last executing test programs: 15.804544485s ago: executing program 3 (id=5888): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0xfffffffb, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.478212073s ago: executing program 3 (id=5891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r4, r3, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 15.173688948s ago: executing program 3 (id=5896): syz_open_dev$usbfs(0x0, 0xb, 0x101301) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x1, 0x1, 0x3, 0x51, 0x0, [], [{{0x9, 0x5, 0x3, 0x13, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}]}}]}}]}}, 0x0) 10.256747114s ago: executing program 1 (id=5936): socket(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003c40)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.068157187s ago: executing program 1 (id=5940): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000540)={0x0, 0x0, 0x2, 0xbd}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x8) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x40001}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x8001}) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x11, 0x4}) 9.913097993s ago: executing program 1 (id=5941): r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.91021432s ago: executing program 4 (id=5942): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x41d1, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=""/72, 0x48}, 0xc342}], 0x1, 0x1000000000fe, 0x0) 9.705593813s ago: executing program 4 (id=5945): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x55}}, 0x0) 9.309463749s ago: executing program 4 (id=5948): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000700)={0x1, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.309374788s ago: executing program 3 (id=5897): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x8cff}}, './file0\x00'}) 9.22211743s ago: executing program 4 (id=5949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 9.199969395s ago: executing program 3 (id=5950): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1], [0x0, 0x8, 0x1]}}]}}]}, 0x8c}}, 0x0) 9.021977913s ago: executing program 1 (id=5951): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e22, @loopback}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, @isdn={0x22, 0x5, 0x9, 0xb7, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2a, 0x1}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 9.021776336s ago: executing program 4 (id=5952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.916573467s ago: executing program 3 (id=5954): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}}, 0x0) 8.845729124s ago: executing program 1 (id=5955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224", 0x12}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 8.493175851s ago: executing program 4 (id=5957): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000680)={0x0, 0x3}, 0x8) socket$unix(0x1, 0x2, 0x0) 8.163517507s ago: executing program 1 (id=5958): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x7) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) 5.228082985s ago: executing program 2 (id=5961): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(0xffffffffffffffff, &(0x7f0000000040)=':', 0x1) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) 4.391695156s ago: executing program 2 (id=5964): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 3.516099502s ago: executing program 2 (id=5968): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) accept4(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) cachestat(r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f00000003c0)=""/44) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05f0e96b060009c9886782ad5249bd67e9eb13880c7cc9", @ANYRES32=0x0, @ANYBLOB="39000e0080000000ffffffffffff0802110000000802110000000000000000000000000000000000030100050300000071070000000000000000000008000c000000000008000d000000000004001b80"], 0x6c}}, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000001b00)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) 2.647083021s ago: executing program 0 (id=5971): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x200000}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 2.42647587s ago: executing program 2 (id=5972): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x11e, 0x63, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0x9}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.313730694s ago: executing program 0 (id=5973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0x4004ae8b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {0x0, 0x5}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xd}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x40}]}}) 2.270197976s ago: executing program 0 (id=5974): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8900", 0x2}], 0x1}, 0x0) 2.177952241s ago: executing program 0 (id=5975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000006c0)="08394bf1bbb6", 0x6, 0x4004014, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0xff01}], 0x1}, 0x0) 1.602222702s ago: executing program 2 (id=5976): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.238386132s ago: executing program 0 (id=5977): unshare(0x22020400) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_open_dev$mouse(&(0x7f0000000680), 0x800000000000000, 0x40) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) 1.135328077s ago: executing program 0 (id=5978): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=5979): r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0xffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) kernel console output (not intermixed with test programs): ing): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.448795][T10887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1961.509781][ T1588] hsr_slave_0: entered promiscuous mode [ 1961.517542][ T1588] hsr_slave_1: entered promiscuous mode [ 1961.530612][ T1588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1961.538583][ T1588] Cannot create hsr debugfs directory [ 1961.574309][T10887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.585409][T10887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1961.673333][T10887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.684885][T10887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1961.776734][T10887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.800116][T10887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1962.131843][ T1671] chnl_net:caif_netlink_parms(): no params data found [ 1962.237412][T10887] bridge_slave_1: left allmulticast mode [ 1962.244201][T10887] bridge_slave_1: left promiscuous mode [ 1962.262864][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.313556][T10887] bridge_slave_0: left allmulticast mode [ 1962.375410][T10887] bridge_slave_0: left promiscuous mode [ 1962.440259][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.602444][T28669] Bluetooth: hci3: command tx timeout [ 1963.162435][T28669] Bluetooth: hci0: command tx timeout [ 1963.325525][ T46] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1963.415232][ T46] usb 2-1: USB disconnect, device number 79 [ 1963.633185][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1963.653808][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1963.670954][T10887] bond0 (unregistering): Released all slaves [ 1963.868575][ T1701] mac80211_hwsim hwsim271 wlan1: entered allmulticast mode [ 1963.882470][ T46] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1964.056473][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1964.072753][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1964.081859][ T46] usb 2-1: can't read configurations, error -61 [ 1964.137026][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1964.247089][ T46] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1964.309421][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1964.368657][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.426869][ T1671] bridge_slave_0: entered allmulticast mode [ 1964.463795][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1964.483041][ T1671] bridge_slave_0: entered promiscuous mode [ 1964.505754][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1964.518986][ T46] usb 2-1: can't read configurations, error -61 [ 1964.567838][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1964.584173][ T46] usb usb2-port1: attempt power cycle [ 1964.589911][ T1671] bridge_slave_1: entered allmulticast mode [ 1964.625058][ T1671] bridge_slave_1: entered promiscuous mode [ 1964.720666][T10887] hsr_slave_0: left promiscuous mode [ 1964.735028][T10887] hsr_slave_1: left promiscuous mode [ 1964.748058][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1964.770717][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1964.807067][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1964.837042][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.942464][ T46] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1964.970949][T10887] veth1_macvtap: left promiscuous mode [ 1964.997097][T10887] veth0_macvtap: left promiscuous mode [ 1965.040821][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1965.051775][ T46] usb 2-1: can't read configurations, error -61 [ 1965.202442][ T46] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1965.242575][T28669] Bluetooth: hci0: command tx timeout [ 1965.259093][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1965.283508][ T46] usb 2-1: can't read configurations, error -61 [ 1965.296858][ T46] usb usb2-port1: unable to enumerate USB device [ 1965.752481][ T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1965.898490][T10887] team0 (unregistering): Port device team_slave_1 removed [ 1965.922544][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1965.939915][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.963797][T10887] team0 (unregistering): Port device team_slave_0 removed [ 1966.024187][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1966.051985][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1966.263898][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.371693][ T8] usb 4-1: config 0 descriptor?? [ 1966.850195][ T1671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1966.874733][ T1671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.950287][ T1671] team0: Port device team_slave_0 added [ 1967.002737][ T1588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1967.027612][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1967.027629][ T29] audit: type=1326 audit(1729462941.477:26122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 1967.152165][ T1671] team0: Port device team_slave_1 added [ 1967.181145][ T29] audit: type=1326 audit(1729462941.477:26123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 1967.333003][T28669] Bluetooth: hci0: command tx timeout [ 1967.352366][ T1588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1967.361417][ T1588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1967.409391][ T29] audit: type=1326 audit(1729462941.517:26124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 1967.445237][ T29] audit: type=1326 audit(1729462941.517:26125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 1967.487303][ T29] audit: type=1326 audit(1729462941.517:26126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1967.509652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.557401][ T1588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1967.639367][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.651467][ T29] audit: type=1326 audit(1729462941.517:26127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1967.674268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.712731][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.781180][ T29] audit: type=1326 audit(1729462941.517:26128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1967.819235][ T1671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.865251][ T29] audit: type=1326 audit(1729462941.517:26129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1967.905143][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1967.947756][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.973743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.048779][ T29] audit: type=1326 audit(1729462941.517:26130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1968.119047][ T1671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.174291][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'. [ 1968.220914][ T29] audit: type=1326 audit(1729462941.517:26131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.3.