last executing test programs: 38.450263516s ago: executing program 2 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 37.253326803s ago: executing program 2 (id=1043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20040600) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) 33.954948606s ago: executing program 2 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003080000400001802c0004001400010002000000ac14140f00001700000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 10.695922129s ago: executing program 0 (id=1107): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffce, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000006e00000000000f0000000c0007800800020001"], 0x20}}, 0x0) 9.344471559s ago: executing program 0 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.002869957s ago: executing program 0 (id=1115): syz_usb_connect$uac1(0x0, 0xba, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x5}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0xc, "3cad09", "c142c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6c, 0x1, 0x5, 0x7, "fb3e5a83a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x62159479c80b9627) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000020bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x34001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r6, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_procfs(r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.954366735s ago: executing program 4 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = io_uring_setup(0x1893, &(0x7f00000002c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) 5.271649365s ago: executing program 2 (id=1051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@private0, 0x86dd}}}]}, 0x38}, 0x1, 0xf00}, 0x0) 4.977327372s ago: executing program 4 (id=1130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x40a0ae49, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@']) 4.10992798s ago: executing program 4 (id=1133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x5609, &(0x7f0000000000)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000080)="53000000b79269c170b9291ca3e588726b9dd721c4dc9d273d33512f6d550e973041da17c27124e49606da8454534e33d8214dd8ad644686726bfbceec85732331", 0x41}], 0x2) 4.067292399s ago: executing program 2 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 3.799287796s ago: executing program 1 (id=1136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.445642972s ago: executing program 3 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x7b, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}}, 0x0) 2.782817321s ago: executing program 2 (id=1138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380", 0xb}, {&(0x7f0000000000)="2303942fe0df", 0x6}], 0x2) 2.708806492s ago: executing program 1 (id=1139): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6, 0x0, 0x0, 0x1}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 2.513918413s ago: executing program 3 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000000000000060000000000c2f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 2.468496711s ago: executing program 4 (id=1141): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000078c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="ff45"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.150975581s ago: executing program 4 (id=1142): socket$inet_tcp(0x2, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.14890767s ago: executing program 1 (id=1143): r0 = socket$isdn(0x22, 0x2, 0x25) r1 = socket$isdn(0x22, 0x2, 0x4) dup3(r1, r0, 0x0) 1.835748565s ago: executing program 3 (id=1144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x400, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52) 1.821023948s ago: executing program 1 (id=1145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x60}}, 0x0) 1.563746652s ago: executing program 3 (id=1146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0b501012ea5ba6fa4fefabf21f4b034f83d44fd9415aec4a00a9a4720ca068b1bb81f6606dca4df08ae83f89516be6319bef733015c36534f0999404610f94b8a929e460c76836d8c2e61455b600da22291898622de505cd2ea6ca6def1c24b459acadaf198f50bc7c40c541ca6343131565ba0a1e8ccd648c81d857bf152b874b1839574dab1931c50fd5ce6e3233348a935a95c57729d95c21a0aae48b54ea33752c7b3e5e93af6eaac7524423fc63723ffdf72346ac56da43b6989b4bd324324de5d84730e189758b6908ca4568803705856b738f9a7c3703a1f5fdf2cba916433e33a5d42d95170351b1988cb670c6b471c134d14337bf0aef9c4f8b068e3da5f55b5bcb36dfea18c8c7b2a60907690ffa4e59180ccc99d4582b4baf75e85c47f511d130591589075feff7cac58802a88de0f68ef14097d9f2b29b2be964bd371207a353d9e98cc2beedec167a8c57d2e62e2e6ffd74ff4fa06e48b8d5fc662ad75c8d43cf55a5d8cdc3150da0926557faf353e0ebdc92aec1463cc948d646638d12521352566e243bbe935fa8e67f3aa9f632874e458e935c25bab880a8db6b0e42577c281b645680c66453efd4f2b75a793e467756477a45cf90bff8c224b9bb1b79c9aaf0571d744356aa57285e5e0f04e84f77f6b03cd2f6071ff168eb443cac865afea33f533f5ce049d9aaf9e1fe7e426052b435152f40e37c9a270164a33756babed82c9f8edba3753321107fde62f3a3c802af546d47d559703e5fae7c1da71f9a02eb2115179f7342c60b0195b15f4f6b50a89a797098aa752303739a7da438bac0647490c4a742b6d0486157f787585a05eb8ba07f948d7785dd67e4d089d4694c63ab42bfba4c0758d1b50318b67a8dcffe4a4bda637dbe5b135cb768bda0d175c4d23713b123fae3c6ba93a2d5b74742ef03289ccd27175110649a705f6860112ca3e8132595dbaac074ce3b275c4957c12fc46fe289084980a06774088e02f4960dbc0f33d4d30e27dfc3d9a8472d3671307434588232a24197b55daf02803c06850b40293b547cfc45da0123b0345ac5dffe23e835330c20255c3cddd60fc15ffc687364dfe00c67ff5cc67e0310981be23829267699666ff6582593d42d3e8e185c388c3ddaa843e51af0ac419bd2058c1613096a1d580a49343b868de58253f94c12fc4f1a3bd77435ce4ee8707acb5310df4faed1f3753dbcb2c3bd38451db45252269d95e095d7b63de995a00321bbd78d6f303564a0c7c7d5490f8f17d75e3942a42906c104a13daef7afe0694eb784d33e9a88b71ad8c136f6afa1d405aef015b348b36f23f792c9e05cdd6060cc1131cbfb9241d497d05c7ef7b2ef308ef2d97d831b6da17b93ba54f46a95a35753f8d97bab1971b4f215ecfa9d9c5aadee07930169b2ddea8de7e5fe470fcf63abc6f9a9e32f"}) 1.524025004s ago: executing program 0 (id=1147): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r0, 0x40049409, r1) 1.46081492s ago: executing program 1 (id=1148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 1.430635537s ago: executing program 4 (id=1149): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x21, 0x37, 0x0, {0x1, 0x0, 0x0, 0x0, 0xffb8, '%+('}}, 0xe6da) getpgrp(0x0) 1.271795124s ago: executing program 3 (id=1150): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) chdir(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) 1.271570549s ago: executing program 0 (id=1151): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.271144084s ago: executing program 1 (id=1152): ftruncate(0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x90043) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x3dd382) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x3, 0xd, 0x8001, 0x2, "d88fd8801ad6eeb75a9506e0213b2e1004f028f0030b2e0146bde6e66b8f37ff"}) 98.833327ms ago: executing program 0 (id=1153): socket(0x10, 0x803, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x0, 0x0, 0x34325241}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, {}, {}, 0xff, 0x1}, {0x4, 0x0, {}, {0x0, 0x1}}], 0x40) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 3 (id=1154): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83da5799f9 code=0x7fc00000 [ 291.226011][ T5327] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 291.418068][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.440151][ T5327] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 291.451234][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.474056][ T5327] usb 5-1: config 0 descriptor?? [ 291.492218][ T5327] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 291.660520][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 291.820725][ T5275] usb 2-1: USB disconnect, device number 21 [ 292.043474][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.078659][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.090000][ T5275] libceph: connect (1)[c::]:6789 error -101 [ 292.098280][ T5275] libceph: mon0 (1)[c::]:6789 connect error [ 292.110042][ T5275] libceph: connect (1)[c::]:6789 error -101 [ 292.116713][ T5275] libceph: mon0 (1)[c::]:6789 connect error [ 292.134633][ T7469] bridge_slave_0: entered allmulticast mode [ 292.314423][ T54] Bluetooth: hci1: command tx timeout [ 292.340210][ T7469] bridge_slave_0: entered promiscuous mode [ 292.361692][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.369500][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.380733][ T7469] bridge_slave_1: entered allmulticast mode [ 292.395999][ T7469] bridge_slave_1: entered promiscuous mode [ 292.404305][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 292.413434][ T7495] ceph: No mds server is up or the cluster is laggy [ 292.434078][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 292.506252][ T7506] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 292.506252][ T7506] program syz.1.610 not setting count and/or reply_len properly [ 293.289352][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 293.298352][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 293.542571][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.567893][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.624940][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 293.843774][ T7469] team0: Port device team_slave_0 added [ 293.948079][ T7469] team0: Port device team_slave_1 added [ 294.175173][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.192878][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.416135][ T54] Bluetooth: hci1: command tx timeout [ 295.049910][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.063346][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.070440][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.122976][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.162934][ T5327] usb 5-1: USB disconnect, device number 18 [ 295.382286][ T7469] hsr_slave_0: entered promiscuous mode [ 295.411114][ T7469] hsr_slave_1: entered promiscuous mode [ 295.420704][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.429643][ T7469] Cannot create hsr debugfs directory [ 295.635944][ T5327] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 295.741123][ T7469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.837879][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 295.851820][ T5327] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 295.862510][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.878003][ T5327] usb 5-1: Product: syz [ 295.882675][ T5327] usb 5-1: Manufacturer: syz [ 295.888941][ T5327] usb 5-1: SerialNumber: syz [ 295.903589][ T5327] usb 5-1: config 0 descriptor?? [ 295.917030][ T5327] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 295.944441][ T7469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.071992][ T7469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.199408][ T7469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.226514][ T5327] usb 5-1: USB disconnect, device number 19 [ 296.446861][ T54] Bluetooth: hci1: command tx timeout [ 296.488798][ T7469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.512030][ T7469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.550744][ T7469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.569737][ T7469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.774554][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.921851][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.005574][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.012819][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.067532][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.074774][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.876261][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.973916][ T7469] veth0_vlan: entered promiscuous mode [ 298.013669][ T7469] veth1_vlan: entered promiscuous mode [ 298.181064][ T943] IPVS: starting estimator thread 0... [ 298.318226][ T7469] veth0_macvtap: entered promiscuous mode [ 298.329026][ T7570] IPVS: using max 25 ests per chain, 60000 per kthread [ 298.366329][ T7469] veth1_macvtap: entered promiscuous mode [ 298.409414][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.422011][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.432491][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.444148][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.461805][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.476531][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.488306][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.501951][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.513246][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.524882][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.526809][ T54] Bluetooth: hci1: command tx timeout [ 298.535418][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.551246][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.591486][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.683797][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.705039][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.718547][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.733071][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.743363][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.754766][ T943] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 298.755162][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.773591][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.840656][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.854119][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.916442][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.931446][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.944561][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.966044][ T5275] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 298.982587][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.004156][ T943] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 299.016655][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.063301][ T7469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.071232][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.089654][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.112735][ T7469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.123116][ T7469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.139117][ T943] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 299.151758][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.165328][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.176554][ T7469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.217114][ T5275] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 299.229837][ T5275] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.238309][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.260051][ T943] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 299.268013][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 299.289349][ T5275] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.301188][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.324694][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.335141][ T5275] usb 2-1: Product: syz [ 299.342805][ T943] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.347285][ T5275] usb 2-1: Manufacturer: syz [ 299.371339][ T943] usb 4-1: string descriptor 0 read error: -22 [ 299.381818][ T943] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 299.392018][ T5275] usb 2-1: SerialNumber: syz [ 299.401089][ T5275] usb 2-1: config 0 descriptor?? [ 299.408031][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.423752][ T5275] usb 2-1: selecting invalid altsetting 0 [ 299.437470][ T943] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 299.460765][ T4609] Bluetooth: hci7: sending frame failed (-49) [ 299.477055][ T54] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 299.521172][ T7578] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 299.570661][ T2499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.580843][ T2499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.681257][ T943] usb 2-1: USB disconnect, device number 22 [ 299.750061][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.771304][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.996761][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 303.236415][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 303.366573][ T5275] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.536699][ T8] usb 4-1: USB disconnect, device number 19 [ 303.564039][ T5275] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.567486][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 303.583076][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.629977][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 303.632965][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.649291][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.668502][ T9] usb 2-1: Product: syz [ 303.673955][ T9] usb 2-1: Manufacturer: syz [ 303.679030][ T9] usb 2-1: SerialNumber: syz [ 303.687458][ T9] usb 2-1: config 0 descriptor?? [ 303.705497][ T9] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 303.709850][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.747849][ T5275] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.764050][ T5275] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.777565][ T5275] usb 5-1: Manufacturer: syz [ 303.840536][ T5275] usb 5-1: config 0 descriptor?? [ 304.387922][ T5275] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 304.432129][ T5275] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 304.479304][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.284382][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.311057][ T9] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 305.322381][ T5275] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 305.344903][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 305.358915][ T9] usb 2-1: USB disconnect, device number 23 [ 306.547250][ T5327] usb 5-1: USB disconnect, device number 20 [ 308.983553][ T4609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.994227][ T4609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.005965][ T4609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.006778][ T58] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 309.037885][ T4609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.049302][ T4609] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 309.057347][ T4609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.172928][ T7647] lo speed is unknown, defaulting to 1000 [ 309.297765][ T58] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.316468][ T5275] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 309.336755][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.356356][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 309.371836][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.385839][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.398594][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.412760][ T58] usb 2-1: config 0 descriptor?? [ 309.479705][ T7651] __vm_enough_memory: pid: 7651, comm: syz.4.659, bytes: 549221777408 not enough memory for the allocation [ 309.547722][ T5275] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 309.583641][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.585972][ T5327] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 309.657759][ T5275] usb 4-1: Product: syz [ 309.684139][ T5275] usb 4-1: Manufacturer: syz [ 309.694025][ T5275] usb 4-1: SerialNumber: syz [ 309.714027][ T5275] usb 4-1: config 0 descriptor?? [ 309.735086][ T5275] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 309.782207][ T5327] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 309.792682][ T5327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.812480][ T5327] usb 1-1: Product: syz [ 309.833720][ T5327] usb 1-1: Manufacturer: syz [ 309.862885][ T58] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 309.876955][ T5327] usb 1-1: SerialNumber: syz [ 309.896485][ T7648] lo speed is unknown, defaulting to 1000 [ 309.912033][ T58] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 309.915429][ T5327] usb 1-1: config 0 descriptor?? [ 309.953380][ T5275] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 309.962010][ T5275] sq905c 4-1:0.0: Get version command failed [ 309.969472][ T5275] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 309.992316][ T5275] usb 4-1: USB disconnect, device number 20 [ 310.020592][ T5327] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 310.458664][ T5327] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 310.790483][ T5275] usb 1-1: USB disconnect, device number 12 [ 310.918364][ T5327] usb 2-1: USB disconnect, device number 24 [ 311.086127][ T4609] Bluetooth: hci7: command tx timeout [ 311.217162][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 311.667755][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 311.676180][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 311.676201][ T29] audit: type=1326 audit(1723561650.975:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.1.665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6387d799f9 code=0x0 [ 311.714291][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.733059][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.746437][ T7648] bridge_slave_0: entered allmulticast mode [ 311.754602][ T7648] bridge_slave_0: entered promiscuous mode [ 311.764289][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 311.774741][ T7677] x_tables: duplicate underflow at hook 1 [ 311.779415][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.802503][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.814760][ T7648] bridge_slave_1: entered allmulticast mode [ 311.826272][ T7648] bridge_slave_1: entered promiscuous mode [ 311.931567][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.945185][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.118532][ T7648] team0: Port device team_slave_0 added [ 312.173904][ T7648] team0: Port device team_slave_1 added [ 312.202109][ T58] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 312.258241][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.265244][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.298737][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.330504][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.338384][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.459667][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 312.549325][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.050814][ T58] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 313.096625][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.157629][ T58] usb 4-1: Product: syz [ 313.161878][ T58] usb 4-1: Manufacturer: syz [ 313.165980][ T4609] Bluetooth: hci7: command tx timeout [ 313.222168][ T58] usb 4-1: SerialNumber: syz [ 313.261029][ T58] usb 4-1: config 0 descriptor?? [ 313.307004][ T58] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 313.332971][ T58] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 313.396913][ T7648] hsr_slave_0: entered promiscuous mode [ 313.570794][ T7648] hsr_slave_1: entered promiscuous mode [ 313.610895][ T7648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.641404][ T7648] Cannot create hsr debugfs directory [ 313.703429][ T58] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 313.748488][ T58] radio-raremono 4-1:0.0: raremono_cmd_main failed (-71) [ 313.768505][ T58] radio-raremono 4-1:0.0: V4L2 device registered as radio32 [ 314.480572][ T58] usb 4-1: USB disconnect, device number 21 [ 314.488027][ T58] radio-raremono 4-1:0.0: Thanko's Raremono disconnected [ 314.629780][ T7711] overlayfs: missing 'lowerdir' [ 314.659769][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 315.055218][ T7717] ======================================================= [ 315.055218][ T7717] WARNING: The mand mount option has been deprecated and [ 315.055218][ T7717] and is ignored by this kernel. Remove the mand [ 315.055218][ T7717] option from the mount to silence this warning. [ 315.055218][ T7717] ======================================================= [ 315.467979][ T4609] Bluetooth: hci7: command tx timeout [ 317.000339][ T7648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.296119][ T5273] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 317.300710][ T7648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.461015][ T7648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.485986][ T4609] Bluetooth: hci7: command tx timeout [ 317.498324][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.529337][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.552850][ T5273] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 317.577667][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.584920][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.589799][ T5273] usb 1-1: config 0 descriptor?? [ 317.599099][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.669241][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 317.740879][ T7648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.075372][ T5273] appletouch 1-1:0.0: Geyser mode initialized. [ 318.130263][ T5273] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 318.204246][ T7648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.260532][ T7648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.302113][ T7748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.313260][ T7648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.320912][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 318.365012][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.376947][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.387725][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.419525][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 318.429933][ T7648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.437638][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.455616][ T25] usb 4-1: Product: syz [ 318.460752][ T25] usb 4-1: Manufacturer: syz [ 318.465383][ T25] usb 4-1: SerialNumber: syz [ 318.531118][ T8] usb 1-1: USB disconnect, device number 13 [ 318.600150][ T8] appletouch 1-1:0.0: input: appletouch disconnected [ 318.727850][ T25] usbhid 4-1:1.0: can't add hid device: -22 [ 318.752337][ T25] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 318.784519][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.807336][ T25] usb 4-1: USB disconnect, device number 22 [ 318.923240][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.336105][ T5273] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 319.349257][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.356573][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.499685][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.506990][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.636125][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 319.674177][ T5273] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.700740][ T5273] usb 2-1: config 179 has no interface number 0 [ 319.814646][ T7761] ptrace attach of "./syz-executor exec"[5219] was attempted by "./syz-executor exec"[7761] [ 320.526521][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 320.549903][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 320.561264][ T5273] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.572482][ T5273] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 320.606207][ T5273] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 320.638092][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.677806][ T7755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.716280][ T4609] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 322.682590][ T4609] Bluetooth: hci3: unexpected event for opcode 0x042c [ 322.871504][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 323.259932][ T25] usb 2-1: USB disconnect, device number 25 [ 323.259979][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 323.274915][ T25] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 323.320339][ T7775] tun0: tun_chr_ioctl cmd 35108 [ 323.627947][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.759114][ T7648] veth0_vlan: entered promiscuous mode [ 323.777070][ T7648] veth1_vlan: entered promiscuous mode [ 323.950676][ T7648] veth0_macvtap: entered promiscuous mode [ 324.010014][ T7648] veth1_macvtap: entered promiscuous mode [ 324.089822][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.145039][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.192736][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.205372][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.216164][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.249649][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.299849][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.349290][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.360101][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.371615][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.384499][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.395639][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.406572][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.418196][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.431132][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.471030][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.585840][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.597003][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.666686][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.728469][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.800774][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.860070][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.872734][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.884122][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.902144][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.925586][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.937228][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.948123][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.959851][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.972684][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.008505][ T7648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.058945][ T7648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.085451][ T7648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.117010][ T7648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.929137][ T5835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.969024][ T5835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.638039][ T2518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.876369][ T2518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.178066][ T7828] team0: Port device team_slave_0 