last executing test programs: 5.390529128s ago: executing program 1 (id=608): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="1f0e0000090000003c0012800c0001006d6163766c616e002c0002800a000400aaaaaaaaaabb00001c0005"], 0x5c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1867, &(0x7f00000003c0)={0x0, 0xca8a}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r8 = socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0), 0x0, 0x12000}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x40) io_uring_enter(r5, 0x92, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0xfffffffd}, 0x48) unshare(0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe468e284b3997ead}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0), 0x4) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 4.954487105s ago: executing program 1 (id=600): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000002"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.849114129s ago: executing program 0 (id=602): r0 = socket$inet6(0xa, 0x1, 0x10001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x3}, {0x4, 0x5, 0x3e, 0x2}, {0x7, 0x1f, 0xff, 0x4}, {0x6, 0x7, 0xfd, 0x1}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x25}, r2}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) listen(r7, 0xffffff69) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030300000000000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x4, 0x4, 0x50c, 0xffffffff, 0xe4, 0x22c, 0xe4, 0xfeffffff, 0xffffffff, 0x444, 0x444, 0x444, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x148, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@remote, [], @ipv4=@local, [], @ipv4, [], @ipv4=@dev}}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x568) 4.345910251s ago: executing program 4 (id=606): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040807c9003b0400008000"], 0xb) syz_emit_vhci(&(0x7f0000002880)=ANY=[@ANYBLOB="03000096ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8fe7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadd68ab76f1fd272b82f6dd32f35208d7aac762d4e6de9c2bb77d773124352da0840f8f532d0103dc52b6a44b9b8ca3b81ee1a00460f91b43c8e05903f8493d13d35ed53adf8cdeacf33fb"], 0x9a) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1002, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r1, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) r3 = socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x401) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002800)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="c0030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08000300010000004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200776c616e30000000000000000000000008000100d01d501a571249dea889f2263906af5e7320dd9c8eca95702d7aa0227995562d34983fbf6d142e195165c1040e5279613864fc87940e6463720d424cada0f6435992220313d4e14e269ce22ec1cfb8a989b7ac456bcf3d2c5a8e28c509aaa664635d6c2a3483dc5cd59b7d48becfdbdf6508", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES8=r1], 0x3c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x94b20d40506b8d7) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f00000023c0)=ANY=[@ANYRES64=r5, @ANYRESDEC, @ANYRES32=r3, @ANYRES8], 0x6) 4.174821526s ago: executing program 2 (id=610): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000020000009f02"]) 3.932873533s ago: executing program 0 (id=611): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.729434439s ago: executing program 2 (id=612): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004409010000000000bf9800000000000056080000000000008500000007000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='virtiofs\x00', &(0x7f0000000140)='\x00', 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x5200042c) open(&(0x7f0000000180)='./bus\x00', 0x14527e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8004) migrate_pages(0x0, 0xcd6e, &(0x7f00000002c0)=0x7, &(0x7f0000000240)=0xa) write$P9_RSTATu(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0], 0x509) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.710353166s ago: executing program 4 (id=613): r0 = syz_open_dev$sndpcmc(0x0, 0xb, 0x44040) read$snddsp(r0, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) 3.642881962s ago: executing program 0 (id=614): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x40010) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xa8, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0x0, 0x99, {0xf, 0x78}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xa8}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[@ANYBLOB="20010000", @ANYRESDEC=r3, @ANYRES64=r3, @ANYRES32=r9, @ANYRESDEC=r5], 0x120}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xb}, @initial, @device_a, @from_mac=@broadcast, {0xa, 0x2}, "", @value={0x2, 0x1, 0x0, 0x1, 0x5}}, @random="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"}, 0x199) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000010802110000006a6c08021100f5ff1f00010000000100010882848b960c12182400"], 0x28) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f00000005c0)={0x3, 0x2, 0x1984, 0x3}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) dup(r0) 3.298708659s ago: executing program 2 (id=618): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) 3.298537346s ago: executing program 4 (id=619): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 3.189906732s ago: executing program 2 (id=620): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x0, 0xea60}, 0x12}, 0x18) 3.108500466s ago: executing program 4 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000110000001c000980070001"], 0x30}}, 0x0) 2.973521681s ago: executing program 2 (id=622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x348, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x2ac, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_nat={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x79, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645fc28bd05cca953cb4705ee5fdd6950f43ec843b0e8335d3f2f1e0027"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x168, 0x6, [@m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x2d, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4dae165fc3df9c739d"}, {0xc}, {0xc}}}, @m_connmark={0x44, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x11, 0x6, "25e3c0c965c7f29e5a6b228b0c"}, {0xc}, {0xc}}}, @m_simple={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'mcast_rejoin_count\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x348}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.972403819s ago: executing program 1 (id=623): r0 = socket$inet6(0xa, 0x1, 0x10001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x3}, {0x4, 0x5, 0x3e, 0x2}, {0x7, 0x1f, 0xff, 0x4}, {0x6, 0x7, 0xfd, 0x1}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x25}, r2}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) listen(r7, 0xffffff69) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030300000000000000000000000005000100070000000900020073797a31000000001400078008001340000000000800124000000000050005000a000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x4, 0x4, 0x50c, 0xffffffff, 0xe4, 0x22c, 0xe4, 0xfeffffff, 0xffffffff, 0x444, 0x444, 0x444, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x148, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@remote, [], @ipv4=@local, [], @ipv4, [], @ipv4=@dev}}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x568) 2.508906629s ago: executing program 3 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) 2.508190688s ago: executing program 2 (id=634): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000001c0)={0x0, 0x0, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.507226079s ago: executing program 4 (id=635): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) socket$xdp(0x2c, 0x3, 0x0) close(r1) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) keyctl$dh_compute(0x17, &(0x7f0000000280), 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000480)='./file1\x00', 0xc000, 0x1) truncate(&(0x7f00000004c0)='./file1\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) connect$can_bcm(r3, &(0x7f00000004c0)={0x1d, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000400), 0x0, 0x4008051) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x8]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1007}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x3f, 0x0, {0x7, 0x25, 0x1, 0x2, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x4, 0x9, {0x7}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x0, 0x40, 0x4, 0x20, 0x81}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 2.196181459s ago: executing program 3 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x18a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[{}, {0x0, 0x0, 0x0, 0x3d46}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.02656417s ago: executing program 0 (id=626): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="1f0e0000090000003c0012800c0001006d6163766c616e002c0002800a000400aaaaaaaaaabb00001c0005"], 0x5c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1867, &(0x7f00000003c0)={0x0, 0xca8a}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r8 = socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0), 0x0, 0x12000}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x40) io_uring_enter(r5, 0x92, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0xfffffffd}, 0x48) unshare(0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe468e284b3997ead}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0), 0x4) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 2.026426608s ago: executing program 1 (id=627): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x1b}}, 0x0) 1.966543558s ago: executing program 3 (id=628): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x14}, {&(0x7f0000000fc0)=""/4096, 0x64}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x3}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.918779314s ago: executing program 1 (id=629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4}) 1.778458165s ago: executing program 3 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x12c}}, 0x0) 1.532546714s ago: executing program 3 (id=631): r0 = socket(0x11, 0x800000003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f, 0x8]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0xf, 0x0, [@local, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x7ae00105) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d80)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffff36, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) 554.101849ms ago: executing program 4 (id=632): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) lstat(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000001c0)={0x0, 0x0}) 534.484067ms ago: executing program 1 (id=644): r0 = socket(0x2, 0x6, 0x0) connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000000025030000002a0100"], 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) openat$cgroup_ro(r11, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 533.940914ms ago: executing program 0 (id=633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000cc0000ddff2000128008000100677265001400028006000e"], 0x40}}, 0x0) 426.011992ms ago: executing program 0 (id=636): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedreceive(r1, &(0x7f0000000780)=""/117, 0x75, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000840)=""/29, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 3 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.741765][ T5906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.813765][ T5906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.880295][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 103.881102][ T5906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.903619][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.928675][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.953036][ T8] usb 2-1: Product: syz [ 103.965257][ T8] usb 2-1: Manufacturer: syz [ 103.976410][ T8] usb 2-1: SerialNumber: syz [ 103.986343][ T5231] Bluetooth: hci3: command tx timeout [ 104.001912][ T8] usb 2-1: config 0 descriptor?? [ 104.178607][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.275137][ T5278] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.300480][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.341503][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.348760][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.368167][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.380360][ T6050] __nla_validate_parse: 1 callbacks suppressed [ 104.380376][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 104.406106][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 104.431516][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.438664][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.556069][ T5278] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 104.578204][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.616657][ T5278] usb 1-1: Product: syz [ 104.621007][ T5278] usb 1-1: Manufacturer: syz [ 104.662814][ T5278] usb 1-1: SerialNumber: syz [ 104.684491][ T5278] usb 1-1: config 0 descriptor?? [ 104.739117][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.749652][ T5278] asix 1-1:0.0: probe with driver asix failed with error -22 [ 104.813089][ T6061] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.178'. [ 104.849507][ T5906] veth0_vlan: entered promiscuous mode [ 104.889146][ T5906] veth1_vlan: entered promiscuous mode [ 104.987557][ T5906] veth0_macvtap: entered promiscuous mode [ 104.995015][ T5279] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.011823][ T5906] veth1_macvtap: entered promiscuous mode [ 105.037078][ T5278] usb 1-1: USB disconnect, device number 6 [ 105.071906][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.095929][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.114249][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.145014][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.175654][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.191615][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.204169][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.215066][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.218864][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 105.232040][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.261160][ T5279] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 