.803714][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 208.823300][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.865588][ T5279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.892210][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.921013][ T5279] usb 1-1: config 0 descriptor?? [ 208.957483][ T51] usb 2-1: GET_CAPABILITIES returned 0 [ 208.963094][ T51] usbtmc 2-1:16.0: can't read capabilities [ 209.176198][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.187001][ T5330] usb 2-1: USB disconnect, device number 18 [ 209.204091][ T5238] Bluetooth: hci1: command tx timeout [ 209.241660][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.322433][ T61] bond0 (unregistering): Released all slaves [ 209.377142][ T5279] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 209.464483][ T5279] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.597580][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.608532][ T5238] Bluetooth: hci4: command tx timeout [ 209.663706][ T5330] usb 1-1: USB disconnect, device number 23 [ 209.682684][T10117] chnl_net:caif_netlink_parms(): no params data found [ 210.071384][ T61] hsr_slave_0: left promiscuous mode [ 210.089647][ T61] hsr_slave_1: left promiscuous mode [ 210.104821][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.116521][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.128371][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.136446][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.174344][ T61] veth1_macvtap: left promiscuous mode [ 210.180062][ T61] veth0_macvtap: left promiscuous mode [ 210.187841][ T61] veth1_vlan: left promiscuous mode [ 210.193250][ T61] veth0_vlan: left promiscuous mode [ 211.067657][ T29] audit: type=1326 audit(1729116777.498:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.089461][ T29] audit: type=1326 audit(1729116777.498:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.146322][ T29] audit: type=1326 audit(1729116777.498:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.168483][ T29] audit: type=1326 audit(1729116777.498:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.234571][ T29] audit: type=1326 audit(1729116777.498:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.259162][ T29] audit: type=1326 audit(1729116777.498:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.287705][ T5238] Bluetooth: hci1: command tx timeout [ 211.393993][ T29] audit: type=1326 audit(1729116777.498:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.422242][ T29] audit: type=1326 audit(1729116777.498:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cfb7dff9 code=0x7ffc0000 [ 211.585696][ T61] team0 (unregistering): Port device team_slave_1 removed [ 211.623982][ T5330] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 211.663322][ T61] team0 (unregistering): Port device team_slave_0 removed [ 211.686785][ T5238] Bluetooth: hci4: command tx timeout [ 211.687641][ C1] net_ratelimit: 3 callbacks suppressed [ 211.687661][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.761561][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.779730][ T5330] usb 2-1: Using ep0 maxpacket: 16 [ 211.799405][ T5330] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 211.818083][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.826326][ T5330] usb 2-1: Product: syz [ 211.834491][ T5330] usb 2-1: Manufacturer: syz [ 211.847612][ T5330] usb 2-1: SerialNumber: syz [ 211.858789][ T5330] usb 2-1: config 0 descriptor?? [ 212.054405][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.122387][T10501] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.339409][ T5277] usb 2-1: USB disconnect, device number 19 [ 212.717570][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.786319][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1307'. [ 212.807519][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.817133][T10480] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 212.828473][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 212.907506][T10511] syz.4.1317 (10511) used greatest stack depth: 17136 bytes left [ 213.024925][T10583] input: syz1 as /devices/virtual/input/input27 [ 213.128416][T10151] chnl_net:caif_netlink_parms(): no params data found [ 213.151357][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.171463][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.208127][T10117] bridge_slave_0: entered allmulticast mode [ 213.215316][T10117] bridge_slave_0: entered promiscuous mode [ 213.357597][ T5238] Bluetooth: hci1: command tx timeout [ 213.364969][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.401044][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.453658][T10117] bridge_slave_1: entered allmulticast mode [ 213.462423][T10117] bridge_slave_1: entered promiscuous mode [ 213.537454][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 213.546973][T10645] netlink: 'syz.0.1324': attribute type 7 has an invalid length. [ 213.557947][T10645] netlink: 'syz.0.1324': attribute type 8 has an invalid length. [ 213.565921][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 213.584866][T10645] batadv_slave_1: entered promiscuous mode [ 213.600950][T10645] batadv_slave_1: left promiscuous mode [ 213.757665][ T5238] Bluetooth: hci4: command tx timeout [ 213.767564][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.787239][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.811154][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.829177][T10151] bridge_slave_0: entered allmulticast mode [ 213.837121][T10151] bridge_slave_0: entered promiscuous mode [ 213.847665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.031475][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.063303][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.074929][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.082966][T10151] bridge_slave_1: entered allmulticast mode [ 214.091929][T10151] bridge_slave_1: entered promiscuous mode [ 214.129869][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.237764][ T5330] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 214.264728][ T29] audit: type=1326 audit(1729116780.708:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10753 comm="syz.1.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4c0f7dff9 code=0x0 [ 214.285988][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.330181][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.352704][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.407722][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 214.424194][ T5330] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 214.435092][ T5330] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.469125][ T5330] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.495132][T10117] team0: Port device team_slave_0 added [ 214.498366][ T5330] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.517244][T10151] team0: Port device team_slave_0 added [ 214.543411][ T5330] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.546161][T10151] team0: Port device team_slave_1 added [ 214.587266][ T5330] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.592788][T10117] team0: Port device team_slave_1 added [ 214.615558][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.807607][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.862302][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.873825][ T5330] usb 1-1: GET_CAPABILITIES returned 0 [ 214.887533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.891279][ T5330] usbtmc 1-1:16.0: can't read capabilities [ 214.972357][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.981314][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.046132][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.087042][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.097905][ T5330] usb 1-1: USB disconnect, device number 24 [ 215.123134][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.193725][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.270240][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.307620][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.365887][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.437751][ T5238] Bluetooth: hci1: command tx timeout [ 215.451280][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.479607][T10910] sctp: [Deprecated]: syz.4.1336 (pid 10910) Use of int in max_burst socket option. [ 215.479607][T10910] Use struct sctp_assoc_value instead [ 215.574603][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.607938][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.652343][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.719533][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.845987][ T5238] Bluetooth: hci4: command tx timeout [ 215.847595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.876385][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.927730][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.947731][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 215.972288][T10151] hsr_slave_0: entered promiscuous mode [ 215.992548][T10151] hsr_slave_1: entered promiscuous mode [ 216.121442][ T8] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 216.137488][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.146990][ T8] usb 2-1: Product: syz [ 216.158362][ T8] usb 2-1: Manufacturer: syz [ 216.163057][ T8] usb 2-1: SerialNumber: syz [ 216.175758][ T8] usb 2-1: config 0 descriptor?? [ 216.182998][T10117] hsr_slave_0: entered promiscuous mode [ 216.199739][T10117] hsr_slave_1: entered promiscuous mode [ 216.209122][ T8] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 216.218879][T10117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.245177][T10117] Cannot create hsr debugfs directory [ 216.317716][ T5279] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.468355][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 216.492824][ T5279] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 216.522795][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.554755][ T5279] usb 1-1: Product: syz [ 216.564249][ T5279] usb 1-1: Manufacturer: syz [ 216.571976][ T5279] usb 1-1: SerialNumber: syz [ 216.580647][ T5279] usb 1-1: config 0 descriptor?? [ 216.601810][ T5279] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 216.624309][ T5279] usb 1-1: Detected FT232H [ 216.656118][ T61] bridge_slave_1: left allmulticast mode [ 216.666704][ T61] bridge_slave_1: left promiscuous mode [ 216.679224][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.693572][ T61] bridge_slave_0: left allmulticast mode [ 216.705802][ T61] bridge_slave_0: left promiscuous mode [ 216.713663][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.886273][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.967510][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.994475][ T5279] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 217.035279][ T5279] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 217.044539][ T5279] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 217.071323][ T5279] usb 1-1: USB disconnect, device number 25 [ 217.083035][ T5279] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.109219][ T5279] ftdi_sio 1-1:0.0: device disconnected [ 217.334897][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.354902][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.366022][ T61] bond0 (unregistering): Released all slaves [ 217.917551][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.941874][ T61] hsr_slave_0: left promiscuous mode [ 217.997485][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.004741][ T61] hsr_slave_1: left promiscuous mode [ 218.053268][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.077566][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.106271][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.119516][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.211765][ T61] veth1_macvtap: left promiscuous mode [ 218.225779][ T61] veth0_macvtap: left promiscuous mode [ 218.235643][ T61] veth1_vlan: left promiscuous mode [ 218.253190][ T61] veth0_vlan: left promiscuous mode [ 218.674776][ T5279] usb 2-1: USB disconnect, device number 20 [ 218.957697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.031437][ T61] team0 (unregistering): Port device team_slave_1 removed [ 219.047511][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.101818][ T61] team0 (unregistering): Port device team_slave_0 removed [ 219.625328][T11219] team0: No ports can be present during mode change [ 219.707257][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 219.732758][T11239] vlan0: entered promiscuous mode [ 219.746802][T11239] @: entered promiscuous mode [ 219.756004][T11239] @: left promiscuous mode [ 220.007682][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.087595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.226887][T10151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.467306][T10151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.508653][T10151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.559699][T10151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.047571][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.117524][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.615653][T10151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.650422][T10151] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.682062][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.689282][ T8404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.739425][T11379] ubi0: attaching mtd0 [ 221.746764][T11379] ubi0: scanning is finished [ 221.751621][T11379] ubi0: empty MTD device detected [ 221.805588][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.812828][ T8404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.922202][T10117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.980987][T10117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.045082][T11379] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.054061][T10117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.079877][T11379] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.087549][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.089316][T10117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.101633][T11379] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.127931][T11379] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 222.157550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.161919][T11379] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.207922][T11379] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.236541][T11379] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1640928565 [ 222.302051][T11379] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 222.351192][T11380] ubi0: detaching mtd0 [ 222.354026][T11399] ubi0: background thread "ubi_bgt0d" started, PID 11399 [ 222.403830][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.436494][T11380] ubi0: mtd0 is detached [ 222.462450][T11412] hsr0: entered promiscuous mode [ 222.616980][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.681463][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.734466][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.741695][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.798960][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.806209][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.998380][T10151] veth0_vlan: entered promiscuous mode [ 223.075253][T10151] veth1_vlan: entered promiscuous mode [ 223.117703][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.197600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.207172][T10151] veth0_macvtap: entered promiscuous mode [ 223.222343][T10151] veth1_macvtap: entered promiscuous mode [ 223.240690][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.251572][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.261758][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.268271][ T5281] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.272503][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.290082][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.300633][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.312155][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.322051][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.332790][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.342723][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.353435][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.363604][T10151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.374258][T10151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.385553][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.411729][T10151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.420696][T10151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.429824][T10151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.438781][T10151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.500788][ T5281] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 223.518805][ T5281] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 223.559572][ T5281] usb 1-1: Manufacturer: syz [ 223.592917][ T5281] usb 1-1: config 0 descriptor?? [ 223.609302][ T8411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.652815][ T8411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.724611][ T8411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.753881][ T8411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.826530][T10117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.052252][ T5281] gs_usb 1-1:0.0: Configuring for 58 interfaces [ 224.061811][ T5281] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 224.095242][ T5281] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 224.144701][T10117] veth0_vlan: entered promiscuous mode [ 224.157635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.201140][T10117] veth1_vlan: entered promiscuous mode [ 224.237475][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.275634][T10117] veth0_macvtap: entered promiscuous mode [ 224.290643][ T5281] usb 1-1: USB disconnect, device number 26 [ 224.297357][T10117] veth1_macvtap: entered promiscuous mode [ 224.345803][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.358359][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.369311][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.380735][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.393260][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.433451][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.458708][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.492434][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.524959][T10117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.545502][T11522] loop2: detected capacity change from 0 to 7 [ 224.567280][T11522] Dev loop2: unable to read RDB block 7 [ 224.574141][T11522] loop2: unable to read partition table [ 224.597824][T11522] loop2: partition table beyond EOD, truncated [ 224.617633][T11522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.704650][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.772985][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.802837][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.831935][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.849886][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.860027][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.878353][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.899080][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.914544][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.934979][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.960926][T10117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.976065][T10117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.994422][T10117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.003297][T10117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.073425][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.196772][ T8402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.205097][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.231364][ T8402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.249903][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.277627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.324385][ T8411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.336974][ T8411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.756627][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.960246][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.976448][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.993232][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.014576][ T5241] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 226.028148][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.037625][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.045075][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.237604][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.327479][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.414075][ T61] bridge_slave_1: left allmulticast mode [ 226.426900][ T61] bridge_slave_1: left promiscuous mode [ 226.434794][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.479450][ T61] bridge_slave_0: left allmulticast mode [ 226.486535][ T61] bridge_slave_0: left promiscuous mode [ 226.492597][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.240886][ T5279] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.277709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.286515][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.314020][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.325705][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.360886][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.380316][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.396825][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.416307][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.426484][ T5279] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 227.436215][ T5279] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 227.444716][ T5279] usb 1-1: Manufacturer: syz [ 227.479306][ T5279] usb 1-1: config 0 descriptor?? [ 227.536987][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.554895][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.566974][ T61] bond0 (unregistering): Released all slaves [ 227.901165][ T5279] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 