removed [ 329.232218][ T5275] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 329.236279][ T7828] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 329.436656][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 329.447050][ T5275] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 329.486630][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.513578][ T5275] usb 4-1: Product: syz [ 329.526644][ T5275] usb 4-1: Manufacturer: syz [ 329.531495][ T5275] usb 4-1: SerialNumber: syz [ 329.541967][ T5275] r8152-cfgselector 4-1: Unknown version 0x0000 [ 329.549065][ T5275] r8152-cfgselector 4-1: config 0 descriptor?? [ 329.586972][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 329.778305][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.805492][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.828983][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 329.862584][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.882912][ T25] usb 5-1: config 0 descriptor?? [ 329.894817][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 329.966650][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 330.024367][ T8] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 330.356677][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 330.367232][ T943] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 331.407453][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.427660][ T943] usb 1-1: Product: syz [ 331.436741][ T943] usb 1-1: Manufacturer: syz [ 331.450570][ T943] usb 1-1: SerialNumber: syz [ 331.470114][ T943] usb 1-1: config 0 descriptor?? [ 332.424846][ T943] usb 1-1: USB disconnect, device number 14 [ 332.434933][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.559005][ T5275] usb 5-1: USB disconnect, device number 21 [ 332.669622][ T7848] syz.2.717: attempt to access beyond end of device [ 332.669622][ T7848] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 332.687216][ T7848] SQUASHFS error: Failed to read block 0x0: -5 [ 332.694228][ T7848] unable to read squashfs_super_block [ 333.053546][ T7865] bridge1: entered promiscuous mode [ 333.246821][ T5275] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 333.469176][ T7874] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.723'. [ 333.497405][ T7874] lo: entered allmulticast mode [ 334.377962][ T5275] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 334.387849][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.403041][ T5275] usb 3-1: config 0 has no interface number 0 [ 334.410697][ T5275] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 334.464575][ T5275] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.488600][ T5275] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 334.504454][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.527701][ T5275] usb 3-1: Product: syz [ 334.537018][ T7878] netlink: 6 bytes leftover after parsing attributes in process `syz.0.726'. [ 334.543883][ T5275] usb 3-1: Manufacturer: syz [ 334.551009][ T5275] usb 3-1: SerialNumber: syz [ 334.567583][ T5275] usb 3-1: config 0 descriptor?? [ 334.888729][ T7887] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 335.023271][ T4609] Bluetooth: hci5: command 0x0406 tx timeout [ 335.471262][ T5273] usb 3-1: USB disconnect, device number 18 [ 336.438074][ T7899] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 338.423148][ T7917] binder: BINDER_SET_CONTEXT_MGR already set [ 338.446645][ T7917] binder: 7913:7917 ioctl 4018620d 20000040 returned -16 [ 338.470109][ T29] audit: type=1326 audit(1723561677.755:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7901 comm="syz.2.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4b0d799f9 code=0x0 [ 338.604364][ T7922] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 339.176544][ T7925] netlink: 165 bytes leftover after parsing attributes in process `syz.0.741'. [ 346.222627][ T7917] syz.4.738 (7917): drop_caches: 2 [ 347.589547][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 347.598315][ T7949] input: syz0 as /devices/virtual/input/input23 [ 348.561705][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 348.575290][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 348.587982][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 348.598110][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 348.605987][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 348.613342][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 348.698197][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 349.240461][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 349.250361][ T7960] lo speed is unknown, defaulting to 1000 [ 349.250982][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.297805][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.154841][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.237120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.334466][ T9] usb 4-1: config 0 descriptor?? [ 350.375540][ T9] hub 4-1:0.0: USB hub found [ 350.380886][ T5236] Bluetooth: hci6: command 0x0406 tx timeout [ 350.608411][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 350.686225][ T54] Bluetooth: hci8: command tx timeout [ 350.823795][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 350.844357][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 350.928788][ T9] usb 4-1: USB disconnect, device number 24 [ 352.082297][ T7960] chnl_net:caif_netlink_parms(): no params data found [ 352.505514][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.516667][ T5275] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 352.528786][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.544105][ T7960] bridge_slave_0: entered allmulticast mode [ 352.583557][ T7960] bridge_slave_0: entered promiscuous mode [ 352.610001][ T8018] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.619707][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.657154][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.678645][ T7960] bridge_slave_1: entered allmulticast mode [ 352.692696][ T7960] bridge_slave_1: entered promiscuous mode [ 352.736808][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 352.753129][ T5275] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.767385][ T54] Bluetooth: hci8: command tx timeout [ 352.790737][ T5275] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.825395][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 352.829226][ T5275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.844179][ T5275] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 352.856763][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.868324][ T5275] usb 1-1: config 0 descriptor?? [ 352.873770][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.768'. [ 352.876457][ T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 353.029714][ T7960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.084709][ T7960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.095443][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 353.106897][ T58] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 353.117699][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.131129][ T58] usb 3-1: config 0 descriptor?? [ 353.314764][ T5275] corsair-cpro 0003:1B1C:1D00.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0 [ 353.401191][ T7960] team0: Port device team_slave_0 added [ 353.437991][ T5275] corsair-cpro 0003:1B1C:1D00.001C: probe with driver corsair-cpro failed with error -38 [ 353.462655][ T7960] team0: Port device team_slave_1 added [ 353.579753][ T8] usb 1-1: USB disconnect, device number 15 [ 353.621689][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.657111][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.688423][ T7960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.700593][ T8029] netlink: 'syz.3.771': attribute type 2 has an invalid length. [ 353.709548][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.751352][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.799975][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 353.843555][ T7960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.965482][ T7960] hsr_slave_0: entered promiscuous mode [ 353.991574][ T7960] hsr_slave_1: entered promiscuous mode [ 354.007667][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 354.014450][ T7960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.033942][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 354.050020][ T7960] Cannot create hsr debugfs directory [ 354.089813][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.106509][ T5275] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 354.108033][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.157180][ T9] usb 5-1: Product: syz [ 354.164610][ T9] usb 5-1: Manufacturer: syz [ 354.172111][ T9] usb 5-1: SerialNumber: syz [ 354.195492][ T9] usb 5-1: config 0 descriptor?? [ 354.217296][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 354.239000][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 354.319139][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 354.332968][ T5275] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 354.352869][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.371057][ T5275] usb 4-1: Product: syz [ 354.387716][ T5275] usb 4-1: Manufacturer: syz [ 354.400492][ T5275] usb 4-1: SerialNumber: syz [ 354.438003][ T5275] usb 4-1: config 0 descriptor?? [ 354.556702][ T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 354.682755][ T5275] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 354.776779][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 354.800121][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.815434][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.830174][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 354.836689][ T58] usb 1-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 354.846934][ T54] Bluetooth: hci8: command tx timeout [ 354.885537][ T7960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.912008][ T7960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.926736][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.939500][ T58] usb 1-1: config 0 descriptor?? [ 355.137854][ T7960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.179341][ T7960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.398059][ T8] usb 3-1: USB disconnect, device number 19 [ 355.450503][ T7960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.485329][ T9] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 355.492325][ T7960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.503191][ T9] em28xx 5-1:0.0: board has no eeprom [ 355.586738][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 355.621703][ T5328] usb 1-1: USB disconnect, device number 16 [ 355.630437][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 355.658897][ T9] usb 5-1: USB disconnect, device number 22 [ 355.667143][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 355.677337][ T8] em28xx 5-1:0.0: Binding DVB extension [ 355.695964][ T7960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.730295][ T7960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.759602][ T8] em28xx 5-1:0.0: Registering input extension [ 355.775671][ T9] em28xx 5-1:0.0: Closing input extension [ 355.878987][ T9] em28xx 5-1:0.0: Freeing device [ 355.931770][ T29] audit: type=1326 audit(1723561695.235:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.2.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4b0d799f9 code=0x0 [ 356.110178][ T7960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.148740][ T7960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.190131][ T7960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.198525][ T5275] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 356.212983][ T5275] usb 4-1: USB disconnect, device number 25 [ 356.253284][ T7960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.324248][ T8046] ptrace attach of "./syz-executor exec"[7469] was attempted by "\x0c "[8046] [ 356.441202][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 356.507554][ T8042] 9pnet_fd: Insufficient options for proto=fd [ 356.554938][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.575401][ T29] audit: type=1326 audit(1723561695.875:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8039 comm="syz.2.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4b0d799f9 code=0x0 [ 356.625567][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.656543][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 356.794878][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.800644][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.810161][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.831436][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 356.867260][ T9] usb 5-1: can't read configurations, error -71 [ 356.926116][ T54] Bluetooth: hci8: command tx timeout [ 356.936724][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.943981][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.103402][ T8054] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.781'. [ 357.177360][ T8054] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 357.244194][ T8050] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 358.210266][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.309156][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 358.464925][ T7960] veth0_vlan: entered promiscuous mode [ 358.540842][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 358.549944][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 358.560035][ T7960] veth1_vlan: entered promiscuous mode [ 358.560418][ T9] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 358.583665][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.594530][ T9] usb 5-1: config 0 descriptor?? [ 358.604518][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 358.766861][ T7960] veth0_macvtap: entered promiscuous mode [ 358.840870][ T7960] veth1_macvtap: entered promiscuous mode [ 358.959876][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.995905][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.023736][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.066448][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.089947][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.160931][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.180011][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.193113][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.209720][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.223446][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.236520][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.243529][ T8079] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 359.347485][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.388649][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.421472][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.454326][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.481823][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.547609][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.608856][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.632162][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.653829][ T5275] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 