last executing test programs: 43.721298785s ago: executing program 3 (id=1390): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) pread64(r3, &(0x7f0000000700)=""/57, 0x39, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) 41.53146442s ago: executing program 2 (id=1395): syz_open_dev$radio(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b8, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) 39.25623973s ago: executing program 2 (id=1396): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x123400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x3}, 0x3, 0x1, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffffffffffe5d, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b18dcaab2579e716dc6c54fc0bb31ff1a92385f9a4b9721a027ca307528abf6cf5a01ca1ce1b73c8c222b17c8aa28ade974c290ddd0f9958fa97194b2140978f4313014965faf1f988a7fedd3d21da5773c8e1096fcc8c3a14f7565adcfd178d92c014fd096cf89c168755ffffb2e73e105a8f2b76fa29ed5929d04b8541022be3d51f5bfea34dc7f8ab500d283e841334215b2e53ed7b8fec5bd042bf41b4ca09e3564", 0x0, 0x237, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x50) 37.303121344s ago: executing program 2 (id=1402): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 35.178321727s ago: executing program 0 (id=1404): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)={0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00'}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x401) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 33.713667261s ago: executing program 0 (id=1405): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x51, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x6, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000000, 0x6e073, r4, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b0000001400000000000000100100"], 0x28}, 0x0) 31.033994797s ago: executing program 0 (id=1408): syz_open_dev$radio(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) 29.59694698s ago: executing program 0 (id=1409): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x17, @string={0x17, 0x3, "ac80bb8d298d974fcfa72e59a492d47342a6000ad2"}}, 0x0, 0x0}, 0x0) 27.267113732s ago: executing program 0 (id=1412): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x123400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x3}, 0x3, 0x1, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffffffffffe5d, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b18dcaab2579e716dc6c54fc0bb31ff1a92385f9a4b9721a027ca307528abf6cf5a01ca1ce1b73c8c222b17c8aa28ade974c290ddd0f9958fa97194b2140978f4313014965faf1f988a7fedd3d21da5773c8e1096fcc8c3a14f7565adcfd178d92c014fd096cf89c168755ffffb2e73e105a8f2b76fa29ed5929d04b8541022be3d51f5bfea34dc7f8ab500d283e841334215b2e53ed7b8fec5bd042bf41b4ca09e3564", 0x0, 0x237, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x50) 11.672491381s ago: executing program 1 (id=1423): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee780102030109023c0001100010000904130001ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "ac80bb8d298d974fcfa72e59a492d47342a6000a"}}, 0x0, 0x0}, 0x0) 9.793388234s ago: executing program 3 (id=1390): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) pread64(r3, &(0x7f0000000700)=""/57, 0x39, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) 9.716069727s ago: executing program 1 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x6}, 0x2) write(r3, &(0x7f00000000c0)="573fba99b9575d6ab66f89407adc70fef63fa58f0a54f0b089559264d8559a068ea90d2a55c86f67c9", 0x29) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) close(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x2000004) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xcc4a08a5071b3260) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) ioctl$int_in(r5, 0x0, &(0x7f0000003140)=0xffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200, 0x10, 0x100, 0x8, 0x1, 0x2, 0x0, 0x0, 0x180, 0xfffffffe}}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf8, 0xb, 0x7, '\x00', 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.771531241s ago: executing program 3 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x6}, 0x2) write(r3, &(0x7f00000000c0)="573fba99b9575d6ab66f89407adc70fef63fa58f0a54f0b089559264d8559a068ea90d2a55c86f67c9", 0x29) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0), 0x2) close(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x2000004) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xcc4a08a5071b3260) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$int_in(r5, 0x0, &(0x7f0000003140)=0xffffffff) write$FUSE_INIT(r7, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200, 0x10, 0x100, 0x8, 0x1, 0x2, 0x0, 0x0, 0x180, 0xfffffffe}}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf8, 0xb, 0x7, '\x00', 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.320596811s ago: executing program 1 (id=1426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.574663993s ago: executing program 3 (id=1427): r0 = socket$kcm(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x70, 0x7a, 0x5a, 0x20, 0xeb1a, 0xe303, 0x24c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x1, 0xa0, 0xdf, 0xdb, 0xfe, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x3ffd, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004088) 6.19141034s ago: executing program 2 (id=1402): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 5.240139792s ago: executing program 2 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000100)) r4 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x1b216000) 5.172566274s ago: executing program 1 (id=1429): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.816155857s ago: executing program 1 (id=1430): syz_open_dev$radio(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0xff, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) 2.706617182s ago: executing program 0 (id=1412): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x123400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x3}, 0x3, 0x1, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xfffffffffffffe5d, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b18dcaab2579e716dc6c54fc0bb31ff1a92385f9a4b9721a027ca307528abf6cf5a01ca1ce1b73c8c222b17c8aa28ade974c290ddd0f9958fa97194b2140978f4313014965faf1f988a7fedd3d21da5773c8e1096fcc8c3a14f7565adcfd178d92c014fd096cf89c168755ffffb2e73e105a8f2b76fa29ed5929d04b8541022be3d51f5bfea34dc7f8ab500d283e841334215b2e53ed7b8fec5bd042bf41b4ca09e3564", 0x0, 0x237, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x50) 2.239443423s ago: executing program 2 (id=1431): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.238709312s ago: executing program 3 (id=1432): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x51, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000000, 0x6e073, r5, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b0000001400000000000000100100"], 0x28}, 0x0) 111.044975ms ago: executing program 1 (id=1433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000500)={0x0, 0x0, {0x2, 0x9, 0x1009, 0x2, 0x1, 0x4, 0x2, 0x7}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, 0x0}, 0x20040010) io_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x2, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0}}) dup2(r0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 3 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x1b216000) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 748.474383][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.538692][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.565826][ T28] usb 4-1: USB disconnect, device number 39 [ 748.786980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.802830][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.889733][T10152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.912997][T10152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.942022][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.974550][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.018426][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.034996][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.500015][ T5765] Bluetooth: hci0: command 0x0c1a tx timeout [ 751.545656][T10290] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 752.739628][T10290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 752.766153][T10290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 752.803469][T10290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.818580][T10290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 752.827376][T10290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 752.843571][T10290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.862411][T10290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 752.870551][T10290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 753.570842][ T8968] Bluetooth: hci0: command 0x0c1a tx timeout [ 754.850797][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 754.932632][ T8968] Bluetooth: hci3: command 0x0c1a tx timeout [ 756.931949][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 757.010884][ T8968] Bluetooth: hci3: command 0x0c1a tx timeout [ 757.330957][ T8968] Bluetooth: hci0: command 0x0c1a tx timeout [ 757.421635][T10323] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 757.452597][T10323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 757.458831][T10323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.551047][ T5765] Bluetooth: hci3: command 0x0c1a tx timeout [ 759.557173][ T5765] Bluetooth: hci2: command 0x0c1a tx timeout [ 761.357738][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1035'. [ 762.085738][ T6192] hsr_slave_0: left promiscuous mode [ 762.105025][ T6192] hsr_slave_1: left promiscuous mode [ 762.142835][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.230837][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.264159][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.320979][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.391726][ T6192] bridge_slave_1: left allmulticast mode [ 762.397490][ T6192] bridge_slave_1: left promiscuous mode [ 762.451984][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.483181][ T6192] bridge_slave_0: left allmulticast mode [ 762.488899][ T6192] bridge_slave_0: left promiscuous mode [ 762.737973][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 762.876443][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.013276][ T6192] veth1_macvtap: left promiscuous mode [ 764.018899][ T6192] veth0_macvtap: left promiscuous mode [ 764.808878][ T6192] veth1_vlan: left promiscuous mode [ 764.814550][ T6192] veth0_vlan: left promiscuous mode [ 770.562384][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 771.826306][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1047'. [ 772.613300][T10440] vivid-006: kernel_thread() failed [ 772.676310][ T6192] team0 (unregistering): Port device C removed [ 772.965400][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.032095][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.280189][ T6192] bond0 (unregistering): Released all slaves [ 777.462699][T10432] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 777.469388][T10432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 777.470147][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 777.486272][T10432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 779.652799][ T8968] Bluetooth: hci3: command 0x0c1a tx timeout [ 779.658915][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 779.665511][ T5765] Bluetooth: hci0: command 0x0c1a tx timeout [ 785.400157][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.582449][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.626214][T10533] C: renamed from team_slave_0 (while UP) [ 785.668279][T10533] netlink: 'syz.0.1068': attribute type 2 has an invalid length. [ 785.687223][T10533] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1068'. [ 785.712173][T10533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 785.838185][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.047820][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.887042][T10527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.967816][T10527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.039272][ T8968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 787.053430][ T8968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.061790][ T8968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.071410][ T8968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.079621][ T8968] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 787.087383][ T8968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.519367][ T5081] Bluetooth: hci0: command 0x0c1a tx timeout [ 789.020778][ T5081] Bluetooth: hci2: command 0x0c1a tx timeout [ 789.182014][ T5081] Bluetooth: hci3: command tx timeout [ 791.280848][ T5081] Bluetooth: hci3: command tx timeout [ 792.894145][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 792.932367][T10545] chnl_net:caif_netlink_parms(): no params data found [ 793.392976][ T5081] Bluetooth: hci3: command tx timeout [ 793.611047][ T12] hsr_slave_0: left promiscuous mode [ 793.653019][ T12] hsr_slave_1: left promiscuous mode [ 793.694945][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.725064][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.756815][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.766417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.787841][ T12] bridge_slave_1: left allmulticast mode [ 793.801524][ T12] bridge_slave_1: left promiscuous mode [ 793.821133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.130571][ T12] bridge_slave_0: left allmulticast mode [ 794.140320][ T12] bridge_slave_0: left promiscuous mode [ 794.151319][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.667993][ T12] veth1_macvtap: left promiscuous mode [ 794.677368][ T12] veth0_macvtap: left promiscuous mode [ 794.686691][ T12] veth1_vlan: left promiscuous mode [ 794.692852][ T12] veth0_vlan: left promiscuous mode [ 795.502446][ T5081] Bluetooth: hci3: command tx timeout [ 800.232109][ T12] team0 (unregistering): Port device team_slave_1 removed [ 800.378581][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.432691][ T12] team0 (unregistering): Port device team_slave_0 removed [ 800.542711][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.697925][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.205327][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1089'. [ 803.094042][ T12] bond0 (unregistering): Released all slaves [ 803.328625][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1090'. [ 805.543447][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.565670][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.599994][T10545] bridge_slave_0: entered allmulticast mode [ 805.616395][T10545] bridge_slave_0: entered promiscuous mode [ 805.642462][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.649664][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.716498][T10545] bridge_slave_1: entered allmulticast mode [ 805.752738][T10545] bridge_slave_1: entered promiscuous mode [ 806.593995][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.674442][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.056469][T10545] team0: Port device team_slave_0 added [ 807.075637][T10545] team0: Port device team_slave_1 added [ 808.216465][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.234039][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.261417][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.280554][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.297196][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.388037][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.341591][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.347975][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.717689][T10545] hsr_slave_0: entered promiscuous mode [ 809.807152][T10545] hsr_slave_1: entered promiscuous mode [ 809.823222][T10545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.863906][T10545] Cannot create hsr debugfs directory [ 811.599891][T10720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.344888][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1095'. [ 814.771599][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'. [ 816.462088][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 817.500749][T10545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.597174][ T8968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 817.607106][ T8968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 817.616341][ T8968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 817.626081][ T8968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 817.636452][ T8968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 817.684148][ T8968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 817.772936][T10545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.795128][T10545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.831118][ T9367] hsr_slave_0: left promiscuous mode [ 817.857719][ T9367] hsr_slave_1: left promiscuous mode [ 817.869073][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.877782][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.886295][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.910965][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.924853][ T9367] bridge_slave_1: left allmulticast mode [ 817.930855][ T9367] bridge_slave_1: left promiscuous mode [ 817.936608][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.956766][ T9367] bridge_slave_0: left allmulticast mode [ 817.964912][ T9367] bridge_slave_0: left promiscuous mode [ 817.972933][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.044094][ T9367] veth1_macvtap: left promiscuous mode [ 818.049762][ T9367] veth0_macvtap: left promiscuous mode [ 818.063557][ T9367] veth1_vlan: left promiscuous mode [ 818.070153][ T9367] veth0_vlan: left promiscuous mode [ 819.321795][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.340977][ T5081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.370809][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.390078][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.411102][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 819.423329][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 819.489371][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 819.537288][ T9367] team0 (unregistering): Port device C removed [ 819.583774][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.639198][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.744446][ T5081] Bluetooth: hci1: command tx timeout [ 820.156792][ T9367] bond0 (unregistering): Released all slaves [ 820.279051][T10545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 821.493797][ T5081] Bluetooth: hci2: command tx timeout [ 821.699446][T10765] chnl_net:caif_netlink_parms(): no params data found [ 821.811007][ T5081] Bluetooth: hci1: command tx timeout [ 822.892388][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.026503][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.041188][T10773] chnl_net:caif_netlink_parms(): no params data found [ 823.112699][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.119999][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.128461][T10765] bridge_slave_0: entered allmulticast mode [ 823.137398][T10765] bridge_slave_0: entered promiscuous mode [ 823.169188][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.185398][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.194187][T10765] bridge_slave_1: entered allmulticast mode [ 823.202299][T10765] bridge_slave_1: entered promiscuous mode [ 823.316398][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 823.573089][ T5081] Bluetooth: hci2: command tx timeout [ 823.578426][ T9367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.811830][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.819042][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.892353][ T5081] Bluetooth: hci1: command tx timeout [ 823.902270][ T9367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.924622][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.931875][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.060037][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.103929][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.178647][ T9367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.287262][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.309298][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.328343][T10773] bridge_slave_0: entered allmulticast mode [ 824.341481][T10773] bridge_slave_0: entered promiscuous mode [ 824.450615][ T9367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.485938][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.502033][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.511386][T10773] bridge_slave_1: entered allmulticast mode [ 824.518963][T10773] bridge_slave_1: entered promiscuous mode [ 824.574854][T10765] team0: Port device team_slave_0 added [ 824.587538][T10765] team0: Port device team_slave_1 added [ 824.741554][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.755221][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.876809][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.899390][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.951134][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.964737][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.971868][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.998123][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.189163][ T9367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.646873][T10773] team0: Port device team_slave_0 added [ 825.671081][ T5081] Bluetooth: hci2: command tx timeout [ 825.774986][ T9367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.857326][T10773] team0: Port device team_slave_1 added [ 825.914198][ T9367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.971320][ T5081] Bluetooth: hci1: command tx timeout [ 826.626346][ T9367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.849516][T10765] hsr_slave_0: entered promiscuous mode [ 826.925947][T10765] hsr_slave_1: entered promiscuous mode [ 826.947201][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.978635][T10765] Cannot create hsr debugfs directory [ 827.071260][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.087266][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.142070][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.184049][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.208544][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.288742][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.731190][ T5081] Bluetooth: hci2: command tx timeout [ 828.429151][T10773] hsr_slave_0: entered promiscuous mode [ 828.436295][T10773] hsr_slave_1: entered promiscuous mode [ 828.443633][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.451451][T10773] Cannot create hsr debugfs directory [ 829.244118][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.739057][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1119'. [ 831.204748][T10545] veth0_vlan: entered promiscuous mode [ 831.394296][T10545] veth1_vlan: entered promiscuous mode [ 832.252622][T10545] veth0_macvtap: entered promiscuous mode [ 832.393924][T10765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 832.420257][T10765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 832.538577][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 833.105252][T10765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.239073][T10765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 833.391705][T10545] veth1_macvtap: entered promiscuous mode [ 833.707620][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.741342][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.751888][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.762617][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.772824][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.790325][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.803766][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.827018][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.851580][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.932164][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.005177][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.105449][T10545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.204571][T10545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.339048][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.633739][T10545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.646060][T10545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.657146][T10545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.667455][T10545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.026107][T10773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 835.059380][T10773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 835.074847][T10773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 835.093975][T10773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 835.170495][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.188630][ T9367] hsr_slave_0: left promiscuous mode [ 835.195765][ T9367] hsr_slave_1: left promiscuous mode [ 835.204671][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.229969][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.240126][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.252175][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.267215][ T9367] bridge_slave_1: left allmulticast mode [ 835.275127][ T9367] bridge_slave_1: left promiscuous mode [ 835.287159][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.298715][ T9367] bridge_slave_0: left allmulticast mode [ 835.312079][ T9367] bridge_slave_0: left promiscuous mode [ 835.317910][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.355631][ T9367] hsr_slave_0: left promiscuous mode [ 835.361820][ T9367] hsr_slave_1: left promiscuous mode [ 835.367950][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.375702][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.383882][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.392271][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.400998][ T9367] bridge_slave_1: left allmulticast mode [ 835.406679][ T9367] bridge_slave_1: left promiscuous mode [ 835.412765][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.422282][ T9367] bridge_slave_0: left allmulticast mode [ 835.428051][ T9367] bridge_slave_0: left promiscuous mode [ 835.436569][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.284397][ T9367] veth1_macvtap: left promiscuous mode [ 836.290004][ T9367] veth0_macvtap: left promiscuous mode [ 836.296385][ T9367] veth1_vlan: left promiscuous mode [ 836.301801][ T9367] veth0_vlan: left promiscuous mode [ 836.308712][ T9367] veth1_macvtap: left promiscuous mode [ 836.314500][ T9367] veth0_macvtap: left promiscuous mode [ 836.320118][ T9367] veth1_vlan: left promiscuous mode [ 836.325865][ T9367] veth0_vlan: left promiscuous mode [ 837.006858][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 837.058556][ T9367] team0 (unregistering): Port device team_slave_0 removed [ 837.106910][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.161999][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.678629][ T9367] bond0 (unregistering): Released all slaves [ 838.239768][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 838.294056][ T9367] team0 (unregistering): Port device C removed [ 838.344596][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.397797][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.933854][ T9367] bond0 (unregistering): Released all slaves [ 839.178967][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.335708][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.346458][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.376918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.384277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.392989][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.421852][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.517992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.525255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.305612][T10765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.329138][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.429985][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.472772][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.479985][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.545664][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.552930][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.116058][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.778101][T10765] veth0_vlan: entered promiscuous mode [ 843.818976][T10765] veth1_vlan: entered promiscuous mode [ 843.837536][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.894577][T10765] veth0_macvtap: entered promiscuous mode [ 843.914702][T10765] veth1_macvtap: entered promiscuous mode [ 843.940250][T10773] veth0_vlan: entered promiscuous mode [ 844.104222][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.121404][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.135917][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.151312][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.169377][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.190069][T10773] veth1_vlan: entered promiscuous mode [ 844.336080][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.453020][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.559467][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.710810][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.745948][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.787502][T10765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.817443][T10765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.837903][T10765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.867384][T10765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.990968][T10773] veth0_macvtap: entered promiscuous mode [ 845.013565][T10773] veth1_macvtap: entered promiscuous mode [ 845.927421][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.938138][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.975971][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.009307][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.030909][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.041672][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.054345][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.141304][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.205740][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.275641][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.337785][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1132'. [ 846.372597][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.294109][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.304776][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.316421][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.328454][T10773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.341482][T10773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.350394][T10773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.359802][T10773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.409406][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.556312][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.628796][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 848.240728][ T9367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.264635][ T9367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.323188][ T6192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.395521][ T6192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.556126][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.605015][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.221195][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 849.481632][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 849.524599][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.550759][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.576827][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 849.604082][ T9] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 849.626966][ T9] usb 4-1: Manufacturer: syz [ 849.647867][ T9] usb 4-1: config 0 descriptor?? [ 851.291805][T11063] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 851.425953][T11063] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.484684][T11063] bond0: (slave team0): Enslaving as an active interface with an up link [ 855.133064][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 855.139870][ T9] usbhid: probe of 4-1:0.0 failed with error -32 [ 855.266137][T11087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.924554][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 856.572347][ T6036] usb 4-1: USB disconnect, device number 40 [ 859.004444][T11121] sched: RT throttling activated [ 865.624476][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 865.642374][T11154] C: renamed from team_slave_0 (while UP) [ 865.696335][T11154] netlink: 'syz.2.1158': attribute type 2 has an invalid length. [ 865.704160][T11154] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1158'. [ 865.713251][T11154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 866.479225][ T28] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 866.700501][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 866.718453][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.752551][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.890765][ T28] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 866.983087][ T28] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 867.067648][ T28] usb 3-1: Manufacturer: syz [ 867.216078][ T28] usb 3-1: config 0 descriptor?? [ 868.804120][T11181] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 869.057797][T11181] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.172069][ T5813] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 869.400821][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 869.787155][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 869.814535][T11181] bond0: (slave team0): Enslaving as an active interface with an up link [ 869.846992][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.860840][T11174] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 869.905034][ T5813] usb 4-1: Product: syz [ 869.934724][ T5813] usb 4-1: Manufacturer: syz [ 869.964527][ T5813] usb 4-1: SerialNumber: syz [ 870.005191][ T5813] usb 4-1: config 0 descriptor?? [ 870.456685][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.463159][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.519075][ T5813] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 870.546774][T11174] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.834521][T11174] bond0: (slave team0): Enslaving as an active interface with an up link [ 872.600905][ T28] usbhid 3-1:0.0: can't add hid device: -32 [ 872.607013][ T28] usbhid: probe of 3-1:0.0 failed with error -32 [ 873.059135][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 874.084845][ T5813] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 874.238173][ T9] usb 4-1: USB disconnect, device number 41 [ 879.265564][ T5772] usb 3-1: USB disconnect, device number 37 [ 882.909107][T11257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1179'. [ 882.961667][T11257] ax25_connect(): syz.2.1179 uses autobind, please contact jreuter@yaina.de [ 894.862895][T11337] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1198'. [ 895.314687][T10278] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 895.715524][T10278] usb 2-1: Using ep0 maxpacket: 16 [ 895.730127][T10278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.775906][T10278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.796206][T10278] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 895.816776][T10278] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 895.830199][T10278] usb 2-1: Manufacturer: syz [ 895.843840][T10278] usb 2-1: config 0 descriptor?? [ 896.010863][ T5813] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 896.230711][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 896.245870][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.257655][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.271808][ T5813] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 896.283055][ T5813] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 896.318015][T11355] overlayfs: failed to resolve './file1': -2 [ 896.961625][ T5813] usb 1-1: Manufacturer: syz [ 896.988774][ T5813] usb 1-1: config 0 descriptor?? [ 897.163771][T11358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1204'. [ 897.183977][T11356] netlink: 'syz.1.1200': attribute type 10 has an invalid length. [ 898.053146][T11363] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1205'. [ 898.076405][T11364] netlink: 'syz.0.1202': attribute type 10 has an invalid length. [ 898.889750][T11364] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.999214][T11364] bond0: (slave team0): Enslaving as an active interface with an up link [ 900.551329][T10278] usbhid 2-1:0.0: can't add hid device: -71 [ 900.557389][T10278] usbhid: probe of 2-1:0.0 failed with error -71 [ 900.619928][T10278] usb 2-1: USB disconnect, device number 37 [ 900.645236][T11276] udevd[11276]: setting owner of /dev/bus/usb/002/037 to uid=0, gid=0 failed: No such file or directory [ 900.751499][T11383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'. [ 901.350801][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 901.531501][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 901.544887][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.585846][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.598790][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 901.612715][ T9] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 901.621541][ T9] usb 3-1: Manufacturer: syz [ 901.632383][ T9] usb 3-1: config 0 descriptor?? [ 902.315547][ T5813] usbhid 1-1:0.0: can't add hid device: -32 [ 902.328910][ T5813] usbhid: probe of 1-1:0.0 failed with error -32 [ 903.433432][T11398] netlink: 'syz.2.1207': attribute type 10 has an invalid length. [ 903.551971][T10278] usb 1-1: USB disconnect, device number 43 [ 903.954977][ T28] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 905.201044][ T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 905.500880][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.508956][ T28] usb 2-1: Product: syz [ 905.514958][ T28] usb 2-1: Manufacturer: syz [ 905.521439][ T28] usb 2-1: SerialNumber: syz [ 906.545011][ T28] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 906.882226][T11420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1217'. [ 906.906735][T11420] ax25_connect(): syz.3.1217 uses autobind, please contact jreuter@yaina.de [ 907.609521][ T1187] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 907.965150][ T1187] usb 2-1: ath9k_htc: USB layer deinitialized [ 907.974720][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 908.015144][ T9] usbhid: probe of 3-1:0.0 failed with error -32 [ 908.039928][T11422] C: renamed from team_slave_0 (while UP) [ 908.048175][T11422] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 908.056111][T11422] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1216'. [ 908.065195][T11422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 908.804655][ T1187] usb 3-1: USB disconnect, device number 38 [ 911.455612][ T1187] usb 2-1: USB disconnect, device number 38 [ 911.669768][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 913.136196][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 913.253347][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.290749][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.314813][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 913.330667][ T9] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 913.490840][ T8968] Bluetooth: hci3: command 0x0406 tx timeout [ 913.562074][ T9] usb 4-1: Manufacturer: syz [ 913.867340][ T9] usb 4-1: config 0 descriptor?? [ 914.102183][T11459] netlink: set zone limit has 8 unknown bytes [ 914.428237][ T9] usb 4-1: can't set config #0, error -71 [ 914.634569][ T9] usb 4-1: USB disconnect, device number 42 [ 916.304327][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 917.853350][T10278] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 918.677290][T10278] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 918.709479][T10278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.720813][T10278] usb 2-1: Product: syz [ 918.725032][T10278] usb 2-1: Manufacturer: syz [ 918.732894][T10278] usb 2-1: SerialNumber: syz [ 918.771555][T10278] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 918.853246][ T8247] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 920.542483][ T8247] usb 2-1: Service connection timeout for: 256 [ 920.549030][ T8247] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 920.582013][ T8247] ath9k_htc: Failed to initialize the device [ 921.379028][ T8247] usb 2-1: ath9k_htc: USB layer deinitialized [ 921.462820][ T9367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.560024][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 922.045153][ T9367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.379544][ T9367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.753247][ T9367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.947575][ T5783] usb 2-1: USB disconnect, device number 39 [ 927.361411][ T8247] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 927.620907][ T8247] usb 2-1: Using ep0 maxpacket: 16 [ 927.695804][ T8247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.850729][ T8247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.907880][ T8247] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 927.945719][ T8247] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 928.000726][ T8247] usb 2-1: Manufacturer: syz [ 928.032094][ T8247] usb 2-1: config 0 descriptor?? [ 928.097928][ T8968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 928.108764][ T8968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 928.119034][ T8968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 928.120570][T11529] Driver unsupported XDP return value 0 on prog (id 251) dev N/A, expect packet loss! [ 928.166853][ T8968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 928.194860][ T8968] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 928.202881][ T8968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 928.420913][T11532] block device autoloading is deprecated and will be removed. [ 928.657868][T11536] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 929.524364][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 930.305995][ T5081] Bluetooth: hci3: command tx timeout [ 930.721550][T11527] chnl_net:caif_netlink_parms(): no params data found [ 931.531004][ T8247] usbhid 2-1:0.0: can't add hid device: -71 [ 931.537694][ T8247] usbhid: probe of 2-1:0.0 failed with error -71 [ 931.553742][ T8247] usb 2-1: USB disconnect, device number 40 [ 931.797080][ T9367] hsr_slave_0: left promiscuous mode [ 931.831292][ T9367] hsr_slave_1: left promiscuous mode [ 933.421871][ T5081] Bluetooth: hci3: command tx timeout [ 933.431220][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.437587][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.478046][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.514578][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.579542][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.595863][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.785063][ T9367] bridge_slave_1: left allmulticast mode [ 933.804042][ T9367] bridge_slave_1: left promiscuous mode [ 934.459323][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.506176][ T9367] bridge_slave_0: left allmulticast mode [ 934.520794][ T9367] bridge_slave_0: left promiscuous mode [ 934.526715][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.581174][ T9367] veth1_macvtap: left promiscuous mode [ 934.586735][ T9367] veth0_macvtap: left promiscuous mode [ 934.607757][ T9367] veth1_vlan: left promiscuous mode [ 934.616528][ T9367] veth0_vlan: left promiscuous mode [ 935.492023][ T5081] Bluetooth: hci3: command tx timeout [ 936.076951][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 936.130924][ T9367] team0 (unregistering): Port device C removed [ 936.179292][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.227957][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.605692][ T9367] bond0 (unregistering): (slave team0): Releasing backup interface [ 936.760342][ T9367] bond0 (unregistering): Released all slaves [ 936.867002][T11569] netlink: 'syz.0.1250': attribute type 2 has an invalid length. [ 936.874977][T11569] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1250'. [ 936.884273][T11569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 937.084055][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 