last executing test programs: 4.881333257s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0xb}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6628) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$ITER_CREATE(0x21, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 4.785527472s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f0000000080)=0x8) 4.688398327s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xfffffffffffffe64, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x0) 4.580198063s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0xb}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6628) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$ITER_CREATE(0x21, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 4.456322143s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 4.422853758s ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 2.39776384s ago: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000d67) fchownat(0xffffffffffffffff, 0x0, 0xee01, 0x0, 0x0) read$usbfs(r1, &(0x7f00000003c0)=""/132, 0x84) 1.482468431s ago: executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000140)={[{@data_writeback}, {@norecovery}, {@orlov}, {@test_dummy_encryption}]}, 0x4, 0x5e0, &(0x7f0000000580)="$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") chroot(&(0x7f0000000080)='./file1\x00') 1.352190972s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 1.29442703s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 1.276407073s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.211814923s ago: executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0xffffffe1, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000440)={0x0, 0xfffffffffffffe56, &(0x7f0000000000)={0x0}}, 0x4048044) 1.177330208s ago: executing program 3: socket$unix(0x1, 0x1, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5450, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0x5450, 0x0) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0x5450, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x301000, 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = mq_open(&(0x7f0000000140)='!}+^{\x00', 0x40, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0x5450, 0x0) 1.120088947s ago: executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000005c0)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={0x0}}, 0x0) 1.082225373s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'macvlan1\x00', {0x2, 0x0, @private}}) 998.110186ms ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup3(r4, r3, 0x0) write$P9_RLINK(r3, 0x0, 0x0) recvmsg(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r5) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x5450, 0x0) 888.246313ms ago: executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = dup(r0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 852.130288ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x4000) 818.326053ms ago: executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 787.421898ms ago: executing program 4: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) 756.921303ms ago: executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x40505331, &(0x7f0000000180)={0x1}) tkill(r0, 0x7) 515.15883ms ago: executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 282.216086ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4000080) 237.709223ms ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 201.114749ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 158.190465ms ago: executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 99.279304ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) 67.529799ms ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 44.095943ms ago: executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, 0x0, 0x0, 0x8000) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x523100) r2 = epoll_create(0x8) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010201"], 0x14}}, 0x0) recvmsg$inet_nvme(r4, &(0x7f0000000080)={&(0x7f0000003440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0xdf, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x420}, 0x420}}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) getpeername$unix(r2, 0x0, &(0x7f0000000cc0)) flock(r6, 0xa) r7 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r7}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000780)="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", 0x54e676f5, 0xc000, 0x0, 0xffffffffffffff59) r9 = dup(r8) write$P9_RAUTH(r9, 0x0, 0x0) ioctl$TIOCGWINSZ(r9, 0x5413, &(0x7f0000000140)) 0s ago: executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. 2024/05/29 05:15:42 fuzzer started 2024/05/29 05:15:42 dialing manager at 10.128.0.163:30016 [ 43.052088][ T3510] cgroup: Unknown subsys name 'net' [ 43.181118][ T3510] cgroup: Unknown subsys name 'rlimit' 2024/05/29 05:15:44 starting 5 executor processes [ 44.137244][ T3515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 45.195917][ T3539] chnl_net:caif_netlink_parms(): no params data found [ 45.238009][ T3528] chnl_net:caif_netlink_parms(): no params data found [ 45.354902][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.362094][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.370262][ T3539] device bridge_slave_0 entered promiscuous mode [ 45.389289][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.401496][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.409686][ T3539] device bridge_slave_1 entered promiscuous mode [ 45.438623][ T3530] chnl_net:caif_netlink_parms(): no params data found [ 45.456037][ T3531] chnl_net:caif_netlink_parms(): no params data found [ 45.478585][ T3539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.492051][ T3539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.505468][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.513168][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.521245][ T3528] device bridge_slave_0 entered promiscuous mode [ 45.533325][ T3529] chnl_net:caif_netlink_parms(): no params data found [ 45.562603][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.569710][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.577726][ T3528] device bridge_slave_1 entered promiscuous mode [ 45.608685][ T3539] team0: Port device team_slave_0 added [ 45.638039][ T3528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.653906][ T3539] team0: Port device team_slave_1 added [ 45.673840][ T3528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.717063][ T3539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.724473][ T3539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.750520][ T3539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.779830][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.787237][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.795943][ T3530] device bridge_slave_0 entered promiscuous mode [ 45.808901][ T3539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.816262][ T3539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.842530][ T3539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.864358][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.872146][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.879771][ T3531] device bridge_slave_0 entered promiscuous mode [ 45.887220][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.894668][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.902552][ T3530] device bridge_slave_1 entered promiscuous mode [ 45.911804][ T3528] team0: Port device team_slave_0 added [ 45.930004][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.937195][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.945572][ T3531] device bridge_slave_1 entered promiscuous mode [ 45.960549][ T3528] team0: Port device team_slave_1 added [ 46.002227][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.009250][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.035350][ T3528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.054893][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.062363][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.070086][ T3529] device bridge_slave_0 entered promiscuous mode [ 46.087039][ T3530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.097338][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.104931][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.130986][ T3528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.147563][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.155310][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.163073][ T3529] device bridge_slave_1 entered promiscuous mode [ 46.171614][ T3531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.182472][ T3530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.199206][ T3539] device hsr_slave_0 entered promiscuous mode [ 46.206320][ T3539] device hsr_slave_1 entered promiscuous mode [ 46.226335][ T3531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.290297][ T3530] team0: Port device team_slave_0 added [ 46.298348][ T3530] team0: Port device team_slave_1 added [ 46.305961][ T3529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.324266][ T3531] team0: Port device team_slave_0 added [ 46.335040][ T3531] team0: Port device team_slave_1 added [ 46.354274][ T3529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.407734][ T3528] device hsr_slave_0 entered promiscuous mode [ 46.414700][ T3528] device hsr_slave_1 entered promiscuous mode [ 46.421437][ T3528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.429215][ T3528] Cannot create hsr debugfs directory [ 46.446112][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.453180][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.479354][ T3530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.493034][ T3529] team0: Port device team_slave_0 added [ 46.499271][ T3530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.506334][ T3530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.532425][ T3530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.557907][ T3531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.565031][ T3531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.591071][ T3531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.604161][ T3529] team0: Port device team_slave_1 added [ 46.610283][ T3531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.617443][ T3531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.643361][ T3531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.705340][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.712409][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.739406][ T3529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.752391][ T3529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.759334][ T3529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.785538][ T3529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.856165][ T3530] device hsr_slave_0 entered promiscuous mode [ 46.863124][ T3530] device hsr_slave_1 entered promiscuous mode [ 46.869540][ T3530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.880236][ T3530] Cannot create hsr debugfs directory [ 46.899814][ T3531] device hsr_slave_0 entered promiscuous mode [ 46.906842][ T3531] device hsr_slave_1 entered promiscuous mode [ 46.913714][ T3531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.921434][ T3531] Cannot create hsr debugfs directory [ 46.942960][ T3529] device hsr_slave_0 entered promiscuous mode [ 46.949654][ T3529] device hsr_slave_1 entered promiscuous mode [ 46.956674][ T3529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.964339][ T3529] Cannot create hsr debugfs directory [ 46.972422][ T3534] Bluetooth: hci0: command 0x0409 tx timeout [ 46.981942][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 46.988536][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 46.995299][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 47.001460][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 47.198037][ T3539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.224152][ T3539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.242612][ T3539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.252215][ T3539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.288302][ T3528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.297677][ T3528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.315539][ T3528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.339648][ T3528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.392140][ T3529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.414634][ T3529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.425719][ T3529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.435465][ T3529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.469784][ T3539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.507107][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.517388][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.527002][ T3539] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.546082][ T3531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.556935][ T3531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.569640][ T3531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.578932][ T3531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.609442][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.623689][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.633078][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.640422][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.674181][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.682414][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.691981][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.700374][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707455][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.715851][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.726524][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.735227][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.744637][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.754701][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.783272][ T3539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.793815][ T3539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.814372][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.824444][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.833602][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.842334][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.850964][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.859442][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.868127][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.880124][ T3528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.908976][ T3529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.917715][ T3530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.933366][ T3530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.962639][ T3529] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.969498][ T3530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.983459][ T3530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.995555][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.005069][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.019482][ T3528] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.044061][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.052711][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.060652][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.070721][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.079252][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.086334][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.094320][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.103103][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.111520][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.118561][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.126331][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.135779][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.164534][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.173104][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.182438][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.190798][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.197896][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.205540][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.213379][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.220941][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.230508][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.239159][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.246243][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.254007][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.263047][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.271791][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.280326][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.290369][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.298874][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.319458][ T3539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.342593][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.352134][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.360430][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.369447][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.378057][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.386646][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.395104][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.403672][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.412477][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.420707][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.457667][ T3528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.468679][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.477844][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.486082][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.495805][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.504598][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.513316][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.523639][ T3529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.541925][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.550667][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.567876][ T3531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.598513][ T3539] device veth0_vlan entered promiscuous mode [ 48.635191][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.650210][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.660692][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.669598][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.685825][ T3531] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.698140][ T3539] device veth1_vlan entered promiscuous mode [ 48.706662][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.719209][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.728913][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.775479][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.792489][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.801153][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.810482][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.817589][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.825753][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.834531][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.843110][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.850176][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.862641][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.870881][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.890613][ T3539] device veth0_macvtap entered promiscuous mode [ 48.913324][ T3539] device veth1_macvtap entered promiscuous mode [ 48.921621][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.930050][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.938648][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.946875][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.956519][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.983436][ T3530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.000660][ T3539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.012819][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.023440][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.032130][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.039545][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.047628][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.051572][ T3575] Bluetooth: hci0: command 0x041b tx timeout [ 49.056446][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.070289][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.078606][ T1068] Bluetooth: hci1: command 0x041b tx timeout [ 49.085433][ T1068] Bluetooth: hci4: command 0x041b tx timeout [ 49.089874][ T3528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.091893][ T1068] Bluetooth: hci3: command 0x041b tx timeout [ 49.110808][ T3530] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.120802][ T1068] Bluetooth: hci2: command 0x041b tx timeout [ 49.130308][ T3531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.142410][ T3531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.155416][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.164721][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.173326][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.180943][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.188865][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.196574][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.204151][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.212840][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.221606][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.229918][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.242972][ T3539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.264188][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.272603][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.281101][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.290021][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.299332][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.308034][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.317002][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.325783][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.332922][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.341002][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.352728][ T3529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.376688][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.385087][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.395874][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.413990][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.427361][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.436872][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450150][ T3528] device veth0_vlan entered promiscuous mode [ 49.461749][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.469532][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.500156][ T3528] device veth1_vlan entered promiscuous mode [ 49.515806][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.525616][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.535737][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.542864][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.550870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.590268][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.599195][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.622198][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.636834][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.646080][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.657587][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.709199][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.717688][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.726756][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.734290][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.742891][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.751227][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.763178][ T3530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.776528][ T3530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.794744][ T3528] device veth0_macvtap entered promiscuous mode [ 49.805103][ T3528] device veth1_macvtap entered promiscuous mode [ 49.815856][ T3531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.829653][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.841259][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.849239][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.858061][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.876032][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.888358][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.899774][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.918857][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.942445][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.951137][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.960362][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.987621][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.000094][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.011255][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.031817][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.040462][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.049653][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.058226][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.076401][ T3531] device veth0_vlan entered promiscuous mode [ 50.085931][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.100771][ T3528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.109860][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.115754][ T3528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.126176][ T3528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.135116][ T3528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.150203][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.158879][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.167244][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.175509][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.183464][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.191049][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.199556][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.214577][ T3530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.230295][ T3529] device veth0_vlan entered promiscuous mode [ 50.244114][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.253466][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.261523][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.269206][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.291201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.299261][ T3531] device veth1_vlan entered promiscuous mode [ 50.306874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.316350][ T3529] device veth1_vlan entered promiscuous mode [ 50.337510][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.349966][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.358252][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.404359][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.420985][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.429252][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.437916][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.476448][ T3530] device veth0_vlan entered promiscuous mode [ 50.486338][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.508806][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.523642][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.533234][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.546049][ T3531] device veth0_macvtap entered promiscuous mode [ 50.584667][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.598324][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.606978][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.621155][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.630915][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.654347][ T3531] device veth1_macvtap entered promiscuous mode [ 50.673735][ T3529] device veth0_macvtap entered promiscuous mode [ 50.683071][ T3530] device veth1_vlan entered promiscuous mode [ 50.713149][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.721150][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.732987][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.748052][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.763667][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.775158][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.799994][ T3531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.810550][ T3529] device veth1_macvtap entered promiscuous mode [ 50.844292][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.854120][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.863065][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.882031][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.890912][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.899689][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.908061][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.918026][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.944157][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.959347][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.988194][ T3531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.008193][ T3531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.020897][ T3531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.045486][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.054815][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.073843][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.083489][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.094645][ T3531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.104732][ T3531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.117578][ T3531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.117609][ T3531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123707][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.123727][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.123736][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.123747][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.123756][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.123767][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.124995][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.127974][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.127992][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.128001][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.128012][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.128021][ T3529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.128040][ T3529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.129089][ T3529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.147634][ T3530] device veth0_macvtap entered promiscuous mode [ 51.150547][ T3530] device veth1_macvtap entered promiscuous mode [ 51.311385][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.318504][ T3529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.319358][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.333488][ T3529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.342859][ T3574] Bluetooth: hci3: command 0x040f tx timeout [ 51.346790][ T3529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.350072][ T3574] Bluetooth: hci4: command 0x040f tx timeout [ 51.358817][ T3529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.376752][ T3574] Bluetooth: hci1: command 0x040f tx timeout [ 51.384056][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.390189][ T3574] Bluetooth: hci0: command 0x040f tx timeout [ 51.393122][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.399757][ T3574] Bluetooth: hci2: command 0x040f tx timeout [ 51.406741][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.420281][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.429122][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.437866][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.446685][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.465826][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.479135][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.489422][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.489439][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.489452][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.520768][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.530848][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.542975][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.554164][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.571198][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.586096][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.604326][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.616655][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.635077][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.645731][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.658758][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.669498][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.681227][ T3530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.701369][ T3530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.725149][ T3530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.755251][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.764429][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.790517][ T3530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.802020][ T3530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.810732][ T3530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.821040][ T3530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.889944][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.899498][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.943610][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.957730][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.982329][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.015784][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.023377][ T3590] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 52.055034][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.068346][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.077874][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.082515][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.110186][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.118878][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.137382][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.153390][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.176098][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.179691][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.206187][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.224909][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.281595][ T3590] usb 2-1: Using ep0 maxpacket: 8 [ 52.387866][ T3648] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 52.422722][ T3590] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.444568][ T3590] usb 2-1: config 179 has no interface number 0 [ 52.457779][ T3590] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 52.476966][ T3590] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 52.511720][ T3590] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.533245][ T3590] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.564267][ T3590] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.581046][ T3590] usb 2-1: config 179 interface 65 has no altsetting 0 [ 52.597766][ T3590] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 52.613413][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.683252][ T3634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.714955][ T3590] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 53.123789][ T3590] usb 2-1: USB disconnect, device number 2 [ 53.149307][ T3590] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 53.371829][ T3593] Bluetooth: hci3: command 0x0419 tx timeout [ 53.452006][ T3593] Bluetooth: hci2: command 0x0419 tx timeout [ 53.459270][ T3593] Bluetooth: hci0: command 0x0419 tx timeout [ 53.481048][ T3593] Bluetooth: hci1: command 0x0419 tx timeout [ 53.488004][ T3593] Bluetooth: hci4: command 0x0419 tx timeout [ 53.984891][ T3744] input: syz0 as /devices/virtual/input/input6 [ 54.011968][ T3534] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.381667][ T3534] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 54.400265][ T3534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.425656][ T3534] usb 5-1: config 0 descriptor?? [ 55.602401][ T3534] pegasus: probe of 5-1:0.0 failed with error -71 [ 55.634121][ T3534] usb 5-1: USB disconnect, device number 2 [ 55.762249][ T3812] Zero length message leads to an empty skb [ 56.710947][ T3863] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 57.010205][ T3879] device syzkaller0 entered promiscuous mode [ 57.515226][ T3904] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 57.556616][ T3914] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.094865][ T3946] loop3: detected capacity change from 0 to 128 [ 59.162452][ T3946] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 59.209182][ T3946] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.246710][ T3946] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.3: No space for directory leaf checksum. Please run e2fsck -D. [ 59.348273][ T3946] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz-executor.3: checksumming directory block 0 [ 60.018419][ T3972] loop1: detected capacity change from 0 to 4096 [ 60.144819][ T3972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.207424][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.256955][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.287425][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.298586][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.309174][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.319968][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.336461][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.356960][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.370090][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.388705][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.404260][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.422255][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.429762][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.445055][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.452693][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.460172][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.475171][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.486939][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.497224][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.504802][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.512813][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.523002][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.530545][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.538351][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.546098][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.559428][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.569354][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.581160][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.590660][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.599052][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.610951][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.621002][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.629106][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.637370][ T3573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.650947][ T3573] hid-generic 0000:0000:0000.0001: hidraw0: HID v5.b8 Device [syz0] on syz0 [ 61.602637][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 61.681757][ T3593] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.051498][ T3593] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 62.075483][ T3593] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.108978][ T3593] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 62.281728][ T3593] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.301937][ T3593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.324980][ T3593] usb 1-1: Product: syz [ 62.345174][ T3593] usb 1-1: Manufacturer: syz [ 62.354491][ T3593] usb 1-1: SerialNumber: syz [ 62.701728][ T3593] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 62.711881][ T3593] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 62.734826][ T4125] "syz-executor.3" (4125) uses obsolete ecb(arc4) skcipher [ 62.820906][ T3593] usb 1-1: USB disconnect, device number 2 [ 62.863027][ T4129] loop3: detected capacity change from 0 to 512 [ 62.907637][ T4129] ======================================================= [ 62.907637][ T4129] WARNING: The mand mount option has been deprecated and [ 62.907637][ T4129] and is ignored by this kernel. Remove the mand [ 62.907637][ T4129] option from the mount to silence this warning. [ 62.907637][ T4129] ======================================================= [ 62.908765][ T3674] udevd[3674]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.072988][ T4129] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.110137][ T4129] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 63.197946][ T4129] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: inode #15: comm syz-executor.3: iget: illegal inode # [ 63.301017][ T4129] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 63.362950][ T4129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.409354][ T4129] EXT4-fs error (device loop3): ext4_lookup:1855: comm syz-executor.3: inode #15: comm syz-executor.3: iget: illegal inode # [ 64.341511][ T3573] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 64.420707][ T3674] udevd[3674]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 64.771762][ T3573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.811886][ T3573] usb 5-1: not running at top speed; connect to a high speed hub [ 64.899715][ T4278] fuse: Bad value for 'fd' [ 64.906154][ T3573] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.920122][ T3573] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 64.933390][ T3573] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.241542][ T3573] usb 5-1: string descriptor 0 read error: -22 [ 65.251780][ T3573] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 65.296656][ T3573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.315051][ T4308] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 65.881502][ T3573] usbhid 5-1:1.0: can't add hid device: -71 [ 65.890708][ T3573] usbhid: probe of 5-1:1.0 failed with error -71 [ 65.915175][ T3573] usb 5-1: USB disconnect, device number 3 [ 66.262163][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.268491][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.268623][ T3572] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 66.278262][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.339499][ T4364] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.370019][ T4364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 66.468522][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.476767][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.484385][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.491171][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.517864][ T4364] hsr0 speed is unknown, defaulting to 1000 [ 66.692300][ T3572] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 66.717079][ T3572] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.748387][ T3572] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 66.951688][ T3572] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.960026][ T4406] siw: device registration error -23 [ 66.978292][ T3572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.009665][ T3572] usb 4-1: Product: syz [ 67.018730][ T3572] usb 4-1: Manufacturer: syz [ 67.024161][ T3572] usb 4-1: SerialNumber: syz [ 67.136449][ T4417] serio: Serial port pts0 [ 67.254605][ T4430] serio: Serial port pts1 [ 67.351803][ T3572] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 67.359288][ T3572] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 67.415799][ T3572] usb 4-1: USB disconnect, device number 2 [ 68.111370][ T3593] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.385854][ T4480] serio: Serial port pts0 [ 68.481664][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 68.498570][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.515282][ T3593] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.524833][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.543694][ T3593] usb 5-1: config 0 descriptor?? [ 68.593714][ T3593] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 68.634055][ T4503] sctp: [Deprecated]: syz-executor.0 (pid 4503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.634055][ T4503] Use struct sctp_sack_info instead [ 69.656040][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 69.801992][ T3590] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 70.261652][ T3590] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.284866][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.301757][ T3590] usb 4-1: not running at top speed; connect to a high speed hub [ 70.381736][ T3590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.393716][ T3590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 70.440466][ T3590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.481867][ T4628] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.493286][ T4628] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.504486][ T4628] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.514896][ T4628] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.540757][ T4628] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.652537][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.673931][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.701634][ T23] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.710718][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.729610][ T23] usb 1-1: config 0 descriptor?? [ 70.741519][ T3590] usb 4-1: string descriptor 0 read error: -22 [ 70.747772][ T3590] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 70.775069][ T3590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.839346][ T3593] usb 5-1: USB disconnect, device number 4 [ 71.232082][ T23] hid (null): bogus close delimiter [ 71.295231][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301852][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.371453][ T3590] usbhid 4-1:1.0: can't add hid device: -71 [ 71.377590][ T3590] usbhid: probe of 4-1:1.0 failed with error -71 [ 71.397218][ T3590] usb 4-1: USB disconnect, device number 3 [ 71.461803][ T23] usb 1-1: language id specifier not provided by device, defaulting to English [ 71.496092][ T3593] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.868708][ T3593] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.890641][ T3593] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.918834][ T3593] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.949412][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.973133][ T3593] usb 2-1: config 0 descriptor?? [ 72.033555][ T3593] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 72.089176][ T4714] loop4: detected capacity change from 0 to 128 [ 72.201964][ T4714] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 72.279955][ T4714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.301462][ T23] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 72.312701][ T23] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 72.326426][ T23] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 72.336928][ T23] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 72.345679][ T23] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 72.356256][ T23] usb 1-1: USB disconnect, device number 3 [ 72.370723][ T4714] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 72.386916][ T4714] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 72.851374][ T3593] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.111528][ T3593] usb 4-1: Using ep0 maxpacket: 8 [ 73.231493][ T3593] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 73.401654][ T3593] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.411054][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.420246][ T3593] usb 4-1: Product: syz [ 73.424649][ T3593] usb 4-1: Manufacturer: syz [ 73.429358][ T3593] usb 4-1: SerialNumber: syz [ 73.676138][ T3573] usb 4-1: USB disconnect, device number 4 [ 73.766139][ T26] audit: type=1107 audit(1716959773.848:2): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2y'V I+ۙ[MX=`1$m]ã7ZdHƆs,HF<* [ 73.766139][ T26] ~xڪ+[RNaS^} a y{p>:j`pwaބçXiV 䫸 {<ᡬ8jC$a\sf$ʺ}Fc5lF#JDlbȸ8Tl!K~Յu)͘8' [ 74.229913][ T3593] usb 2-1: USB disconnect, device number 3 [ 74.339275][ T3573] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.601538][ T3573] usb 1-1: Using ep0 maxpacket: 32 [ 74.743377][ T3573] usb 1-1: config 0 has no interfaces? [ 74.912928][ T3573] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.927938][ T3573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.941151][ T3573] usb 1-1: Product: syz [ 74.960183][ T3573] usb 1-1: Manufacturer: syz [ 74.968024][ T3573] usb 1-1: SerialNumber: syz [ 74.983866][ T3573] usb 1-1: config 0 descriptor?? [ 75.402833][ T4928] loop4: detected capacity change from 0 to 512 [ 75.460289][ T4928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 75.475369][ T4928] System zones: 1-12 [ 75.481934][ T4928] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1) [ 75.500368][ T4928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 75.515646][ T4928] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 75.524919][ T4928] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 75.540304][ T4928] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 75.556751][ T4928] EXT4-fs (loop4): 1 truncate cleaned up [ 75.562627][ T4928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.585821][ T4928] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz-executor.4: Directory hole found for htree index block [ 76.415609][ T21] cfg80211: failed to load regulatory.db [ 76.981360][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.054068][ T3574] usb 1-1: USB disconnect, device number 4 [ 77.356256][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.374404][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.389032][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.403137][ T21] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.413010][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.444191][ T21] usb 5-1: config 0 descriptor?? [ 77.483094][ T3574] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.537966][ T4993] serio: Serial port pts0 [ 77.851834][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.863168][ T3574] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.876288][ T3574] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.885591][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.903301][ T3574] usb 1-1: config 0 descriptor?? [ 77.947584][ T21] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 77.959469][ T21] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 77.983036][ T21] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 78.373720][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.381147][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.388619][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.396269][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.404498][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.412100][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.419508][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.427005][ T3574] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 78.441479][ T3574] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 78.458917][ T3574] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 79.255026][ T21] usb 5-1: USB disconnect, device number 5 [ 79.330964][ T3572] usb 1-1: USB disconnect, device number 5 [ 80.363527][ T3590] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.490533][ T5137] serio: Serial port pts1 [ 80.624341][ T5138] hsr0 speed is unknown, defaulting to 1000 [ 80.728095][ T3630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.751846][ T3590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.771156][ T3590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.794116][ T3590] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.821671][ T3590] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.857120][ T3590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.890021][ T3590] usb 5-1: config 0 descriptor?? [ 80.904898][ T3630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.008963][ T3630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.029301][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 81.177017][ T3630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.199586][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.207013][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.217000][ T5138] device bridge_slave_0 entered promiscuous mode [ 81.225910][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.234399][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.243619][ T5138] device bridge_slave_1 entered promiscuous mode [ 81.284097][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.296200][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.329560][ T5138] team0: Port device team_slave_0 added [ 81.349924][ T5138] team0: Port device team_slave_1 added [ 81.391100][ T3590] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 81.402380][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.404518][ T3590] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 81.409329][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.439623][ T3590] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 81.445348][ T5138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.534934][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.556353][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.648687][ T5138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.777022][ T5138] device hsr_slave_0 entered promiscuous mode [ 81.789276][ T5138] device hsr_slave_1 entered promiscuous mode [ 81.796141][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.804117][ T5138] Cannot create hsr debugfs directory [ 82.480683][ T5138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.571457][ T3593] Bluetooth: hci0: command 0x0409 tx timeout [ 82.578656][ T5138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.605125][ T5138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.622497][ T5138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.836782][ T3630] device hsr_slave_0 left promiscuous mode [ 82.850902][ T3630] device hsr_slave_1 left promiscuous mode [ 82.865078][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.888092][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.924264][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.951096][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.976516][ T3630] device bridge_slave_1 left promiscuous mode [ 83.001630][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.040060][ T3630] device bridge_slave_0 left promiscuous mode [ 83.048938][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.127762][ T3630] device veth1_macvtap left promiscuous mode [ 83.144434][ T3630] device veth0_macvtap left promiscuous mode [ 83.171706][ T3630] device veth1_vlan left promiscuous mode [ 83.190697][ T3630] device veth0_vlan left promiscuous mode [ 83.585987][ T3593] usb 5-1: USB disconnect, device number 6 [ 84.174089][ T3630] team0 (unregistering): Port device team_slave_1 removed [ 84.187904][ T3630] team0 (unregistering): Port device team_slave_0 removed [ 84.207608][ T3630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.235048][ T3630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.361551][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.415789][ T5347] binder: 5346:5347 ioctl c0145401 0 returned -22 [ 84.441896][ T3630] bond0 (unregistering): Released all slaves [ 84.601941][ T3572] hsr0 speed is unknown, defaulting to 1000 [ 84.628571][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.635812][ T3572] ================================================================== [ 84.644159][ T3572] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 2024/05/29 05:16:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 84.651382][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 84.651683][ T3572] Read of size 4 at addr ffff88801d00c0d8 by task kworker/0:3/3572 [ 84.665522][ T3572] [ 84.667853][ T3572] CPU: 0 PID: 3572 Comm: kworker/0:3 Not tainted 5.15.160-syzkaller #0 [ 84.676093][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 84.686169][ T3572] Workqueue: infiniband ib_cache_event_task [ 84.692259][ T3572] Call Trace: [ 84.695557][ T3572] [ 84.698493][ T3572] dump_stack_lvl+0x1e3/0x2d0 [ 84.703184][ T3572] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 84.708823][ T3572] ? _printk+0xd1/0x120 [ 84.713254][ T3572] ? __wake_up_klogd+0xcc/0x100 [ 84.718114][ T3572] ? panic+0x860/0x860 [ 84.722228][ T3572] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 84.727791][ T3572] print_address_description+0x63/0x3b0 [ 84.733349][ T3572] ? siw_query_port+0x342/0x430 [ 84.738211][ T3572] kasan_report+0x16b/0x1c0 [ 84.742730][ T3572] ? siw_query_port+0x342/0x430 [ 84.747599][ T3572] siw_query_port+0x342/0x430 [ 84.752287][ T3572] ? ib_query_port+0x5cd/0x770 [ 84.757079][ T3572] ib_cache_update+0x1a8/0xaf0 [ 84.761865][ T3572] ? ib_cache_setup_one+0x5a0/0x5a0 [ 84.767072][ T3572] ? read_lock_is_recursive+0x10/0x10 [ 84.772450][ T3572] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 84.778440][ T3572] ? print_irqtrace_events+0x210/0x210 [ 84.783903][ T3572] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 84.789814][ T3572] ib_cache_event_task+0xef/0x1e0 [ 84.794859][ T3572] process_one_work+0x8a1/0x10c0 [ 84.799825][ T3572] ? worker_detach_from_pool+0x260/0x260 [ 84.805507][ T3572] ? _raw_spin_lock_irqsave+0x120/0x120 [ 84.811063][ T3572] ? kthread_data+0x4e/0xc0 [ 84.815577][ T3572] ? wq_worker_running+0x97/0x170 [ 84.820619][ T3572] worker_thread+0xaca/0x1280 [ 84.825305][ T3572] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 84.831233][ T3572] kthread+0x3f6/0x4f0 [ 84.835303][ T3572] ? rcu_lock_release+0x20/0x20 [ 84.840160][ T3572] ? kthread_blkcg+0xd0/0xd0 [ 84.844757][ T3572] ret_from_fork+0x1f/0x30 [ 84.849199][ T3572] [ 84.852219][ T3572] [ 84.854535][ T3572] Allocated by task 3528: [ 84.858852][ T3572] ____kasan_kmalloc+0xba/0xf0 [ 84.863624][ T3572] __kmalloc_node+0x199/0x390 [ 84.868305][ T3572] kvmalloc_node+0x80/0x140 [ 84.872813][ T3572] alloc_netdev_mqs+0x85/0xc10 [ 84.877575][ T3572] rtnl_create_link+0x2e9/0x9c0 [ 84.882516][ T3572] rtnl_newlink+0x13d2/0x2070 [ 84.887192][ T3572] rtnetlink_rcv_msg+0x993/0xee0 [ 84.894550][ T3572] netlink_rcv_skb+0x1cf/0x410 [ 84.899325][ T3572] netlink_unicast+0x7b6/0x980 [ 84.904093][ T3572] netlink_sendmsg+0xa30/0xd60 [ 84.908859][ T3572] __sys_sendto+0x564/0x720 [ 84.913366][ T3572] __x64_sys_sendto+0xda/0xf0 [ 84.918045][ T3572] do_syscall_64+0x3b/0xb0 [ 84.922464][ T3572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.928449][ T3572] [ 84.930771][ T3572] Freed by task 3630: [ 84.934746][ T3572] kasan_set_track+0x4b/0x80 [ 84.939328][ T3572] kasan_set_free_info+0x1f/0x40 [ 84.944266][ T3572] ____kasan_slab_free+0xd8/0x120 [ 84.949294][ T3572] slab_free_freelist_hook+0xdd/0x160 [ 84.954672][ T3572] kfree+0xf1/0x270 [ 84.958476][ T3572] device_release+0x91/0x1c0 [ 84.963063][ T3572] kobject_put+0x224/0x460 [ 84.967480][ T3572] netdev_run_todo+0xaaf/0xc40 [ 84.972234][ T3572] default_device_exit_batch+0x395/0x3f0 [ 84.977861][ T3572] cleanup_net+0x763/0xb60 [ 84.982267][ T3572] process_one_work+0x8a1/0x10c0 [ 84.987191][ T3572] worker_thread+0xaca/0x1280 [ 84.991851][ T3572] kthread+0x3f6/0x4f0 [ 84.995903][ T3572] ret_from_fork+0x1f/0x30 [ 85.000300][ T3572] [ 85.002611][ T3572] The buggy address belongs to the object at ffff88801d00c000 [ 85.002611][ T3572] which belongs to the cache kmalloc-cg-4k of size 4096 [ 85.016909][ T3572] The buggy address is located 216 bytes inside of [ 85.016909][ T3572] 4096-byte region [ffff88801d00c000, ffff88801d00d000) [ 85.030270][ T3572] The buggy address belongs to the page: [ 85.035893][ T3572] page:ffffea0000740200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d008 [ 85.046030][ T3572] head:ffffea0000740200 order:3 compound_mapcount:0 compound_pincount:0 [ 85.054333][ T3572] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.062321][ T3572] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888011c4c280 [ 85.070909][ T3572] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 85.079513][ T3572] page dumped because: kasan: bad access detected [ 85.085921][ T3572] page_owner tracks the page as allocated [ 85.091627][ T3572] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3531, ts 46385004527, free_ts 46330219916 [ 85.112548][ T3572] get_page_from_freelist+0x322a/0x33c0 [ 85.118097][ T3572] __alloc_pages+0x272/0x700 [ 85.122670][ T3572] new_slab+0xbb/0x4b0 [ 85.126726][ T3572] ___slab_alloc+0x6f6/0xe10 [ 85.131300][ T3572] __kmalloc_node+0x1fa/0x390 [ 85.135963][ T3572] kvmalloc_node+0x80/0x140 [ 85.140446][ T3572] alloc_netdev_mqs+0x85/0xc10 [ 85.145214][ T3572] rtnl_create_link+0x2e9/0x9c0 [ 85.150049][ T3572] rtnl_newlink+0x13d2/0x2070 [ 85.154795][ T3572] rtnetlink_rcv_msg+0x993/0xee0 [ 85.159718][ T3572] netlink_rcv_skb+0x1cf/0x410 [ 85.164463][ T3572] netlink_unicast+0x7b6/0x980 [ 85.169212][ T3572] netlink_sendmsg+0xa30/0xd60 [ 85.173958][ T3572] __sys_sendto+0x564/0x720 [ 85.178445][ T3572] __x64_sys_sendto+0xda/0xf0 [ 85.183134][ T3572] do_syscall_64+0x3b/0xb0 [ 85.187622][ T3572] page last free stack trace: [ 85.192274][ T3572] free_unref_page_prepare+0xc34/0xcf0 [ 85.197721][ T3572] free_unref_page+0x95/0x2d0 [ 85.202381][ T3572] __unfreeze_partials+0x1b7/0x210 [ 85.207473][ T3572] put_cpu_partial+0x132/0x1a0 [ 85.212303][ T3572] ___cache_free+0xe3/0x100 [ 85.216789][ T3572] qlist_free_all+0x36/0x90 [ 85.221271][ T3572] kasan_quarantine_reduce+0x162/0x180 [ 85.226719][ T3572] __kasan_slab_alloc+0x2f/0xc0 [ 85.231559][ T3572] slab_post_alloc_hook+0x53/0x380 [ 85.236651][ T3572] __kmalloc+0x120/0x300 [ 85.240874][ T3572] ethnl_default_notify+0xab/0x5d0 [ 85.245966][ T3572] ethnl_netdev_event+0x54/0x70 [ 85.250798][ T3572] raw_notifier_call_chain+0xd0/0x170 [ 85.256152][ T3572] netdev_change_features+0x143/0x1b0 [ 85.261506][ T3572] team_add_slave+0x1ca3/0x27a0 [ 85.266338][ T3572] do_setlink+0xe71/0x3b00 [ 85.270739][ T3572] [ 85.273042][ T3572] Memory state around the buggy address: [ 85.278650][ T3572] ffff88801d00bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.286690][ T3572] ffff88801d00c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.294735][ T3572] >ffff88801d00c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.302775][ T3572] ^ [ 85.309685][ T3572] ffff88801d00c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.317748][ T3572] ffff88801d00c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.325787][ T3572] ================================================================== [ 85.333908][ T3572] Disabling lock debugging due to kernel taint