359.675550][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.725313][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.764806][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.780494][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.790938][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.803197][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.818888][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.830207][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.842156][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.855554][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.867159][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 359.873341][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.913427][ T5275] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 359.933051][ T5275] usb 1-1: config 0 has no interface number 0 [ 359.945505][ T5275] usb 1-1: New USB device found, idVendor=0af0, idProduct=8120, bcdDevice=56.54 [ 359.954817][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.954847][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.954869][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.989766][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.990143][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.009349][ T5275] usb 1-1: config 0 descriptor?? [ 360.062335][ T7960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.128993][ T7960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.160957][ T7960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.170977][ T7960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.195719][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 360.435936][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 360.473995][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 360.484007][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.484103][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.519003][ T943] usb 5-1: USB disconnect, device number 25 [ 360.546368][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 360.572761][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.603210][ T9] usb 3-1: Product: syz [ 360.611790][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.621242][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.664113][ T9] usb 3-1: Manufacturer: syz [ 360.672309][ T9] usb 3-1: SerialNumber: syz [ 360.711224][ T9] usb 3-1: config 0 descriptor?? [ 360.739812][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.751059][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 361.076370][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 361.172551][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 361.191806][ T9] em28xx 3-1:0.0: board has no eeprom [ 361.277011][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 361.317384][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 361.339070][ T5328] em28xx 3-1:0.0: Binding DVB extension [ 361.373554][ T9] usb 3-1: USB disconnect, device number 20 [ 361.411629][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 361.562768][ T5328] em28xx 3-1:0.0: Registering input extension [ 361.607917][ T9] em28xx 3-1:0.0: Closing input extension [ 361.651551][ T9] em28xx 3-1:0.0: Freeing device [ 362.957844][ T9] IPVS: starting estimator thread 0... [ 363.755322][ T8106] IPVS: using max 15 ests per chain, 36000 per kthread [ 363.830146][ T9] usb 1-1: USB disconnect, device number 17 [ 364.217345][ T8125] Bluetooth: hci4: Opcode 0x0c20 failed: -4 [ 365.086315][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 365.127556][ T5276] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 365.675042][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 365.684032][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 365.692754][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.702791][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.712825][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.732195][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.006848][ T5276] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 366.016047][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.039026][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.065934][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.096342][ T5276] usb 2-1: Product: syz [ 366.104863][ T5276] usb 2-1: Manufacturer: syz [ 366.126475][ T5276] usb 2-1: SerialNumber: syz [ 366.144077][ T5276] usb 2-1: config 0 descriptor?? [ 366.164720][ T5276] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 366.207024][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 366.281522][ T9] usb 1-1: usb_control_msg returned -32 [ 366.295103][ T9] usbtmc 1-1:16.0: can't read capabilities [ 366.372196][ T5276] gspca_sn9c2028: read1 error -71 [ 366.389029][ T5276] gspca_sn9c2028: read1 error -71 [ 366.394471][ T5276] gspca_sn9c2028: read1 error -71 [ 366.402170][ T5276] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 366.418936][ T5276] usb 2-1: USB disconnect, device number 26 [ 366.616486][ T8176] netlink: 'syz.2.822': attribute type 21 has an invalid length. [ 366.624621][ T8176] netlink: 100 bytes leftover after parsing attributes in process `syz.2.822'. [ 366.816209][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 366.917278][ T5328] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 367.017461][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 367.031156][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 367.062864][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 367.110144][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 367.121509][ T5328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.133388][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.142854][ T5328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.153671][ T9] usb 5-1: Product: syz [ 367.160449][ T9] usb 5-1: Manufacturer: syz [ 367.187187][ T5328] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.208165][ T9] usb 5-1: SerialNumber: syz [ 367.217348][ T5328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.228029][ T9] usb 5-1: config 0 descriptor?? [ 367.233302][ T5328] usb 3-1: SerialNumber: syz [ 367.242012][ T9] safe_serial 5-1:0.0: safe_serial converter detected [ 367.288422][ T9] safe_serial 5-1:0.0: probe with driver safe_serial failed with error -22 [ 367.516487][ T5328] usb 3-1: 0:2 : does not exist [ 367.522473][ T5276] usb 5-1: USB disconnect, device number 26 [ 367.528700][ T5328] usb 3-1: unit 255 not found! [ 367.555209][ T5328] usb 3-1: USB disconnect, device number 21 [ 367.850633][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 367.860379][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 367.893928][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 367.920111][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 367.930412][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 367.939127][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 368.045420][ T8188] lo speed is unknown, defaulting to 1000 [ 369.403105][ T9] usb 1-1: USB disconnect, device number 18 [ 369.658742][ T8205] syz.4.833: attempt to access beyond end of device [ 369.658742][ T8205] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 369.750799][ T8205] exFAT-fs (nbd4): unable to read boot sector [ 369.816940][ T8205] exFAT-fs (nbd4): failed to read boot sector [ 369.828592][ T8205] exFAT-fs (nbd4): failed to recognize exfat type [ 369.836755][ T5276] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 370.029065][ T5276] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 370.048524][ T54] Bluetooth: hci9: command tx timeout [ 370.074760][ T5276] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 370.130257][ T5276] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.206370][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.232658][ T8200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.241602][ T8200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.264373][ T5276] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.732050][ T9] usb 2-1: USB disconnect, device number 27 [ 371.223778][ T8188] chnl_net:caif_netlink_parms(): no params data found [ 371.544654][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.599987][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.634621][ T8188] bridge_slave_0: entered allmulticast mode [ 371.681128][ T8188] bridge_slave_0: entered promiscuous mode [ 371.692127][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.699662][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.707159][ T8188] bridge_slave_1: entered allmulticast mode [ 371.715274][ T8188] bridge_slave_1: entered promiscuous mode [ 372.127197][ T54] Bluetooth: hci9: command tx timeout [ 372.462872][ T8188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.518540][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.756450][ T58] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 372.777864][ T8188] team0: Port device team_slave_0 added [ 372.788655][ T8188] team0: Port device team_slave_1 added [ 372.794734][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.840'. [ 372.814869][ T8244] netlink: 52 bytes leftover after parsing attributes in process `syz.0.840'. [ 372.831642][ T8240] Bluetooth: MGMT ver 1.23 [ 372.843345][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 372.854363][ T8244] vlan0: entered allmulticast mode [ 372.861089][ T8244] veth0_vlan: entered allmulticast mode [ 372.968829][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.995823][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.016942][ T58] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 373.046663][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.066996][ T58] usb 2-1: config 0 descriptor?? [ 373.093093][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.116626][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.387997][ T8188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.978807][ T8188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.016709][ T8188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.058027][ T8188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.206438][ T54] Bluetooth: hci9: command tx timeout [ 374.241805][ T8188] hsr_slave_0: entered promiscuous mode [ 374.272388][ T8188] hsr_slave_1: entered promiscuous mode [ 374.290340][ T8188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.315076][ T8188] Cannot create hsr debugfs directory [ 375.202691][ T58] usb 2-1: USB disconnect, device number 28 [ 375.653169][ T8274] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.285909][ T54] Bluetooth: hci9: command tx timeout [ 376.379463][ T29] audit: type=1326 audit(1723561716.366:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8271 comm="syz.2.849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4b0d799f9 code=0x0 [ 376.866647][ T8188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.986584][ T5276] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 377.085411][ T8188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.206419][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 377.249738][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.436741][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.448595][ T5276] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 377.458739][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.481801][ T5276] usb 1-1: config 0 descriptor?? [ 377.637604][ T8290] tc_dump_action: action bad kind [ 377.975137][ T8188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.097191][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 378.131053][ T8188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.157752][ T5276] wacom 0003:056A:0028.001F: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 378.195491][ T5276] wacom 0003:056A:0028.001F: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0 [ 378.219845][ T5276] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.001F/input/input26 [ 378.306089][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 378.331946][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.342114][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 378.370830][ T9] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 378.398014][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.406335][ T9] usb 5-1: Product: syz [ 378.411143][ T9] usb 5-1: Manufacturer: syz [ 378.416045][ T9] usb 5-1: SerialNumber: syz [ 378.441157][ T9] usb 5-1: config 0 descriptor?? [ 378.471770][ T58] usb 1-1: USB disconnect, device number 19 [ 378.473585][ T9] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 378.652547][ T8188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.684648][ T9] usb 5-1: USB disconnect, device number 27 [ 378.694835][ T8188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.749304][ T8188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.831562][ T8188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.013266][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.020590][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.154568][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.274892][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.417501][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.430817][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.516573][ T943] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 379.531804][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.539096][ T6643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.706357][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 379.721514][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 379.723329][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.753881][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.765611][ T943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.801195][ T943] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.811799][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.827427][ T943] usb 1-1: config 0 descriptor?? [ 379.859652][ T8188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.327906][ T943] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0020/input/input29 [ 380.561847][ T943] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 380.574841][ T8337] libceph: resolve '0..' (ret=-3): failed [ 380.623698][ T943] usb 1-1: USB disconnect, device number 20 [ 380.823506][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.891701][ T8343] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 381.085693][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 381.283762][ T8188] veth0_vlan: entered promiscuous mode [ 381.933397][ T8188] veth1_vlan: entered promiscuous mode [ 382.177523][ T8188] veth0_macvtap: entered promiscuous mode [ 382.242538][ T8188] veth1_macvtap: entered promiscuous mode [ 382.399302][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.409985][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.421357][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.432369][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.444084][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.455405][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.466352][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.629459][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.774313][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.934165][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.021403][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.065420][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.119978][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.170280][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.206485][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.237217][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.282905][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.307632][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.340217][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.419329][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.489460][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.549489][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.585678][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.606174][ T8368] netlink: 200 bytes leftover after parsing attributes in process `syz.4.878'. [ 383.630075][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.672836][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.698000][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.743903][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.784129][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.824575][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.835068][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.848268][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.862194][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.876565][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.887485][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.087567][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.244261][ T8188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.433487][ T8188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.468387][ T8188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.667135][ T8368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.878'. [ 384.695913][ T8188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.704671][ T8188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.725875][ T8188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.740042][ T8188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.965590][ T5835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.975089][ T5835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.958808][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.071610][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.102258][ T8382] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 386.278887][ T8382] batman_adv: batadv0: Adding interface: team0 [ 386.285292][ T8382] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.315887][ T8382] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 386.372055][ T8393] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 386.394242][ T8393] netlink: 2 bytes leftover after parsing attributes in process `syz.4.884'. [ 386.407068][ T8393] team0: entered promiscuous mode [ 386.412159][ T8393] team_slave_0: entered promiscuous mode [ 386.562616][ T8393] team_slave_1: entered promiscuous mode [ 386.611175][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.618597][ T8393] batman_adv: batadv0: Interface activated: team0 [ 386.625171][ T8393] batman_adv: batadv0: Interface deactivated: team0 [ 386.632484][ T8393] batman_adv: batadv0: Removing interface: team0 [ 386.682168][ T8393] bridge0: port 3(team0) entered blocking state [ 386.704709][ T8393] bridge0: port 3(team0) entered disabled state [ 386.793404][ T8393] team0: entered allmulticast mode [ 386.812813][ T8393] team_slave_0: entered allmulticast mode [ 386.846365][ T8393] team_slave_1: entered allmulticast mode [ 386.860468][ T8393] bridge0: port 3(team0) entered blocking state [ 386.867143][ T8393] bridge0: port 3(team0) entered forwarding state [ 386.975093][ T8398] pim6reg1: entered promiscuous mode [ 386.985461][ T8398] pim6reg1: entered allmulticast mode [ 388.728661][ T8419] lo speed is unknown, defaulting to 1000 [ 388.916533][ T8425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.926570][ T58] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 389.116861][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 389.131462][ T58] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 389.156919][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.185392][ T58] usb 2-1: Product: syz [ 389.201796][ T58] usb 2-1: Manufacturer: syz [ 389.216472][ T58] usb 2-1: SerialNumber: syz [ 389.234177][ T58] usb 2-1: config 0 descriptor?? [ 389.936929][ T58] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 390.057507][ T58] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 390.112554][ T58] usb 2-1: USB disconnect, device number 29 [ 390.875978][ T8455] netlink: 'syz.1.904': attribute type 8 has an invalid length. [ 390.895977][ T29] audit: type=1326 audit(1723561731.196:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.4.905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca7bd799f9 code=0x0 [ 391.049754][ T54] Bluetooth: hci7: unexpected event 0x04 length: 14 > 10 [ 392.463205][ T8471] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 392.530876][ T5327] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 392.726332][ T5327] usb 2-1: Using ep0 maxpacket: 8 [ 392.741639][ T5327] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 392.772114][ T5327] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 392.797081][ T5327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.813763][ T5327] usb 2-1: Product: syz [ 392.821304][ T5327] usb 2-1: Manufacturer: syz [ 392.826613][ T5327] usb 2-1: SerialNumber: syz [ 392.839705][ T5327] usb 2-1: config 0 descriptor?? [ 392.863914][ T5327] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 393.068958][ T5275] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 393.656646][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 393.675037][ T5275] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 394.026514][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.040515][ T5275] usb 1-1: config 0 descriptor?? [ 394.238977][ T5327] gspca_zc3xx: reg_w_i err -110 [ 394.720258][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 394.876021][ T5327] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 394.889474][ T5327] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 394.945962][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 394.953356][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.978108][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 394.995985][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.226175][ T8] usb 5-1: Product: syz [ 395.242448][ T8] usb 5-1: Manufacturer: syz [ 395.280849][ T8] usb 5-1: SerialNumber: syz [ 396.243154][ T58] usb 2-1: USB disconnect, device number 30 [ 396.301335][ T5275] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 396.320473][ T8] usb 5-1: config 0 descriptor?? [ 396.337866][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 396.343852][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 396.368711][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 396.371479][ T5275] asix 1-1:0.0: probe with driver asix failed with error -71 [ 396.448710][ T5275] usb 1-1: USB disconnect, device number 21 [ 396.546979][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 396.621058][ T8] gspca_zc3xx: reg_w_i err -71 [ 397.635881][ T8] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 397.642282][ T8] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 397.928242][ T8] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 398.157041][ T8] usb 5-1: device descriptor read/all, error -71 [ 398.206758][ T5273] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 398.236852][ T8544] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 398.269270][ T5236] Bluetooth: hci9: unexpected event 0x06 length: 4 > 3 [ 398.370916][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.935'. [ 398.405875][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'. [ 398.427504][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 398.442807][ T5273] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.462013][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.476314][ T5273] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 398.488324][ T5273] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.502046][ T5273] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.515059][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.541855][ T5273] usb 1-1: Product: syz [ 398.553298][ T5273] usb 1-1: Manufacturer: syz [ 398.564621][ T5273] usb 1-1: SerialNumber: syz [ 398.764013][ T5236] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 398.906230][ T5273] usb 1-1: USB disconnect, device number 22 [ 399.001682][ T8] usb 5-1: USB disconnect, device number 28 [ 399.162236][ T8572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.960166][ T5275] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 400.160260][ T8596] netlink: 'syz.3.952': attribute type 2 has an invalid length. [ 400.174275][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 400.187542][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 400.202416][ T5275] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 400.212541][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.222378][ T5275] usb 2-1: Product: syz [ 400.227522][ T5275] usb 2-1: Manufacturer: syz [ 400.232171][ T5275] usb 2-1: SerialNumber: syz [ 400.241508][ T5275] usb 2-1: config 0 descriptor?? [ 400.248435][ T8584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 400.255891][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 400.260822][ T5275] hub 2-1:0.0: bad descriptor, ignoring hub [ 400.270184][ T5275] hub 2-1:0.0: probe with driver hub failed with error -5 [ 400.286956][ T5236] Bluetooth: hci9: command tx timeout [ 400.297030][ T5275] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 400.489636][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.508636][ T8] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.538770][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.576431][ T8] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 400.595317][ T5273] usb 2-1: USB disconnect, device number 31 [ 400.595336][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 400.628895][ T8] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.697151][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 400.735301][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.777154][ T8592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 400.947125][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 402.367836][ T5236] Bluetooth: hci9: command 0x0406 tx timeout [ 402.771135][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 402.781078][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 402.793065][ T5236] Bluetooth: hci3: hardware error 0x00 [ 403.724034][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.926788][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 405.789706][ T8] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 405.813063][ T8] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input31 [ 405.848424][ T8] usb 3-1: USB disconnect, device number 22 [ 405.848495][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 406.507625][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 406.545207][ T5328] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 406.796092][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 406.816475][ T5328] usb 5-1: Using ep0 maxpacket: 32 [ 406.911978][ T5328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.977612][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 407.007160][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.017714][ T5328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.035990][ T5236] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 407.063039][ T8] usb 1-1: Product: syz [ 407.067970][ T5328] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.088639][ T8] usb 1-1: Manufacturer: syz [ 407.094396][ T8] usb 1-1: SerialNumber: syz [ 407.110294][ T5328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.158032][ T8] usb 1-1: config 0 descriptor?? [ 407.164428][ T5328] usb 5-1: config 0 descriptor?? [ 407.179795][ T5328] hub 5-1:0.0: USB hub found [ 407.368949][ T8707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.393274][ T5328] hub 5-1:0.0: 1 port detected [ 407.406505][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.897727][ T8] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 408.818085][ T8] usb 1-1: USB disconnect, device number 23 [ 408.924063][ T9] hub 5-1:0.0: activate --> -90 [ 409.086786][ T5236] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 409.482854][ T5327] usb 5-1-port1: cannot reset (err = -71) [ 409.483661][ T25] usb 5-1: USB disconnect, device number 29 [ 409.496354][ T5327] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 409.498073][ T5327] usb 5-1-port1: attempt power cycle [ 410.536666][ T5236] Bluetooth: hci9: command 0x0406 tx timeout [ 410.810410][ T4609] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 410.991740][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.025668][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.046969][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.056806][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.066172][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.070048][ T8756] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 411.075684][ T8754] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 411.610876][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 411.723977][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 412.061290][ T8776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1005'. [ 412.073585][ T8776] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 412.768169][ T8] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 412.796341][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 412.823734][ T8] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.851145][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 412.851153][ T4609] Bluetooth: hci1: command tx timeout [ 412.851184][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.899180][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.018222][ T8] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 413.264469][ T5275] usb 2-1: USB disconnect, device number 32 [ 413.361006][ T8778] syz.2.1007 (8778) used greatest stack depth: 18936 bytes left [ 413.646131][ T4609] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 413.656614][ T4609] Bluetooth: hci7: Injecting HCI hardware error event [ 413.665943][ T5236] Bluetooth: hci7: hardware error 0x00 [ 414.977524][ T8813] input: syz1 as /devices/virtual/input/input32 [ 415.356486][ T5275] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 415.548905][ T5275] usb 3-1: config 4 has an invalid interface number: 235 but max is 0 [ 415.557939][ T5275] usb 3-1: config 4 has no interface number 0 [ 415.564551][ T5275] usb 3-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=cc.58 [ 415.577815][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.746038][ T5236] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 416.761364][ T8826] syz.0.1025[8826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.773265][ T8826] syz.0.1025[8826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.849639][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 417.066550][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 417.209688][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1026'. [ 419.484071][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 419.506079][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 419.530367][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 419.542592][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 419.552314][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 