228.157961][ T5238] Bluetooth: hci1: command tx timeout [ 228.214414][T11576] chnl_net:caif_netlink_parms(): no params data found [ 228.309657][ T5279] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 228.318307][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.337765][ T5279] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 228.352897][ T61] hsr_slave_0: left promiscuous mode [ 228.364778][ T5279] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 228.373411][T11800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1417'. [ 228.389495][ T61] hsr_slave_1: left promiscuous mode [ 228.407549][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.416759][ T5279] usb 1-1: USB disconnect, device number 27 [ 228.421504][T11804] netlink: 'syz.4.1416': attribute type 11 has an invalid length. [ 228.434559][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.453268][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.461731][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.475233][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.515252][ T61] veth1_macvtap: left promiscuous mode [ 228.521500][ T61] veth0_macvtap: left promiscuous mode [ 228.527169][ T61] veth1_vlan: left promiscuous mode [ 228.539701][ T61] veth0_vlan: left promiscuous mode [ 229.032783][ T5279] kernel read not supported for file /video37 (pid: 5279 comm: kworker/1:5) [ 229.203955][ T61] team0 (unregistering): Port device team_slave_1 removed [ 229.254282][ T61] team0 (unregistering): Port device team_slave_0 removed [ 229.357625][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.442857][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.518171][ T5238] Bluetooth: hci4: command tx timeout [ 230.238026][ T5238] Bluetooth: hci1: command tx timeout [ 230.339857][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.377174][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.397609][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.419186][T11576] bridge_slave_0: entered allmulticast mode [ 230.432521][T11576] bridge_slave_0: entered promiscuous mode [ 230.451775][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.477553][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.495004][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.517594][T11576] bridge_slave_1: entered allmulticast mode [ 230.545293][T11576] bridge_slave_1: entered promiscuous mode [ 230.758451][T11657] chnl_net:caif_netlink_parms(): no params data found [ 230.804792][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.842816][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.083278][T12030] bridge0: port 4(vlan3) entered blocking state [ 231.092090][T12030] bridge0: port 4(vlan3) entered disabled state [ 231.105644][T12030] vlan3: entered allmulticast mode [ 231.132914][T12030] vlan3: entered promiscuous mode [ 231.163629][T11576] team0: Port device team_slave_0 added [ 231.231942][T11576] team0: Port device team_slave_1 added [ 231.420465][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.437715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.438774][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.470676][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.517553][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.540674][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.570059][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.587565][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.594885][T11657] bridge_slave_0: entered allmulticast mode [ 231.602512][T11657] bridge_slave_0: entered promiscuous mode [ 231.628786][ T5238] Bluetooth: hci4: command tx timeout [ 231.733320][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.740821][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.782201][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.820651][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.835904][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.852608][T11657] bridge_slave_1: entered allmulticast mode [ 231.860056][T11657] bridge_slave_1: entered promiscuous mode [ 231.929332][T11576] hsr_slave_0: entered promiscuous mode [ 231.936411][T11576] hsr_slave_1: entered promiscuous mode [ 231.940998][T12207] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.015854][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.107953][ T8411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.159540][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.328995][ T5238] Bluetooth: hci1: command tx timeout [ 232.387110][ T8411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.477559][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.557515][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.650534][T11657] team0: Port device team_slave_0 added [ 232.809542][ T8411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.852264][T12295] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 232.863537][T11657] team0: Port device team_slave_1 added [ 232.970079][ T8411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.067592][ T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.156836][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.185583][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.246333][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.261670][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 233.281081][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 233.299301][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.306421][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.336081][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 233.365761][ T51] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.387508][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.408800][ T51] usb 2-1: config 0 descriptor?? [ 233.414002][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.425420][T12312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 233.457522][ T51] hub 2-1:0.0: USB hub found [ 233.517596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.607503][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.676593][ T51] hub 2-1:0.0: 2 ports detected [ 233.681418][ T5238] Bluetooth: hci4: command tx timeout [ 233.683424][ T51] hub 2-1:0.0: insufficient power available to use all downstream ports [ 233.773379][T11657] hsr_slave_0: entered promiscuous mode [ 233.811219][T11657] hsr_slave_1: entered promiscuous mode [ 233.819227][T11657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.832777][T11657] Cannot create hsr debugfs directory [ 233.904431][ T51] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 233.912493][ T51] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 233.974521][ T51] usbhid 2-1:0.0: can't add hid device: -71 [ 233.981198][ T51] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.038505][ T51] usb 2-1: USB disconnect, device number 21 [ 234.281779][ T8411] bridge_slave_1: left allmulticast mode [ 234.293026][ T8411] bridge_slave_1: left promiscuous mode [ 234.299031][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.311559][ T8411] bridge_slave_0: left allmulticast mode [ 234.326565][ T8411] bridge_slave_0: left promiscuous mode [ 234.333858][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.338608][ T5277] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 234.398343][ T5238] Bluetooth: hci1: command tx timeout [ 234.519699][ T5277] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384 [ 234.546061][ T5277] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.559434][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.571757][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.586756][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.603433][ T5277] usb 1-1: SerialNumber: syz [ 234.633910][T12474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.641336][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.879889][T12474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.164031][ T8411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.177836][ T8411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.193327][ T8411] bond0 (unregistering): Released all slaves [ 235.302533][ T5277] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 235.522062][ T5309] usb 1-1: USB disconnect, device number 28 [ 235.597895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.678635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.737569][ T5277] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.761220][ T5238] Bluetooth: hci4: command tx timeout [ 235.784122][ T8411] hsr_slave_0: left promiscuous mode [ 235.792046][ T8411] hsr_slave_1: left promiscuous mode [ 235.802624][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.811947][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.822854][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.831853][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.853868][ T8411] veth1_macvtap: left promiscuous mode [ 235.859835][ T8411] veth0_macvtap: left promiscuous mode [ 235.865518][ T8411] veth1_vlan: left promiscuous mode [ 235.871093][ T8411] veth0_vlan: left promiscuous mode [ 235.933489][ T5277] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.948904][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.969624][ T5277] usb 2-1: config 0 descriptor?? [ 235.989458][ T5277] cp210x 2-1:0.0: cp210x converter detected [ 236.395384][ T5277] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 236.497632][ T5309] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 236.624353][ T5277] usb 2-1: cp210x converter now attached to ttyUSB0 [ 236.647544][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.662910][ T8411] team0 (unregistering): Port device team_slave_1 removed [ 236.670919][ T5309] usb 1-1: Using ep0 maxpacket: 16 [ 236.681253][ T5309] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 236.691452][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.700424][ T5309] usb 1-1: Product: syz [ 236.704747][ T5309] usb 1-1: Manufacturer: syz [ 236.709893][ T5309] usb 1-1: SerialNumber: syz [ 236.722906][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.738370][ T5309] usb 1-1: config 0 descriptor?? [ 236.746792][ T5309] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 236.757933][ T5309] usb 1-1: Detected FT232H [ 236.780073][ T8411] team0 (unregistering): Port device team_slave_0 removed [ 236.818439][ T8] usb 2-1: USB disconnect, device number 22 [ 236.842779][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.859210][ T8] cp210x 2-1:0.0: device disconnected [ 236.966861][ T5309] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 237.402158][ T5309] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 237.625554][ T8] usb 1-1: USB disconnect, device number 29 [ 237.645172][ T8] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 237.665180][ T8] ftdi_sio 1-1:0.0: device disconnected [ 237.677570][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.767495][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.250595][T11657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.319222][T11657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.366641][T11657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.424204][T11657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.526301][T11576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.547647][ T5277] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 238.559974][T11576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.595493][T11576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.644902][T11576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.717547][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.738392][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 238.753903][ T5277] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.796385][ T5277] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.806411][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.849666][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.859507][ T5277] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 238.869362][ T5277] usb 1-1: Product: syz [ 238.875865][ T5277] usb 1-1: Manufacturer: syz [ 238.903264][ T5277] hub 1-1:4.0: USB hub found [ 238.929711][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.011226][T11657] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.040319][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.091232][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.098534][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.122821][ T5277] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 239.151798][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.185446][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.192700][ T8402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.221167][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.228407][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.273858][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.281090][ T8402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.448812][ T5309] usb 1-1: USB disconnect, device number 30 [ 239.757567][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.837563][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.911184][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.006938][T11657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.054945][T11576] veth0_vlan: entered promiscuous mode [ 240.121824][T11576] veth1_vlan: entered promiscuous mode [ 240.181644][T11657] veth0_vlan: entered promiscuous mode [ 240.248749][T11657] veth1_vlan: entered promiscuous mode [ 240.275309][T11576] veth0_macvtap: entered promiscuous mode [ 240.298607][T11576] veth1_macvtap: entered promiscuous mode [ 240.348030][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.376277][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.411129][T12801] input: syz0 as /devices/virtual/input/input28 [ 240.421737][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.444075][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.473954][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.502864][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.524373][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.577196][T11657] veth0_macvtap: entered promiscuous mode [ 240.598744][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.614931][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.625752][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.642794][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.662802][T11576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.674406][T11576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.687014][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.699683][T11657] veth1_macvtap: entered promiscuous mode [ 