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028417dbfb code=0x7ffc0000 [ 1968.484583][ T1671] hsr_slave_0: entered promiscuous mode [ 1968.523242][ T1671] hsr_slave_1: entered promiscuous mode [ 1968.639895][T19310] usb 4-1: USB disconnect, device number 85 [ 1968.646084][ T1671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1968.656620][ T1671] Cannot create hsr debugfs directory [ 1968.679587][ T1588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.841177][ T1760] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 1968.853679][ T1588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.883793][T31404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.890894][T31404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.961754][T31404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.968906][T31404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1969.272653][T27678] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1969.339764][ T1588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1969.403084][T28669] Bluetooth: hci0: command tx timeout [ 1969.467682][T27678] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1969.489102][T27678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.497802][T27678] usb 4-1: Product: syz [ 1969.501984][T27678] usb 4-1: Manufacturer: syz [ 1969.512433][T27678] usb 4-1: SerialNumber: syz [ 1969.530368][T27678] usb 4-1: config 0 descriptor?? [ 1969.599030][ T1588] veth0_vlan: entered promiscuous mode [ 1969.629365][ T1588] veth1_vlan: entered promiscuous mode [ 1969.672416][ T46] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1969.836809][ T1588] veth0_macvtap: entered promiscuous mode [ 1969.860558][ T1588] veth1_macvtap: entered promiscuous mode [ 1969.905801][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1969.941537][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1969.954795][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1969.976743][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1969.989663][T27678] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 1970.011318][T27678] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1970.025913][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.036479][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1970.049093][T27678] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1970.060751][ T46] usb 2-1: config 0 has no interfaces? [ 1970.073177][T27678] usb 4-1: USB disconnect, device number 86 [ 1970.079637][ T46] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1970.092441][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.117267][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.127150][ T1588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1970.142007][ T46] usb 2-1: Product: syz [ 1970.169459][ T46] usb 2-1: Manufacturer: syz [ 1970.175034][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1970.198763][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.209637][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1970.220464][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.230592][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1970.249528][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.259597][ T1588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1970.279030][ T1588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1970.291748][ T46] usb 2-1: SerialNumber: syz [ 1970.305169][ T46] usb 2-1: config 0 descriptor?? [ 1970.311658][ T1588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1970.356709][ T1588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.396963][ T1588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.427550][ T1588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.447830][ T1588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.553547][ T1671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1970.609580][ T1671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1970.636191][ T1671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1970.650453][ T1671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1970.757400][T10887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1970.775431][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1970.794556][T10887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1970.820386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1970.925861][ T1671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1970.994844][ T1671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1971.033512][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.040603][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1971.111092][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.118241][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1971.351014][ T1671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.502441][T19310] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1971.526489][ T1671] veth0_vlan: entered promiscuous mode [ 1971.641114][ T1671] veth1_vlan: entered promiscuous mode [ 1971.691156][T19310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.705299][T19310] usb 3-1: config 0 has no interfaces? [ 1971.761555][ T1671] veth0_macvtap: entered promiscuous mode [ 1971.771548][T19310] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1971.786767][ T1671] veth1_macvtap: entered promiscuous mode [ 1971.793390][T19310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.803661][T19310] usb 3-1: Product: syz [ 1971.808001][T19310] usb 3-1: Manufacturer: syz [ 1971.822437][T19310] usb 3-1: SerialNumber: syz [ 1971.836809][T19310] usb 3-1: config 0 descriptor?? [ 1971.955420][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1971.985130][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1971.998229][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1972.012710][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.023343][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1972.052622][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.153597][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1972.217149][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.264980][ T1671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1972.305863][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1972.323822][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.340499][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1972.372004][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.391451][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1972.402364][ T46] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1972.482394][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.503286][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1972.521113][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.544468][ T1671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1972.556208][ T1671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1972.576194][ T1671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1972.615645][ T1671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.701586][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1972.722314][ T1671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.770786][T19310] usb 2-1: USB disconnect, device number 84 [ 1972.789838][ T46] usb 4-1: can't read configurations, error -61 [ 1972.815190][ T1671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.855879][ T1671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1972.982439][ T46] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1973.114003][T10887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.182757][T10887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.214993][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1973.231560][ T46] usb 4-1: can't read configurations, error -61 [ 1973.243891][ T46] usb usb4-port1: attempt power cycle [ 1973.253489][T28909] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1973.278137][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.286033][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.443896][T28909] usb 2-1: Using ep0 maxpacket: 32 [ 1973.471271][T28909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.543177][T28909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.611859][T28909] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1973.621230][ T46] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1973.702374][T19310] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1973.775515][T28909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.790025][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1973.821768][ T46] usb 4-1: can't read configurations, error -61 [ 1973.836115][T28909] usb 2-1: config 0 descriptor?? [ 1973.856426][T19310] usb 5-1: Using ep0 maxpacket: 16 [ 1973.864751][T19310] usb 5-1: config 0 has no interfaces? [ 1973.873668][T19310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1973.890258][T19310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.918535][T19310] usb 5-1: Product: syz [ 1973.934281][T28909] hub 2-1:0.0: USB hub found [ 1973.950553][T19310] usb 5-1: Manufacturer: syz [ 1973.985017][T19310] usb 5-1: SerialNumber: syz [ 1974.009942][T19310] usb 5-1: config 0 descriptor?? [ 1974.055625][T28909] hub 2-1:0.0: 1 port detected [ 1974.082583][ T46] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1974.179468][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1974.196733][ T46] usb 4-1: can't read configurations, error -61 [ 1974.259624][ T46] usb usb4-port1: unable to enumerate USB device [ 1974.331660][ T1856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'. [ 1974.433378][T19310] usb 5-1: USB disconnect, device number 52 [ 1974.493680][ T1856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'. [ 1974.700078][T28909] hub 2-1:0.0: activate --> -90 [ 1974.942412][T20041] usb 3-1: USB disconnect, device number 46 [ 1975.011726][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.161763][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.922374][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1975.965630][T28909] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 1976.082401][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1976.099504][ T8] usb 3-1: config 0 has no interfaces? [ 1976.107033][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1976.124478][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.135699][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.142003][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.181937][ T8] usb 3-1: Product: syz [ 1976.230516][ T8] usb 3-1: Manufacturer: syz [ 1976.273451][ T8] usb 3-1: SerialNumber: syz [ 1976.313134][ T8] usb 3-1: config 0 descriptor?? [ 1976.515849][ T3027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.695112][ T8] usb 2-1: USB disconnect, device number 85 [ 1976.696611][ T1900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5474'. [ 1976.884761][T27726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1976.896055][T27726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1976.904327][T27726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1976.913246][T27726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1976.920711][T27726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1976.928680][T27726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1976.966637][T28909] usb 3-1: USB disconnect, device number 47 [ 1977.120008][ T3027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.607169][ T3027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.965662][ T3027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.181668][ T1909] chnl_net:caif_netlink_parms(): no params data found [ 1978.487143][ T1909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.504928][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.521573][ T1909] bridge_slave_0: entered allmulticast mode [ 1978.535131][ T1909] bridge_slave_0: entered promiscuous mode [ 1978.782564][ T1909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.789707][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.812976][ T1909] bridge_slave_1: entered allmulticast mode [ 1978.823201][ T1909] bridge_slave_1: entered promiscuous mode [ 1979.015966][T28669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1979.024997][T28669] Bluetooth: hci0: command tx timeout [ 1979.032775][T28669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1979.048471][T21813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1979.057589][T28669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1979.070507][T28669] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1979.079802][T28669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1979.145499][ T3027] bridge_slave_1: left allmulticast mode [ 1979.151158][ T3027] bridge_slave_1: left promiscuous mode [ 1979.161613][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.357033][ T3027] bridge_slave_0: left allmulticast mode [ 1979.442587][ T3027] bridge_slave_0: left promiscuous mode [ 1979.459851][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.498605][ T1960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1980.950880][ T1979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1981.088240][T27726] Bluetooth: hci0: command tx timeout [ 1981.177711][T27726] Bluetooth: hci3: command tx timeout [ 1981.226104][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1981.238400][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1981.251516][ T3027] bond0 (unregistering): Released all slaves [ 1981.282618][ T1976] netlink: 'syz.0.5483': attribute type 1 has an invalid length. [ 1981.354864][ T1909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.369490][ T1909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.587655][T27726] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1981.594794][T27726] Bluetooth: hci2: Malformed Event: 0x02 [ 1981.612633][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1981.612651][ T29] audit: type=1326 audit(1729462956.057:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1988 comm="syz.0.5486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ad7dff9 code=0x0 [ 1981.716576][ T1909] team0: Port device team_slave_0 added [ 1981.754791][ T1994] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1981.799887][ T1909] team0: Port device team_slave_1 added [ 1981.932662][ T8] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1981.964698][ T1909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1982.012048][ T1909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1982.076237][ T1909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1982.111546][ T1909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.132410][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1982.140753][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1982.160468][ T1909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1982.160520][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1982.186410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1982.204787][ T1909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.277267][ T3027] hsr_slave_0: left promiscuous mode [ 1982.293073][ T3027] hsr_slave_1: left promiscuous mode [ 1982.306463][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1982.317970][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1982.331484][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1982.348861][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.352368][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.370592][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1982.380061][ T8] usb 4-1: config 0 descriptor?? [ 