105.276204][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.279309][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 105.304140][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.314307][ T5279] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 105.337104][ T5279] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 105.352500][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.371447][ T5279] usb 5-1: Product: syz [ 105.380436][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.389608][ T5279] usb 5-1: Manufacturer: syz [ 105.402473][ T5279] usb 5-1: SerialNumber: syz [ 105.417377][ T5279] usb 5-1: config 0 descriptor?? [ 105.421871][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.431792][ T5279] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 105.439957][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.468102][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.484690][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.495403][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.507819][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.530768][ T5906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.550280][ T5906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.559363][ T5906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.595142][ T5906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.697406][ T5279] scsi host1: usb-storage 5-1:0.0 [ 105.734036][ T5279] usb 5-1: USB disconnect, device number 6 [ 105.912850][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.945811][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.023430][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.055221][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.066318][ T5281] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.073896][ T5231] Bluetooth: hci3: command tx timeout [ 106.265144][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 106.283412][ T5281] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.318906][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.358767][ T6104] netlink: 96 bytes leftover after parsing attributes in process `syz.0.185'. [ 106.372927][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.389105][ T5281] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.403910][ T5281] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.414551][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.623486][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.711144][ T5281] usb 3-1: GET_CAPABILITIES returned 0 [ 106.749811][ T5281] usbtmc 3-1:16.0: can't read capabilities [ 106.990178][ T6087] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 107.009489][ T5279] usb 3-1: USB disconnect, device number 5 [ 107.025333][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.227045][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 107.260581][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 107.305626][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.336121][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.377420][ T25] usb 4-1: config 0 descriptor?? [ 107.480529][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.504200][ T8] usb 2-1: USB disconnect, device number 5 [ 107.608381][ T25] ath6kl: Failed to submit usb control message: -71 [ 107.635030][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 107.635656][ T5278] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.655085][ T25] ath6kl: Unable to send get target info: -71 [ 107.695106][ T25] ath6kl: Failed to init ath6kl core: -71 [ 107.739919][ T25] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 107.784872][ T25] usb 4-1: USB disconnect, device number 4 [ 107.864998][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 107.877834][ T5278] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 107.888694][ T5278] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 107.912626][ T5278] usb 5-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 107.960564][ T5278] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 101 [ 107.988856][ T5278] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 108.011476][ T5278] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 108.036399][ T5278] usb 5-1: Product: syz [ 108.040638][ T5278] usb 5-1: Manufacturer: syz [ 108.069688][ T5278] usb 5-1: config 0 descriptor?? [ 108.308609][ T6172] capability: warning: `syz.2.200' uses 32-bit capabilities (legacy support in use) [ 108.385703][ T5278] usb 5-1: USB disconnect, device number 7 [ 108.750247][ T5231] Bluetooth: hci2: Malformed Event: 0x02 [ 109.092268][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'. [ 109.503317][ T6205] vlan2: entered promiscuous mode [ 109.520186][ T6205] vlan2: entered allmulticast mode [ 109.608867][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 109.723475][ T5281] IPVS: starting estimator thread 0... [ 109.773814][ T6217] Zero length message leads to an empty skb [ 109.835438][ T6219] IPVS: using max 17 ests per chain, 40800 per kthread [ 110.063441][ T6231] input: syz0 as /devices/virtual/input/input9 [ 110.186609][ T6217] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 110.208538][ T6233] team0: Port device macvlan1 added [ 110.530554][ T6244] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 110.538797][ T6244] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.225'. [ 110.655503][ T5278] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.735095][ T5232] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 110.798759][ T5231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 110.807443][ T5231] Bluetooth: hci3: Injecting HCI hardware error event [ 110.816008][ T5236] Bluetooth: hci3: hardware error 0x00 [ 110.880298][ T5278] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.907264][ T5278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.928063][ T5278] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.941719][ T5232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.958612][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.969426][ T5232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.976037][ T6257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 110.980307][ T5278] usb 5-1: SerialNumber: syz [ 110.992126][ T5232] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 111.006829][ T5232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 111.040750][ T5232] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.050296][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.058475][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 111.059148][ T5232] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.084245][ T5232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.096983][ T6258] netlink: 'syz.1.230': attribute type 25 has an invalid length. [ 111.097596][ T6240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.121918][ T5232] hub 4-1:1.0: bad descriptor, ignoring hub [ 111.129570][ T5232] hub 4-1:1.0: probe with driver hub failed with error -5 [ 111.142769][ T5232] cdc_wdm 4-1:1.0: skipping garbage [ 111.149166][ T6258] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.158207][ T6258] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.167013][ T6258] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.177537][ T6258] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.196583][ T5232] cdc_wdm 4-1:1.0: skipping garbage [ 111.206500][ T5232] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 111.288199][ T5278] usb 5-1: 0:2 : does not exist [ 111.295437][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 111.309169][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.330266][ T5278] usb 5-1: unit 5 not found! [ 111.340717][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.361605][ T5278] usb 5-1: USB disconnect, device number 8 [ 111.370381][ T8] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 111.386514][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.404428][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.407514][ T8] usb 1-1: config 0 descriptor?? [ 111.465740][ T5281] usb 4-1: USB disconnect, device number 5 [ 111.585422][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.765751][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 111.772495][ T25] usb 3-1: config 1 has an invalid interface number: 8 but max is 2 [ 111.784975][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.805007][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.824287][ T25] usb 3-1: config 1 has no interface number 0 [ 111.836690][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.850896][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.874788][ T25] usb 3-1: Product: syz [ 111.880426][ T25] usb 3-1: Manufacturer: syz [ 111.882647][ T8] smartjoyplus 0003:6666:8804.0004: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.0-1/input0 [ 111.899794][ T25] usb 3-1: SerialNumber: syz [ 111.920428][ T6262] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 111.921897][ T8] smartjoyplus 0003:6666:8804.0004: Force feedback for SmartJoy PLUS PS2/USB adapter [ 111.953715][ T6262] netlink: 67 bytes leftover after parsing attributes in process `syz.1.232'. [ 111.979296][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 112.055257][ T5232] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 112.163827][ T5231] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 112.163996][ T5231] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 112.173739][ T5231] Bluetooth: hci2: Malformed LE Event: 0x02 [ 112.196362][ T25] usb 3-1: cannot find UAC_HEADER [ 112.238473][ T25] snd-usb-audio 3-1:1.8: probe with driver snd-usb-audio failed with error -22 [ 112.255070][ T25] usb 3-1: USB disconnect, device number 6 [ 112.261865][ T5232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 112.272384][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.298508][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.340860][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 112.341679][ T5279] usb 1-1: USB disconnect, device number 7 [ 112.386139][ T5232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 112.393604][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.452721][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 112.481537][ T5232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 112.506254][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.524087][ T5232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 112.539747][ T5232] usb 4-1: string descriptor 0 read error: -22 [ 112.548297][ T5232] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.562973][ T5232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.595911][ T5232] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.622554][ T6281] netlink: 'syz.4.241': attribute type 29 has an invalid length. [ 112.658724][ T6281] netlink: 'syz.4.241': attribute type 29 has an invalid length. [ 112.695369][ T6281] netlink: 'syz.4.241': attribute type 29 has an invalid length. [ 112.865277][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 113.226066][ T6299] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.249'. [ 113.285673][ T6299] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 113.394557][ T6303] PM: Enabling pm_trace changes system date and time during resume. [ 113.394557][ T6303] PM: Correct system time has to be restored manually after resume. [ 113.719500][ T29] audit: type=1326 audit(1723419209.407:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.757854][ T29] audit: type=1326 audit(1723419209.407:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.787426][ T29] audit: type=1326 audit(1723419209.407:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.818434][ T29] audit: type=1326 audit(1723419209.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.858695][ T29] audit: type=1326 audit(1723419209.407:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.887643][ T29] audit: type=1326 audit(1723419209.407:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.915325][ T29] audit: type=1326 audit(1723419209.407:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.956900][ T29] audit: type=1326 audit(1723419209.407:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 113.990759][ T29] audit: type=1326 audit(1723419209.407:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 114.075067][ T5281] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.155256][ T6337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.263'. [ 114.275417][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 114.294277][ T5281] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 114.331570][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.354967][ T5281] usb 2-1: Product: syz [ 114.365031][ T5281] usb 2-1: Manufacturer: syz [ 114.369676][ T5281] usb 2-1: SerialNumber: syz [ 114.386109][ T5281] usb 2-1: config 0 descriptor?? [ 114.394382][ T5281] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 114.420071][ T6346] ALSA: mixer_oss: invalid OSS volume '' [ 114.725730][ T6349] binder: 6347:6349 ioctl c0cc5640 20000400 returned -22 [ 115.010029][ T5281] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 115.036175][ T5281] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 115.055386][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 115.065771][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 115.072860][ T5281] usb 2-1: USB disconnect, device number 6 [ 115.298964][ T6372] tun0: tun_chr_ioctl cmd 1074025677 [ 115.305555][ T6372] tun0: linktype set to 823 [ 115.430940][ T5281] usb 4-1: USB disconnect, device number 6 [ 115.641540][ T6380] team0: entered promiscuous mode [ 115.655050][ T6380] team_slave_0: entered promiscuous mode [ 115.661082][ T6380] team_slave_1: entered promiscuous mode [ 115.686596][ T6380] dummy0: entered promiscuous mode [ 115.795415][ T5678] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 115.936179][ T6385] syz.4.281 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.998284][ T5678] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 116.017674][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.048043][ T5678] usb 3-1: config 0 descriptor?? [ 116.060652][ T5678] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 116.077995][ T5678] dw2102: su3000_power_ctrl: 1, initialized 0 [ 116.117691][ T5678] dvb-usb: bulk message failed: -22 (2/0) [ 116.179079][ T5678] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-22) [ 116.363387][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.392983][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.512309][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'. [ 