937.362985][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 937.596299][ T5081] Bluetooth: hci3: command tx timeout [ 937.596575][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.983965][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.154699][T11527] bridge_slave_0: entered allmulticast mode [ 939.198433][T11527] bridge_slave_0: entered promiscuous mode [ 939.351614][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.411033][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.419049][T11527] bridge_slave_1: entered allmulticast mode [ 939.469239][T11527] bridge_slave_1: entered promiscuous mode [ 939.596165][T11527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.624363][T11527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.713821][T11527] team0: Port device team_slave_0 added [ 939.757265][T11527] team0: Port device team_slave_1 added [ 939.869021][T11527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.882686][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.918538][T11527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.034335][T11527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.041486][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.067601][T11527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.468330][ T9367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.807779][ T9367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.375884][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 944.382172][T11616] Bluetooth: hci2: command 0x0406 tx timeout [ 944.441469][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.451310][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.459553][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.476411][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.484305][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 944.506362][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.525673][ T9367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.654390][T11527] hsr_slave_0: entered promiscuous mode [ 944.732589][T11527] hsr_slave_1: entered promiscuous mode [ 944.755657][T11527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.763997][T11527] Cannot create hsr debugfs directory [ 946.058216][ T9367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.981126][ T5081] Bluetooth: hci0: command tx timeout [ 947.608472][T11648] netlink: set zone limit has 8 unknown bytes [ 949.010873][ T5081] Bluetooth: hci0: command tx timeout [ 949.798969][T11627] chnl_net:caif_netlink_parms(): no params data found [ 949.979101][ T8968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 949.991941][ T8968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 950.000483][ T8968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 950.010366][ T8968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 950.018612][ T8968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 950.031687][ T8968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 950.236558][T11527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.360884][T11527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 950.400966][T11527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 950.628659][T11527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.730219][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.742568][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.749885][T11627] bridge_slave_0: entered allmulticast mode [ 950.781383][T11627] bridge_slave_0: entered promiscuous mode [ 950.823519][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.865663][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.877479][T11627] bridge_slave_1: entered allmulticast mode [ 950.906155][T11627] bridge_slave_1: entered promiscuous mode [ 951.074695][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.090903][ T5081] Bluetooth: hci0: command tx timeout [ 951.232689][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.309992][T11627] team0: Port device team_slave_0 added [ 951.347494][ T9367] hsr_slave_0: left promiscuous mode [ 951.368065][ T9367] hsr_slave_1: left promiscuous mode [ 951.376557][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.386620][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.395630][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.403461][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.412595][ T9367] bridge_slave_1: left allmulticast mode [ 951.418292][ T9367] bridge_slave_1: left promiscuous mode [ 951.424661][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.435187][ T9367] bridge_slave_0: left allmulticast mode [ 951.446476][ T9367] bridge_slave_0: left promiscuous mode [ 951.452995][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.486689][ T9367] veth1_macvtap: left promiscuous mode [ 951.493573][ T9367] veth0_macvtap: left promiscuous mode [ 951.499690][ T9367] veth1_vlan: left promiscuous mode [ 951.505742][ T9367] veth0_vlan: left promiscuous mode [ 952.162201][ T5081] Bluetooth: hci1: command tx timeout [ 952.795596][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 952.882883][ T9367] team0 (unregistering): Port device team_slave_0 removed [ 953.030716][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.121997][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.180905][ T5081] Bluetooth: hci0: command tx timeout [ 954.178729][ T9367] bond0 (unregistering): (slave team0): Releasing backup interface [ 954.215486][ T5081] Bluetooth: hci1: command tx timeout [ 954.344629][ T9367] bond0 (unregistering): Released all slaves [ 954.471657][T11627] team0: Port device team_slave_1 added [ 954.489534][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1269'. [ 954.657455][T11627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.666061][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.703664][T11627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.722974][T11627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.729992][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.769917][T11627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.751949][T11627] hsr_slave_0: entered promiscuous mode [ 955.779675][T11627] hsr_slave_1: entered promiscuous mode [ 955.836392][T11668] chnl_net:caif_netlink_parms(): no params data found [ 956.150547][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.158765][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.167083][T11668] bridge_slave_0: entered allmulticast mode [ 956.174399][T11668] bridge_slave_0: entered promiscuous mode [ 956.185320][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.193015][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.200317][T11668] bridge_slave_1: entered allmulticast mode [ 956.208867][T11668] bridge_slave_1: entered promiscuous mode [ 956.254178][T11527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.270903][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 956.290935][ T5081] Bluetooth: hci1: command tx timeout [ 956.392741][T11668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.424042][T11668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.500878][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 956.509321][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.521253][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.541906][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 956.551990][ T9] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 956.560226][ T9] usb 2-1: Manufacturer: syz [ 956.571941][ T9] usb 2-1: config 0 descriptor?? [ 956.644734][ T9367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.669952][T11668] team0: Port device team_slave_0 added [ 956.681071][T11668] team0: Port device team_slave_1 added [ 956.749487][T11527] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.778861][ T9367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.895972][ T9367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.913657][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.920927][T11036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.934918][T11668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.942918][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.969959][T11668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.985366][T11668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.992570][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.018771][T11668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.127130][ T9367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.207210][T11744] netlink: 'syz.1.1271': attribute type 10 has an invalid length. [ 957.228801][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.236064][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.412756][T11668] hsr_slave_0: entered promiscuous mode [ 957.445797][T11668] hsr_slave_1: entered promiscuous mode [ 957.453751][T11668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.462196][T11668] Cannot create hsr debugfs directory [ 958.042895][T11627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 958.086314][T11627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 958.201852][T11527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.249778][T11627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 958.277037][T11627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 958.371695][ T5081] Bluetooth: hci1: command tx timeout [ 959.063140][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 959.069209][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 959.116877][ T9] usb 2-1: USB disconnect, device number 41 [ 960.567437][T11527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.676917][T11627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.893532][T11627] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.934385][T11527] veth0_vlan: entered promiscuous mode [ 961.025582][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.032870][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.099389][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.106699][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.920796][T11668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.944333][T11668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.959155][T11668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.969503][T11668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.001806][T11527] veth1_vlan: entered promiscuous mode [ 962.029808][ T9367] hsr_slave_0: left promiscuous mode [ 962.036442][ T9367] hsr_slave_1: left promiscuous mode [ 962.043739][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.054034][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.062666][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.070123][ T9367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.078180][ T9367] bridge_slave_1: left allmulticast mode [ 962.083957][ T9367] bridge_slave_1: left promiscuous mode [ 962.089726][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.098933][ T9367] bridge_slave_0: left allmulticast mode [ 962.105055][ T9367] bridge_slave_0: left promiscuous mode [ 962.111432][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.139083][ T9367] veth1_macvtap: left promiscuous mode [ 962.147290][ T9367] veth0_macvtap: left promiscuous mode [ 962.154410][ T9367] veth1_vlan: left promiscuous mode [ 962.159788][ T9367] veth0_vlan: left promiscuous mode [ 962.210856][ T5783] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 962.407811][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 962.416587][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.427618][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.439717][ T5783] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 962.450384][ T5783] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 962.458946][ T5783] usb 2-1: Manufacturer: syz [ 962.466791][ T5783] usb 2-1: config 0 descriptor?? [ 962.844783][ T9367] team0 (unregistering): Port device team_slave_1 removed [ 962.914087][ T9367] team0 (unregistering): Port device C removed [ 963.002078][ T9367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.066720][ T9367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.616079][ T9367] bond0 (unregistering): (slave team0): Releasing backup interface [ 963.836062][ T9367] bond0 (unregistering): Released all slaves [ 964.005517][T11802] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 964.063514][T11627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.408688][T11527] veth0_macvtap: entered promiscuous mode [ 964.515804][T11527] veth1_macvtap: entered promiscuous mode [ 964.688002][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.720284][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.759504][T11527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.847622][T11527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.862519][T11527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.883581][T11527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.900204][T11668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.949402][T11527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.965071][T11527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.975875][T11527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.994974][T11527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.106278][T11668] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.162443][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.169654][T11036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.208613][ T5783] usbhid 2-1:0.0: can't add hid device: -71 [ 965.238403][ T5783] usbhid: probe of 2-1:0.0 failed with error -71 [ 965.304838][ T5783] usb 2-1: USB disconnect, device number 42 [ 965.313562][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.320844][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.376471][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.649207][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.650030][ T9367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.672294][ T9367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.679794][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.430511][T11627] veth0_vlan: entered promiscuous mode [ 966.527848][T11627] veth1_vlan: entered promiscuous mode [ 966.713375][T11627] veth0_macvtap: entered promiscuous mode [ 966.726075][T11627] veth1_macvtap: entered promiscuous mode [ 967.876571][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.895623][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.914201][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.925051][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.937025][T11627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.197021][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.228581][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.260877][T11627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.301521][T11627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.342755][T11627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.434450][T11627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.470735][T11627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.487818][T11627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.514871][T11627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.565229][T11668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.907325][ T6192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.946673][ T6192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.041524][ T9367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.076567][ T9367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.125784][T11668] veth0_vlan: entered promiscuous mode [ 969.157269][T11668] veth1_vlan: entered promiscuous mode [ 969.328038][T11668] veth0_macvtap: entered promiscuous mode [ 969.420916][T11668] veth1_macvtap: entered promiscuous mode [ 969.582095][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.642640][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.674743][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.699524][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.720649][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.760807][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.785235][T11668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.797434][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.809643][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.820253][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.835915][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.847197][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.860079][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.872723][T11668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.915290][T11668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.940831][T11668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.952620][T11668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.963526][T11668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.153755][ T9367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.177857][ T9367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.238469][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.249743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.331708][ T1187] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 970.522529][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 970.548784][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.754069][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.767381][ T1187] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 970.787064][ T1187] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 971.560789][ T1187] usb 3-1: Manufacturer: syz [ 971.578880][ T1187] usb 3-1: config 0 descriptor?? [ 972.861326][T11892] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 972.869901][ T5813] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 973.090892][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 973.111582][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 973.122570][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.137940][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.164291][ T5813] usb 4-1: Product: syz [ 973.168527][ T5813] usb 4-1: Manufacturer: syz [ 973.187450][T11892] bond0: (slave team0): Enslaving as an active interface with an up link [ 973.210715][ T5813] usb 4-1: SerialNumber: syz [ 973.238887][ T5813] usb 4-1: config 0 descriptor?? [ 973.513493][ T5813] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 973.640851][ T5820] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 973.817269][ T1187] usbhid 3-1:0.0: can't add hid device: -71 [ 973.834208][ T1187] usbhid: probe of 3-1:0.0 failed with error -71 [ 973.851376][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 973.858256][ T1187] usb 3-1: USB disconnect, device number 39 [ 973.891601][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.922740][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.974616][ T5820] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 973.987236][ T5820] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 973.996147][ T5820] usb 1-1: Manufacturer: syz [ 974.021803][ T5820] usb 1-1: config 0 descriptor?? [ 974.655793][T11924] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 974.758256][ T5813] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 974.818789][ T5813] usb 4-1: USB disconnect, device number 43 [ 974.838633][T11924] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.928130][T11924] bond0: (slave team0): Enslaving as an active interface with an up link [ 978.443240][T11954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1295'. [ 979.851454][ T5820] usbhid 1-1:0.0: can't add hid device: -32 [ 979.862789][ T5820] usbhid: probe of 1-1:0.0 failed with error -32 [ 984.021155][ T28] usb 1-1: USB disconnect, device number 44 [ 984.423292][T11989] netlink: set zone limit has 8 unknown bytes [ 985.714695][T12000] netlink: set zone limit has 8 unknown bytes [ 987.010776][ T28] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 987.240711][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 987.311461][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.323683][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.123470][ T28] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 988.160710][ T28] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 988.338375][ T28] usb 1-1: Manufacturer: syz [ 988.381229][ T28] usb 1-1: config 0 descriptor?? [ 989.363992][T12023] ax25_connect(): syz.3.1313 uses autobind, please contact jreuter@yaina.de [ 992.927086][T12042] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1318'. [ 992.951905][T12042] ax25_connect(): syz.3.1318 uses autobind, please contact jreuter@yaina.de [ 993.642854][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.649284][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.967026][T12044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1319'. [ 994.931930][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 997.444080][ T28] usbhid 1-1:0.0: can't add hid device: -32 [ 997.450162][ T28] usbhid: probe of 1-1:0.0 failed with error -32 [ 997.543791][ T28] usb 1-1: USB disconnect, device number 45 [ 1004.170201][ T3457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.414181][ T3457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.661902][ T3457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.874089][ T3457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.753654][ T8968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.764961][ T8968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.774607][ T8968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.786694][ T8968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.795388][ T8968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1006.804991][ T8968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.074860][ T5081] Bluetooth: hci1: command tx timeout [ 1011.177333][ T5081] Bluetooth: hci1: command tx timeout [ 1011.534855][T12111] chnl_net:caif_netlink_parms(): no params data found [ 1013.860684][ T5081] Bluetooth: hci1: command tx timeout [ 1013.902187][ T3457] hsr_slave_0: left promiscuous mode [ 1014.031112][ T3457] hsr_slave_1: left promiscuous mode [ 1014.070859][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.090717][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.141753][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.149228][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.204913][ T3457] bridge_slave_1: left allmulticast mode [ 1014.221391][ T3457] bridge_slave_1: left promiscuous mode [ 1014.228175][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.317518][ T3457] bridge_slave_0: left allmulticast mode [ 1014.341053][ T3457] bridge_slave_0: left promiscuous mode [ 1014.346892][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.425710][ T3457] veth1_macvtap: left promiscuous mode [ 1015.446990][ T3457] veth0_macvtap: left promiscuous mode [ 1015.481662][ T3457] veth1_vlan: left promiscuous mode [ 1015.487054][ T3457] veth0_vlan: left promiscuous mode [ 1015.720673][ T5820] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1015.890725][ T8968] Bluetooth: hci1: command tx timeout [ 1016.880701][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 1016.928255][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.692699][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.716314][ T5820] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1017.725879][ T5820] usb 4-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1017.734495][ T5820] usb 4-1: Manufacturer: syz [ 1017.758221][ T5820] usb 4-1: config 0 descriptor?? [ 1018.929233][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 1019.009937][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 1019.102175][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.181195][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.808085][ T3457] bond0 (unregistering): (slave team0): Releasing backup interface [ 1020.021558][ T3457] bond0 (unregistering): Released all slaves [ 1020.368641][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.388765][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.441224][T12111] bridge_slave_0: entered allmulticast mode [ 1020.462197][T12111] bridge_slave_0: entered promiscuous mode [ 1020.486131][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.494055][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.503787][T12111] bridge_slave_1: entered allmulticast mode [ 1020.521813][T12111] bridge_slave_1: entered promiscuous mode [ 1020.855627][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.882837][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.784023][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 1021.790367][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 1021.837222][ T5820] usb 4-1: USB disconnect, device number 44 [ 1021.952331][T12111] team0: Port device team_slave_0 added [ 1021.991086][T12111] team0: Port device team_slave_1 added [ 1022.076056][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.090647][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.150347][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.182918][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.189921][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.252394][T12216] Bluetooth: MGMT ver 1.22 [ 1022.282418][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.425922][T12111] hsr_slave_0: entered promiscuous mode [ 1022.456568][T12111] hsr_slave_1: entered promiscuous mode [ 1022.566754][T12111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.581234][T12111] Cannot create hsr debugfs directory [ 1023.475867][ T3457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.111574][ T3457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.295752][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1024.310477][ T5081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1024.319344][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1024.329701][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1024.338052][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1024.346086][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1024.584035][ T3457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.672790][T12245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1356'. [ 1024.692250][T12245] ax25_connect(): syz.2.1356 uses autobind, please contact jreuter@yaina.de [ 1024.726963][ T3457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.779966][T12236] chnl_net:caif_netlink_parms(): no params data found [ 1026.380303][ T5081] Bluetooth: hci2: command tx timeout [ 1026.394361][T12111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1026.418133][T12111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.742359][T12111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.780652][T12111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1027.682838][T12236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.690043][T12236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.718839][T12236] bridge_slave_0: entered allmulticast mode [ 1027.747919][T12236] bridge_slave_0: entered promiscuous mode [ 1027.776098][T12236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.795204][T12236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.815586][T12236] bridge_slave_1: entered allmulticast mode [ 1027.842312][T12236] bridge_slave_1: entered promiscuous mode [ 1028.450954][ T5081] Bluetooth: hci2: command tx timeout [ 1028.760775][T12294] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1029.173480][T12236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.240133][T12236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.530798][ T5081] Bluetooth: hci2: command tx timeout [ 1030.871954][T12236] team0: Port device team_slave_0 added [ 1030.897819][T12236] team0: Port device team_slave_1 added [ 1031.141396][T12236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.148510][T12236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.174506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.198013][T12236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.240694][T12236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.248638][T12236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.274679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.290083][T12236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.911544][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.982813][T12236] hsr_slave_0: entered promiscuous mode [ 1031.995883][T12236] hsr_slave_1: entered promiscuous mode [ 1032.004324][T12236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.016838][T12236] Cannot create hsr debugfs directory [ 1032.184329][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.271795][ T3457] hsr_slave_0: left promiscuous mode [ 1032.278218][ T3457] hsr_slave_1: left promiscuous mode [ 1032.287191][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.302167][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.310562][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.323770][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.334955][ T3457] bridge_slave_1: left allmulticast mode [ 1032.342979][ T3457] bridge_slave_1: left promiscuous mode [ 1032.349059][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.363500][ T3457] bridge_slave_0: left allmulticast mode [ 1032.369399][ T3457] bridge_slave_0: left promiscuous mode [ 1032.375269][ T171] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1032.389674][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.433246][ T3457] veth1_macvtap: left promiscuous mode [ 1032.439004][ T3457] veth0_macvtap: left promiscuous mode [ 1032.449345][ T3457] veth1_vlan: left promiscuous mode [ 1032.456327][ T3457] veth0_vlan: left promiscuous mode [ 1032.563676][ T171] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 1032.582122][ T171] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.610693][ T5081] Bluetooth: hci2: command tx timeout [ 1032.618489][ T171] usb 4-1: config 16 