1982.407613][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.432960][ T1996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1982.441285][ T8] hub 4-1:0.0: USB hub found [ 1982.500633][ T3027] veth1_macvtap: left promiscuous mode [ 1982.508816][ T3027] veth0_macvtap: left promiscuous mode [ 1982.526732][ T3027] veth1_vlan: left promiscuous mode [ 1982.543986][ T3027] veth0_vlan: left promiscuous mode [ 1982.665795][ T8] hub 4-1:0.0: 2 ports detected [ 1982.881252][ T1996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.933836][ T1996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.172889][T27726] Bluetooth: hci0: command tx timeout [ 1983.252489][T27726] Bluetooth: hci3: command tx timeout [ 1983.969442][ T8] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1983.981315][ T8] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1984.062675][ T8] usbhid 4-1:0.0: can't add hid device: -32 [ 1984.068827][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1984.351795][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 1984.618132][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 1984.789419][ T8] usb 4-1: USB disconnect, device number 91 [ 1985.132364][ T8] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1985.242620][T27726] Bluetooth: hci0: command tx timeout [ 1985.322583][T27726] Bluetooth: hci3: command tx timeout [ 1985.453256][ T2027] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1985.524635][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.537523][ T8] usb 2-1: config 0 has no interfaces? [ 1985.555066][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1985.565315][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.583039][ T8] usb 2-1: Product: syz [ 1985.599569][ T8] usb 2-1: Manufacturer: syz [ 1985.610220][ T8] usb 2-1: SerialNumber: syz [ 1985.630331][ T8] usb 2-1: config 0 descriptor?? [ 1986.060755][ T1909] hsr_slave_0: entered promiscuous mode [ 1986.074904][ T1909] hsr_slave_1: entered promiscuous mode [ 1986.098502][ T1909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1986.122382][ T1909] Cannot create hsr debugfs directory [ 1986.580114][ T1952] chnl_net:caif_netlink_parms(): no params data found [ 1986.602528][ T2024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1987.334805][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.396303][ T1952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.402504][T27726] Bluetooth: hci3: command tx timeout [ 1987.426809][ T1952] bridge_slave_0: entered allmulticast mode [ 1987.440380][ T1952] bridge_slave_0: entered promiscuous mode [ 1987.500407][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.519806][ T1952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.540002][ T1952] bridge_slave_1: entered allmulticast mode [ 1987.560453][ T1952] bridge_slave_1: entered promiscuous mode [ 1987.678553][ T1952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1987.756359][ T1952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1987.828576][ T1952] team0: Port device team_slave_0 added [ 1987.844553][ T1952] team0: Port device team_slave_1 added [ 1987.919305][ T1952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.927643][ T1952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.959703][ T1952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.991436][ T1952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1988.010433][ T1952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.060612][ T1952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1988.134061][T20041] usb 2-1: USB disconnect, device number 86 [ 1988.194631][ T3027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.370799][ T1952] hsr_slave_0: entered promiscuous mode [ 1988.415386][ T1952] hsr_slave_1: entered promiscuous mode [ 1988.432094][ T1952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1988.454482][ T1952] Cannot create hsr debugfs directory [ 1988.535221][ T3027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.559918][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'. [ 1988.588817][ T1909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1988.592766][ T2062] netlink: 'syz.3.5495': attribute type 4 has an invalid length. [ 1988.608956][ T2062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'. [ 1988.632757][ T2069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'. [ 1988.687628][ T3027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.718173][ T2062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1988.733792][ T1909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1988.742586][ T46] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1988.775331][ T1909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1988.815024][ T3027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.833727][ T1909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1988.941189][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1988.995118][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1989.067474][ T46] usb 2-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=cd.ee [ 1989.098433][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.106671][ T46] usb 2-1: Product: syz [ 1989.111130][ T46] usb 2-1: Manufacturer: syz [ 1989.116180][ T46] usb 2-1: SerialNumber: syz [ 1989.127250][ T46] usb 2-1: config 0 descriptor?? [ 1989.136468][ T46] option 2-1:0.0: GSM modem (1-port) converter detected [ 1989.314021][ T3027] bridge_slave_1: left allmulticast mode [ 1989.337081][ T3027] bridge_slave_1: left promiscuous mode [ 1989.354047][T20041] usb 2-1: USB disconnect, device number 87 [ 1989.370209][ T3027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.379939][T20041] option 2-1:0.0: device disconnected [ 1989.416362][ T3027] bridge_slave_0: left allmulticast mode [ 1989.422094][ T3027] bridge_slave_0: left promiscuous mode [ 1989.433853][ T3027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.058534][ T3027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1990.062856][T28909] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1990.082748][ T3027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1990.098606][ T3027] bond0 (unregistering): Released all slaves [ 1990.243641][T28909] usb 4-1: Using ep0 maxpacket: 32 [ 1990.249008][T20041] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1990.264810][T28909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1990.303925][T28909] usb 4-1: config 9 has an invalid interface number: 102 but max is 0 [ 1990.312697][ T1909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1990.319383][T28909] usb 4-1: config 9 has no interface number 0 [ 1990.358244][T28909] usb 4-1: config 9 interface 102 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1990.391123][T28909] usb 4-1: config 9 interface 102 has no altsetting 0 [ 1990.405137][T28909] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ce.38 [ 1990.430333][T28909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.449844][T20041] usb 2-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 1990.469691][T20041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.486538][T28909] usb 4-1: Product: syz [ 1990.491728][T28909] usb 4-1: Manufacturer: syz [ 1990.497541][T20041] usb 2-1: config 0 descriptor?? [ 1990.514963][T28909] usb 4-1: SerialNumber: syz [ 1990.525923][T20041] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1990.683348][ T1909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1990.731085][T20041] usb 2-1: USB disconnect, device number 88 [ 1990.779355][T28909] usb 4-1: USB disconnect, device number 92 [ 1990.840624][T31404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.847808][T31404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.932967][ T3027] hsr_slave_0: left promiscuous mode [ 1990.947356][ T3027] hsr_slave_1: left promiscuous mode [ 1990.998116][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1991.009693][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1991.039263][ T3027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1991.052036][ T3027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1991.125618][ T3027] veth1_macvtap: left promiscuous mode [ 1991.133013][ T3027] veth0_macvtap: left promiscuous mode [ 1991.138545][ T3027] veth1_vlan: left promiscuous mode [ 1991.145297][ T3027] veth0_vlan: left promiscuous mode [ 1993.417812][ T3027] team0 (unregistering): Port device team_slave_1 removed [ 1993.488458][ T3027] team0 (unregistering): Port device team_slave_0 removed [ 1993.619826][ T5307] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1993.778072][ T5307] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1993.789609][ T5307] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1993.822506][ T5307] usb 2-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=cd.ee [ 1993.834979][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.845363][ T5307] usb 2-1: Product: syz [ 1993.849524][ T5307] usb 2-1: Manufacturer: syz [ 1993.875212][ T5307] usb 2-1: SerialNumber: syz [ 1993.891094][ T5307] usb 2-1: config 0 descriptor?? [ 1993.901703][ T5307] option 2-1:0.0: GSM modem (1-port) converter detected [ 1994.104067][ T5307] usb 2-1: USB disconnect, device number 89 [ 1994.110483][ T5307] option 2-1:0.0: device disconnected [ 1994.318333][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.325462][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1994.496759][ T1952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1994.554694][ T1952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1994.594132][ T1952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1994.665255][ T1952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1994.832404][ T5307] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1994.899590][ T1909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1995.023406][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 1995.084552][ T1952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1995.103057][ T1909] veth0_vlan: entered promiscuous mode [ 1995.108688][ T5307] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1995.156321][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.179684][ T1909] veth1_vlan: entered promiscuous mode [ 1995.188679][ T5307] usb 4-1: Product: syz [ 1995.202381][ T5307] usb 4-1: Manufacturer: syz [ 1995.217931][ T5307] usb 4-1: SerialNumber: syz [ 1995.234246][ T1952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1995.234962][ T5307] usb 4-1: config 0 descriptor?? [ 1995.272691][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.279763][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.292677][ T8] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1995.379268][ T1909] veth0_macvtap: entered promiscuous mode [ 1995.397462][ T1909] veth1_macvtap: entered promiscuous mode [ 1995.413261][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.420363][T10887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1995.455796][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.470503][ T8] usb 2-1: config 0 has no interfaces? [ 1995.484239][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.504887][ T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1995.522658][ T5307] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1995.536767][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.547401][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.566931][ T8] usb 2-1: Product: syz [ 1995.571326][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.581532][ T8] usb 2-1: Manufacturer: syz [ 1995.595599][ T8] usb 2-1: SerialNumber: syz [ 1995.606176][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.630017][ T8] usb 2-1: config 0 descriptor?? [ 1995.640759][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.691115][ T1909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1995.758272][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.795642][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.812422][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.830596][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.841161][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.858216][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.904479][ T1909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.938693][ T1909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.984576][ T1909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1996.028514][ T1909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.051372][ T1909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.081405][ T1909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.104571][ T1909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.741110][T31404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.838651][ T1952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.928535][T31404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.011422][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.020338][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.067943][T31404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.182712][T31404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.199265][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.232267][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.268271][ T1952] veth0_vlan: entered promiscuous mode [ 1997.308296][T28669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1997.325132][T28669] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1997.339029][T28669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1997.350188][T28669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1997.358673][T28669] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1997.366382][T28669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1997.396236][ T1952] veth1_vlan: entered promiscuous mode [ 1997.472122][ T2184] bridge0: port 3(erspan0) entered blocking state [ 1997.490948][ T2184] bridge0: port 3(erspan0) entered disabled state [ 1997.501114][ T2184] erspan0: entered allmulticast mode [ 1997.511263][ T2184] erspan0: entered promiscuous mode [ 1997.517291][ T2184] bridge0: port 3(erspan0) entered blocking state [ 1997.523846][ T2184] bridge0: port 3(erspan0) entered