419.560390][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 419.572112][ T8846] lo speed is unknown, defaulting to 1000 [ 420.072151][ T6643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.258113][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 420.283700][ T6643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.428970][ T8851] lo speed is unknown, defaulting to 1000 [ 420.559032][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 420.596626][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.628024][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 420.645936][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 420.654187][ T8] usb 2-1: Manufacturer: syz [ 420.689007][ T8] usb 2-1: config 0 descriptor?? [ 420.714285][ T6643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.906010][ T8] rc_core: IR keymap rc-hauppauge not found [ 420.922244][ T8] Registered IR keymap rc-empty [ 420.943599][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 420.972351][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 421.035504][ T8] usb 2-1: USB disconnect, device number 33 [ 421.189585][ T6643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.449606][ T25] usb 3-1: USB disconnect, device number 23 [ 421.646319][ T5236] Bluetooth: hci9: command tx timeout [ 421.975029][ T6643] bridge_slave_1: left allmulticast mode [ 421.995123][ T6643] bridge_slave_1: left promiscuous mode [ 422.008112][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.039048][ T6643] bridge_slave_0: left allmulticast mode [ 422.201436][ T6643] bridge_slave_0: left promiscuous mode [ 422.293587][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.926497][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 423.138368][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 423.161259][ T25] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 423.194117][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.208276][ T25] usb 1-1: Product: syz [ 423.212516][ T25] usb 1-1: Manufacturer: syz [ 423.219014][ T25] usb 1-1: SerialNumber: syz [ 423.227931][ T25] usb 1-1: config 0 descriptor?? [ 423.258230][ T25] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 423.727175][ T5236] Bluetooth: hci9: command tx timeout [ 423.889943][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.926463][ T25] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 423.934988][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.952848][ T25] usb 1-1: USB disconnect, device number 24 [ 423.978240][ T6643] bond0 (unregistering): Released all slaves [ 424.476754][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 424.658651][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 424.716457][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 424.724035][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.738581][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 424.749356][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 424.759916][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.776403][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.789580][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 424.808790][ T25] usb 2-1: SerialNumber: syz [ 424.817207][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 424.824927][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.098033][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.105585][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.807416][ T5236] Bluetooth: hci9: command tx timeout [ 425.863192][ T6643] hsr_slave_0: left promiscuous mode [ 426.045885][ T6643] hsr_slave_1: left promiscuous mode [ 426.166305][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.173934][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.243259][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.262383][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.394551][ T6643] veth1_macvtap: left promiscuous mode [ 426.437132][ T6643] veth0_macvtap: left promiscuous mode [ 426.443070][ T6643] veth1_vlan: left promiscuous mode [ 426.482951][ T6643] veth0_vlan: left promiscuous mode [ 427.474510][ T4609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 427.519008][ T4609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 427.531201][ T4609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 427.545048][ T4609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 427.575001][ T4609] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 427.592208][ T4609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 427.899303][ T4609] Bluetooth: hci9: command tx timeout [ 428.188918][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 428.307462][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 429.212782][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.221367][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.231112][ T8851] bridge_slave_0: entered allmulticast mode [ 429.242006][ T8851] bridge_slave_0: entered promiscuous mode [ 429.276414][ T25] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 429.308279][ T25] usb 2-1: USB disconnect, device number 34 [ 429.322569][ T25] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 429.342394][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.355954][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.386609][ T8851] bridge_slave_1: entered allmulticast mode [ 429.394730][ T8851] bridge_slave_1: entered promiscuous mode [ 429.602801][ T8912] lo speed is unknown, defaulting to 1000 [ 429.602961][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 429.635081][ T8925] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.680390][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.720782][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.732685][ T4609] Bluetooth: hci7: command tx timeout [ 429.858652][ T58] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 429.916730][ T8851] team0: Port device team_slave_0 added [ 430.000042][ T8851] team0: Port device team_slave_1 added [ 430.073458][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 430.101166][ T58] usb 5-1: config 0 has no interfaces? [ 430.110212][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.126722][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.134795][ T58] usb 5-1: Product: syz [ 430.148741][ T58] usb 5-1: Manufacturer: syz [ 430.154077][ T58] usb 5-1: SerialNumber: syz [ 430.172052][ T58] usb 5-1: config 0 descriptor?? [ 430.183461][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.198240][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.225310][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.245991][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.283005][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.290825][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.320451][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.437520][ T943] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 430.604857][ T8851] hsr_slave_0: entered promiscuous mode [ 430.615139][ T8851] hsr_slave_1: entered promiscuous mode [ 430.640178][ T8851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.648781][ T8851] Cannot create hsr debugfs directory [ 430.692001][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 430.699923][ T943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 430.726608][ T943] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 430.737228][ T943] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 430.745457][ T943] usb 1-1: Product: syz [ 430.750968][ T943] usb 1-1: Manufacturer: syz [ 430.755654][ T943] usb 1-1: SerialNumber: syz [ 430.774810][ T943] usb 1-1: config 0 descriptor?? [ 430.782155][ T8929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 430.824554][ T6643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.856800][ T58] usb 5-1: USB disconnect, device number 34 [ 431.034321][ T8] usb 1-1: USB disconnect, device number 25 [ 431.113599][ T6643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.376857][ T6643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.682427][ T6643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.807037][ T4609] Bluetooth: hci7: command tx timeout [ 432.160433][ T58] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.169349][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 432.245494][ T8946] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 432.447107][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 432.512152][ T58] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 432.524108][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.543011][ T58] usb 5-1: config 0 descriptor?? [ 433.141705][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.158792][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.174496][ T8912] bridge_slave_0: entered allmulticast mode [ 433.194904][ T8912] bridge_slave_0: entered promiscuous mode [ 433.333342][ T6643] bridge_slave_1: left allmulticast mode [ 433.392572][ T5327] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 433.415952][ T6643] bridge_slave_1: left promiscuous mode [ 433.520245][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.719679][ T5327] usb 1-1: Using ep0 maxpacket: 8 [ 433.786640][ T6643] bridge_slave_0: left allmulticast mode [ 433.829078][ T5327] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 433.873100][ T6643] bridge_slave_0: left promiscuous mode [ 433.891436][ T4609] Bluetooth: hci7: command tx timeout [ 433.937590][ T5327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.955769][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.022800][ T5327] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.098562][ T5327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 434.144061][ T5327] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 434.183319][ T5327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.214459][ T5327] usb 1-1: config 0 descriptor?? [ 434.240075][ T8966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 434.539925][ T8702] usb 1-1: USB disconnect, device number 26 [ 434.787188][ T943] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 434.993699][ T943] usb 2-1: Using ep0 maxpacket: 32 [ 435.006545][ T943] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 435.030396][ T943] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 435.043377][ T943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 435.084670][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.101496][ T943] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 435.112328][ T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.129213][ T943] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 435.142211][ T943] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 435.159363][ T943] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 435.168588][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.187445][ T943] usb 2-1: config 0 descriptor?? [ 435.295935][ T6643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.336847][ T6643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.364271][ T6643] bond0 (unregistering): Released all slaves [ 435.431458][ T943] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 435.448256][ T943] usb 2-1: USB disconnect, device number 35 [ 435.462753][ T943] usblp0: removed [ 435.504519][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.523750][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.531552][ T8912] bridge_slave_1: entered allmulticast mode [ 435.546831][ T8912] bridge_slave_1: entered promiscuous mode [ 435.561396][ T8984] usb usb9: usbfs: process 8984 (syz.0.1075) did not claim interface 0 before use [ 435.597455][ T58] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 435.657314][ T58] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 435.696511][ T58] asix 5-1:0.0: probe with driver asix failed with error -71 [ 435.719429][ T58] usb 5-1: USB disconnect, device number 35 [ 435.828741][ T8912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.853323][ T8912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.968332][ T4609] Bluetooth: hci7: command tx timeout [ 435.985946][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 436.102338][ T8912] team0: Port device team_slave_0 added [ 436.115470][ T8912] team0: Port device team_slave_1 added [ 436.185936][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 436.207368][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 436.250896][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 436.269144][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 436.278977][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.290747][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.304008][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.323553][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 436.341513][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 436.354945][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 436.364340][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.389220][ T9] usb 2-1: config 0 descriptor?? [ 436.545693][ T8989] netlink: 'syz.0.1077': attribute type 1 has an invalid length. [ 436.624687][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 436.631237][ T8989] bond1: entered promiscuous mode [ 436.723029][ T8990] team0: Port device team_slave_1 removed [ 436.739903][ T8990] bond1: (slave team_slave_1): making interface the new active one [ 436.748648][ T8990] team_slave_1: entered promiscuous mode [ 436.760995][ T8990] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 436.771616][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 436.786555][ T8991] bond1: entered allmulticast mode [ 436.791876][ T8991] team_slave_1: entered allmulticast mode [ 436.802954][ T8991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.821070][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.829014][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.856441][ T8912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.885479][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.892931][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.927313][ T8912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.942786][ T9] usb 2-1: USB disconnect, device number 36 [ 436.955269][ T9] usblp0: removed [ 437.017078][ T6643] hsr_slave_0: left promiscuous mode [ 437.048605][ T6643] hsr_slave_1: left promiscuous mode [ 437.063748][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.072143][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.081805][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.090235][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.148288][ T6643] veth1_macvtap: left promiscuous mode [ 437.160179][ T6643] veth0_macvtap: left promiscuous mode [ 437.174598][ T6643] veth1_vlan: left promiscuous mode [ 437.186566][ T6643] veth0_vlan: left promiscuous mode [ 438.383397][ T6643] team0 (unregistering): Port device team_slave_1 removed [ 438.446438][ T6643] team0 (unregistering): Port device team_slave_0 removed [ 439.386281][ T9000] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 439.408753][ T9000] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 439.421720][ T9000] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 439.699662][ T8912] hsr_slave_0: entered promiscuous mode [ 439.741477][ T8912] hsr_slave_1: entered promiscuous mode [ 439.765259][ T8912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.774951][ T8912] Cannot create hsr debugfs directory [ 439.781676][ T8851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.906721][ T9013] random: crng reseeded on system resumption [ 