has no interface number 0 [ 1032.651118][ T171] usb 4-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1032.687017][ T171] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1032.704614][ T171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.735275][ T171] usb 4-1: Product: syz [ 1032.748358][ T171] usb 4-1: Manufacturer: syz [ 1032.763164][ T171] usb 4-1: SerialNumber: syz [ 1033.296940][ T171] usb 4-1: USB disconnect, device number 45 [ 1033.901113][T12309] udevd[12309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.128344][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 1034.184215][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 1034.233958][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.308901][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.506922][ T3457] bond0 (unregistering): (slave team0): Releasing backup interface [ 1035.733242][ T3457] bond0 (unregistering): Released all slaves [ 1036.411937][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.419127][ T9367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.882193][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.889400][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.664684][ T171] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1037.844866][T12111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1037.896491][ T171] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 1037.923866][ T171] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.957178][ T171] usb 4-1: config 16 has no interface number 0 [ 1037.987829][ T171] usb 4-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1038.049340][ T171] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1038.091542][ T171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.114558][ T171] usb 4-1: Product: syz [ 1038.118807][ T171] usb 4-1: Manufacturer: syz [ 1038.139378][ T171] usb 4-1: SerialNumber: syz [ 1038.496093][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.515296][ T171] usb 4-1: USB disconnect, device number 46 [ 1038.557773][T12309] udevd[12309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.616662][T12236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1038.642592][T12236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1038.665919][T12236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1038.685316][T12236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1038.836468][T12111] veth0_vlan: entered promiscuous mode [ 1038.910451][T12111] veth1_vlan: entered promiscuous mode [ 1039.029020][T12111] veth0_macvtap: entered promiscuous mode [ 1039.045359][T12236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.064281][T12111] veth1_macvtap: entered promiscuous mode [ 1039.137049][T12236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.162372][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.174321][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.184642][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.195750][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.217448][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.247655][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.254893][ T9367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.615412][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.622948][ T9367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.835426][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.855457][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.874410][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.897395][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.923410][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.939912][T12111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.978036][T12111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.000662][T12111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.020750][T12111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.409419][T12406] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1040.961733][ T6192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.303099][ T6192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.980352][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.988734][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.175697][T12236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.460752][T12236] veth0_vlan: entered promiscuous mode [ 1043.470921][ T1187] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1043.660959][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 1043.685207][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.699477][ T1187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.720763][ T1187] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 1043.730009][ T1187] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1043.739607][ T1187] usb 3-1: Manufacturer: syz [ 1043.772469][ T1187] usb 3-1: config 0 descriptor?? [ 1043.773340][T12236] veth1_vlan: entered promiscuous mode [ 1044.157337][T12236] veth0_macvtap: entered promiscuous mode [ 1044.196191][T12236] veth1_macvtap: entered promiscuous mode [ 1044.288426][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.309058][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.319841][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.343817][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.382319][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.409048][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.585552][T12236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.074870][T12441] netlink: 'syz.2.1382': attribute type 10 has an invalid length. [ 1045.153532][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.200716][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.227232][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.261348][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.280386][T12236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.317326][T12236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.377691][T12236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.429766][T12236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.460272][T12236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.485096][T12236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.518854][T12236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.856099][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.893130][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.169033][ T9566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.650740][ T9566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.618851][T12470] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1049.014884][ T1187] usbhid 3-1:0.0: can't add hid device: -32 [ 1049.420837][ T1187] usbhid: probe of 3-1:0.0 failed with error -32 [ 1049.519189][ T8247] usb 3-1: USB disconnect, device number 40 [ 1049.899592][T10152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.320953][ T8247] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1050.347962][T10152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.474614][T10152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.520757][ T8247] usb 3-1: Using ep0 maxpacket: 32 [ 1050.547445][ T8247] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 1050.584024][ T8247] usb 3-1: config 0 has no interface number 0 [ 1050.618671][ T8247] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=24.c5 [ 1050.641115][ T8247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.665465][ T8247] usb 3-1: Product: syz [ 1050.669825][ T8247] usb 3-1: Manufacturer: syz [ 1050.682153][ T8247] usb 3-1: SerialNumber: syz [ 1050.712070][ T8247] usb 3-1: config 0 descriptor?? [ 1051.005210][ T8247] em28xx 3-1:0.183: New device syz syz @ 480 Mbps (eb1a:e303, interface 183, class 183) [ 1051.780709][ T8968] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.836280][ T8247] em28xx 3-1:0.183: Video interface 183 found: bulk [ 1051.912284][T10152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.041371][ T8247] em28xx 3-1:0.183: unknown em28xx chip ID (0) [ 1052.246338][ T8247] em28xx 3-1:0.183: reading from i2c device at 0xa0 failed (error=-5) [ 1052.326733][ T8247] em28xx 3-1:0.183: board has no eeprom [ 1052.464465][ T8247] em28xx 3-1:0.183: Identified as Kaiomy TVnPC U2 (card=63) [ 1052.561000][ T8247] em28xx 3-1:0.183: analog set to bulk mode. [ 1052.572820][ T28] em28xx 3-1:0.183: Registering V4L2 extension [ 1052.597178][ T8247] usb 3-1: USB disconnect, device number 41 [ 1052.621726][ T8247] em28xx 3-1:0.183: Disconnecting em28xx [ 1052.962353][ T8968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1052.976775][ T8968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1052.990340][ T8968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1053.000506][ T8968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1053.009007][ T8968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1053.029213][ T8968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1053.906265][ T28] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 1054.280981][ T28] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 1054.503743][ T28] DVB: Unable to find symbol xc2028_attach() [ 1054.509839][ T28] tuner: 1-0061: Tuner has no way to set tv freq [ 1054.549299][ T28] em28xx 3-1:0.183: Config register raw data: 0xffffffed [ 1054.570940][ T28] em28xx 3-1:0.183: AC97 chip type couldn't be determined [ 1054.611800][ T28] em28xx 3-1:0.183: No AC97 audio processor [ 1054.619237][ T28] tuner: 1-0061: Tuner has no way to set tv freq [ 1054.703632][ T28] videodev: could not get a free minor [ 1054.832831][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.839230][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.902546][ T28] em28xx 3-1:0.183: can't register radio device [ 1054.909405][ T28] em28xx 3-1:0.183: V4L2 device video103 deregistered [ 1054.926034][ T28] em28xx 3-1:0.183: Registering input extension [ 1054.960405][ T8247] em28xx 3-1:0.183: Closing input extension [ 1055.092311][ T8968] Bluetooth: hci0: command tx timeout [ 1055.441468][ T8247] em28xx 3-1:0.183: Freeing device [ 1057.171058][ T8968] Bluetooth: hci0: command tx timeout [ 1057.352415][T12512] chnl_net:caif_netlink_parms(): no params data found [ 1058.118754][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.150868][T12512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.158199][T12512] bridge_slave_0: entered allmulticast mode [ 1058.221229][T12512] bridge_slave_0: entered promiscuous mode [ 1058.262561][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.269745][T12512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.330813][T12512] bridge_slave_1: entered allmulticast mode [ 1058.350043][T12512] bridge_slave_1: entered promiscuous mode [ 1058.902284][T12512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.947078][T12512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.290949][ T8968] Bluetooth: hci0: command tx timeout [ 1059.940948][T10152] hsr_slave_0: left promiscuous mode [ 1059.977776][T10152] hsr_slave_1: left promiscuous mode [ 1059.987806][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.998485][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.007762][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.062148][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.105935][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.122505][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1060.130988][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.138423][T10152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.209643][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.274262][T10152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.309498][T12590] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1060.388830][T10152] bridge_slave_1: left allmulticast mode [ 1060.457607][T10152] bridge_slave_1: left promiscuous mode [ 1060.522328][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.660478][T10152] bridge_slave_0: left allmulticast mode [ 1060.709787][T10152] bridge_slave_0: left promiscuous mode [ 1060.786627][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.267899][T10152] veth1_macvtap: left promiscuous mode [ 1061.439471][T10152] veth0_macvtap: left promiscuous mode [ 1061.445523][T10152] veth1_vlan: left promiscuous mode [ 1061.463714][T10152] veth0_vlan: left promiscuous mode [ 1061.466615][ T8968] Bluetooth: hci0: command tx timeout [ 1062.345398][ T8968] Bluetooth: hci3: command tx timeout [ 1062.880880][ T6036] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1063.083135][ T6036] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1063.120836][ T6036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.144609][ T6036] usb 2-1: Product: syz [ 1063.160853][ T6036] usb 2-1: Manufacturer: syz [ 1063.165526][ T6036] usb 2-1: SerialNumber: syz [ 1063.212104][ T6036] usb 2-1: config 0 descriptor?? [ 1063.248863][ T6036] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1064.370974][ T8968] Bluetooth: hci3: command tx timeout [ 1064.739489][T10152] team0 (unregistering): Port device team_slave_1 removed [ 1064.799644][T10152] team0 (unregistering): Port device team_slave_0 removed [ 1064.847404][T10152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.902612][T10152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.440272][T10152] bond0 (unregistering): Released all slaves [ 1065.555015][T12512] team0: Port device team_slave_0 added [ 1065.623038][ T1187] usb 2-1: USB disconnect, device number 43 [ 1065.689262][T12512] team0: Port device team_slave_1 added [ 1065.926532][T12616] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1066.037047][T12512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.089804][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.307282][T12512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.450832][ T8968] Bluetooth: hci3: command tx timeout [ 1066.533798][T12512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.610481][T12512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.859925][T12512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.035110][T12512] hsr_slave_0: entered promiscuous mode [ 1067.056670][T12512] hsr_slave_1: entered promiscuous mode [ 1067.517260][T10152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.770023][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1067.780206][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.788970][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.798020][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.806355][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1067.818557][T10152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.841301][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1068.064758][T10152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.543609][ T5081] Bluetooth: hci3: command tx timeout [ 1068.561159][T10152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.796900][T12584] chnl_net:caif_netlink_parms(): no params data found [ 1069.056625][T12647] misc userio: Invalid payload size [ 