240.736360][T11576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.753887][T11576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.765321][T11576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.778960][T11576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.809081][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.887598][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.947202][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.982920][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.014767][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.033973][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.064435][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.094616][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.123556][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.141746][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.154527][T11657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.185880][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.224117][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.235573][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.253547][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.263932][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.274908][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.285381][T11657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.296362][T11657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.338183][T11657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.354080][T11657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.368184][T11657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.377062][T11657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.386782][T11657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.449297][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.563167][ T8389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.571439][ T8389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.690799][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.706476][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 241.721547][ T8391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.730051][ T8391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.766483][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.790294][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.816452][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.829200][ T8391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.837538][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.849404][ T8391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.856832][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.917486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.924299][ T8] usb 2-1: config 0 descriptor?? [ 241.942465][T12850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.965105][ T8411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.036323][ T8411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.408312][ T8] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 242.430364][ T8] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 242.510528][ T8] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.632966][ T51] usb 2-1: USB disconnect, device number 23 [ 242.870379][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.887565][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.957477][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.161584][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.362473][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.374220][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.392707][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.405752][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.420292][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.430641][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 243.444656][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.475898][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.706034][ T35] bridge_slave_1: left allmulticast mode [ 243.757904][ T35] bridge_slave_1: left promiscuous mode [ 243.763795][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.917599][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.988112][ T35] bridge_slave_0: left allmulticast mode [ 243.994316][ T35] bridge_slave_0: left promiscuous mode [ 244.000299][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.009374][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.027084][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.027897][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.042653][ T5330] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 244.051738][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.061066][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.071210][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.081206][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.207476][ T5330] usb 2-1: Using ep0 maxpacket: 8 [ 244.231130][ T5330] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.257570][ T5330] usb 2-1: config 179 has no interface number 0 [ 244.274261][ T5330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.295927][ T5330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.325815][ T5330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.363175][ T5330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.392208][ T5330] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.426588][ T5330] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.441799][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.455175][T13065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.802053][ T5279] usb 2-1: USB disconnect, device number 24 [ 244.803188][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.816459][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.826239][ C0] ================================================================== [ 244.834340][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8db/0x980 [ 244.842421][ C0] Read of size 1 at addr ffff88807dd1c091 by task kworker/0:4/5281 [ 244.850304][ C0] [ 244.852645][ C0] CPU: 0 UID: 0 PID: 5281 Comm: kworker/0:4 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 244.863408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.873462][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 244.880935][ C0] Call Trace: [ 244.884214][ C0] [ 244.887064][ C0] dump_stack_lvl+0x241/0x360 [ 244.891765][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.896980][ C0] ? __pfx__printk+0x10/0x10 [ 244.901581][ C0] ? _printk+0xd5/0x120 [ 244.905737][ C0] ? __virt_addr_valid+0x183/0x530 [ 244.910849][ C0] ? __virt_addr_valid+0x183/0x530 [ 244.915960][ C0] print_report+0x169/0x550 [ 244.920470][ C0] ? __virt_addr_valid+0x183/0x530 [ 244.925598][ C0] ? __virt_addr_valid+0x183/0x530 [ 244.930731][ C0] ? __virt_addr_valid+0x45f/0x530 [ 244.935864][ C0] ? __phys_addr+0xba/0x170 [ 244.940419][ C0] ? register_lock_class+0x8db/0x980 [ 244.945738][ C0] kasan_report+0x143/0x180 [ 244.950274][ C0] ? register_lock_class+0x8db/0x980 [ 244.955589][ C0] register_lock_class+0x8db/0x980 [ 244.960716][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 244.966363][ C0] ? __lock_acquire+0x1384/0x2050 [ 244.971399][ C0] __lock_acquire+0xf0/0x2050 [ 244.976084][ C0] ? mark_lock+0x9a/0x360 [ 244.980413][ C0] ? __lock_acquire+0x1384/0x2050 [ 244.985464][ C0] lock_acquire+0x1ed/0x550 [ 244.989976][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 244.995358][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 245.000420][ C0] ? kcov_remote_stop+0x78/0x6e0 [ 245.005379][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 245.010430][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.015480][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 