440.820857][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.848385][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.940597][ T8851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.987861][ T8851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.086916][ T8851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 442.651210][ T9025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.202920][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.315407][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.412002][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.419355][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.502143][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.509795][ T6643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.541371][ T8702] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 444.772763][ T8702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 444.800135][ T8702] usb 5-1: not running at top speed; connect to a high speed hub [ 444.856687][ T8702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.896040][ T8702] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 444.958322][ T8702] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.005104][ T8702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.055893][ T8702] usb 5-1: Product: syz [ 445.061448][ T8702] usb 5-1: Manufacturer: syz [ 445.096311][ T8702] usb 5-1: SerialNumber: syz [ 445.102072][ T8912] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.161817][ T8912] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.251413][ T8912] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.342137][ T8912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.419992][ T8702] usb 5-1: 0:2 : does not exist [ 445.462548][ T8702] usb 5-1: USB disconnect, device number 36 [ 445.981650][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.035597][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.124650][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.215817][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.223097][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.240219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.247473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.566186][ T8851] veth0_vlan: entered promiscuous mode [ 446.655349][ T8851] veth1_vlan: entered promiscuous mode [ 447.137616][ T8851] veth0_macvtap: entered promiscuous mode [ 447.228466][ T8851] veth1_macvtap: entered promiscuous mode [ 447.692644][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.708049][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.719231][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.732108][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.743226][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.754901][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.766841][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.781880][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.793190][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.301635][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.336620][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.397999][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.412456][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.501974][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.571636][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.611544][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.741075][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.889524][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.909773][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.924003][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.959874][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.007286][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.077720][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.105893][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.134205][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.181307][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.235048][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.269799][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.280510][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.317217][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.345410][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.361623][ T8851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.376416][ T8851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.390398][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.403249][ T8851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.419426][ T8851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.434677][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 449.469012][ T8851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.494539][ T8851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.649637][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.664228][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.695886][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 449.705470][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.728685][ T9] usb 2-1: config 0 descriptor?? [ 449.761933][ T8912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.894523][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.935711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.123405][ T2518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.139444][ T2518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.285814][ T9089] tipc: Started in network mode [ 450.291698][ T9089] tipc: Node identity 101, cluster identity 4711 [ 450.368317][ T9089] tipc: Node number set to 257 [ 450.436238][ T9089] tipc: Cannot configure node identity twice [ 450.491118][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 450.509841][ T8912] veth0_vlan: entered promiscuous mode [ 450.523967][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.561155][ T9] usb 2-1: USB disconnect, device number 37 [ 450.640264][ T8912] veth1_vlan: entered promiscuous mode [ 450.881616][ T8912] veth0_macvtap: entered promiscuous mode [ 450.895023][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 450.971382][ T8912] veth1_macvtap: entered promiscuous mode [ 451.126475][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.181031][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.246335][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.319442][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.340353][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.366392][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.394654][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.410510][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.617794][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.852381][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.126462][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.163542][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.225788][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.274674][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.295831][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.312698][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.324892][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.365796][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.387991][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.396883][ T5276] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 452.422713][ T9125] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1117'. [ 452.471031][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.566524][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.608708][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.622883][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 452.649790][ T5276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 452.656095][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.662255][ T5276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.691534][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.703217][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.714845][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.726084][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.736158][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.745172][ T5276] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.747214][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.747239][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.747259][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.747278][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.747294][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.747313][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.747365][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.821441][ T5276] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.860356][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.863040][ T5276] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.895393][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.950782][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.952055][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.971612][ T5276] usb 1-1: Product: syz [ 452.982345][ T5276] usb 1-1: Manufacturer: syz [ 452.990479][ T5276] usb 1-1: SerialNumber: syz [ 453.067009][ T9137] sp0: Synchronizing with TNC [ 453.080403][ T8912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.091571][ T8912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.103461][ T8912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.113860][ T8912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.171145][ T9142] x_tables: duplicate underflow at hook 1 [ 454.378699][ T6643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.417203][ T6643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.623079][ T6643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.673794][ T6643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.331190][ T9201] delete_channel: no stack [ 458.584194][ T4609] Bluetooth: hci9: unexpected subevent 0x01 length: 78 > 18 [ 458.641880][ T8702] usb 1-1: USB disconnect, device number 27 [ 459.556371][ T25] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 459.896244][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 459.966523][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.029551][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.047921][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.070345][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 460.089908][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.107805][ T25] usb 2-1: config 0 descriptor?? [ 460.654349][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 460.785043][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 460.805342][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 460.814090][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 461.401662][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.206963][ T30] INFO: task syz.0.590:7425 blocked for more than 163 seconds. [ 462.306388][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.317012][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.324471][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.331223][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 462.332646][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.348918][ T25] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 462.384890][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0021/input/input34 [ 462.403691][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.418275][ T30] task:syz.0.590 state:D stack:24672 pid:7425 tgid:7425 ppid:5225 flags:0x00000004 [ 462.431276][ T30] Call Trace: [ 462.434969][ T25] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 462.448685][ T30] [ 462.451800][ T30] __schedule+0x17ae/0x4a10 [ 462.457139][ T30] ? __pfx___schedule+0x10/0x10 [ 462.473803][ T25] usb 2-1: USB disconnect, device number 38 [ 462.476068][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.515045][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.524010][ T30] ? schedule+0x90/0x320 [ 462.556298][ T30] schedule+0x14b/0x320 [ 462.581111][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.601076][ T30] __mutex_lock+0x6a4/0xd70 [ 462.612255][ T30] ? __mutex_lock+0x527/0xd70 [ 462.617768][ T30] ? eventpoll_release_file+0xcb/0x1c0 [ 462.628472][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.638844][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 462.645037][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 462.651086][ T30] eventpoll_release_file+0xcb/0x1c0 [ 462.657026][ T30] __fput+0x6e0/0x8a0 [ 462.661078][ T30] task_work_run+0x24f/0x310 [ 462.666338][ T30] ? __pfx_task_work_run+0x10/0x10 [ 462.671551][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 462.677721][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 462.683377][ T30] do_syscall_64+0x100/0x230 [ 462.690595][ T30] ? clear_bhb_loop+0x35/0x90 [ 462.695835][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.701823][ T30] RIP: 0033:0x7fcf4b1799f9 [ 462.707209][ T30] RSP: 002b:00007ffc34b51ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 462.716759][ T30] RAX: 0000000000000000 RBX: 00007fcf4b317a80 RCX: 00007fcf4b1799f9 [ 462.727298][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 462.736277][ T30] RBP: 00007fcf4b317a80 R08: 0000000000000006 R09: 00007ffc34b522df [ 462.745698][ T30] R10: 00000000003ffd40 R11: 0000000000000246 R12: 0000000000044302 [ 462.754334][ T30] R13: 00007ffc34b520f0 R14: 00007ffc34b52110 R15: ffffffffffffffff [ 462.766698][ T30] [ 462.769789][ T30] INFO: task syz.0.590:7426 blocked for more than 164 seconds. [ 462.786331][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 462.794219][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.803228][ T30] task:syz.0.590 state:D stack:25208 pid:7426 tgid:7425 ppid:5225 flags:0x00004004 [ 462.813899][ T30] Call Trace: [ 462.817906][ T30] [ 462.821387][ T30] __schedule+0x17ae/0x4a10 [ 462.829385][ T30] ? __pfx___schedule+0x10/0x10 [ 462.834478][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.840052][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.849284][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.855670][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 462.861375][ T30] ? schedule+0x90/0x320 [ 462.865638][ T30] schedule+0x14b/0x320 [ 462.871108][ T30] ? down_read+0x6a5/0xa40 [ 462.875562][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.882189][ T30] down_read+0x705/0xa40 [ 462.887041][ T30] ? __lock_acquire+0x137a/0x2040 [ 462.892145][ T30] ? __pfx_down_read+0x10/0x10 [ 462.897739][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 462.903442][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 462.910273][ T30] ? __pfx___up_read+0x10/0x10 [ 462.916208][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 462.922821][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 462.951650][ T30] ? count_memcg_event_mm+0x90/0x420 [ 462.981341][ T30] ? __filemap_get_folio+0x984/0xc10 [ 463.023195][ T30] filemap_fault+0x828/0x1760 [ 463.047846][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880682c5400: rx timeout, send abort [ 463.059124][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026a42000: rx timeout, send abort [ 463.067526][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.068075][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880682c5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 