1069.126032][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.134813][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.151506][T12584] bridge_slave_0: entered allmulticast mode [ 1069.202495][T12584] bridge_slave_0: entered promiscuous mode [ 1069.713245][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.721842][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.732127][T12584] bridge_slave_1: entered allmulticast mode [ 1069.781602][T12584] bridge_slave_1: entered promiscuous mode [ 1069.891423][ T5081] Bluetooth: hci1: command tx timeout [ 1069.913278][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.926608][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.992962][T10152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.147481][ T5874] kworker/dying (5874) used greatest stack depth: 18440 bytes left [ 1070.159376][T10152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.201804][T12584] team0: Port device team_slave_0 added [ 1070.216563][T12512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1070.292983][T12584] team0: Port device team_slave_1 added [ 1070.322544][T10152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.345812][T12512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1070.408970][T12512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1070.469195][T10152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.687047][T12512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1070.744059][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.759753][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.799578][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.858642][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.894770][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.982388][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.110199][T12634] chnl_net:caif_netlink_parms(): no params data found [ 1071.263380][T12584] hsr_slave_0: entered promiscuous mode [ 1071.278701][T12584] hsr_slave_1: entered promiscuous mode [ 1071.289688][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1071.301004][T12584] Cannot create hsr debugfs directory [ 1071.970948][ T5081] Bluetooth: hci1: command tx timeout [ 1071.974434][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.983838][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.991421][T12634] bridge_slave_0: entered allmulticast mode [ 1071.998498][T12634] bridge_slave_0: entered promiscuous mode [ 1072.023177][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.032712][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.039952][T12634] bridge_slave_1: entered allmulticast mode [ 1072.047436][T12634] bridge_slave_1: entered promiscuous mode [ 1072.150768][ T8247] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1072.174089][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.213976][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.358767][T12634] team0: Port device team_slave_0 added [ 1072.381132][ T8247] usb 2-1: Using ep0 maxpacket: 32 [ 1072.393713][ T8247] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 1072.403055][ T8247] usb 2-1: config 0 has no interface number 0 [ 1072.440907][ T8247] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=24.c5 [ 1072.450028][ T8247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.463154][ T8247] usb 2-1: Product: syz [ 1072.467567][ T8247] usb 2-1: Manufacturer: syz [ 1072.474450][ T8247] usb 2-1: SerialNumber: syz [ 1072.494821][ T8247] usb 2-1: config 0 descriptor?? [ 1072.507934][T12634] team0: Port device team_slave_1 added [ 1072.778477][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.795976][ T8247] em28xx 2-1:0.183: New device syz syz @ 480 Mbps (eb1a:e303, interface 183, class 183) [ 1072.810485][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.840911][ T8247] em28xx 2-1:0.183: Video interface 183 found: bulk [ 1072.847820][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.921036][ T8247] em28xx 2-1:0.183: unknown em28xx chip ID (0) [ 1072.932545][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.939548][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.969461][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.994732][T12512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.084618][ T8247] em28xx 2-1:0.183: reading from i2c device at 0xa0 failed (error=-5) [ 1073.105631][ T8247] em28xx 2-1:0.183: board has no eeprom [ 1073.143943][T12634] hsr_slave_0: entered promiscuous mode [ 1073.151521][T12634] hsr_slave_1: entered promiscuous mode [ 1073.158002][T12634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.166226][T12634] Cannot create hsr debugfs directory [ 1073.191766][ T8247] em28xx 2-1:0.183: Identified as Kaiomy TVnPC U2 (card=63) [ 1073.202375][ T8247] em28xx 2-1:0.183: analog set to bulk mode. [ 1073.209474][ T6036] em28xx 2-1:0.183: Registering V4L2 extension [ 1073.222606][ T8247] usb 2-1: USB disconnect, device number 44 [ 1073.229559][ T8247] em28xx 2-1:0.183: Disconnecting em28xx [ 1073.332142][ T6036] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 1073.358096][T12512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.397881][ T6036] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 1073.477895][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.485158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.555584][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.562846][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.790716][ T6036] DVB: Unable to find symbol xc2028_attach() [ 1073.797457][ T6036] tuner: 1-0061: Tuner has no way to set tv freq [ 1073.803941][ T6036] em28xx 2-1:0.183: Config register raw data: 0xffffffed [ 1073.811427][ T6036] em28xx 2-1:0.183: AC97 chip type couldn't be determined [ 1073.818605][ T6036] em28xx 2-1:0.183: No AC97 audio processor [ 1073.824627][ T6036] tuner: 1-0061: Tuner has no way to set tv freq [ 1073.835416][ T6036] videodev: could not get a free minor [ 1073.842197][ T6036] em28xx 2-1:0.183: can't register radio device [ 1073.849156][ T6036] em28xx 2-1:0.183: V4L2 device video103 deregistered [ 1073.878961][ T6036] em28xx 2-1:0.183: Registering input extension [ 1074.167694][ T5081] Bluetooth: hci1: command tx timeout [ 1074.207331][ T8247] em28xx 2-1:0.183: Closing input extension [ 1074.806357][ T8247] em28xx 2-1:0.183: Freeing device [ 1076.018366][T12584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1076.046788][T12584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1076.221013][ T5081] Bluetooth: hci1: command tx timeout [ 1077.010946][T12584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1077.111380][T12584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1078.363828][T10152] hsr_slave_0: left promiscuous mode [ 1078.395688][T10152] hsr_slave_1: left promiscuous mode [ 1078.426198][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.438437][T10152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.449630][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.469722][T10152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.487104][T10152] bridge_slave_1: left allmulticast mode [ 1078.494492][T10152] bridge_slave_1: left promiscuous mode [ 1078.500314][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.517968][T10152] bridge_slave_0: left allmulticast mode [ 1078.524538][T10152] bridge_slave_0: left promiscuous mode [ 1078.530424][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.577594][T10152] hsr_slave_0: left promiscuous mode [ 1078.586475][T10152] hsr_slave_1: left promiscuous mode [ 1078.592776][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.600246][T10152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.608533][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.616401][T10152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.626942][T10152] bridge_slave_1: left allmulticast mode [ 1078.632958][T10152] bridge_slave_1: left promiscuous mode [ 1078.639026][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.654280][T10152] bridge_slave_0: left allmulticast mode [ 1078.660079][T10152] bridge_slave_0: left promiscuous mode [ 1078.666367][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.715260][T10152] veth1_macvtap: left promiscuous mode [ 1078.721023][T10152] veth0_macvtap: left promiscuous mode [ 1078.726722][T10152] veth1_vlan: left promiscuous mode [ 1078.733591][T10152] veth0_vlan: left promiscuous mode [ 1078.741036][T10152] veth1_macvtap: left promiscuous mode [ 1078.746643][T10152] veth0_macvtap: left promiscuous mode [ 1078.752506][T10152] veth1_vlan: left promiscuous mode [ 1078.757904][T10152] veth0_vlan: left promiscuous mode [ 1079.469509][T10152] team0 (unregistering): Port device team_slave_1 removed [ 1079.525915][T10152] team0 (unregistering): Port device team_slave_0 removed [ 1079.585892][T10152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.638608][T10152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.215295][T10152] bond0 (unregistering): Released all slaves [ 1080.834741][T10152] team0 (unregistering): Port device team_slave_1 removed [ 1080.889686][T10152] team0 (unregistering): Port device team_slave_0 removed [ 1080.947310][T10152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.006729][T10152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.476689][T10152] bond0 (unregistering): (slave team0): Releasing backup interface [ 1081.635429][T10152] bond0 (unregistering): Released all slaves [ 1081.810188][T12512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.234091][T12634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1082.288309][T12634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1082.291971][ T5783] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1082.316337][T12512] veth0_vlan: entered promiscuous mode [ 1082.348188][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.365052][T12634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1082.400770][T12634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1082.448168][T12512] veth1_vlan: entered promiscuous mode [ 1082.523590][ T5783] usb 2-1: config 16 has an invalid interface number: 19 but max is 0 [ 1082.547286][ T5783] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.558898][ T5783] usb 2-1: config 16 has no interface number 0 [ 1082.565555][ T5783] usb 2-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.580893][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.627208][ T5783] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1082.636613][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.653961][ T5783] usb 2-1: Product: syz [ 1082.658399][ T5783] usb 2-1: Manufacturer: syz [ 1082.666567][ T5783] usb 2-1: SerialNumber: syz [ 1082.675017][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.682265][T11036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.713516][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.720774][T11036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.774308][T12512] veth0_macvtap: entered promiscuous mode [ 1082.829444][T12512] veth1_macvtap: entered promiscuous mode [ 1082.927324][T12584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1082.942905][T12584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.979728][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.991328][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.005389][T12512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.038881][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.052153][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.065887][T12512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.118173][T12512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.138258][T12512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.157656][T12512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.170304][T12512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.200998][ T5783] usb 2-1: USB disconnect, device number 45 [ 1083.274714][T12752] udevd[12752]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.370423][T12634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.457928][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.471869][T12634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.493312][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.524899][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.532237][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.573005][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.580215][T11036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.630203][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.651802][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.682699][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.983594][T12584] veth0_vlan: entered promiscuous mode [ 1084.082263][T12584] veth1_vlan: entered promiscuous mode [ 1084.108289][T12791] misc userio: Invalid payload size [ 1085.679948][T12584] veth0_macvtap: entered promiscuous mode [ 1085.691694][T12584] veth1_macvtap: entered promiscuous mode [ 1085.713271][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.723934][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.734633][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.775175][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.788423][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.814509][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.854161][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.906325][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.967852][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.032475][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.124811][T12584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.154257][T12584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.166893][T12805] misc userio: Invalid payload size [ 1086.200414][T12584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.237718][T12584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.949654][T12634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.015006][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.028219][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.188541][T12634] veth0_vlan: entered promiscuous mode [ 1087.222511][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.235958][T12634] veth1_vlan: entered promiscuous mode [ 1087.248444][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.367178][T12634] veth0_macvtap: entered promiscuous mode [ 1087.396168][T12634] veth1_macvtap: entered promiscuous mode [ 1087.412348][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1087.437792][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.449583][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.464929][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.488269][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.499456][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.510782][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.537862][T12634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.612162][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1087.983905][ T9] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 1088.077096][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.087812][ T9] usb 4-1: config 0 has no interface number 0 [ 1088.100653][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.108554][ T9] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=24.c5 [ 1088.126791][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.135292][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.135317][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.135336][T12634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.135349][T12634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.137724][T12634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.164835][ T9] usb 4-1: Product: syz [ 1088.208956][ T9] usb 4-1: Manufacturer: syz [ 1088.223493][ T9] usb 4-1: SerialNumber: syz [ 1088.276225][ T9] usb 4-1: config 0 descriptor?? [ 1088.305630][T12634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.340839][T12634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.353305][T12634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.363782][T12634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.601540][T12824] Bluetooth: MGMT ver 1.22 [ 1088.648757][ T9] em28xx 4-1:0.183: New device syz syz @ 480 Mbps (eb1a:e303, interface 183, class 183) [ 1088.667443][T12824] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1088.677308][ T9] em28xx 4-1:0.183: Video interface 183 found: bulk [ 1088.684875][ T9566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.695248][T11036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.143592][T12827] capability: warning: `syz.2.1428' uses deprecated v2 capabilities in a way that may be insecure [ 1089.830874][ T9] em28xx 4-1:0.183: unknown em28xx chip ID (0) [ 1089.845577][ T9566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.851438][T11036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.847738][ T9] em28xx 4-1:0.183: reading from i2c device at 0xa0 failed (error=-5) [ 1091.919909][ T9] em28xx 4-1:0.183: board has no eeprom [ 1092.026119][ T9] em28xx 4-1:0.183: Identified as Kaiomy TVnPC U2 (card=63) [ 1092.080327][T12840] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1092.136142][ T9] em28xx 4-1:0.183: analog set to bulk mode. [ 1092.208674][ T5783] em28xx 4-1:0.183: Registering V4L2 extension [ 1092.261626][ T5813] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1093.259365][ T9] usb 4-1: USB disconnect, device number 47 [ 1093.379830][ T9] em28xx 4-1:0.183: Disconnecting em28xx [ 1093.522299][ T5813] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1093.533327][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.582192][ T5813] usb 3-1: Product: syz [ 1093.586439][ T5813] usb 3-1: Manufacturer: syz [ 1093.610262][ T5813] usb 3-1: SerialNumber: syz [ 1093.655453][ T5813] usb 3-1: config 0 descriptor?? [ 1093.705619][ T5813] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1093.884038][ T5783] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 1094.024994][ T5783] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 1094.284652][ T5783] DVB: Unable to find symbol xc2028_attach() [ 1094.323838][ T5783] tuner: 1-0061: Tuner has no way to set tv freq [ 1094.330258][ T5783] em28xx 4-1:0.183: Config register raw data: 0xffffffed [ 1094.406146][T10279] usb 3-1: USB disconnect, device number 42 [ 1094.440691][ T5783] em28xx 4-1:0.183: AC97 chip type couldn't be determined [ 1094.501362][ T5783] em28xx 4-1:0.183: No AC97 audio processor [ 1094.549906][ T5783] tuner: 1-0061: Tuner has no way to set tv freq [ 1094.585677][ T5783] videodev: could not get a free minor [ 1094.611336][ T5783] em28xx 4-1:0.183: can't register radio device [ 1094.639940][ T5783] em28xx 4-1:0.183: V4L2 device video103 deregistered [ 1094.688992][ T5783] em28xx 4-1:0.183: Registering input extension [ 1094.698080][T12855] ================================================================== [ 1094.706204][T12855] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 1094.713633][T12855] Read of size 8 at addr ffff888026a30738 by task v4l_id/12855 [ 1094.721202][T12855] [ 1094.723561][T12855] CPU: 0 PID: 12855 Comm: v4l_id Not tainted syzkaller #0 [ 1094.730791][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.740912][T12855] Call Trace: [ 1094.744227][T12855] [ 1094.747188][T12855] dump_stack_lvl+0x16c/0x230 [ 1094.751998][T12855] ? __lock_acquire+0x7c80/0x7c80 [ 1094.757055][T12855] ? show_regs_print_info+0x20/0x20 [ 1094.762294][T12855] ? load_image+0x3b0/0x3b0 [ 1094.766835][T12855] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1094.772270][T12855] ? __virt_addr_valid+0x18c/0x540 [ 1094.777422][T12855] ? __virt_addr_valid+0x469/0x540 [ 1094.782583][T12855] print_report+0xac/0x220 [ 1094.787139][T12855] ? v4l2_fh_open+0xca/0x430 [ 1094.791771][T12855] kasan_report+0x117/0x150 [ 1094.796315][T12855] ? v4l2_fh_open+0xca/0x430 [ 1094.800944][T12855] v4l2_fh_open+0xca/0x430 [ 1094.805469][T12855] em28xx_v4l2_open+0x157/0x980 [ 1094.810367][T12855] v4l2_open+0x212/0x360 [ 1094.814654][T12855] chrdev_open+0x59e/0x670 [ 1094.819100][T12855] ? cd_forget+0x160/0x160 [ 1094.823560][T12855] ? fsnotify_perm+0x3ed/0x5e0 [ 1094.828363][T12855] ? cd_forget+0x160/0x160 [ 1094.832869][T12855] do_dentry_open+0x8c6/0x1500 [ 1094.837678][T12855] path_openat+0x274b/0x3190 [ 1094.842320][T12855] ? __kasan_slab_alloc+0x6c/0x80 [ 1094.847373][T12855] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.853470][T12855] ? verify_lock_unused+0x140/0x140 [ 1094.858710][T12855] ? do_filp_open+0x3d0/0x3d0 [ 1094.863433][T12855] ? __virt_addr_valid+0x18c/0x540 [ 1094.868585][T12855] do_filp_open+0x1c5/0x3d0 [ 1094.873157][T12855] ? vfs_tmpfile+0x490/0x490 [ 1094.877906][T12855] ? _raw_spin_unlock+0x28/0x40 [ 1094.882805][T12855] ? alloc_fd+0x58f/0x630 [ 1094.887181][T12855] do_sys_openat2+0x12c/0x1c0 [ 1094.891906][T12855] ? do_sys_open+0xe0/0xe0 [ 1094.896353][T12855] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1094.902384][T12855] ? lock_chain_count+0x20/0x20 [ 1094.907277][T12855] ? lock_chain_count+0x20/0x20 [ 1094.912174][T12855] __x64_sys_openat+0x139/0x160 [ 1094.917068][T12855] do_syscall_64+0x55/0xb0 [ 1094.921512][T12855] ? clear_bhb_loop+0x40/0x90 [ 1094.926223][T12855] ? clear_bhb_loop+0x40/0x90 [ 1094.930933][T12855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.936861][T12855] RIP: 0033:0x7f03cdaa7407 [ 1094.941317][T12855] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1094.961015][T12855] RSP: 002b:00007ffcc2c2b7a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1094.969486][T12855] RAX: ffffffffffffffda RBX: 00007f03ce246880 RCX: 00007f03cdaa7407 [ 1094.977497][T12855] RDX: 0000000000000000 RSI: 00007ffcc2c2bf1c RDI: ffffffffffffff9c [ 1094.985511][T12855] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1094.993526][T12855] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1095.001550][T12855] R13: 00007ffcc2c2b9f0 R14: 00007f03ce3a5000 R15: 000055842a0424d8 [ 1095.009579][T12855] [ 1095.012637][T12855] [ 1095.015000][T12855] Allocated by task 5783: [ 1095.019407][T12855] kasan_set_track+0x4e/0x70 [ 1095.024033][T12855] __kasan_kmalloc+0x8f/0xa0 [ 1095.028658][T12855] em28xx_v4l2_init+0x10b/0x2e70 [ 1095.033695][T12855] em28xx_init_extension+0x11c/0x1b0 [ 1095.039015][T12855] process_scheduled_works+0xa45/0x15b0 [ 1095.044601][T12855] worker_thread+0xa55/0xfc0 [ 1095.049236][T12855] kthread+0x2fa/0x390 [ 1095.053330][T12855] ret_from_fork+0x48/0x80 [ 1095.057776][T12855] ret_from_fork_asm+0x11/0x20 [ 1095.062579][T12855] [ 1095.064929][T12855] Freed by task 5783: [ 1095.068926][T12855] kasan_set_track+0x4e/0x70 [ 1095.073557][T12855] kasan_save_free_info+0x2e/0x50 [ 1095.078623][T12855] ____kasan_slab_free+0x126/0x1e0 [ 1095.083818][T12855] slab_free_freelist_hook+0x130/0x1b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1095.089313][T12855] __kmem_cache_free+0xba/0x1f0 [ 1095.094199][T12855] em28xx_v4l2_init+0x1670/0x2e70 [ 1095.099266][T12855] em28xx_init_extension+0x11c/0x1b0 [ 1095.104601][T12855] process_scheduled_works+0xa45/0x15b0 [ 1095.110189][T12855] worker_thread+0xa55/0xfc0 [ 1095.114820][T12855] kthread+0x2fa/0x390 [ 1095.118926][T12855] ret_from_fork+0x48/0x80 [ 1095.123389][T12855] ret_from_fork_asm+0x11/0x20 [ 1095.128191][T12855] [ 1095.130534][T12855] The buggy address belongs to the object at ffff888026a30000 [ 1095.130534][T12855] which belongs to the cache kmalloc-8k of size 8192 [ 1095.144618][T12855] The buggy address is located 1848 bytes inside of [ 1095.144618][T12855] freed 8192-byte region [ffff888026a30000, ffff888026a32000) [ 1095.158631][T12855] [ 1095.160993][T12855] The buggy address belongs to the physical page: [ 1095.167447][T12855] page:ffffea00009a8c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26a30 [ 1095.177719][T12855] head:ffffea00009a8c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1095.186692][T12855] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1095.194719][T12855] page_type: 0xffffffff() [ 1095.199141][T12855] raw: 00fff00000000840 ffff888017842280 ffffea00008da800 0000000000000002 [ 1095.207763][T12855] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1095.216377][T12855] page dumped because: kasan: bad access detected [ 1095.222824][T12855] page_owner tracks the page as allocated [ 1095.228657][T12855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11627, tgid 11627 (syz-executor), ts 949912733076, free_ts 949727918874 [ 1095.249796][T12855] post_alloc_hook+0x1cd/0x210 [ 1095.254626][T12855] get_page_from_freelist+0x195c/0x19f0 [ 1095.260218][T12855] __alloc_pages+0x1e3/0x460 [ 1095.264849][T12855] alloc_slab_page+0x5d/0x170 [ 1095.269571][T12855] new_slab+0x87/0x2e0 [ 1095.273692][T12855] ___slab_alloc+0xc6d/0x1300 [ 1095.278413][T12855] __kmem_cache_alloc_node+0x1a2/0x260 [ 1095.283991][T12855] __kmalloc+0xa4/0x240 [ 1095.288178][T12855] batadv_hash_new+0x7b/0x290 [ 1095.292895][T12855] batadv_tt_init+0x54/0x2a0 [ 1095.297513][T12855] batadv_mesh_init+0x3a6/0x700 [ 1095.302407][T12855] batadv_softif_init_late+0x9ba/0xe50 [ 1095.307902][T12855] register_netdevice+0x66c/0x1ae0 [ 1095.313040][T12855] rtnl_newlink+0x14d0/0x2020 [ 1095.317745][T12855] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1095.322712][T12855] netlink_rcv_skb+0x216/0x480 [ 1095.327499][T12855] page last free stack trace: [ 1095.332191][T12855] free_unref_page_prepare+0x7ce/0x8e0 [ 1095.337686][T12855] free_unref_page+0x32/0x2e0 [ 1095.342395][T12855] __unfreeze_partials+0x1cf/0x210 [ 1095.347546][T12855] put_cpu_partial+0x17c/0x250 [ 1095.352351][T12855] __slab_free+0x31d/0x410 [ 1095.356806][T12855] qlist_free_all+0x75/0xe0 [ 1095.361350][T12855] kasan_quarantine_reduce+0x143/0x160 [ 1095.366851][T12855] __kasan_slab_alloc+0x22/0x80 [ 1095.371743][T12855] slab_post_alloc_hook+0x6e/0x4d0 [ 1095.376893][T12855] __kmem_cache_alloc_node+0x13e/0x260 [ 1095.382392][T12855] kmalloc_trace+0x2a/0xe0 [ 1095.386859][T12855] nsim_fib_event_work+0x116f/0x3170 [ 1095.392179][T12855] process_scheduled_works+0xa45/0x15b0 [ 1095.397765][T12855] worker_thread+0xa55/0xfc0 [ 1095.402385][T12855] kthread+0x2fa/0x390 [ 1095.406491][T12855] ret_from_fork+0x48/0x80 [ 1095.410935][T12855] [ 1095.413286][T12855] Memory state around the buggy address: [ 1095.419025][T12855] ffff888026a30600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1095.427118][T12855] ffff888026a30680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1095.435209][T12855] >ffff888026a30700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1095.443289][T12855] ^ [ 1095.449200][T12855] ffff888026a30780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1095.457287][T12855] ffff888026a30800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1095.465379][T12855] ================================================================== [ 1095.491314][ T9] em28xx 4-1:0.183: Closing input extension [ 1095.528656][T12855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1095.535926][T12855] CPU: 0 PID: 12855 Comm: v4l_id Not tainted syzkaller #0 [ 1095.543055][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1095.553131][T12855] Call Trace: [ 1095.556433][T12855] [ 1095.559380][T12855] dump_stack_lvl+0x16c/0x230 [ 1095.564098][T12855] ? show_regs_print_info+0x20/0x20 [ 1095.569331][T12855] ? load_image+0x3b0/0x3b0 [ 1095.573873][T12855] panic+0x2c0/0x710 [ 1095.577808][T12855] ? bpf_jit_dump+0xd0/0xd0 [ 1095.582346][T12855] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1095.588267][T12855] ? _raw_spin_unlock+0x40/0x40 [ 1095.593142][T12855] ? print_memory_metadata+0x314/0x400 [ 1095.598633][T12855] ? v4l2_fh_open+0xca/0x430 [ 1095.603252][T12855] check_panic_on_warn+0x84/0xa0 [ 1095.608220][T12855] ? v4l2_fh_open+0xca/0x430 [ 1095.612848][T12855] end_report+0x6f/0x140 [ 1095.617130][T12855] kasan_report+0x128/0x150 [ 1095.621660][T12855] ? v4l2_fh_open+0xca/0x430 [ 1095.626290][T12855] v4l2_fh_open+0xca/0x430 [ 1095.630740][T12855] em28xx_v4l2_open+0x157/0x980 [ 1095.635621][T12855] v4l2_open+0x212/0x360 [ 1095.639890][T12855] chrdev_open+0x59e/0x670 [ 1095.644335][T12855] ? cd_forget+0x160/0x160 [ 1095.648774][T12855] ? fsnotify_perm+0x3ed/0x5e0 [ 1095.653574][T12855] ? cd_forget+0x160/0x160 [ 1095.658021][T12855] do_dentry_open+0x8c6/0x1500 [ 1095.662822][T12855] path_openat+0x274b/0x3190 [ 1095.667453][T12855] ? __kasan_slab_alloc+0x6c/0x80 [ 1095.672506][T12855] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.678602][T12855] ? verify_lock_unused+0x140/0x140 [ 1095.683843][T12855] ? do_filp_open+0x3d0/0x3d0 [ 1095.688639][T12855] ? __virt_addr_valid+0x18c/0x540 [ 1095.693791][T12855] do_filp_open+0x1c5/0x3d0 [ 1095.698340][T12855] ? vfs_tmpfile+0x490/0x490 [ 1095.703002][T12855] ? _raw_spin_unlock+0x28/0x40 [ 1095.707872][T12855] ? alloc_fd+0x58f/0x630 [ 1095.712236][T12855] do_sys_openat2+0x12c/0x1c0 [ 1095.716943][T12855] ? do_sys_open+0xe0/0xe0 [ 1095.721396][T12855] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1095.727404][T12855] ? lock_chain_count+0x20/0x20 [ 1095.732285][T12855] ? lock_chain_count+0x20/0x20 [ 1095.737176][T12855] __x64_sys_openat+0x139/0x160 [ 1095.742161][T12855] do_syscall_64+0x55/0xb0 [ 1095.746597][T12855] ? clear_bhb_loop+0x40/0x90 [ 1095.751297][T12855] ? clear_bhb_loop+0x40/0x90 [ 1095.756007][T12855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.761937][T12855] RIP: 0033:0x7f03cdaa7407 [ 1095.766384][T12855] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1095.786020][T12855] RSP: 002b:00007ffcc2c2b7a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1095.794477][T12855] RAX: ffffffffffffffda RBX: 00007f03ce246880 RCX: 00007f03cdaa7407 [ 1095.802502][T12855] RDX: 0000000000000000 RSI: 00007ffcc2c2bf1c RDI: ffffffffffffff9c [ 1095.810601][T12855] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1095.818601][T12855] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1095.826610][T12855] R13: 00007ffcc2c2b9f0 R14: 00007f03ce3a5000 R15: 000055842a0424d8 [ 1095.834767][T12855] [ 1095.837943][T12855] Kernel Offset: disabled [ 1095.842278][T12855] Rebooting in 86400 seconds..