116.530861][ T6407] bridge0: port 3(vlan2) entered blocking state [ 116.542687][ T6407] bridge0: port 3(vlan2) entered disabled state [ 116.548694][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.562781][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.575571][ T6407] vlan2: entered allmulticast mode [ 116.602352][ T6407] vlan2: entered promiscuous mode [ 116.999638][ T5281] usb 3-1: USB disconnect, device number 7 [ 117.193338][ T5232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.406907][ T5232] usb 5-1: config 0 has no interfaces? [ 117.412459][ T5232] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 117.426314][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.442234][ T5232] usb 5-1: config 0 descriptor?? [ 117.718095][ T8] usb 5-1: USB disconnect, device number 9 [ 117.959066][ T2555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.000579][ T2555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.267662][ T2555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.301505][ T2555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.508746][ T2555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.550836][ T2555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.702473][ T6447] netlink: 'syz.2.303': attribute type 29 has an invalid length. [ 118.714856][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.718194][ T4619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.725565][ T6448] netlink: 'syz.2.303': attribute type 29 has an invalid length. [ 118.733443][ T4619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.738208][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.745738][ T4619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.762934][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.764081][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.771826][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.784712][ T4619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.786581][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.805220][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.814031][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.848898][ T5678] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.971147][ T2555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.027183][ T2555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.157413][ T5678] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.205842][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.206100][ T6455] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 119.259611][ T5678] usb 5-1: config 0 descriptor?? [ 119.306561][ T5678] cp210x 5-1:0.0: cp210x converter detected [ 119.535257][ T5678] usb 5-1: cp210x converter now attached to ttyUSB0 [ 119.770957][ T2555] bridge_slave_1: left allmulticast mode [ 119.790010][ T2555] bridge_slave_1: left promiscuous mode [ 119.820945][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.831264][ T5279] usb 5-1: USB disconnect, device number 10 [ 119.849658][ T5279] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.870472][ T2555] bridge_slave_0: left allmulticast mode [ 119.881463][ T5279] cp210x 5-1:0.0: device disconnected [ 119.887241][ T2555] bridge_slave_0: left promiscuous mode [ 119.893027][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.048627][ T5278] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.248142][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 120.257808][ T5278] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.267783][ T5278] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.278427][ T5278] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 120.290275][ T5278] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.303456][ T5278] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.312921][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.470281][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.485189][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.501228][ T2555] bond0 (unregistering): Released all slaves [ 120.526342][ T5278] usb 4-1: GET_CAPABILITIES returned 0 [ 120.531889][ T5278] usbtmc 4-1:16.0: can't read capabilities [ 120.798867][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 120.871912][ T5236] Bluetooth: hci0: command tx timeout [ 120.877870][ T5229] Bluetooth: hci1: command tx timeout [ 120.915316][ T5278] usb 4-1: USB disconnect, device number 7 [ 120.924310][ T6499] netlink: 'syz.2.320': attribute type 33 has an invalid length. [ 121.116845][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 121.333833][ T2555] team0: left promiscuous mode [ 121.355631][ T2555] team_slave_0: left promiscuous mode [ 121.361695][ T2555] team_slave_1: left promiscuous mode [ 121.380813][ T2555] dummy0: left promiscuous mode [ 121.423934][ T2555] hsr_slave_0: left promiscuous mode [ 121.461801][ T2555] hsr_slave_1: left promiscuous mode [ 121.496755][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.531862][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.559622][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.572799][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.617199][ T2555] veth1_macvtap: left promiscuous mode [ 121.623730][ T2555] veth0_macvtap: left promiscuous mode [ 121.636304][ T2555] veth1_vlan: left promiscuous mode [ 121.647527][ T2555] veth0_vlan: left promiscuous mode [ 122.267065][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 122.311830][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 122.762434][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.806271][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.825963][ T6453] bridge_slave_0: entered allmulticast mode [ 122.840254][ T6453] bridge_slave_0: entered promiscuous mode [ 122.940162][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.950308][ T5236] Bluetooth: hci0: command tx timeout [ 122.955896][ T5229] Bluetooth: hci1: command tx timeout [ 122.957306][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.969991][ T6453] bridge_slave_1: entered allmulticast mode [ 122.982905][ T6453] bridge_slave_1: entered promiscuous mode [ 123.094191][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.257166][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.264335][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.305426][ T6452] bridge_slave_0: entered allmulticast mode [ 123.312860][ T6452] bridge_slave_0: entered promiscuous mode [ 123.340386][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.403476][ T6549] can: request_module (can-proto-0) failed. [ 123.516815][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.537734][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.558557][ T6452] bridge_slave_1: entered allmulticast mode [ 123.587851][ T6452] bridge_slave_1: entered promiscuous mode [ 123.748049][ T6453] team0: Port device team_slave_0 added [ 123.806707][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.836185][ T6453] team0: Port device team_slave_1 added [ 123.844510][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.078063][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.102066][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.128056][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.181224][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.249648][ T6452] team0: Port device team_slave_0 added [ 124.280319][ T6452] team0: Port device team_slave_1 added [ 124.407572][ T2555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.440694][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.455003][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.480968][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.524952][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.645321][ T5278] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.701826][ T2555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.790546][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.828772][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.880175][ T5278] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.889323][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.909864][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.922433][ T6453] hsr_slave_0: entered promiscuous mode [ 124.927978][ T5278] usb 3-1: config 0 descriptor?? [ 124.937930][ T5278] cp210x 3-1:0.0: cp210x converter detected [ 124.944356][ T6453] hsr_slave_1: entered promiscuous mode [ 124.951098][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.958969][ T6453] Cannot create hsr debugfs directory [ 124.978890][ T2555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.994682][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.001834][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.027766][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.034415][ T5236] Bluetooth: hci0: command tx timeout [ 125.039965][ T5236] Bluetooth: hci1: command tx timeout [ 125.058734][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.241166][ T2555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.324476][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 125.340786][ T6606] gre1: entered allmulticast mode [ 125.386127][ T29] audit: type=1326 audit(1723419221.067:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.329" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 125.426459][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.534268][ T6452] hsr_slave_0: entered promiscuous mode [ 125.544532][ T6452] hsr_slave_1: entered promiscuous mode [ 125.551282][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.565047][ T6452] Cannot create hsr debugfs directory [ 125.643055][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.693208][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.738269][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.760733][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.788137][ T6600] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.814099][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.889309][ T6625] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 126.042096][ T6623] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 126.211020][ T25] usb 5-1: USB disconnect, device number 11 [ 126.363878][ T2555] bridge_slave_1: left allmulticast mode [ 126.392974][ T2555] bridge_slave_1: left promiscuous mode [ 126.405368][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.421665][ T2555] bridge_slave_0: left allmulticast mode [ 126.438221][ T2555] bridge_slave_0: left promiscuous mode [ 126.452224][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.928271][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.941884][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.956849][ T2555] bond0 (unregistering): Released all slaves [ 127.107696][ T5236] Bluetooth: hci1: command tx timeout [ 127.107715][ T5229] Bluetooth: hci0: command tx timeout [ 127.583194][ T5278] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 127.604358][ T5278] cp210x 3-1:0.0: querying part number failed [ 127.635339][ T5278] usb 3-1: cp210x converter now attached to ttyUSB0 [ 127.679805][ T5278] usb 3-1: USB disconnect, device number 8 [ 127.719018][ T5278] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.740171][ T5278] cp210x 3-1:0.0: device disconnected [ 127.757916][ T2555] hsr_slave_0: left promiscuous mode [ 127.781758][ T2555] hsr_slave_1: left promiscuous mode [ 127.812001][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.825316][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.851420][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.866194][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.940645][ T2555] veth1_macvtap: left promiscuous mode [ 127.955424][ T2555] veth0_macvtap: left promiscuous mode [ 127.961133][ T2555] veth1_vlan: left promiscuous mode [ 127.996164][ T2555] veth0_vlan: left promiscuous mode [ 128.473383][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 128.563153][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 128.585422][ T29] audit: type=1326 audit(1723419224.267:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 129.341689][ T6453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.418548][ T6453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.491107][ T6453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.609963][ T6453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.837835][ T6674] sctp: [Deprecated]: syz.4.355 (pid 6674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.837835][ T6674] Use struct sctp_sack_info instead [ 130.017123][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.115041][ T5278] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.124851][ T6688] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 130.136075][ T6688] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 130.188560][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.301013][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.308211][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.350467][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.372654][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 130.382988][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.390881][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.410028][ T5278] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 130.451200][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.463152][ T6452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.472580][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.489996][ T6677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.508236][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.556530][ T6452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.609791][ T6452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.677137][ T6452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.877999][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.951099][ T6708] ======================================================= [ 130.951099][ T6708] WARNING: The mand mount option has been deprecated and [ 130.951099][ T6708] and is ignored by this kernel. Remove the mand [ 130.951099][ T6708] option from the mount to silence this warning. [ 130.951099][ T6708] ======================================================= [ 131.031801][ T6711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.193114][ T5279] usb 4-1: USB disconnect, device number 8 [ 131.233566][ T6453] veth0_vlan: entered promiscuous mode [ 