forwarding state [ 1997.556709][ T1952] veth0_macvtap: entered promiscuous mode [ 1997.600426][ T1952] veth1_macvtap: entered promiscuous mode [ 1997.909061][T28909] usb 2-1: USB disconnect, device number 90 [ 1998.556517][ T2207] random: crng reseeded on system resumption [ 1998.741307][T31404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1998.767116][ T5307] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1998.785933][T31404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1998.797330][ T5307] usb 4-1: USB disconnect, device number 93 [ 1998.867300][T31404] bond0 (unregistering): Released all slaves [ 1998.911632][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1998.937239][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1998.971631][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1998.995889][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.011068][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.034231][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.050534][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1999.075042][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.091762][ T1952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1999.299351][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.318465][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.347023][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.363714][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.384635][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.402992][T28669] Bluetooth: hci2: command tx timeout [ 1999.423845][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.435167][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.446258][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.473578][ T1952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.502331][ T1952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.517925][ T1952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1999.615900][ T1952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.757855][ T1952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.791897][ T1952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.868795][ T1952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.486744][T31404] hsr_slave_0: left promiscuous mode [ 2000.540444][T31404] hsr_slave_1: left promiscuous mode [ 2000.546809][T31404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2000.556735][T31404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2000.585805][T31404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2000.638173][T31404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2000.689426][T31404] veth1_macvtap: left promiscuous mode [ 2000.702086][T31404] veth0_macvtap: left promiscuous mode [ 2000.711052][T31404] veth1_vlan: left promiscuous mode [ 2000.718872][T31404] veth0_vlan: left promiscuous mode [ 2001.484710][T28669] Bluetooth: hci2: command tx timeout [ 2001.687326][ T2244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5525'. [ 2001.894507][T31404] team0 (unregistering): Port device team_slave_1 removed [ 2001.977715][ T5307] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2002.011574][T31404] team0 (unregistering): Port device team_slave_0 removed [ 2002.132424][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 2002.141596][ T5307] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2002.150939][ T5307] usb 4-1: config 0 has no interface number 0 [ 2002.162648][ T5307] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2002.218160][ T5307] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2002.229221][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.251723][ T5307] usb 4-1: config 0 descriptor?? [ 2002.297905][ T5307] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2002.700469][ T2257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5527'. [ 2003.517098][T28189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.517124][T28189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.562800][T28669] Bluetooth: hci2: command tx timeout [ 2003.643144][T10887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.643171][T10887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.746208][ T2183] chnl_net:caif_netlink_parms(): no params data found [ 2003.967447][ T2284] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5479'. [ 2003.982424][T20041] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2004.165053][T20041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.165085][T20041] usb 2-1: config 0 has no interfaces? [ 2004.167676][T20041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 2004.167716][T20041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.167729][T20041] usb 2-1: Product: syz [ 2004.167739][T20041] usb 2-1: Manufacturer: syz [ 2004.167749][T20041] usb 2-1: SerialNumber: syz [ 2004.228020][T20041] usb 2-1: config 0 descriptor?? [ 2004.613654][ T2295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.634823][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.634896][ T2183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.635054][ T2183] bridge_slave_0: entered allmulticast mode [ 2004.635995][ T2183] bridge_slave_0: entered promiscuous mode [ 2004.637643][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.637681][ T2183] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.637804][ T2183] bridge_slave_1: entered allmulticast mode [ 2004.638608][ T2183] bridge_slave_1: entered promiscuous mode [ 2004.677455][ T2295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.914503][ T5290] usb 4-1: USB disconnect, device number 94 [ 2004.916593][ T5290] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2005.148346][ T2183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.149844][ T2307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'. [ 2005.150827][ T2183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.301204][ T2183] team0: Port device team_slave_0 added [ 2005.303971][ T2183] team0: Port device team_slave_1 added [ 2005.403742][ T2183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.403764][ T2183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.403785][ T2183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.405894][ T2183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.405906][ T2183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.405937][ T2183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2005.646918][T28669] Bluetooth: hci2: command tx timeout [ 2005.672382][T20041] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2005.678715][ T2183] hsr_slave_0: entered promiscuous mode [ 2005.809123][ T2183] hsr_slave_1: entered promiscuous mode [ 2006.028770][T20041] usb 3-1: config 0 has no interfaces? [ 2006.035836][T20041] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2006.035870][T20041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.035892][T20041] usb 3-1: Product: syz [ 2006.035908][T20041] usb 3-1: Manufacturer: syz [ 2006.035925][T20041] usb 3-1: SerialNumber: syz [ 2006.038200][T20041] usb 3-1: config 0 descriptor?? [ 2006.405194][ T2311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2006.423185][ T2311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.453964][ T2183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2007.564368][ T2183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2007.606479][ T2183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2007.621408][ T2183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2007.697623][T19310] usb 2-1: USB disconnect, device number 91 [ 2007.739804][ T2183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2007.755071][ T2183] 8021q: adding VLAN 0 to HW filter on device team0 [ 2007.760282][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 2007.760345][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2007.796403][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 2007.796466][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2008.020334][ T2183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2008.136873][ T2183] veth0_vlan: entered promiscuous mode [ 2008.171751][ T2183] veth1_vlan: entered promiscuous mode [ 2008.273558][ T2183] veth0_macvtap: entered promiscuous mode [ 2008.320388][ T2183] veth1_macvtap: entered promiscuous mode [ 2008.699580][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2008.802505][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2008.841427][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2008.882553][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2008.952479][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.080283][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.173073][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.230259][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.281934][ T2183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.314073][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.333010][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.349252][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.369835][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.390082][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.410342][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.432195][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.455434][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.466725][ T2183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.481044][ T2183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.495347][ T2183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2009.541900][ T2183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.555964][ T2183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.567625][ T2183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.582861][ T2183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.623098][T19310] usb 3-1: USB disconnect, device number 48 [ 2009.787794][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.822274][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.902674][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.931952][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.408324][ T2449] netlink: 'syz.4.5550': attribute type 10 has an invalid length. [ 2010.622368][ T2459] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 2010.630704][ T2459] PKCS7: Only support pkcs7_signedData type [ 2010.667580][ T2449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2010.734131][ T2449] team0: Port device bond0 added [ 2010.920192][ T2468] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 2011.353062][ T2446] syz.2.5553 (2446): drop_caches: 2 [ 2013.223186][ T2509] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2013.532583][T13271] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2013.693519][T13271] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2013.693547][T13271] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2013.693568][T13271] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2013.693583][T13271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.695220][ T2517] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2013.696831][T13271] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2013.991357][ T2534] kernel read not supported for file /  (pid: 2534 comm: syz.4.5575) [ 2013.991505][ T29] audit: type=1800 audit(1729462988.437:26192): pid=2534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5575" name=2001 dev="mqueue" ino=183448 res=0 errno=0 [ 2014.115897][ T2541] netlink: 'syz.4.5576': attribute type 10 has an invalid length. [ 2014.156567][ T2541] syz_tun: entered promiscuous mode [ 2014.166238][ T2541] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2014.264137][T13271] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2014.778043][T13271] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2014.778079][T13271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.778132][T13271] usb 3-1: Product: syz [ 2014.778151][T13271] usb 3-1: Manufacturer: syz [ 2014.778167][T13271] usb 3-1: SerialNumber: syz [ 2014.795769][T13271] usb 3-1: config 0 descriptor?? [ 2015.258869][T13271] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2016.072421][T19310] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2016.222931][T19310] usb 5-1: Using ep0 maxpacket: 32 [ 2016.224698][T19310] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2016.224730][T19310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.233833][T19310] usb 5-1: config 0 descriptor?? [ 2016.243622][T19310] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2016.473462][ T29] audit: type=1326 audit(1729462990.907:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513635][ T29] audit: type=1326 audit(1729462990.957:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513682][ T29] audit: type=1326 audit(1729462990.957:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513704][ T29] audit: type=1326 audit(1729462990.957:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513723][ T29] audit: type=1326 audit(1729462990.957:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513748][ T29] audit: type=1326 audit(1729462990.957:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.513780][ T29] audit: type=1326 audit(1729462990.957:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2579 comm="syz.0.