245.020822][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 245.026314][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 245.032240][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 245.037501][ C0] __wake_up_common_lock+0x25/0x1e0 [ 245.042916][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 245.048295][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 245.054191][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 245.059417][ C0] dummy_timer+0x830/0x45a0 [ 245.063948][ C0] ? __pfx_lock_release+0x10/0x10 [ 245.068996][ C0] ? mark_lock+0x9a/0x360 [ 245.073337][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.079349][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 245.084295][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 245.089255][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 245.094470][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 245.100464][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 245.106186][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 245.112371][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 245.117487][ C0] handle_softirqs+0x2c5/0x980 [ 245.122260][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 245.127035][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 245.132357][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 245.137559][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 245.142150][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 245.147383][ C0] irq_exit_rcu+0x9/0x30 [ 245.151713][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 245.157392][ C0] [ 245.160332][ C0] [ 245.163268][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.169261][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 245.174555][ C0] Code: 2b 00 74 08 4c 89 f7 e8 da 1e 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 245.194165][ C0] RSP: 0018:ffffc900042179e0 EFLAGS: 00000206 [ 245.200314][ C0] RAX: 0000000000000001 RBX: 1ffff92000842f48 RCX: fae088ba1b5cd400 [ 245.208309][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c602d20 [ 245.216290][ C0] RBP: ffffc90004217b40 R08: ffffffff942938df R09: 1ffffffff285271b [ 245.224289][ C0] R10: dffffc0000000000 R11: fffffbfff285271c R12: 1ffff92000842f44 [ 245.232280][ C0] R13: dffffc0000000000 R14: ffffc90004217a40 R15: 0000000000000246 [ 245.240356][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 245.245398][ C0] ? wg_ratelimiter_gc_entries+0x3ab/0x470 [ 245.251237][ C0] ? __pfx___might_resched+0x10/0x10 [ 245.256532][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 245.261745][ C0] _raw_spin_lock+0x2e/0x40 [ 245.266253][ C0] ? wg_ratelimiter_gc_entries+0x60/0x470 [ 245.271999][ C0] wg_ratelimiter_gc_entries+0x60/0x470 [ 245.277548][ C0] ? process_scheduled_works+0x976/0x1850 [ 245.283301][ C0] process_scheduled_works+0xa63/0x1850 [ 245.288895][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.294900][ C0] ? assign_work+0x364/0x3d0 [ 245.299509][ C0] worker_thread+0x870/0xd30 [ 245.304108][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 245.310019][ C0] ? __kthread_parkme+0x169/0x1d0 [ 245.315051][ C0] ? __pfx_worker_thread+0x10/0x10 [ 245.320180][ C0] kthread+0x2f0/0x390 [ 245.324249][ C0] ? __pfx_worker_thread+0x10/0x10 [ 245.329382][ C0] ? __pfx_kthread+0x10/0x10 [ 245.333972][ C0] ret_from_fork+0x4b/0x80 [ 245.338428][ C0] ? __pfx_kthread+0x10/0x10 [ 245.343052][ C0] ret_from_fork_asm+0x1a/0x30 [ 245.347827][ C0] [ 245.350864][ C0] [ 245.353185][ C0] Allocated by task 5330: [ 245.357506][ C0] kasan_save_track+0x3f/0x80 [ 245.362188][ C0] __kasan_kmalloc+0x98/0xb0 [ 245.366779][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 245.372168][ C0] xpad_probe+0x3c8/0x1b90 [ 245.376587][ C0] usb_probe_interface+0x645/0xbb0 [ 245.381712][ C0] really_probe+0x2b8/0xad0 [ 245.386216][ C0] __driver_probe_device+0x1a2/0x390 [ 245.391516][ C0] driver_probe_device+0x50/0x430 [ 245.396541][ C0] __device_attach_driver+0x2d6/0x530 [ 245.402083][ C0] bus_for_each_drv+0x24e/0x2e0 [ 245.406941][ C0] __device_attach+0x333/0x520 [ 245.411721][ C0] bus_probe_device+0x189/0x260 [ 245.416572][ C0] device_add+0x856/0xbf0 [ 245.420899][ C0] usb_set_configuration+0x1976/0x1fb0 [ 245.426364][ C0] usb_generic_driver_probe+0x88/0x140 [ 245.431845][ C0] usb_probe_device+0x1b8/0x380 [ 245.436691][ C0] really_probe+0x2b8/0xad0 [ 245.441195][ C0] __driver_probe_device+0x1a2/0x390 [ 245.446474][ C0] driver_probe_device+0x50/0x430 [ 245.451495][ C0] __device_attach_driver+0x2d6/0x530 [ 245.456862][ C0] bus_for_each_drv+0x24e/0x2e0 [ 245.461713][ C0] __device_attach+0x333/0x520 [ 245.466467][ C0] bus_probe_device+0x189/0x260 [ 245.471323][ C0] device_add+0x856/0xbf0 [ 245.475646][ C0] usb_new_device+0x104a/0x19a0 [ 245.480501][ C0] hub_event+0x2d6d/0x5150 [ 245.484939][ C0] process_scheduled_works+0xa63/0x1850 [ 245.490495][ C0] worker_thread+0x870/0xd30 [ 245.495103][ C0] kthread+0x2f0/0x390 [ 245.499208][ C0] ret_from_fork+0x4b/0x80 [ 245.503665][ C0] ret_from_fork_asm+0x1a/0x30 [ 245.508446][ C0] [ 245.510764][ C0] Freed by task 5279: [ 245.514738][ C0] kasan_save_track+0x3f/0x80 [ 245.519421][ C0] kasan_save_free_info+0x40/0x50 [ 245.524523][ C0] __kasan_slab_free+0x59/0x70 [ 245.529289][ C0] kfree+0x1a0/0x440 [ 245.533174][ C0] xpad_disconnect+0x359/0x490 [ 245.537957][ C0] usb_unbind_interface+0x25e/0x940 [ 245.543170][ C0] device_release_driver_internal+0x503/0x7c0 [ 245.549236][ C0] bus_remove_device+0x34f/0x420 [ 245.554176][ C0] device_del+0x57a/0x9b0 [ 245.558507][ C0] usb_disable_device+0x3bf/0x850 [ 245.563533][ C0] usb_disconnect+0x340/0x950 [ 245.568209][ C0] hub_event+0x1ebc/0x5150 [ 245.572627][ C0] process_scheduled_works+0xa63/0x1850 [ 245.578260][ C0] worker_thread+0x870/0xd30 [ 245.582877][ C0] kthread+0x2f0/0x390 [ 245.586963][ C0] ret_from_fork+0x4b/0x80 [ 245.591409][ C0] ret_from_fork_asm+0x1a/0x30 [ 245.596209][ C0] [ 245.598534][ C0] The buggy address belongs to the object at ffff88807dd1c000 [ 245.598534][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 245.612611][ C0] The buggy address is located 145 bytes inside of [ 245.612611][ C0] freed 1024-byte region [ffff88807dd1c000, ffff88807dd1c400) [ 245.626533][ C0] [ 245.628872][ C0] The buggy address belongs to the physical page: [ 245.635370][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd18 [ 245.644162][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.652680][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.660248][ C0] page_type: f5(slab) [ 245.664240][ C0] raw: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 245.672830][ C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 245.681437][ C0] head: 00fff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 245.690167][ C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 245.698860][ C0] head: 00fff00000000003 ffffea0001f74601 ffffffffffffffff 0000000000000000 [ 245.707570][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 245.716242][ C0] page dumped because: kasan: bad access detected [ 245.722665][ C0] page_owner tracks the page as allocated [ 245.728396][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:1), ts 75931748532, free_ts 75930693175 [ 245.748836][ C0] post_alloc_hook+0x1f3/0x230 [ 245.753617][ C0] get_page_from_freelist+0x3039/0x3180 [ 245.759187][ C0] __alloc_pages_noprof+0x292/0x710 [ 245.764417][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 245.769919][ C0] alloc_slab_page+0x6a/0x120 [ 245.774658][ C0] allocate_slab+0x5a/0x2f0 [ 245.779178][ C0] ___slab_alloc+0xcd1/0x14b0 [ 245.783866][ C0] __slab_alloc+0x58/0xa0 [ 245.788221][ C0] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 245.794747][ C0] kmalloc_reserve+0x111/0x2a0 [ 245.799530][ C0] __alloc_skb+0x1f3/0x440 [ 245.803952][ C0] inet6_rt_notify+0xdf/0x290 [ 245.808629][ C0] fib6_add+0x1e33/0x4430 [ 245.812967][ C0] ip6_route_add+0x8b/0x160 [ 245.817479][ C0] addrconf_add_linklocal+0x61a/0xa30 [ 245.822856][ C0] addrconf_addr_gen+0x510/0xbb0 [ 245.827919][ C0] page last free pid 12 tgid 12 stack trace: [ 245.833924][ C0] free_unref_page+0xcd0/0xf00 [ 245.838690][ C0] __slab_free+0x31b/0x3d0 [ 245.843131][ C0] qlist_free_all+0x9a/0x140 [ 245.847740][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 245.853217][ C0] __kasan_slab_alloc+0x23/0x80 [ 245.858082][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 245.864005][ C0] __alloc_skb+0x1c3/0x440 [ 245.868420][ C0] rtmsg_ifinfo_build_skb+0x84/0x260 [ 245.873704][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 245.878117][ C0] netdev_state_change+0x139/0x1a0 [ 245.883230][ C0] linkwatch_do_dev+0x112/0x170 [ 245.888075][ C0] __linkwatch_run_queue+0x44f/0x6c0 [ 245.893374][ C0] linkwatch_event+0x4c/0x60 [ 245.898001][ C0] process_scheduled_works+0xa63/0x1850 [ 245.903557][ C0] worker_thread+0x870/0xd30 [ 245.908239][ C0] kthread+0x2f0/0x390 [ 245.912305][ C0] [ 245.914620][ C0] Memory state around the buggy address: [ 245.920240][ C0] ffff88807dd1bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.928296][ C0] ffff88807dd1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.936349][ C0] >ffff88807dd1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.944422][ C0] ^ [ 245.949025][ C0] ffff88807dd1c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.957076][ C0] ffff88807dd1c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.965131][ C0] ================================================================== [ 245.973229][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.980419][ C0] CPU: 0 UID: 0 PID: 5281 Comm: kworker/0:4 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 245.991189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.001241][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 246.008707][ C0] Call Trace: [ 246.011984][ C0] [ 246.014824][ C0] dump_stack_lvl+0x241/0x360 [ 246.019511][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.024726][ C0] ? __pfx__printk+0x10/0x10 [ 246.029326][ C0] ? rcu_is_watching+0x15/0xb0 [ 246.034107][ C0] ? lock_release+0xbf/0xa30 [ 246.038705][ C0] ? vscnprintf+0x5d/0x90 [ 246.043053][ C0] panic+0x349/0x880 [ 246.047473][ C0] ? check_panic_on_warn+0x21/0xb0 [ 246.052584][ C0] ? __pfx_panic+0x10/0x10 [ 246.057011][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 246.062212][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.068107][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.074445][ C0] ? print_report+0x502/0x550 [ 246.079144][ C0] check_panic_on_warn+0x86/0xb0 [ 246.084171][ C0] ? register_lock_class+0x8db/0x980 [ 246.089458][ C0] end_report+0x77/0x160 [ 246.093704][ C0] kasan_report+0x154/0x180 [ 246.098213][ C0] ? register_lock_class+0x8db/0x980 [ 246.103505][ C0] register_lock_class+0x8db/0x980 [ 246.108622][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 246.114260][ C0] ? __lock_acquire+0x1384/0x2050 [ 246.119465][ C0] __lock_acquire+0xf0/0x2050 [ 246.124179][ C0] ? mark_lock+0x9a/0x360 [ 246.128515][ C0] ? __lock_acquire+0x1384/0x2050 [ 246.133553][ C0] lock_acquire+0x1ed/0x550 [ 246.138060][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 246.143444][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 246.148494][ C0] ? kcov_remote_stop+0x78/0x6e0 [ 246.153448][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 246.158575][ C0] ? __pfx_lock_release+0x10/0x10 [ 246.163605][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 246.168927][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 246.174306][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 246.180221][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 246.185431][ C0] __wake_up_common_lock+0x25/0x1e0 [ 246.190640][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 246.196015][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 246.201934][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 246.207143][ C0] dummy_timer+0x830/0x45a0 [ 246.211652][ C0] ? __pfx_lock_release+0x10/0x10 [ 246.216686][ C0] ? mark_lock+0x9a/0x360 [ 246.221014][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.227116][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 246.232100][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 246.237055][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 246.242256][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 246.248276][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 246.254001][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 246.260075][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 246.265187][ C0] handle_softirqs+0x2c5/0x980 [ 246.269977][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 246.274742][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 246.280030][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 246.285319][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 246.289932][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 246.295150][ C0] irq_exit_rcu+0x9/0x30 [ 246.299396][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 246.305036][ C0] [ 246.307962][ C0] [ 246.310904][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.316899][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 246.322210][ C0] Code: 2b 00 74 08 4c 89 f7 e8 da 1e 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 246.341829][ C0] RSP: 0018:ffffc900042179e0 EFLAGS: 00000206 [ 246.347911][ C0] RAX: 0000000000000001 RBX: 1ffff92000842f48 RCX: fae088ba1b5cd400 [ 246.355878][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c602d20 [ 246.363868][ C0] RBP: ffffc90004217b40 R08: ffffffff942938df R09: 1ffffffff285271b [ 246.371855][ C0] R10: dffffc0000000000 R11: fffffbfff285271c R12: 1ffff92000842f44 [ 246.379831][ C0] R13: dffffc0000000000 R14: ffffc90004217a40 R15: 0000000000000246 [ 246.387863][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 246.392905][ C0] ? wg_ratelimiter_gc_entries+0x3ab/0x470 [ 246.398713][ C0] ? __pfx___might_resched+0x10/0x10 [ 246.404001][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 246.409203][ C0] _raw_spin_lock+0x2e/0x40 [ 246.413712][ C0] ? wg_ratelimiter_gc_entries+0x60/0x470 [ 246.419426][ C0] wg_ratelimiter_gc_entries+0x60/0x470 [ 246.424973][ C0] ? process_scheduled_works+0x976/0x1850 [ 246.430695][ C0] process_scheduled_works+0xa63/0x1850 [ 246.436360][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.442365][ C0] ? assign_work+0x364/0x3d0 [ 246.446956][ C0] worker_thread+0x870/0xd30 [ 246.451644][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.457543][ C0] ? __kthread_parkme+0x169/0x1d0 [ 246.462574][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.467689][ C0] kthread+0x2f0/0x390 [ 246.471782][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.476897][ C0] ? __pfx_kthread+0x10/0x10 [ 246.481505][ C0] ret_from_fork+0x4b/0x80 [ 246.485949][ C0] ? __pfx_kthread+0x10/0x10 [ 246.490538][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.495312][ C0] [ 247.603503][ C0] Shutting down cpus with NMI [ 247.608483][ C0] Kernel Offset: disabled [ 247.612833][ C0] Rebooting in 86400 seconds..