131.286020][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.308888][ T6453] veth1_vlan: entered promiscuous mode [ 131.329301][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.353638][ T2566] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.360784][ T2566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.383878][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.391034][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.493260][ T6453] veth0_macvtap: entered promiscuous mode [ 131.535807][ T6453] veth1_macvtap: entered promiscuous mode [ 131.624525][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.655707][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.671075][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.682351][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.697457][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.715182][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.727380][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.741047][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.796935][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.813720][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.841692][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.874981][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.892678][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.911770][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.923915][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.977555][ T6453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.009592][ T6453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.034190][ T6453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.054696][ T6453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299364][ T6452] veth0_vlan: entered promiscuous mode [ 132.378581][ T6452] veth1_vlan: entered promiscuous mode [ 132.414314][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.439617][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.519851][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.549789][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.596122][ T6452] veth0_macvtap: entered promiscuous mode [ 132.647912][ T6452] veth1_macvtap: entered promiscuous mode [ 132.740451][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.750813][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.761038][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.772767][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.791960][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.800112][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.937347][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.965881][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.012033][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.043995][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.073478][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.096286][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.127071][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.142984][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.176954][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.189453][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205032][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.214423][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.283340][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.320731][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.361471][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.385036][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.405813][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.425108][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.452993][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.486650][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.539931][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 133.565137][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 133.763066][ T1063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.840215][ T6452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.885033][ T6452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.922343][ T6452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.946080][ T6452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.105778][ T1063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.263640][ T1063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.290845][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.300889][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.320915][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.332653][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.362398][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.372743][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.457577][ T1063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.865823][ T5229] Bluetooth: hci4: command tx timeout [ 135.123931][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.143552][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.255826][ T1063] vlan2: left allmulticast mode [ 135.260803][ T1063] vlan2: left promiscuous mode [ 135.291362][ T1063] bridge0: port 3(vlan2) entered disabled state [ 135.314528][ T1063] bridge_slave_1: left allmulticast mode [ 135.356559][ T1063] bridge_slave_1: left promiscuous mode [ 135.362435][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.395914][ T1063] bridge_slave_0: left allmulticast mode [ 135.416481][ T1063] bridge_slave_0: left promiscuous mode [ 135.436333][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.113412][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.132571][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.151677][ T1063] bond0 (unregistering): Released all slaves [ 136.177946][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 136.194102][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.202262][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.264741][ T6837] team0: Port device team_slave_1 removed [ 136.283521][ T6837] batman_adv: batadv0: Adding interface: team_slave_1 [ 136.299362][ T6837] batman_adv: batadv0: The MTU of interface team_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.330024][ T6837] batman_adv: batadv0: Not using interface team_slave_1 (retrying later): interface not active [ 136.465999][ T5229] Bluetooth: hci3: command tx timeout [ 136.762683][ T6881] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.400'. [ 136.906715][ T6881] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.400'. [ 136.945204][ T5229] Bluetooth: hci4: command tx timeout [ 137.306319][ T1063] hsr_slave_0: left promiscuous mode [ 137.312384][ T1063] hsr_slave_1: left promiscuous mode [ 137.330288][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.355419][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.365093][ T29] audit: type=1326 audit(1723419233.047:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="syz.0.405" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf745d579 code=0x0 [ 137.404054][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.414279][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.457259][ T1063] veth1_macvtap: left promiscuous mode [ 137.464390][ T1063] veth0_macvtap: left promiscuous mode [ 137.474860][ T1063] veth1_vlan: left promiscuous mode [ 137.489249][ T1063] veth0_vlan: left promiscuous mode [ 137.774555][ T1063] team0 (unregistering): Port device macvlan1 removed [ 138.029618][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 138.069033][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 138.479821][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.489011][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.498781][ T6749] bridge_slave_0: entered allmulticast mode [ 138.512036][ T6749] bridge_slave_0: entered promiscuous mode [ 138.541228][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 138.548268][ T5229] Bluetooth: hci3: command tx timeout [ 138.635114][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.642563][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.652725][ T6749] bridge_slave_1: entered allmulticast mode [ 138.660557][ T6749] bridge_slave_1: entered promiscuous mode [ 138.799438][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.850168][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.946597][ T6930] trusted_key: syz.1.410 sent an empty control message without MSG_MORE. [ 138.967589][ T6925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.026124][ T5229] Bluetooth: hci4: command tx timeout [ 139.299051][ T6749] team0: Port device team_slave_0 added [ 139.389610][ T6749] team0: Port device team_slave_1 added [ 139.633844][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 139.656036][ T6951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.416'. [ 139.717470][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.724710][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.745556][ T6794] bridge_slave_0: entered allmulticast mode [ 139.762889][ T6794] bridge_slave_0: entered promiscuous mode [ 139.782187][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.790269][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.839316][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.855322][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.882131][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.889506][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.896910][ T6794] bridge_slave_1: entered allmulticast mode [ 139.903768][ T6794] bridge_slave_1: entered promiscuous mode [ 139.928214][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.937860][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.964630][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.047883][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 140.058132][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 140.075679][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 140.086164][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 134, changing to 11 [ 140.097305][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59360, setting to 1024 [ 140.116679][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.169087][ T8] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 140.190159][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.200190][ T8] usb 1-1: Product: syz [ 140.205323][ T8] usb 1-1: Manufacturer: syz [ 140.209981][ T8] usb 1-1: SerialNumber: syz [ 140.244010][ T6955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.254247][ T6749] hsr_slave_0: entered promiscuous mode [ 140.277788][ T8] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 140.292186][ T6749] hsr_slave_1: entered promiscuous mode [ 140.322022][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.530403][ T6794] team0: Port device team_slave_0 added [ 140.563598][ T6794] team0: Port device team_slave_1 added [ 140.606306][ T5277] usb 1-1: USB disconnect, device number 8 [ 140.625009][ T5229] Bluetooth: hci3: command tx timeout [ 140.782091][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.797889][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.823869][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.854363][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.888883][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.903129][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.929090][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.976179][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.022877][ T6977] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.105398][ T5229] Bluetooth: hci4: command tx timeout [ 141.294090][ T6794] hsr_slave_0: entered promiscuous mode [ 141.313149][ T6794] hsr_slave_1: entered promiscuous mode [ 141.330557][ T6794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.350681][ T6794] Cannot create hsr debugfs directory [ 141.406635][ T29] audit: type=1326 audit(1723419237.087:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.429093][ T6986] syzkaller0: entered allmulticast mode [ 141.475221][ T29] audit: type=1326 audit(1723419237.087:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.499834][ T29] audit: type=1326 audit(1723419237.087:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.550622][ T29] audit: type=1326 audit(1723419237.087:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.575115][ T29] audit: type=1326 audit(1723419237.087:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.599684][ T29] audit: type=1326 audit(1723419237.087:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.602330][ T6749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.622125][ T29] audit: type=1326 audit(1723419237.097:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.656642][ T29] audit: type=1326 audit(1723419237.097:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.678374][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.693801][ T29] audit: type=1326 audit(1723419237.097:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.1.423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 141.793222][ T6749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.805065][ T5232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.954196][ T6749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.997781][ T5232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.040007][ T6997] kvm: pic: single mode not supported [ 142.041545][ T6997] kvm: pic: level sensitive irq not supported [ 142.043654][ T5232] usb 1-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 142.096528][ T5232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.125676][ T5232] usb 1-1: config 0 descriptor?? [ 142.139346][ T5232] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.159516][ T6749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.406851][ T5279] usb 1-1: USB disconnect, device number 9 [ 142.566763][ T6749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.584813][ T6749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.596801][ T6749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.626971][ T6749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.706545][ T5229] Bluetooth: hci3: command tx timeout [ 142.734487][ T7023] PKCS8: Unsupported PKCS#8 version [ 142.792087][ T7023] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 142.824500][ T7025] binder: 7022:7025 ioctl c0306201 20000040 returned -14 [ 142.824815][ T7023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.047379][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.098041][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.169032][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.176260][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.211833][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.219054][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.248451][ T6794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.307469][ T6794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.361296][ T6794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.404559][ T6794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.578037][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.771088][ T6749] veth0_vlan: entered promiscuous mode [ 143.778568][ T7048] process 'syz.1.437' launched '/dev/fd/3' with NULL argv: empty string added [ 143.794328][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.844229][ T6749] veth1_vlan: entered promiscuous mode [ 143.911250][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.980347][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.987541][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.031454][ T7052] fuse: Invalid rootmode [ 144.034829][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.043025][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.092341][ T6749] veth0_macvtap: entered promiscuous mode [ 144.176476][ T6749] veth1_macvtap: entered promiscuous mode [ 144.274101][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.301421][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.320812][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.354032][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.375417][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.393566][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.438889][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.479193][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.513511][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.559447][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.583025][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.609407][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.646404][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.684989][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.711376][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.757669][ T6749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.788226][ T6749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.823505][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.934535][ T6749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.972299][ T6749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.992591][ T6749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.003723][ T6749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.164571][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.307948][ T2555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.343945][ T2555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.463243][ T6794] veth0_vlan: entered promiscuous mode [ 145.483805][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.509626][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.528515][ T6794] veth1_vlan: entered promiscuous mode [ 145.657652][ T6794] veth0_macvtap: entered promiscuous mode [ 145.705550][ T6794] veth1_macvtap: entered promiscuous mode [ 145.774038][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.817515][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.845049][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.870379][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.880855][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.911474][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.929336][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.941247][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.958310][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.998154][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.019520][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.055919][ T7108] @: renamed from vlan0 (while UP) [ 146.075972][ T7118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.451'. [ 146.120400][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.165524][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.204069][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.216674][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.230216][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.240948][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.251197][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.262220][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.278210][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.302407][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.323911][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.354696][ T7118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.451'. [ 146.388248][ T6794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.415942][ T6794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.444517][ T6794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.459003][ T6794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.763123][ T2555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.813714][ T2555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.907635][ T2555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.942959][ T2555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.020925][ T7146] PKCS8: Unsupported PKCS#8 version [ 147.042782][ T7146] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 147.080278][ T7146] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.217052][ T7146] binder: 7145:7146 ioctl c0306201 20000040 returned -14 [ 147.761267][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.466'. [ 147.784534][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.466'. [ 147.799307][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 147.909042][ T5277] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.969443][ T7180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'. [ 148.055801][ T7184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.482'. [ 148.081448][ T7184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.482'. [ 148.110453][ T5277] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 148.127897][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.142078][ T5277] usb 2-1: Product: syz [ 148.147285][ T5277] usb 2-1: Manufacturer: syz [ 148.156409][ T5277] usb 2-1: SerialNumber: syz [ 148.171992][ T5277] usb 2-1: config 0 descriptor?? [ 148.190587][ T5277] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 148.305386][ T5281] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.473440][ T5232] usb 2-1: USB disconnect, device number 7 [ 148.526255][ T5277] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.603991][ T5281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.628665][ T5281] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 148.645109][ T5281] usb 3-1: can't read configurations, error -71 [ 148.715096][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 148.737091][ T5277] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.768506][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.810844][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 148.825267][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.849016][ T5277] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.869453][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.096113][ T5277] usb 5-1: GET_CAPABILITIES returned 0 [ 149.101694][ T5277] usbtmc 5-1:16.0: can't read capabilities [ 149.314392][ T5277] usb 5-1: USB disconnect, device number 12 [ 149.579471][ T7218] PKCS8: Unsupported PKCS#8 version [ 149.588685][ T7218] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 149.601781][ T7218] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.642837][ T7218] binder: 7217:7218 ioctl c0306201 20000040 returned -14 [ 149.795047][ T5278] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 150.018529][ T5278] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.046159][ T5278] usb 2-1: config 0 has no interface number 0 [ 150.072431][ T5278] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 150.089766][ T5278] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.100192][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.139442][ T5278] usb 2-1: config 0 descriptor?? [ 150.169074][ T5278] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 150.188878][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.322162][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.401696][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.528590][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.541019][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.569998][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.604240][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.628427][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.895499][ T80] bridge_slave_1: left allmulticast mode [ 150.925643][ T80] bridge_slave_1: left promiscuous mode [ 150.931541][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.934743][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.977340][ T80] bridge_slave_0: left allmulticast mode [ 151.025445][ T80] bridge_slave_0: left promiscuous mode [ 151.031299][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.083125][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.159607][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.191792][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.242609][ T25] usb 2-1: USB disconnect, device number 8 [ 151.275642][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.286765][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.295261][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.304813][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.313825][ T25] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 151.323332][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.331712][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.110933][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.123316][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.136127][ T80] bond0 (unregistering): Released all slaves [ 152.151562][ T7247] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 152.536857][ T7275] fuse: Invalid rootmode [ 152.556685][ T11] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 152.739605][ T7280] netlink: 'syz.4.503': attribute type 29 has an invalid length. [ 152.795786][ T7281] netlink: 'syz.4.503': attribute type 29 has an invalid length. [ 152.966299][ T80] hsr_slave_0: left promiscuous mode [ 153.009536][ T80] hsr_slave_1: left promiscuous mode [ 153.064482][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.082021][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.125045][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.157901][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.265768][ T80] veth1_macvtap: left promiscuous mode [ 153.283822][ T80] veth0_macvtap: left promiscuous mode [ 153.303157][ T80] veth1_vlan: left promiscuous mode [ 153.318329][ T80] veth0_vlan: left promiscuous mode [ 153.425397][ T4619] Bluetooth: hci3: command tx timeout [ 153.679036][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.688880][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.703426][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.716980][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.724748][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.734256][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.087789][ T80] team0 (unregistering): Port device team_slave_1 removed [ 154.139119][ T80] team0 (unregistering): Port device team_slave_0 removed [ 154.549284][ T7311] @: renamed from vlan0 (while UP) [ 155.150724][ T7252] chnl_net:caif_netlink_parms(): no params data found [ 155.464846][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.477281][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.486957][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.496616][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.505349][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.514510][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.522876][ T5236] Bluetooth: hci3: command tx timeout [ 155.654171][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.694163][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.703554][ T7252] bridge_slave_0: entered allmulticast mode [ 155.711722][ T7252] bridge_slave_0: entered promiscuous mode [ 155.723618][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 155.746194][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.754812][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.767231][ T7252] bridge_slave_1: entered allmulticast mode [ 155.774516][ T7252] bridge_slave_1: entered promiscuous mode [ 155.825668][ T4619] Bluetooth: hci1: command tx timeout [ 155.899457][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.915153][ T5232] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.946444][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.959019][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.011707][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.082929][ T7252] team0: Port device team_slave_0 added [ 156.096053][ T7252] team0: Port device team_slave_1 added [ 156.124048][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.134479][ T5232] usb 1-1: Using ep0 maxpacket: 8 [ 156.142478][ T5232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.164933][ T5232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.174745][ T5232] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.186152][ T5232] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.196818][ T5232] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.206586][ T5232] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 156.218497][ T5232] usb 1-1: language id specifier not provided by device, defaulting to English [ 156.223253][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.239850][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.248226][ T5232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.250370][ T7309] bridge_slave_0: entered allmulticast mode [ 156.262184][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.266200][ T7309] bridge_slave_0: entered promiscuous mode [ 156.279775][ T5232] usb 1-1: Product: syz [ 156.293868][ T5232] usb 1-1: SerialNumber: syz [ 156.315201][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.322304][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.355377][ T7252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.382088][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.403322][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.411086][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.419799][ T7309] bridge_slave_1: entered allmulticast mode [ 156.428203][ T7309] bridge_slave_1: entered promiscuous mode [ 156.455017][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.462587][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.496436][ T7252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.555484][ T5232] cdc_ncm 1-1:1.0: bind() failure [ 156.568878][ T5232] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 156.586303][ T5232] cdc_ncm 1-1:1.1: bind() failure [ 156.606950][ T5232] usb 1-1: USB disconnect, device number 10 [ 156.611637][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.820972][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.979033][ T7252] hsr_slave_0: entered promiscuous mode [ 156.994089][ T7252] hsr_slave_1: entered promiscuous mode [ 157.014352][ T7252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.034702][ T7252] Cannot create hsr debugfs directory [ 157.194283][ T7309] team0: Port device team_slave_0 added [ 157.221738][ T7309] team0: Port device team_slave_1 added [ 157.256822][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 157.580003][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.587319][ T4619] Bluetooth: hci2: command tx timeout [ 157.593418][ T4619] Bluetooth: hci3: command tx timeout [ 157.615061][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.642842][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.694298][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.716805][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.728492][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.732409][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.742733][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.755894][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.769570][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.782559][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.794043][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.823414][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.899242][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.905100][ T5229] Bluetooth: hci1: command tx timeout [ 157.963567][ T7309] hsr_slave_0: entered promiscuous mode [ 157.971328][ T7309] hsr_slave_1: entered promiscuous mode [ 157.977768][ T7309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.985552][ T7309] Cannot create hsr debugfs directory [ 157.991248][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.002240][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.010892][ T7349] bridge_slave_0: entered allmulticast mode [ 158.018757][ T7349] bridge_slave_0: entered promiscuous mode [ 158.028272][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.035478][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.042635][ T7349] bridge_slave_1: entered allmulticast mode [ 158.050152][ T7349] bridge_slave_1: entered promiscuous mode [ 158.092413][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.186919][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.199944][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.230038][ T80] bond0: (slave netdevsim0): Releasing backup interface [ 158.241541][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.323900][ T7349] team0: Port device team_slave_0 added [ 158.334169][ T7349] team0: Port device team_slave_1 added [ 158.420718][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.427813][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.453909][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.528551][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.537525][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.565099][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.013882][ T7349] hsr_slave_0: entered promiscuous mode [ 159.020398][ T7349] hsr_slave_1: entered promiscuous mode [ 159.027623][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.036148][ T7349] Cannot create hsr debugfs directory [ 159.063386][ T80] bridge_slave_1: left allmulticast mode [ 159.071529][ T80] bridge_slave_1: left promiscuous mode [ 159.078272][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.089519][ T80] bridge_slave_0: left allmulticast mode [ 159.097886][ T80] bridge_slave_0: left promiscuous mode [ 159.103693][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.118928][ T80] bridge_slave_1: left allmulticast mode [ 159.124791][ T80] bridge_slave_1: left promiscuous mode [ 159.131848][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.142797][ T80] bridge_slave_0: left allmulticast mode [ 159.148954][ T80] bridge_slave_0: left promiscuous mode [ 159.154717][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.665324][ T4619] Bluetooth: hci2: command tx timeout [ 159.670840][ T5229] Bluetooth: hci3: command tx timeout [ 159.825267][ T5229] Bluetooth: hci4: command tx timeout [ 159.909680][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.921217][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.931805][ T80] bond0 (unregistering): Released all slaves [ 159.995778][ T5229] Bluetooth: hci1: command tx timeout [ 160.033172][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.045777][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.057972][ T80] bond0 (unregistering): Released all slaves [ 160.336648][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 160.604565][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.612012][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.620309][ T7386] bridge_slave_0: entered allmulticast mode [ 160.634700][ T7386] bridge_slave_0: entered promiscuous mode [ 160.642857][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.650164][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.657568][ T7386] bridge_slave_1: entered allmulticast mode [ 160.664937][ T7386] bridge_slave_1: entered promiscuous mode [ 160.757250][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.771085][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.902447][ T7386] team0: Port device team_slave_0 added [ 160.927977][ T7386] team0: Port device team_slave_1 added [ 161.014849][ T80] hsr_slave_0: left promiscuous mode [ 161.032194][ T80] hsr_slave_1: left promiscuous mode [ 161.044829][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.059892][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.076080][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.083540][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.113654][ T80] hsr_slave_0: left promiscuous mode [ 161.130938][ T80] hsr_slave_1: left promiscuous mode [ 161.144427][ T80] batman_adv: batadv0: Removing interface: team_slave_1 [ 161.157790][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.173496][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.185248][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.192796][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.273536][ T80] veth1_macvtap: left promiscuous mode [ 161.279366][ T80] veth0_macvtap: left promiscuous mode [ 161.285043][ T80] veth1_vlan: left promiscuous mode [ 161.290325][ T80] veth0_vlan: left promiscuous mode [ 161.299162][ T80] veth1_macvtap: left promiscuous mode [ 161.304720][ T80] veth0_macvtap: left promiscuous mode [ 161.310411][ T80] veth1_vlan: left promiscuous mode [ 161.315872][ T80] veth0_vlan: left promiscuous mode [ 161.755715][ T5229] Bluetooth: hci2: command tx timeout [ 161.804014][ T80] team0 (unregistering): Port device team_slave_1 removed [ 161.849468][ T80] team0 (unregistering): Port device team_slave_0 removed [ 161.906448][ T5229] Bluetooth: hci4: command tx timeout [ 162.065038][ T5229] Bluetooth: hci1: command tx timeout [ 162.513814][ T80] team0 (unregistering): Port device team_slave_0 removed [ 162.896851][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.903834][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.944267][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.958347][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.965815][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.992720][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.004290][ T7309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.021462][ T7309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.077515][ T7309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.123475][ T7309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.211090][ T7386] hsr_slave_0: entered promiscuous mode [ 163.230149][ T7386] hsr_slave_1: entered promiscuous mode [ 163.248243][ T7386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.256302][ T7386] Cannot create hsr debugfs directory [ 163.330872][ T7252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.410788][ T7252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.479539][ T7252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.529903][ T7252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.826000][ T5229] Bluetooth: hci2: command tx timeout [ 163.862340][ T80] IPVS: stop unused estimator thread 0... [ 163.985616][ T5229] Bluetooth: hci4: command tx timeout [ 164.042248][ T7349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.056563][ T7349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.086531][ T7386] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.107601][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.128668][ T7349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.151281][ T7349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.190792][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.223369][ T7386] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.255944][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.289713][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.296911][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.342404][ T7386] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.372134][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.401643][ T2566] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.408811][ T2566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.444716][ T7386] bond0: (slave netdevsim0): Releasing backup interface [ 164.467951][ T7386] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.499272][ T2566] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.506454][ T2566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.614468][ T3022] bridge_slave_1: left allmulticast mode [ 164.636030][ T3022] bridge_slave_1: left promiscuous mode [ 164.641813][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.656982][ T3022] bridge_slave_0: left allmulticast mode [ 164.662756][ T3022] bridge_slave_0: left promiscuous mode [ 164.677734][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.130388][ T3022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.142758][ T3022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.154524][ T3022] bond0 (unregistering): Released all slaves [ 165.169561][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.176724][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.361962][ T7386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.374213][ T7386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.411320][ T7386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.421108][ T7386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.480398][ T7252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.552597][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.600215][ T3022] hsr_slave_0: left promiscuous mode [ 165.612811][ T3022] hsr_slave_1: left promiscuous mode [ 165.623004][ T3022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.640034][ T3022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.652109][ T3022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.673109][ T3022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.713146][ T3022] veth1_macvtap: left promiscuous mode [ 165.719376][ T3022] veth0_macvtap: left promiscuous mode [ 165.733266][ T3022] veth1_vlan: left promiscuous mode [ 165.738812][ T3022] veth0_vlan: left promiscuous mode [ 166.065216][ T5229] Bluetooth: hci4: command tx timeout [ 166.354107][ T3022] team0 (unregistering): Port device team_slave_1 removed [ 166.393143][ T3022] team0 (unregistering): Port device team_slave_0 removed [ 166.732145][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.816915][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.847612][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.890140][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.897329][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.957151][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.964292][ T2555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.110849][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.184673][ T7252] veth0_vlan: entered promiscuous mode [ 167.212281][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.231175][ T7309] veth0_vlan: entered promiscuous mode [ 167.277730][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.284958][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.301971][ T7252] veth1_vlan: entered promiscuous mode [ 167.338902][ T7309] veth1_vlan: entered promiscuous mode [ 167.394504][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.401722][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.441196][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.545942][ T7309] veth0_macvtap: entered promiscuous mode [ 167.562767][ T7252] veth0_macvtap: entered promiscuous mode [ 167.623415][ T7309] veth1_macvtap: entered promiscuous mode [ 167.679328][ T7349] veth0_vlan: entered promiscuous mode [ 167.696317][ T7252] veth1_macvtap: entered promiscuous mode [ 167.710731][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.723631][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.734747][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.759875][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.781154][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.798488][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.810232][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.821972][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.833027][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.844714][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.868200][ T7349] veth1_vlan: entered promiscuous mode [ 167.930765][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.944261][ T7309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.954403][ T7309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.964521][ T7309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.975097][ T7309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.994846][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.008059][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.024858][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.042938][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.053193][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.075560][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.094606][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.140133][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.160569][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.173453][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.190865][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.201255][ T7252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.215266][ T7252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.236096][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.288309][ T7252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.301334][ T7252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.314185][ T7252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.329524][ T7252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.376893][ T7349] veth0_macvtap: entered promiscuous mode [ 168.414183][ T7349] veth1_macvtap: entered promiscuous mode [ 168.450979][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.461723][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.473132][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.487848][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.498792][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.509470][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.519722][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.530399][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.542091][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.575307][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.583701][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.594580][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.600627][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.614191][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.625475][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.635475][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.647243][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.657334][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.668187][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.679671][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.692876][ T7349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.701766][ T7349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.711835][ T7349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.721227][ T7349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.774350][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.776864][ T7386] veth0_vlan: entered promiscuous mode [ 168.822098][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.899992][ T2566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.911692][ T7386] veth1_vlan: entered promiscuous mode [ 168.933923][ T2566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.092771][ T2555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.119589][ T2555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.150776][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.183613][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.209708][ T2555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.218390][ T7386] veth0_macvtap: entered promiscuous mode [ 169.245688][ T2555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.272399][ T7386] veth1_macvtap: entered promiscuous mode [ 169.337649][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.364479][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.417177][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.459099][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.489597][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.539692][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.559414][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.610580][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.635001][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.672324][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.690858][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.754227][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.776753][ T7559] PKCS8: Unsupported PKCS#8 version [ 169.783317][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.813435][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.840954][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.840980][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.840996][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.841008][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.841023][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.841037][ T7386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.841051][ T7386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.842870][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.863552][ T7559] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 169.930676][ T7561] binder: 7556:7561 ioctl c0306201 20000040 returned -14 [ 169.934234][ T7559] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 169.975145][ T7386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.975184][ T7386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.975212][ T7386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.975238][ T7386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.437296][ T2583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.466229][ T2583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.507197][ T2566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.517941][ T2566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.592725][ T7574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.075160][ T5279] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 171.156875][ T7599] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 171.186112][ T5281] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.250467][ T7599] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 171.278864][ T5279] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.299415][ T5279] usb 3-1: config 0 has no interface number 0 [ 171.319669][ T5279] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 171.375462][ T5279] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.392285][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.406056][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.433592][ T5279] usb 3-1: config 0 descriptor?? [ 171.438705][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.475170][ T5279] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 171.489883][ T5281] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 171.514684][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.540487][ T5281] usb 5-1: config 0 descriptor?? [ 171.741739][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.756885][ T5276] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.781389][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.812696][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.838296][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.985467][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 172.007182][ T5281] wacom 0003:056A:00D0.0005: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 172.016201][ T5276] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 172.031442][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.042859][ T5276] usb 2-1: Product: syz [ 172.050621][ T5281] wacom 0003:056A:00D0.0005: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 172.060250][ T5276] usb 2-1: Manufacturer: syz [ 172.071856][ T5276] usb 2-1: SerialNumber: syz [ 172.104432][ T5281] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0005/input/input11 [ 172.114179][ T5276] usb 2-1: config 0 descriptor?? [ 172.144829][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.201356][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.257081][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.307924][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.356321][ T5281] usb 5-1: USB disconnect, device number 13 [ 172.373494][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.394792][ T25] usb 3-1: USB disconnect, device number 11 [ 172.414717][ T25] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 172.464129][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.632150][ T5276] rtl8150 2-1:0.0: couldn't reset the device [ 172.638690][ T5276] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 172.643749][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 172.643763][ T29] audit: type=1326 audit(1723419268.327:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.3.543" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 172.651101][ T5276] usb 2-1: USB disconnect, device number 9 [ 172.715308][ T5678] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.906863][ T5678] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.926050][ T5678] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.937650][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.007673][ T5678] usb 1-1: config 0 descriptor?? [ 173.034648][ T5678] pwc: Askey VC010 type 2 USB webcam detected. [ 173.362030][ T7642] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 173.385077][ T7642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.551'. [ 173.486957][ T5678] pwc: recv_control_msg error -32 req 02 val 2b00 [ 173.771674][ T7655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.887408][ T7659] syzkaller0: entered allmulticast mode [ 173.911348][ T5678] pwc: recv_control_msg error -71 req 04 val 1000 [ 173.940571][ T5678] pwc: recv_control_msg error -71 req 04 val 1300 [ 173.952872][ T5678] pwc: recv_control_msg error -71 req 04 val 1400 [ 173.964860][ T5678] pwc: recv_control_msg error -71 req 02 val 2000 [ 173.997163][ T5678] pwc: recv_control_msg error -71 req 02 val 2100 [ 174.021880][ T5678] pwc: recv_control_msg error -71 req 04 val 1500 [ 174.028732][ T7661] netlink: 177 bytes leftover after parsing attributes in process `syz.1.561'. [ 174.029848][ T5678] pwc: recv_control_msg error -71 req 02 val 2500 [ 174.056252][ T5678] pwc: recv_control_msg error -71 req 02 val 2400 [ 174.073425][ T5678] pwc: recv_control_msg error -71 req 02 val 2600 [ 174.093683][ T5678] pwc: recv_control_msg error -71 req 02 val 2900 [ 174.103808][ T5678] pwc: recv_control_msg error -71 req 02 val 2800 [ 174.114330][ T5678] pwc: recv_control_msg error -71 req 04 val 1100 [ 174.125836][ T5678] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.175756][ T5678] pwc: Registered as video71. [ 174.205173][ T5678] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 174.257683][ T5678] usb 1-1: USB disconnect, device number 11 [ 174.295012][ T5278] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.509839][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.520961][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.540342][ T5278] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 174.558252][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.583770][ T5278] usb 4-1: config 0 descriptor?? [ 175.045845][ T5278] wacom 0003:056A:00D0.0006: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 175.069930][ T5278] wacom 0003:056A:00D0.0006: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 175.091191][ T5278] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0006/input/input15 [ 175.133880][ T7683] netlink: 'syz.1.568': attribute type 3 has an invalid length. [ 175.158285][ T7683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.568'. [ 175.299136][ T5278] usb 4-1: USB disconnect, device number 9 [ 175.782597][ T7703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.833393][ T7702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.386026][ T5278] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 176.464988][ T5678] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.495499][ T5276] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.565251][ T5229] Bluetooth: hci2: unexpected event 0x08 length: 8 > 4 [ 176.568424][ T5229] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 176.593686][ T5278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.639251][ T5278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.656776][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.659091][ T5278] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.685142][ T5678] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.693176][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.708202][ T5678] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.715489][ T5278] usb 1-1: SerialNumber: syz [ 176.725123][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.752370][ T5276] usb 4-1: Using ep0 maxpacket: 32 [ 176.755461][ T5678] usb 5-1: SerialNumber: syz [ 176.814771][ T5276] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 176.832050][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.875346][ T5276] usb 4-1: config 0 descriptor?? [ 176.883399][ T5276] gspca_main: sunplus-2.14.0 probing 041e:400b [ 177.035233][ T5278] usb 1-1: 0:2 : does not exist [ 177.090275][ T5678] usb 5-1: 0:2 : does not exist [ 177.096811][ T5278] usb 1-1: USB disconnect, device number 12 [ 177.152241][ T5678] usb 5-1: USB disconnect, device number 14 [ 177.174224][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.295723][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 177.358537][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.556589][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.579959][ T5276] gspca_sunplus: reg_r err -71 [ 177.583312][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.594664][ T5276] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 177.611560][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 