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ca17dff9 code=0x7ffc0000 [ 2016.536843][ T8] usb 4-1: USB disconnect, device number 95 [ 2016.735026][T19310] gspca_vc032x: reg_w err -71 [ 2016.735046][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735060][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735071][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735083][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735094][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735105][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735116][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735127][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735137][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735147][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735158][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735168][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735179][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735190][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735201][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735212][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735222][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735232][T19310] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.735242][T19310] gspca_vc032x: Unknown sensor... [ 2016.735296][T19310] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 2016.812509][T19310] usb 5-1: USB disconnect, device number 53 [ 2017.598553][ T2610] tipc: Started in network mode [ 2017.609457][ T2610] tipc: Node identity 00003a3a000000000000000000000001, cluster identity 4711 [ 2017.765191][ T2610] tipc: Enabling of bearer rejected, failed to enable media [ 2017.842746][T19310] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2018.092418][T19310] usb 4-1: Using ep0 maxpacket: 8 [ 2018.144770][T19310] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 2018.172155][T19310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.257187][T19310] usb 4-1: Product: syz [ 2018.285770][T19310] usb 4-1: Manufacturer: syz [ 2018.322372][T19310] usb 4-1: SerialNumber: syz [ 2018.343029][T27678] usb 3-1: USB disconnect, device number 49 [ 2018.387662][T19310] usb 4-1: config 0 descriptor?? [ 2018.420475][T19310] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 2018.629833][T19310] gspca_zc3xx: reg_w_i err -71 [ 2018.702409][ T5307] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2018.713255][ T8] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2018.872649][ T5307] usb 2-1: Using ep0 maxpacket: 32 [ 2018.880545][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.891103][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.902319][ T8] usb 5-1: config 0 has no interfaces? [ 2018.907906][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.917821][ T5307] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2018.927034][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.937684][ T5307] usb 2-1: config 0 descriptor?? [ 2018.943772][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 2018.955780][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.963909][ T8] usb 5-1: Product: syz [ 2018.968101][ T8] usb 5-1: Manufacturer: syz [ 2018.972799][ T8] usb 5-1: SerialNumber: syz [ 2018.979183][ T8] usb 5-1: config 0 descriptor?? [ 2019.062344][ T937] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2019.212414][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 2019.224592][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2019.234694][ T937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2019.245780][ T937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2019.256257][ T937] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2019.269667][ T937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2019.278918][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.367226][ T5307] kone 0003:1E7D:2CED.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 2019.382367][T19310] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2019.391330][T19310] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2019.408114][T19310] usb 4-1: USB disconnect, device number 96 [ 2019.502859][ T937] usb 3-1: GET_CAPABILITIES returned 0 [ 2019.508533][ T937] usbtmc 3-1:16.0: can't read capabilities [ 2019.549191][ T5307] kone 0003:1E7D:2CED.0044: couldn't init struct kone_device [ 2019.558012][ T5307] kone 0003:1E7D:2CED.0044: couldn't install mouse [ 2019.574572][ T5307] kone 0003:1E7D:2CED.0044: probe with driver kone failed with error -5 [ 2019.600544][ T5307] usb 2-1: USB disconnect, device number 92 [ 2019.702567][T19310] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2019.713638][T13271] usb 3-1: USB disconnect, device number 50 [ 2019.882520][T19310] usb 4-1: Using ep0 maxpacket: 8 [ 2019.896712][T19310] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 2019.910918][T19310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.928583][T19310] usb 4-1: Product: syz [ 2019.935590][T19310] usb 4-1: Manufacturer: syz [ 2019.947042][T19310] usb 4-1: SerialNumber: syz [ 2019.959315][T19310] usb 4-1: config 0 descriptor?? [ 2019.972914][T19310] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 2020.189728][T19310] gspca_zc3xx: reg_w_i err -71 [ 2020.340825][ T2656] lo: entered promiscuous mode [ 2020.932083][ T2674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5614'. [ 2020.952480][T19310] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2020.952549][T19310] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2020.972917][T19310] usb 4-1: USB disconnect, device number 97 [ 2021.500515][ T2680] delete_channel: no stack [ 2021.669145][ T937] usb 5-1: USB disconnect, device number 54 [ 2022.214106][ T2697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5626'. [ 2022.222067][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5625'. [ 2022.508221][T28669] Bluetooth: hci0: Malformed LE Event: 0x0b [ 2023.131505][ T2746] netlink: 'syz.4.5645': attribute type 1 has an invalid length. [ 2023.292320][T13271] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2023.485018][T13271] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2023.485067][T13271] usb 3-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 2023.485092][T13271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.512393][T13271] usb 3-1: config 0 descriptor?? [ 2023.588992][T13271] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2023.732139][T13271] usb 3-1: USB disconnect, device number 51 [ 2023.950511][ T2758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2023.950586][ T2758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2023.954353][ T2758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2023.957172][ T2758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2023.957204][ T2758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2023.962268][ T2758] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2023.972033][ T2758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2023.972081][ T2758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2023.978091][ T2758] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2023.991979][ T2758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2023.992033][ T2758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2023.996440][ T2758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2024.107898][ T29] audit: type=1326 audit(1729462998.557:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.107948][ T29] audit: type=1326 audit(1729462998.557:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.108866][ T29] audit: type=1326 audit(1729462998.557:26202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.108906][ T29] audit: type=1326 audit(1729462998.557:26203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.108939][ T29] audit: type=1326 audit(1729462998.557:26204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.109101][ T29] audit: type=1326 audit(1729462998.557:26205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.109345][ T29] audit: type=1326 audit(1729462998.557:26206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.109620][ T29] audit: type=1326 audit(1729462998.557:26207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.109830][ T29] audit: type=1326 audit(1729462998.557:26208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2769 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028417dff9 code=0x7ffc0000 [ 2024.396617][ T2783] tun0: tun_chr_ioctl cmd 1074025677 [ 2024.396708][ T2783] tun0: linktype set to 825 [ 2025.113633][ T2796] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 2025.178103][ T2802] netlink: 'syz.4.5670': attribute type 1 has an invalid length. [ 2025.202919][ T2802] netlink: 'syz.4.5670': attribute type 2 has an invalid length. [ 2025.882517][T28669] Bluetooth: hci4: command 0x0405 tx timeout [ 2025.962428][T28669] Bluetooth: hci0: command 0x0c1a tx timeout [ 2026.032744][T28909] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2026.053641][T28669] Bluetooth: hci2: command 0x0c1a tx timeout [ 2026.053730][T28669] Bluetooth: hci3: command 0x0c1a tx timeout [ 2026.184495][T28909] usb 5-1: Using ep0 maxpacket: 16 [ 2026.186922][T28909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.186967][T28909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2026.186998][T28909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2026.187021][T28909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2026.187047][T28909] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.188623][T28909] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2026.188654][T28909] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2026.188677][T28909] usb 5-1: Manufacturer: syz [ 2026.208657][T28909] usb 5-1: config 0 descriptor?? [ 2026.562566][T28909] rc_core: IR keymap rc-hauppauge not found [ 2026.562589][T28909] Registered IR keymap rc-empty [ 2026.562670][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.582424][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.602973][T28909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2026.603548][T28909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93 [ 2026.605353][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.622688][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.642511][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.662454][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.694565][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.712976][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.742411][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.762456][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.797343][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.813957][T28909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2026.840466][T28909] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2026.840491][T28909] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2026.890728][T13271] usb 5-1: USB disconnect, device number 55 [ 2027.692344][ T5290] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2027.821071][ T2893] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5704'. [ 2027.851052][ T5290] usb 3-1: Using ep0 maxpacket: 32 [ 2027.853066][ T5290] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 2027.858914][ T5290] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2027.858953][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.858970][ T5290] usb 3-1: Product: syz [ 2027.858980][ T5290] usb 3-1: Manufacturer: syz [ 2027.858989][ T5290] usb 3-1: SerialNumber: syz [ 2027.860589][ T5290] usb 3-1: config 0 descriptor?? [ 2027.869906][ T2879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2027.873272][ T5290] hub 3-1:0.0: bad descriptor, ignoring hub [ 2027.873301][ T5290] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2027.883326][ T5290] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input94 [ 2027.963855][T27726] Bluetooth: hci4: command 0x0405 tx timeout [ 2028.042759][T27726] Bluetooth: hci0: command 0x0c1a tx timeout [ 2028.124301][T27726] Bluetooth: hci3: command 0x0c1a tx timeout [ 2028.124350][T27726] Bluetooth: hci2: command 0x0c1a tx timeout [ 2028.198388][T13271] usb 3-1: USB disconnect, device number 52 [ 2028.198448][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2028.865613][ T2910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2029.083014][ T2917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5711'. [ 2029.742312][T13271] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2029.764991][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.779523][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.792011][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.800031][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.808724][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.818630][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.826551][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.834485][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.842802][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.850598][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.858469][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.866954][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.875053][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.883251][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.891862][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.900353][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.908992][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.917463][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.925431][T13271] usb 3-1: Using ep0 maxpacket: 8 [ 2029.930599][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.938658][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.946936][T28909] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2029.954913][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.963264][T13271] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2029.974808][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2029.982720][T13271] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2029.992804][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2030.000561][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2030.009070][T13271] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2030.019732][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2030.027595][T13271] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2030.040658][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2030.048594][T13271] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2030.058149][T20041] hid-generic 0000:FFFFFFFE:0000.0045: unknown main item tag 0x0 [ 2030.065979][T28669] Bluetooth: hci4: command 0x0405 tx timeout [ 2030.072671][T13271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.101225][T20041] hid-generic 0000:FFFFFFFE:0000.0045: hidraw0: HID vffffff.fb Device [syz0] on syz0 [ 2030.123370][T28669] Bluetooth: hci0: command 0x0c1a tx timeout [ 2030.143015][T28909] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2030.152580][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.161968][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.173156][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.181271][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.190581][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.201956][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.209686][T28669] Bluetooth: hci2: command 0x0c1a tx timeout [ 2030.212449][T27726] Bluetooth: hci3: command 0x0c1a tx timeout [ 2030.219821][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.234185][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.245462][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.253543][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.272316][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.302305][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.315841][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.330324][T13271] usb 3-1: GET_CAPABILITIES returned 0 [ 2030.335934][T13271] usbtmc 3-1:16.0: can't read capabilities [ 2030.346547][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.367783][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.383207][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.392663][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.416845][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.443766][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.457292][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.477571][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.493970][T28909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.503272][T28909] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.532105][ T2963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'. [ 2030.542551][T28909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.550584][ T5290] usb 3-1: USB disconnect, device number 53 [ 2030.561779][T28909] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2030.580254][T28909] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2030.606993][T28909] usb 2-1: Product: syz [ 2030.611198][T28909] usb 2-1: Manufacturer: syz [ 2030.632407][T28909] usb 2-1: SerialNumber: syz [ 2030.665598][T28909] usb 2-1: config 0 descriptor?? [ 2030.750075][T28909] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2031.028383][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 2031.041197][T28909] usb 2-1: USB disconnect, device number 93 [ 2031.048587][T28909] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2031.371152][ T2999] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5750'. [ 2031.392410][ T2999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5750'. [ 2031.678888][ T3012] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2031.820981][ T3020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5761'. [ 2031.876426][ T3024] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5762'. [ 2031.889677][ T3024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5762'. [ 2031.952876][ T937] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2032.112381][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 2032.119311][ T937] usb 5-1: config 0 has no interfaces? [ 2032.126906][ T937] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 2032.137937][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.146388][ T937] usb 5-1: Product: syz [ 2032.150691][ T937] usb 5-1: Manufacturer: syz [ 2032.156923][ T937] usb 5-1: SerialNumber: syz [ 2032.170502][ T937] usb 5-1: config 0 descriptor?? [ 2032.192372][ T5290] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2032.344083][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2032.355085][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2032.374602][ T5290] usb 3-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=cd.ee [ 2032.390481][ T937] usb 5-1: USB disconnect, device number 56 [ 2032.408153][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.417873][ T5290] usb 3-1: Product: syz [ 2032.422072][ T5290] usb 3-1: Manufacturer: syz [ 2032.427334][ T5290] usb 3-1: SerialNumber: syz [ 2032.434246][ T5290] usb 3-1: config 0 descriptor?? [ 2032.446368][ T5290] option 3-1:0.0: GSM modem (1-port) converter detected [ 2032.648961][T13271] usb 3-1: USB disconnect, device number 54 [ 2032.655345][ T29] audit: type=1326 audit(1729463007.097:26209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3062 comm="syz.1.5778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31feb7dff9 code=0x0 [ 2032.683670][T13271] option 3-1:0.0: device disconnected [ 2032.970777][ C1] sd 0:0:1:0: [sda] tag#2635 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2032.981356][ C1] sd 0:0:1:0: [sda] tag#2635 CDB: Write(6) 0a 00 00 00 ff ff ff ff 00 00 00 00 [ 2033.392378][ T937] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2033.524703][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5786'. [ 2033.555152][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.571908][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.586894][ T937] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2033.608541][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.621265][ T937] usb 5-1: config 0 descriptor?? [ 2033.687790][ T3086] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5788'. [ 2034.327580][ T3076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.331525][ T3101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2034.353769][ T3076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.625236][ T3112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2034.632586][ T3112] IPv6: NLM_F_CREATE should be set when creating new route [ 2034.658611][ T3110] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 2035.549044][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5813'. [ 2035.559058][T13271] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2035.924744][T13271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2035.935083][T13271] usb 3-1: config 0 has no interfaces? [ 2035.954544][T13271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 2035.971821][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.988079][T13271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.998759][T13271] usb 3-1: Product: syz [ 2036.010338][T13271] usb 3-1: Manufacturer: syz [ 2036.025089][T13271] usb 3-1: SerialNumber: syz [ 2036.085722][T13271] usb 3-1: config 0 descriptor?? [ 2036.168262][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.172031][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 2036.205079][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2036.249511][ T937] usb 5-1: USB disconnect, device number 57 [ 2036.343113][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.384940][T28669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2036.402554][T28669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2036.417492][T28669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2036.462498][T28669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2036.479415][T28669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2036.487423][T28669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2036.556046][ T61] bond0: (slave netdevsim0): Releasing backup interface [ 2036.578687][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.931226][ T3158] chnl_net:caif_netlink_parms(): no params data found [ 2036.954868][ T61] bridge_slave_1: left allmulticast mode [ 2036.973219][ T61] bridge_slave_1: left promiscuous mode [ 2036.990984][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.009448][ T61] bridge_slave_0: left allmulticast mode [ 2037.021406][ T61] bridge_slave_0: left promiscuous mode [ 2037.034895][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.162437][ T5307] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2037.327889][ T5307] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2037.327925][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.327950][ T5307] usb 4-1: Product: syz [ 2037.327969][ T5307] usb 4-1: Manufacturer: syz [ 2037.327986][ T5307] usb 4-1: SerialNumber: syz [ 2037.334669][ T5307] usb 4-1: config 0 descriptor?? [ 2037.346884][ T5307] ch341 4-1:0.0: ch341-uart converter detected [ 2037.573816][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.573881][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.328561][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2038.341352][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2038.353136][ T5307] usb 4-1: failed to send control message: -71 [ 2038.353181][ T5307] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2038.354625][ T5307] usb 4-1: USB disconnect, device number 98 [ 2038.355481][ T5307] ch341 4-1:0.0: device disconnected [ 2038.373254][ T61] bond0 (unregistering): Released all slaves [ 2038.532623][T28669] Bluetooth: hci4: command tx timeout [ 2038.622332][ T61] tipc: Left network mode [ 2039.019604][T27678] usb 3-1: USB disconnect, device number 55 [ 2039.262524][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.262616][ T3158] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.262747][ T3158] bridge_slave_0: entered allmulticast mode [ 2039.263744][ T3158] bridge_slave_0: entered promiscuous mode [ 2039.275522][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.275590][ T3158] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.275829][ T3158] bridge_slave_1: entered allmulticast mode [ 2039.276863][ T3158] bridge_slave_1: entered promiscuous mode [ 2039.402621][T13271] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2039.446962][ T61] hsr_slave_0: left promiscuous mode [ 2039.448280][ T61] hsr_slave_1: left promiscuous mode [ 2039.448912][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2039.448953][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2039.449575][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2039.449602][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2039.527752][ T61] veth1_macvtap: left promiscuous mode [ 2039.527831][ T61] veth0_macvtap: left promiscuous mode [ 2039.527966][ T61] veth1_vlan: left promiscuous mode [ 2039.528070][ T61] veth0_vlan: left promiscuous mode [ 2039.562466][T13271] usb 4-1: Using ep0 maxpacket: 16 [ 2039.564012][T13271] usb 4-1: config 0 has no interfaces? [ 2039.565786][T13271] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2039.565819][T13271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.565841][T13271] usb 4-1: Product: syz [ 2039.565857][T13271] usb 4-1: Manufacturer: syz [ 2039.565872][T13271] usb 4-1: SerialNumber: syz [ 2039.577902][T13271] usb 4-1: config 0 descriptor?? [ 2040.602606][T28669] Bluetooth: hci4: command tx timeout [ 2040.819379][ T61] team0 (unregistering): Port device team_slave_1 removed [ 2040.905845][ T61] team0 (unregistering): Port device team_slave_0 removed [ 2041.032298][T27678] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2041.213962][T27678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.225151][T27678] usb 3-1: config 0 has no interfaces? [ 2041.246264][T27678] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 2041.257296][T27678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.265583][T27678] usb 3-1: Product: syz [ 2041.270523][T27678] usb 3-1: Manufacturer: syz [ 2041.275204][T27678] usb 3-1: SerialNumber: syz [ 2041.295411][T27678] usb 3-1: config 0 descriptor?? [ 2041.857809][ T3158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.871535][ T3158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.178417][ T3158] team0: Port device team_slave_0 added [ 2042.204585][ T3158] team0: Port device team_slave_1 added [ 2042.280299][ T3158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.280313][ T3158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.280329][ T3158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.281302][ T3158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.281313][ T3158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.281328][ T3158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.506833][ T3158] hsr_slave_0: entered promiscuous mode [ 2042.529773][ T3158] hsr_slave_1: entered promiscuous mode [ 2042.542856][ T3158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2042.542884][ T3158] Cannot create hsr debugfs directory [ 2042.669458][T27678] usb 4-1: USB disconnect, device number 99 [ 2042.687485][T28669] Bluetooth: hci4: command tx timeout [ 2043.685419][ T3158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2043.699720][ T3158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2043.705140][ T3158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2043.709276][ T3158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2043.856058][ T3158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.925408][ T3158] 8021q: adding VLAN 0 to HW filter on device team0 [ 2043.990177][T31404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2043.990221][T31404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.034288][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.034360][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2044.710212][ T3158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2044.772822][T28669] Bluetooth: hci4: command tx timeout [ 2044.809626][ T3158] veth0_vlan: entered promiscuous mode [ 2044.878180][ T3158] veth1_vlan: entered promiscuous mode [ 2044.975582][ T3158] veth0_macvtap: entered promiscuous mode [ 2044.990865][ T3158] veth1_macvtap: entered promiscuous mode [ 2045.061425][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.061454][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.061469][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.061485][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.061498][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.061513][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.061526][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.061542][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.064437][ T3158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2045.170494][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.170521][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.170533][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.170547][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.170559][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.170573][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.170585][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.170598][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.170610][ T3158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.170623][ T3158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.171729][ T3158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2045.184567][ T3158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.184606][ T3158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.184633][ T3158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.184658][ T3158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.201673][T28909] usb 3-1: USB disconnect, device number 56 [ 2045.405548][T31404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2045.405572][T31404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2045.508407][T31404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2045.508432][T31404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2046.362675][T19310] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2046.587935][T19310] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2046.598241][T19310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.608914][T19310] usb 2-1: Product: syz [ 2046.622135][T19310] usb 2-1: Manufacturer: syz [ 2046.640467][T19310] usb 2-1: SerialNumber: syz [ 2046.671477][T19310] usb 2-1: config 0 descriptor?? [ 2046.782397][ T5290] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2046.932162][T19310] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2046.939384][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 2046.950362][ T5290] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2047.044571][ T5290] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2047.147980][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.212297][ T5290] usb 5-1: Product: syz [ 2047.216523][ T5290] usb 5-1: Manufacturer: syz [ 2047.221146][ T5290] usb 5-1: SerialNumber: syz [ 2047.290638][ T5290] usb 5-1: config 0 descriptor?? [ 2047.306298][ T5290] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2048.148997][ T5290] gspca_zc3xx: reg_w_i err -71 [ 2048.782789][ T5290] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2048.789202][ T5290] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2048.803980][ T5290] usb 5-1: USB disconnect, device number 58 [ 2049.133803][ T3413] usb usb8: usbfs: process 3413 (syz.0.5893) did not claim interface 0 before use [ 2049.419045][T13271] usb 2-1: USB disconnect, device number 94 [ 2049.845077][T27726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2049.864460][T27726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2049.888576][T27726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2049.897764][T27726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2049.912378][T27726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2049.919763][T27726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2049.957667][ T3435] netlink: 'syz.4.5903': attribute type 29 has an invalid length. [ 2049.975496][ T3435] netlink: 'syz.4.5903': attribute type 29 has an invalid length. [ 2050.141740][ T3430] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5898'. [ 2050.174610][ T29] audit: type=1326 audit(1729463024.627:26210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3440 comm="syz.1.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2d7dff9 code=0x7ffc0000 [ 2050.319718][ T29] audit: type=1326 audit(1729463024.627:26211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3440 comm="syz.1.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f16f2d7dff9 code=0x7ffc0000 [ 2050.415651][ T3436] chnl_net:caif_netlink_parms(): no params data found [ 2050.427087][ T29] audit: type=1326 audit(1729463024.627:26212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3440 comm="syz.1.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2d7dff9 code=0x7ffc0000 [ 2050.486740][ T29] audit: type=1326 audit(1729463024.627:26213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3440 comm="syz.1.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2d7dff9 code=0x7ffc0000 [ 2050.680048][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.687760][ T3436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.696900][ T3436] bridge_slave_0: entered allmulticast mode [ 2050.705990][ T3436] bridge_slave_0: entered promiscuous mode [ 2050.718295][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.725885][ T3436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.733369][ T3436] bridge_slave_1: entered allmulticast mode [ 2050.740562][ T3436] bridge_slave_1: entered promiscuous mode [ 2050.807232][ T3436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.828641][ T3436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.889075][ T3436] team0: Port device team_slave_0 added [ 2050.904509][ T3436] team0: Port device team_slave_1 added [ 2050.949415][ T3436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.960766][ T3436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.990473][ T3436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.006740][ T3436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.036823][ T3436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2051.090137][ T3436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.197624][ T3436] hsr_slave_0: entered promiscuous mode [ 2051.235304][ T3436] hsr_slave_1: entered promiscuous mode [ 2051.262399][ T5290] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2051.278369][ T3436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2051.304597][ T3436] Cannot create hsr debugfs directory [ 2051.485516][ T5290] usb 5-1: config 0 has no interfaces? [ 2051.517600][ T3484] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5920'. [ 2051.529232][ T5290] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2051.616867][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.651489][ T3436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.656291][ T5290] usb 5-1: Product: syz [ 2051.701137][ T5290] usb 5-1: Manufacturer: syz [ 2051.726037][ T5290] usb 5-1: SerialNumber: syz [ 2051.796266][ T5290] usb 5-1: config 0 descriptor?? [ 2051.946041][ T3436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.962695][T27726] Bluetooth: hci1: command tx timeout [ 2052.083857][ T29] audit: type=1326 audit(1729463026.537:26214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.136978][ T3436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.167423][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.182418][ T29] audit: type=1326 audit(1729463026.567:26215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.221060][ T29] audit: type=1326 audit(1729463026.567:26216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.271856][ T29] audit: type=1326 audit(1729463026.567:26217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.304648][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.349849][ T29] audit: type=1326 audit(1729463026.567:26218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.372819][T27726] Bluetooth: hci0: command 0x0c1a tx timeout [ 2052.401276][ T3436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.430369][ T29] audit: type=1326 audit(1729463026.567:26219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3490 comm="syz.2.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1356d7dff9 code=0x7fc00000 [ 2052.599160][ T3436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2052.609561][ T3436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2052.636999][ T3436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2052.657273][ T3436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2052.681788][ T3505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2052.689069][ T3505] IPv6: NLM_F_CREATE should be set when creating new route [ 2052.736822][ T3505] netlink: 'syz.1.5928': attribute type 27 has an invalid length. [ 2052.789495][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.796843][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.090190][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2053.119081][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2053.262105][ T3505] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.271286][ T3505] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.281320][ T3505] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.291323][ T3505] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.472498][ T3436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2053.509382][ T3436] 8021q: adding VLAN 0 to HW filter on device team0 [ 2053.551103][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.558249][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.581594][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.588828][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.767913][ T3517] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5933'. [ 2053.805148][ T3517] hsr_slave_0: left promiscuous mode [ 2053.860384][ T3517] hsr_slave_1: left promiscuous mode [ 2054.019665][ T3436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2054.043204][T27726] Bluetooth: hci1: command tx timeout [ 2054.120106][ T3520] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5932'. [ 2054.218220][T20041] usb 5-1: USB disconnect, device number 59 [ 2054.309146][ T3436] veth0_vlan: entered promiscuous mode [ 2054.345175][ T3436] veth1_vlan: entered promiscuous mode [ 2054.420454][ T3436] veth0_macvtap: entered promiscuous mode [ 2054.473168][ T3436] veth1_macvtap: entered promiscuous mode [ 2054.540617][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2054.562299][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.612409][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2054.627656][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.637623][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2054.650126][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.660040][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2054.670528][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.682008][ T3436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2054.722095][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.732949][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.743114][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.753828][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.764085][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.774818][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.784951][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.796903][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.807361][ T3436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2054.818165][ T3436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2054.831004][ T3436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2054.842259][ T3436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.850968][ T3436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.860375][ T3436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.869231][ T3436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.942570][ T5290] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2054.949758][T31404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.958702][T31404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.995439][T10887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2055.004647][T10887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2055.015273][ T3546] netlink: 'syz.0.5946': attribute type 10 has an invalid length. [ 2055.027565][ T3546] syz_tun: entered promiscuous mode [ 2055.037208][ T3546] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2055.096115][ T5290] usb 3-1: Using ep0 maxpacket: 16 [ 2055.113274][ T5290] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2055.121317][ T5290] usb 3-1: config 0 has no interface number 0 [ 2055.140582][ T5290] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2055.161132][ T5290] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2055.177869][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 2055.199220][ T5290] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2055.209734][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2055.222245][ T5290] usb 3-1: Product: syz [ 2055.226451][ T5290] usb 3-1: SerialNumber: syz [ 2055.243315][ T5290] usb 3-1: config 0 descriptor?? [ 2055.266401][ T5290] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2055.277013][ T5290] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input95 [ 2055.566034][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2055.592746][ T2825] bond0: (slave syz_tun): Releasing backup interface [ 2055.847733][T10887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.150076][ T3564] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5953'. [ 2056.390910][T10887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.594861][T28669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2056.598596][T28669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2056.600159][T28669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2056.603339][T28669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2056.604924][T28669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2056.605252][T28669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2056.810668][T10887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.934655][T10887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.948228][ C0] cm109_urb_ctl_callback: 16 callbacks suppressed [ 2056.948252][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2056.948886][T27678] usb 3-1: USB disconnect, device number 57 [ 