463.089132][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 463.091528][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026a42000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 463.099140][ T30] ? pte_alloc_one+0x443/0x5d0 [ 463.146011][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 463.151665][ T30] ? blk_cgroup_congested+0x1b/0x200 [ 463.159279][ T30] ? blk_cgroup_congested+0x1f0/0x200 [ 463.165845][ T30] __do_fault+0x135/0x460 [ 463.170799][ T30] handle_pte_fault+0xda8/0x6eb0 [ 463.176273][ T30] ? validate_chain+0x11e/0x5900 [ 463.181240][ T30] ? mark_lock+0x9a/0x350 [ 463.185592][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 463.191198][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 463.197941][ T30] handle_mm_fault+0xf70/0x1880 [ 463.202926][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 463.208594][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.215289][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 463.221218][ T30] exc_page_fault+0x2b9/0x8c0 [ 463.228430][ T30] asm_exc_page_fault+0x26/0x30 [ 463.234698][ T30] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 463.241136][ T30] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 463.262119][ T30] RSP: 0018:ffffc9000a85fb38 EFLAGS: 00050246 [ 463.268746][ T30] RAX: 0000000000000001 RBX: ffff88802ddb612c RCX: 0000000020000200 [ 463.277499][ T30] RDX: ffff888021509e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 463.285532][ T30] RBP: ffffc9000a85fdb8 R08: ffffffff821eab66 R09: 1ffff110045519eb [ 463.293915][ T30] R10: dffffc0000000000 R11: ffffed10045519ec R12: 0000000020000200 [ 463.302434][ T30] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff11005bb6c25 [ 463.312094][ T30] ? do_epoll_wait+0xde6/0x2040 [ 463.331401][ T30] do_epoll_wait+0xe3a/0x2040 [ 463.345469][ T30] ? __pfx_do_epoll_wait+0x10/0x10 [ 463.351938][ T30] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 463.362873][ T30] ? up_write+0x1a9/0x590 [ 463.368589][ T30] ? __pfx_do_futex+0x10/0x10 [ 463.374125][ T30] do_epoll_pwait+0x56/0x1e0 [ 463.380178][ T30] __x64_sys_epoll_pwait+0x2b8/0x310 [ 463.386612][ T30] ? __pfx___x64_sys_epoll_pwait+0x10/0x10 [ 463.425915][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.435282][ T30] ? do_syscall_64+0x100/0x230 [ 463.441942][ T30] ? do_syscall_64+0xb6/0x230 [ 463.447436][ T30] do_syscall_64+0xf3/0x230 [ 463.452524][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.459096][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.466350][ T30] RIP: 0033:0x7fcf4b1799f9 [ 463.470816][ T30] RSP: 002b:00007fcf4beed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 463.479495][ T30] RAX: ffffffffffffffda RBX: 00007fcf4b315f80 RCX: 00007fcf4b1799f9 [ 463.489126][ T30] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000006 [ 463.497327][ T30] RBP: 00007fcf4b1e78ee R08: 0000000000000000 R09: 0000000000000000 [ 463.505346][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.513424][ T30] R13: 0000000000000000 R14: 00007fcf4b315f80 R15: 00007ffc34b51e98 [ 463.522433][ T30] [ 463.529110][ T30] INFO: task syz.2.622:7537 blocked for more than 165 seconds. [ 463.538817][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 463.547279][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.556617][ T30] task:syz.2.622 state:D stack:24672 pid:7537 tgid:7537 ppid:6729 flags:0x00000004 [ 463.569326][ T30] Call Trace: [ 463.572667][ T30] [ 463.575650][ T30] __schedule+0x17ae/0x4a10 [ 463.581596][ T30] ? __pfx___schedule+0x10/0x10 [ 463.586728][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.602216][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.615889][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.623499][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 463.630636][ T30] ? schedule+0x90/0x320 [ 463.638699][ T30] schedule+0x14b/0x320 [ 463.646495][ T30] ? down_read+0x6a5/0xa40 [ 463.652179][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.657996][ T30] down_read+0x705/0xa40 [ 463.662400][ T30] ? __pfx_down_read+0x10/0x10 [ 463.669628][ T30] ? release_fault_lock+0xa6/0x230 [ 463.688803][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 463.695275][ T30] ? count_memcg_event_mm+0x90/0x420 [ 463.701635][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 463.707992][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 463.714891][ T30] ? count_memcg_event_mm+0x90/0x420 [ 463.722413][ T30] ? __filemap_get_folio+0x984/0xc10 [ 463.730116][ T30] filemap_fault+0x828/0x1760 [ 463.748565][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.757463][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 463.763592][ T30] ? pte_alloc_one+0x443/0x5d0 [ 463.771155][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 463.777207][ T30] ? __pfx_validate_chain+0x10/0x10 [ 463.783384][ T30] ? mark_lock+0x9a/0x350 [ 463.801699][ T30] __do_fault+0x135/0x460 [ 463.807966][ T30] handle_pte_fault+0x1164/0x6eb0 [ 463.814993][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 463.867914][ T30] ? mark_lock+0x9a/0x350 [ 463.890809][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 463.920028][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 463.934496][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 463.961325][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 463.988705][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 463.994533][ T30] handle_mm_fault+0xf70/0x1880 [ 464.003399][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 464.016497][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 464.022287][ T30] ? exc_page_fault+0x113/0x8c0 [ 464.030771][ T30] exc_page_fault+0x459/0x8c0 [ 464.035536][ T30] asm_exc_page_fault+0x26/0x30 [ 464.041169][ T30] RIP: 0033:0x7f83da440ed3 [ 464.045626][ T30] RSP: 002b:00007ffec2990df0 EFLAGS: 00010246 [ 464.054054][ T30] RAX: 0000000020002140 RBX: 0000000000000008 RCX: 0000000000000000 [ 464.062666][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555656653c8 [ 464.071708][ T30] RBP: 00007ffec2990f00 R08: 0000000000000000 R09: 0000000000000000 [ 464.081640][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 464.090732][ T30] R13: 00007ffec2990f20 R14: 00007ffec2990f40 R15: fffffffffffffffe [ 464.099810][ T30] [ 464.103408][ T30] [ 464.103408][ T30] Showing all locks held in the system: [ 464.113411][ T30] 1 lock held by khungtaskd/30: [ 464.118894][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 464.130021][ T30] 3 locks held by kworker/u8:3/52: [ 464.135602][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 464.151265][ T30] #1: ffffc90000bc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.164422][ T30] #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 464.174832][ T30] 2 locks held by getty/4975: [ 464.181451][ T30] #0: ffff88802b0e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.192342][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 464.203609][ T30] 2 locks held by syz.2.381/6594: [ 464.209816][ T30] 2 locks held by kworker/u8:12/6643: [ 464.215689][ T30] 1 lock held by syz.0.590/7425: [ 464.221725][ T30] #0: ffff88802c291c68 (&ep->mtx){+.+.}-{3:3}, at: eventpoll_release_file+0xcb/0x1c0 [ 464.232405][ T30] 2 locks held by syz.0.590/7426: [ 464.238071][ T30] #0: ffff88802c291c68 (&ep->mtx){+.+.}-{3:3}, at: do_epoll_wait+0x7c7/0x2040 [ 464.249973][ T30] #1: ffff88801d9570c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 464.263274][ T30] 1 lock held by syz.2.622/7537: [ 464.269373][ T30] #0: ffff88801d9570c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 464.282809][ T30] 2 locks held by syz.1.721/7862: [ 464.289237][ T30] #0: ffff88802058a2f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 464.300405][ T30] #1: ffff88801d9570c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 464.314276][ T30] 4 locks held by syz.1.721/7863: [ 464.321812][ T30] #0: ffff88802b2180b0 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1dd/0xea0 [ 464.332931][ T30] #1: ffffc9001ed1a8c8 (&kvm->srcu){.+.+}-{0:0}, at: vcpu_run+0x5663/0x88b0 [ 464.343777][ T30] #2: ffff88802f6a9498 (&mm->mmap_lock){++++}-{3:3}, at: get_user_pages_unlocked+0x14f/0x9d0 [ 464.354842][ T30] #3: ffff88801d9570c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 464.370006][ T30] 1 lock held by syz.3.782/8053: [ 464.374993][ T30] #0: ffff88801d9570c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 464.387773][ T30] 2 locks held by syz.2.1138/9192: [ 464.393395][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 464.404237][ T30] #1: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 464.416356][ T30] 1 lock held by syz.0.1153/9225: [ 464.421895][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 464.432443][ T30] 1 lock held by syz.3.1154/9227: [ 464.438597][ T30] #0: ffff888020618868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_write+0xd60/0x1a40 [ 464.449974][ T30] 2 locks held by syz.3.1154/9228: [ 464.456348][ T30] #0: ffff888020618868 (&pipe->mutex){+.+.}-{3:3}, at: splice_to_socket+0xee/0x10b0 [ 464.468334][ T30] #1: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 464.480775][ T30] [ 464.483149][ T30] ============================================= [ 464.483149][ T30] [ 464.498608][ T30] NMI backtrace for cpu 1 [ 464.503026][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 464.513539][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 464.523602][ T30] Call Trace: [ 464.526894][ T30] [ 464.529832][ T30] dump_stack_lvl+0x241/0x360 [ 464.534642][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.539885][ T30] ? __pfx__printk+0x10/0x10 [ 464.544519][ T30] ? vprintk_emit+0x631/0x770 [ 464.549337][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 464.554387][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 464.559345][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.564817][ T30] ? _printk+0xd5/0x120 [ 464.568995][ T30] ? __pfx__printk+0x10/0x10 [ 464.573602][ T30] ? __wake_up_klogd+0xcc/0x110 [ 464.578469][ T30] ? __pfx__printk+0x10/0x10 [ 464.583076][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 464.588118][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.594125][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 464.600129][ T30] watchdog+0xfee/0x1030 [ 464.604392][ T30] ? watchdog+0x1ea/0x1030 [ 464.608833][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.613530][ T30] kthread+0x2f0/0x390 [ 464.617620][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.622309][ T30] ? __pfx_kthread+0x10/0x10 [ 464.626919][ T30] ret_from_fork+0x4b/0x80 [ 464.631354][ T30] ? __pfx_kthread+0x10/0x10 [ 464.635969][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.640763][ T30] [ 464.645923][ T30] Sending NMI from CPU 1 to CPUs 0: [ 464.651213][ C0] NMI backtrace for cpu 0 [ 464.651228][ C0] CPU: 0 UID: 0 PID: 2499 Comm: kworker/u8:8 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 464.651250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 464.651263][ C0] Workqueue: bat_events batadv_nc_worker [ 464.651292][ C0] RIP: 0010:lock_acquire+0xdc/0x550 [ 464.651320][ C0] Code: 08 0f 83 f4 02 00 00 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 28 a2 f6 8f be 08 00 00 00 e8 5c de 87 00 48 0f a3 1d 9c e6 86 0e <73> 16 e8 7d f5 09 00 84 c0 75 0d 80 3d c9 ba 70 0e 00 0f 84 f9 02 [ 464.651336][ C0] RSP: 0018:ffffc900093179e0 EFLAGS: 00000257 [ 464.651351][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816fbb84 [ 464.651363][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff6a228 [ 464.651375][ C0] RBP: ffffc90009317b40 R08: ffffffff8ff6a22f R09: 1ffffffff1fed445 [ 464.651389][ C0] R10: dffffc0000000000 R11: fffffbfff1fed446 R12: 1ffff92001262f44 [ 464.651403][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 464.651416][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 464.651431][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.651445][ C0] CR2: 00007fca7bee8178 CR3: 0000000022d44000 CR4: 00000000003526f0 [ 464.651462][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.651473][ C0] DR3: 0000000000000002 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.651484][ C0] Call Trace: [ 464.651491][ C0] [ 464.651500][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 464.651521][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 464.651548][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.651568][ C0] ? nmi_handle+0x2a/0x5a0 [ 464.651596][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 464.651618][ C0] ? nmi_handle+0x14f/0x5a0 [ 464.651635][ C0] ? nmi_handle+0x2a/0x5a0 [ 464.651653][ C0] ? lock_acquire+0xdc/0x550 [ 464.651676][ C0] ? default_do_nmi+0x63/0x160 [ 464.651704][ C0] ? exc_nmi+0x123/0x1f0 [ 464.651724][ C0] ? end_repeat_nmi+0xf/0x53 [ 464.651749][ C0] ? lock_acquire+0xd4/0x550 [ 464.651773][ C0] ? lock_acquire+0xdc/0x550 [ 464.651797][ C0] ? lock_acquire+0xdc/0x550 [ 464.651822][ C0] ? lock_acquire+0xdc/0x550 [ 464.651845][ C0] [ 464.651851][ C0] [ 464.651862][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 464.651888][ C0] ? batadv_nc_worker+0xcb/0x610 [ 464.651911][ C0] ? __pfx_lock_release+0x10/0x10 [ 464.651938][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.651967][ C0] batadv_nc_worker+0xec/0x610 [ 464.651990][ C0] ? batadv_nc_worker+0xcb/0x610 [ 464.652013][ C0] ? batadv_nc_worker+0xcb/0x610 [ 464.652038][ C0] ? process_scheduled_works+0x945/0x1830 [ 464.652061][ C0] process_scheduled_works+0xa2c/0x1830 [ 464.652105][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.652134][ C0] ? assign_work+0x364/0x3d0 [ 464.652160][ C0] worker_thread+0x86d/0xd40 [ 464.652193][ C0] ? __kthread_parkme+0x169/0x1d0 [ 464.652220][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.652243][ C0] kthread+0x2f0/0x390 [ 464.652270][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.652293][ C0] ? __pfx_kthread+0x10/0x10 [ 464.652320][ C0] ret_from_fork+0x4b/0x80 [ 464.652344][ C0] ? __pfx_kthread+0x10/0x10 [ 464.652370][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.652405][ C0] [ 464.716156][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 464.716178][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 464.716207][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 464.716223][ T30] Call Trace: [ 464.716234][ T30] [ 464.716244][ T30] dump_stack_lvl+0x241/0x360 [ 464.716291][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.716329][ T30] ? __pfx__printk+0x10/0x10 [ 464.716360][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.716403][ T30] ? vscnprintf+0x5d/0x90 [ 464.716433][ T30] panic+0x349/0x860 [ 464.716468][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.716500][ T30] ? __pfx_panic+0x10/0x10 [ 464.716530][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 464.716559][ T30] ? __irq_work_queue_local+0x137/0x410 [ 464.716592][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 464.716618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.716646][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 464.716677][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 464.716717][ T30] watchdog+0x102d/0x1030 [ 464.716752][ T30] ? watchdog+0x1ea/0x1030 [ 464.716792][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.716824][ T30] kthread+0x2f0/0x390 [ 464.716859][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.716891][ T30] ? __pfx_kthread+0x10/0x10 [ 464.716928][ T30] ret_from_fork+0x4b/0x80 [ 464.716960][ T30] ? __pfx_kthread+0x10/0x10 [ 464.716996][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.717046][ T30] [ 464.718194][ T30] Kernel Offset: disabled [ 465.151793][ T30] Rebooting in 86400 seconds..