177.614393][ T5276] usb 4-1: USB disconnect, device number 10 [ 177.620916][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.685790][ T25] usb 3-1: config 0 descriptor?? [ 177.981202][ T7745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.161989][ T25] wacom 0003:056A:00D0.0007: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 178.186976][ T25] wacom 0003:056A:00D0.0007: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 178.206610][ T25] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0007/input/input18 [ 178.431817][ T7759] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 178.437263][ T25] usb 3-1: USB disconnect, device number 12 [ 178.782082][ T7766] netlink: 'syz.3.599': attribute type 29 has an invalid length. [ 178.852695][ T7768] netlink: 'syz.3.599': attribute type 29 has an invalid length. [ 178.879280][ T7766] netlink: 'syz.3.599': attribute type 29 has an invalid length. [ 179.092972][ T29] audit: type=1326 audit(1723419274.777:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.602" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 179.275241][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.477226][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 179.488862][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.605'. [ 179.519141][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.538159][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.578687][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 179.604399][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.626064][ T25] usb 2-1: config 0 descriptor?? [ 179.643659][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 179.680815][ T5229] Bluetooth: hci4: unexpected event 0x08 length: 8 > 4 [ 179.691529][ T5229] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 180.114448][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.611'. [ 180.175297][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 180.181333][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.219246][ T25] usb 2-1: USB disconnect, device number 10 [ 180.451853][ T7814] netlink: 140 bytes leftover after parsing attributes in process `syz.0.614'. [ 180.572556][ T7814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.673144][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.722455][ T7821] input: syz0 as /devices/virtual/input/input21 [ 180.812784][ T7828] input: syz1 as /devices/virtual/input/input22 [ 180.869051][ T7830] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 180.977596][ T29] audit: type=1326 audit(1723419276.667:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.623" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 181.816035][ T7848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.925115][ T5678] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.005000][ T5276] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.007185][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 182.126737][ T5678] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 182.137436][ T5678] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 182.172002][ T5678] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 182.201973][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.211746][ T5276] usb 5-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 182.222026][ T5678] usb 3-1: Product: syz [ 182.222048][ T5678] usb 3-1: Manufacturer: syz [ 182.222062][ T5678] usb 3-1: SerialNumber: syz [ 182.235465][ T5678] usb 3-1: config 0 descriptor?? [ 182.249401][ T7843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.279702][ T7843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.287452][ T7864] netlink: 92 bytes leftover after parsing attributes in process `syz.3.630'. [ 182.296508][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.312018][ T7864] netlink: 92 bytes leftover after parsing attributes in process `syz.3.630'. [ 182.324030][ T5276] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.348182][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.356572][ T5276] usb 5-1: Product: syz [ 182.360822][ T5276] usb 5-1: Manufacturer: syz [ 182.381073][ T5276] usb 5-1: SerialNumber: syz [ 182.526581][ T7843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.533828][ T7843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.630058][ T5276] usb 5-1: 0:2 : does not exist [ 182.668317][ T5276] usb 5-1: USB disconnect, device number 15 [ 182.700870][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.735216][ T5279] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 182.934968][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 182.941619][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.953926][ T5279] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 182.966972][ T5279] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.973625][ T5279] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 182.984160][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.002492][ T5279] usb 4-1: config 0 descriptor?? [ 183.011178][ T5279] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 183.267813][ T7866] netlink: 92 bytes leftover after parsing attributes in process `syz.3.631'. [ 183.336762][ T5279] usb 4-1: USB disconnect, device number 11 [ 183.435360][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 183.461595][ T7873] netlink: 124 bytes leftover after parsing attributes in process `syz.1.644'. [ 183.601445][ T5678] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 183.707420][ T5678] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 183.757278][ T5678] usb 3-1: USB disconnect, device number 13 [ 183.775351][ T5678] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 183.870340][ T5678] ------------[ cut here ]------------ [ 183.876298][ T5678] ODEBUG: free active (active state 0) object: ffff8880279691a0 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xb90 [ 183.960297][ T5678] WARNING: CPU: 1 PID: 5678 at lib/debugobjects.c:518 debug_print_object+0x17a/0x1f0 [ 183.969882][ T5678] Modules linked in: [ 183.973789][ T5678] CPU: 1 UID: 0 PID: 5678 Comm: kworker/1:7 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 183.985148][ T5678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.995751][ T5678] Workqueue: usb_hub_wq hub_event [ 184.000782][ T5678] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 184.006745][ T5678] Code: e8 4b 7b 42 fd 4c 8b 0b 48 c7 c7 00 6e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b 5d 9d fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 bc bb 5f 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 184.026423][ T5678] RSP: 0018:ffffc900040bf258 EFLAGS: 00010282 [ 184.032476][ T5678] RAX: 142262995e7b6d00 RBX: ffffffff8c09fe40 RCX: 0000000000100000 [ 184.040601][ T5678] RDX: ffffc90013ead000 RSI: 0000000000035a00 RDI: 0000000000035a01 [ 184.048604][ T5678] RBP: ffffffff8c606f80 R08: ffffffff8155a2f2 R09: fffffbfff1cfa0e0 [ 184.056643][ T5678] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: 0000000000000000 [ 184.064623][ T5678] R13: ffffffff8c606e98 R14: dffffc0000000000 R15: ffff8880279691a0 [ 184.072675][ T5678] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 184.082045][ T5678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.089426][ T5678] CR2: 00000000f7fd55b8 CR3: 000000007d0aa000 CR4: 00000000003506f0 [ 184.097459][ T5678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.105461][ T5678] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 184.113417][ T5678] Call Trace: [ 184.116725][ T5678] [ 184.119638][ T5678] ? __warn+0x163/0x4e0 [ 184.123778][ T5678] ? debug_print_object+0x17a/0x1f0 [ 184.129001][ T5678] ? report_bug+0x2b3/0x500 [ 184.133492][ T5678] ? debug_print_object+0x17a/0x1f0 [ 184.138701][ T5678] ? handle_bug+0x3e/0x70 [ 184.143012][ T5678] ? exc_invalid_op+0x1a/0x50 [ 184.147774][ T5678] ? asm_exc_invalid_op+0x1a/0x20 [ 184.152789][ T5678] ? __warn_printk+0x292/0x360 [ 184.157565][ T5678] ? debug_print_object+0x17a/0x1f0 [ 184.162747][ T5678] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 184.168675][ T5678] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 184.174556][ T5678] debug_check_no_obj_freed+0x45b/0x580 [ 184.180835][ T5678] ? preempt_schedule_thunk+0x1a/0x30 [ 184.186569][ T5678] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 184.192664][ T5678] ? device_release+0x99/0x1c0 [ 184.197443][ T5678] kfree+0x10f/0x360 [ 184.201322][ T5678] ? __pfx_netdev_release+0x10/0x10 [ 184.206584][ T5678] device_release+0x99/0x1c0 [ 184.211184][ T5678] kobject_put+0x22f/0x480 [ 184.215647][ T5678] usb_unbind_interface+0x25e/0x940 [ 184.220849][ T5678] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 184.226705][ T5678] ? __pfx_usb_unbind_interface+0x10/0x10 [ 184.232424][ T5678] device_release_driver_internal+0x503/0x7c0 [ 184.238577][ T5678] bus_remove_device+0x34f/0x420 [ 184.243553][ T5678] device_del+0x57a/0x9b0 [ 184.247994][ T5678] ? kfree+0x149/0x360 [ 184.252076][ T5678] ? __pfx_device_del+0x10/0x10 [ 184.256994][ T5678] ? kobject_put+0x44a/0x480 [ 184.261605][ T5678] usb_disable_device+0x3bf/0x850 [ 184.266736][ T5678] usb_disconnect+0x340/0x950 [ 184.271432][ T5678] hub_event+0x1eb9/0x5150 [ 184.275936][ T5678] ? debug_object_deactivate+0x2d5/0x390 [ 184.281580][ T5678] ? __pfx_hub_event+0x10/0x10 [ 184.286900][ T5678] ? __pfx_lock_acquire+0x10/0x10 [ 184.291937][ T5678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.298287][ T5678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.304620][ T5678] ? process_scheduled_works+0x945/0x1830 [ 184.310440][ T5678] process_scheduled_works+0xa2c/0x1830 [ 184.316037][ T5678] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.322015][ T5678] ? assign_work+0x364/0x3d0 [ 184.326698][ T5678] worker_thread+0x86d/0xd40 [ 184.331295][ T5678] ? __kthread_parkme+0x169/0x1d0 [ 184.336341][ T5678] ? __pfx_worker_thread+0x10/0x10 [ 184.341446][ T5678] kthread+0x2f0/0x390 [ 184.345572][ T5678] ? __pfx_worker_thread+0x10/0x10 [ 184.350682][ T5678] ? __pfx_kthread+0x10/0x10 [ 184.355289][ T5678] ret_from_fork+0x4b/0x80 [ 184.359704][ T5678] ? __pfx_kthread+0x10/0x10 [ 184.364391][ T5678] ret_from_fork_asm+0x1a/0x30 [ 184.369219][ T5678] [ 184.372247][ T5678] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.379507][ T5678] CPU: 1 UID: 0 PID: 5678 Comm: kworker/1:7 Not tainted 6.11.0-rc2-syzkaller-00315-g7006fe2f7f78 #0 [ 184.390253][ T5678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.400293][ T5678] Workqueue: usb_hub_wq hub_event [ 184.405312][ T5678] Call Trace: [ 184.408604][ T5678] [ 184.411521][ T5678] dump_stack_lvl+0x241/0x360 [ 184.416193][ T5678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.421394][ T5678] ? __pfx__printk+0x10/0x10 [ 184.425988][ T5678] ? _printk+0xd5/0x120 [ 184.430152][ T5678] ? vscnprintf+0x5d/0x90 [ 184.434474][ T5678] panic+0x349/0x860 [ 184.438376][ T5678] ? __warn+0x172/0x4e0 [ 184.442515][ T5678] ? __pfx_panic+0x10/0x10 [ 184.446917][ T5678] ? show_trace_log_lvl+0x4e6/0x520 [ 184.452111][ T5678] ? ret_from_fork_asm+0x1a/0x30 [ 184.457040][ T5678] __warn+0x346/0x4e0 [ 184.461006][ T5678] ? debug_print_object+0x17a/0x1f0 [ 184.466273][ T5678] report_bug+0x2b3/0x500 [ 184.470588][ T5678] ? debug_print_object+0x17a/0x1f0 [ 184.475772][ T5678] handle_bug+0x3e/0x70 [ 184.479911][ T5678] exc_invalid_op+0x1a/0x50 [ 184.484395][ T5678] asm_exc_invalid_op+0x1a/0x20 [ 184.489240][ T5678] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 184.495047][ T5678] Code: e8 4b 7b 42 fd 4c 8b 0b 48 c7 c7 00 6e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b 5d 9d fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 bc bb 5f 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 184.514637][ T5678] RSP: 0018:ffffc900040bf258 EFLAGS: 00010282 [ 184.520687][ T5678] RAX: 142262995e7b6d00 RBX: ffffffff8c09fe40 RCX: 0000000000100000 [ 184.528641][ T5678] RDX: ffffc90013ead000 RSI: 0000000000035a00 RDI: 0000000000035a01 [ 184.536594][ T5678] RBP: ffffffff8c606f80 R08: ffffffff8155a2f2 R09: fffffbfff1cfa0e0 [ 184.544547][ T5678] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: 0000000000000000 [ 184.552498][ T5678] R13: ffffffff8c606e98 R14: dffffc0000000000 R15: ffff8880279691a0 [ 184.560458][ T5678] ? __warn_printk+0x292/0x360 [ 184.565221][ T5678] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 184.571102][ T5678] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 184.576987][ T5678] debug_check_no_obj_freed+0x45b/0x580 [ 184.582516][ T5678] ? preempt_schedule_thunk+0x1a/0x30 [ 184.587875][ T5678] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 184.593938][ T5678] ? device_release+0x99/0x1c0 [ 184.598688][ T5678] kfree+0x10f/0x360 [ 184.602565][ T5678] ? __pfx_netdev_release+0x10/0x10 [ 184.607748][ T5678] device_release+0x99/0x1c0 [ 184.612326][ T5678] kobject_put+0x22f/0x480 [ 184.616734][ T5678] usb_unbind_interface+0x25e/0x940 [ 184.621926][ T5678] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 184.627633][ T5678] ? __pfx_usb_unbind_interface+0x10/0x10 [ 184.633346][ T5678] device_release_driver_internal+0x503/0x7c0 [ 184.639413][ T5678] bus_remove_device+0x34f/0x420 [ 184.644342][ T5678] device_del+0x57a/0x9b0 [ 184.648657][ T5678] ? kfree+0x149/0x360 [ 184.652711][ T5678] ? __pfx_device_del+0x10/0x10 [ 184.657543][ T5678] ? kobject_put+0x44a/0x480 [ 184.662126][ T5678] usb_disable_device+0x3bf/0x850 [ 184.667138][ T5678] usb_disconnect+0x340/0x950 [ 184.671802][ T5678] hub_event+0x1eb9/0x5150 [ 184.676212][ T5678] ? debug_object_deactivate+0x2d5/0x390 [ 184.681839][ T5678] ? __pfx_hub_event+0x10/0x10 [ 184.686586][ T5678] ? __pfx_lock_acquire+0x10/0x10 [ 184.691608][ T5678] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.697609][ T5678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.703928][ T5678] ? process_scheduled_works+0x945/0x1830 [ 184.709630][ T5678] process_scheduled_works+0xa2c/0x1830 [ 184.715176][ T5678] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.721141][ T5678] ? assign_work+0x364/0x3d0 [ 184.725716][ T5678] worker_thread+0x86d/0xd40 [ 184.730297][ T5678] ? __kthread_parkme+0x169/0x1d0 [ 184.735307][ T5678] ? __pfx_worker_thread+0x10/0x10 [ 184.740400][ T5678] kthread+0x2f0/0x390 [ 184.744451][ T5678] ? __pfx_worker_thread+0x10/0x10 [ 184.749544][ T5678] ? __pfx_kthread+0x10/0x10 [ 184.754116][ T5678] ret_from_fork+0x4b/0x80 [ 184.758521][ T5678] ? __pfx_kthread+0x10/0x10 [ 184.763094][ T5678] ret_from_fork_asm+0x1a/0x30 [ 184.767849][ T5678] [ 184.771162][ T5678] Kernel Offset: disabled [ 184.775530][ T5678] Rebooting in 86400 seconds..