2056.954684][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2056.993112][T28669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2057.004368][T28669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2057.012760][T28669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2057.021509][T28669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2057.030150][T27678] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2057.040023][T28669] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2057.049204][T28669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2057.251917][ T3575] chnl_net:caif_netlink_parms(): no params data found [ 2057.331609][ T3579] chnl_net:caif_netlink_parms(): no params data found [ 2057.355908][T10887] bridge_slave_1: left allmulticast mode [ 2057.361827][T10887] bridge_slave_1: left promiscuous mode [ 2057.367638][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.376166][T10887] bridge_slave_0: left allmulticast mode [ 2057.381801][T10887] bridge_slave_0: left promiscuous mode [ 2057.387936][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.846126][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.858178][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2057.873287][T10887] bond0 (unregistering): Released all slaves [ 2058.006968][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.014584][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.021789][ T3575] bridge_slave_0: entered allmulticast mode [ 2058.028726][ T3575] bridge_slave_0: entered promiscuous mode [ 2058.081769][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.089138][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.096875][ T3575] bridge_slave_1: entered allmulticast mode [ 2058.103841][ T3575] bridge_slave_1: entered promiscuous mode [ 2058.127009][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.137064][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.145821][ T3579] bridge_slave_0: entered allmulticast mode [ 2058.153080][ T3579] bridge_slave_0: entered promiscuous mode [ 2058.229474][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.247437][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.263358][ T3579] bridge_slave_1: entered allmulticast mode [ 2058.279082][ T3579] bridge_slave_1: entered promiscuous mode [ 2058.300494][ T3575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2058.325041][ T3575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2058.441728][T10887] hsr_slave_0: left promiscuous mode [ 2058.452132][T10887] hsr_slave_1: left promiscuous mode [ 2058.464434][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2058.471871][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2058.491361][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2058.500251][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2058.544662][T10887] veth1_macvtap: left promiscuous mode [ 2058.550197][T10887] veth0_macvtap: left promiscuous mode [ 2058.556535][T10887] veth1_vlan: left promiscuous mode [ 2058.561865][T10887] veth0_vlan: left promiscuous mode [ 2058.688502][T27726] Bluetooth: hci0: command tx timeout [ 2059.083528][T27726] Bluetooth: hci1: command tx timeout [ 2059.161332][T10887] team0 (unregistering): Port device team_slave_1 removed [ 2059.228019][T10887] team0 (unregistering): Port device team_slave_0 removed [ 2059.897190][ T3575] team0: Port device team_slave_0 added [ 2059.906458][ T3579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.044376][ T3575] team0: Port device team_slave_1 added [ 2060.081670][ T3579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.162584][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.169562][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.212337][ T3575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.277069][ T3579] team0: Port device team_slave_0 added [ 2060.284838][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.294500][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.333208][ T3575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.371966][ T3579] team0: Port device team_slave_1 added [ 2060.467030][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.482324][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.513098][ T3579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.529652][ T3575] hsr_slave_0: entered promiscuous mode [ 2060.544070][ T3575] hsr_slave_1: entered promiscuous mode [ 2060.557799][ T3575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2060.569785][ T3575] Cannot create hsr debugfs directory [ 2060.588421][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.613210][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.651382][ T3579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.762769][T27726] Bluetooth: hci0: command tx timeout [ 2060.821251][ T3579] hsr_slave_0: entered promiscuous mode [ 2060.829306][ T3579] hsr_slave_1: entered promiscuous mode [ 2060.836237][ T3579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2060.844337][ T3579] Cannot create hsr debugfs directory [ 2060.927420][T10887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.055835][T10887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.163210][T27726] Bluetooth: hci1: command tx timeout [ 2061.269745][T10887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.312370][ T3639] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5968'. [ 2061.595371][T10887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.018480][T10887] erspan0: left allmulticast mode [ 2062.042387][T10887] erspan0: left promiscuous mode [ 2062.047538][T10887] bridge0: port 3(erspan0) entered disabled state [ 2062.091222][T10887] bridge_slave_1: left allmulticast mode [ 2062.097792][T10887] bridge_slave_1: left promiscuous mode [ 2062.111058][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2062.138351][T10887] bridge_slave_0: left allmulticast mode [ 2062.152378][T10887] bridge_slave_0: left promiscuous mode [ 2062.168302][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.725281][T10887] team0: Port device bond0 removed [ 2062.734942][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2062.747525][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2062.759062][T10887] bond0 (unregistering): Released all slaves [ 2062.843345][T27726] Bluetooth: hci0: command tx timeout [ 2062.988343][ T3575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2063.105526][ T3575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2063.134622][ T3575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2063.201008][ T3575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2063.242373][T27726] Bluetooth: hci1: command tx timeout [ 2063.338718][T10887] hsr_slave_0: left promiscuous mode [ 2063.348970][T10887] hsr_slave_1: left promiscuous mode [ 2063.361217][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2063.371653][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2063.379961][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2063.388511][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2063.427154][T10887] veth1_macvtap: left promiscuous mode [ 2063.439495][T10887] veth0_macvtap: left promiscuous mode [ 2063.452406][T10887] veth1_vlan: left promiscuous mode [ 2063.460899][T10887] veth0_vlan: left promiscuous mode [ 2064.297088][T10887] team0 (unregistering): Port device team_slave_1 removed [ 2064.398634][T10887] team0 (unregistering): Port device team_slave_0 removed [ 2064.474184][ T3684] [ 2064.476551][ T3684] ===================================================== [ 2064.483473][ T3684] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2064.490924][ T3684] 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 Not tainted [ 2064.498034][ T3684] ----------------------------------------------------- [ 2064.504961][ T3684] syz.2.5979/3684 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2064.512592][ T3684] ffff8880552e1750 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 2064.521306][ T3684] [ 2064.521306][ T3684] and this task is already holding: [ 2064.528666][ T3684] ffff888029871230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 2064.538335][ T3684] which would create a new lock dependency: [ 2064.544230][ T3684] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 2064.552161][ T3684] [ 2064.552161][ T3684] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2064.561600][ T3684] (&dev->event_lock#2){..-.}-{2:2} [ 2064.561632][ T3684] [ 2064.561632][ T3684] ... which became SOFTIRQ-irq-safe at: [ 2064.574522][ T3684] lock_acquire+0x1ed/0x550 [ 2064.579128][ T3684] _raw_spin_lock_irqsave+0xd5/0x120 [ 2064.584511][ T3684] input_inject_event+0xc5/0x340 [ 2064.589538][ T3684] kd_sound_helper+0x1a0/0x210 [ 2064.594389][ T3684] input_handler_for_each_handle+0x103/0x1d0 [ 2064.600456][ T3684] call_timer_fn+0x18e/0x650 [ 2064.605134][ T3684] __run_timer_base+0x66a/0x8e0 [ 2064.610067][ T3684] run_timer_softirq+0xb7/0x170 [ 2064.615004][ T3684] handle_softirqs+0x2c5/0x980 [ 2064.619852][ T3684] __irq_exit_rcu+0xf4/0x1c0 [ 2064.624530][ T3684] irq_exit_rcu+0x9/0x30 [ 2064.628875][ T3684] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2064.634610][ T3684] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2064.640680][ T3684] [ 2064.640680][ T3684] to a SOFTIRQ-irq-unsafe lock: [ 2064.647705][ T3684] (tasklist_lock){.+.+}-{2:2} [ 2064.647736][ T3684] [ 2064.647736][ T3684] ... which became SOFTIRQ-irq-unsafe at: [ 2064.660355][ T3684] ... [ 2064.660363][ T3684] lock_acquire+0x1ed/0x550 [ 2064.667530][ T3684] _raw_read_lock+0x36/0x50 [ 2064.672122][ T3684] __do_wait+0x12d/0x850 [ 2064.676460][ T3684] do_wait+0x1e9/0x560 [ 2064.680626][ T3684] kernel_wait+0xe9/0x240 [ 2064.685053][ T3684] call_usermodehelper_exec_work+0xbd/0x230 [ 2064.691046][ T3684] process_scheduled_works+0xa63/0x1850 [ 2064.696763][ T3684] worker_thread+0x870/0xd30 [ 2064.701452][ T3684] kthread+0x2f0/0x390 [ 2064.705607][ T3684] ret_from_fork+0x4b/0x80 [ 2064.710109][ T3684] ret_from_fork_asm+0x1a/0x30 [ 2064.714956][ T3684] [ 2064.714956][ T3684] other info that might help us debug this: [ 2064.714956][ T3684] [ 2064.725184][ T3684] Chain exists of: [ 2064.725184][ T3684] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 2064.725184][ T3684] [ 2064.738151][ T3684] Possible interrupt unsafe locking scenario: [ 2064.738151][ T3684] [ 2064.746457][ T3684] CPU0 CPU1 [ 2064.751809][ T3684] ---- ---- [ 2064.757161][ T3684] lock(tasklist_lock); [ 2064.761397][ T3684] local_irq_disable(); [ 2064.768139][ T3684] lock(&dev->event_lock#2); [ 2064.775334][ T3684] lock(&new->fa_lock); [ 2064.782087][ T3684] [ 2064.785528][ T3684] lock(&dev->event_lock#2); [ 2064.790377][ T3684] [ 2064.790377][ T3684] *** DEADLOCK *** [ 2064.790377][ T3684] [ 2064.798505][ T3684] 6 locks held by syz.2.5979/3684: [ 2064.803602][ T3684] #0: ffff88802a893110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 2064.812742][ T3684] #1: ffff888029871230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 2064.822843][ T3684] #2: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 2064.832504][ T3684] #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 2064.842069][ T3684] #4: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 2064.852164][ T3684] #5: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 2064.861225][ T3684] [ 2064.861225][ T3684] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2064.871623][ T3684] -> (&dev->event_lock#2){..-.}-{2:2} { [ 2064.877186][ T3684] IN-SOFTIRQ-W at: [ 2064.881161][ T3684] lock_acquire+0x1ed/0x550 [ 2064.887314][ T3684] _raw_spin_lock_irqsave+0xd5/0x120 [ 2064.894248][ T3684] input_inject_event+0xc5/0x340 [ 2064.900826][ T3684] kd_sound_helper+0x1a0/0x210 [ 2064.907235][ T3684] input_handler_for_each_handle+0x103/0x1d0 [ 2064.914861][ T3684] call_timer_fn+0x18e/0x650 [ 2064.921094][ T3684] __run_timer_base+0x66a/0x8e0 [ 2064.927589][ T3684] run_timer_softirq+0xb7/0x170 [ 2064.934083][ T3684] handle_softirqs+0x2c5/0x980 [ 2064.940493][ T3684] __irq_exit_rcu+0xf4/0x1c0 [ 2064.946726][ T3684] irq_exit_rcu+0x9/0x30 [ 2064.952611][ T3684] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2064.959887][ T3684] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2064.967508][ T3684] INITIAL USE at: [ 2064.971393][ T3684] lock_acquire+0x1ed/0x550 [ 2064.977455][ T3684] _raw_spin_lock_irqsave+0xd5/0x120 [ 2064.984473][ T3684] input_inject_event+0xc5/0x340 [ 2064.990971][ T3684] kbd_led_trigger_activate+0xb8/0x100 [ 2064.997985][ T3684] led_trigger_set+0x582/0x9c0 [ 2065.004305][ T3684] led_trigger_set_default+0x229/0x260 [ 2065.011317][ T3684] led_classdev_register_ext+0x6e6/0x8a0 [ 2065.018501][ T3684] input_leds_connect+0x489/0x630 [ 2065.025085][ T3684] input_register_device+0xd3b/0x1110 [ 2065.032017][ T3684] atkbd_connect+0x752/0xa00 [ 2065.038170][ T3684] serio_driver_probe+0x7f/0xa0 [ 2065.044584][ T3684] really_probe+0x2b8/0xad0 [ 2065.050640][ T3684] __driver_probe_device+0x1a2/0x390 [ 2065.057483][ T3684] driver_probe_device+0x50/0x430 [ 2065.064067][ T3684] __driver_attach+0x45f/0x710 [ 2065.070383][ T3684] bus_for_each_dev+0x239/0x2b0 [ 2065.076789][ T3684] serio_handle_event+0x1c7/0x920 [ 2065.083372][ T3684] process_scheduled_works+0xa63/0x1850 [ 2065.090476][ T3684] worker_thread+0x870/0xd30 [ 2065.096624][ T3684] kthread+0x2f0/0x390 [ 2065.102244][ T3684] ret_from_fork+0x4b/0x80 [ 2065.108221][ T3684] ret_from_fork_asm+0x1a/0x30 [ 2065.114543][ T3684] } [ 2065.117028][ T3684] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2065.126046][ T3684] [ 2065.126046][ T3684] the dependencies between the lock to be acquired [ 2065.126057][ T3684] and SOFTIRQ-irq-unsafe lock: [ 2065.139554][ T3684] -> (tasklist_lock){.+.+}-{2:2} { [ 2065.144853][ T3684] HARDIRQ-ON-R at: [ 2065.148996][ T3684] lock_acquire+0x1ed/0x550 [ 2065.155495][ T3684] _raw_read_lock+0x36/0x50 [ 2065.161989][ T3684] __do_wait+0x12d/0x850 [ 2065.168221][ T3684] do_wait+0x1e9/0x560 [ 2065.174280][ T3684] kernel_wait+0xe9/0x240 [ 2065.180598][ T3684] call_usermodehelper_exec_work+0xbd/0x230 [ 2065.188480][ T3684] process_scheduled_works+0xa63/0x1850 [ 2065.196015][ T3684] worker_thread+0x870/0xd30 [ 2065.202596][ T3684] kthread+0x2f0/0x390 [ 2065.208652][ T3684] ret_from_fork+0x4b/0x80 [ 2065.215059][ T3684] ret_from_fork_asm+0x1a/0x30 [ 2065.221816][ T3684] SOFTIRQ-ON-R at: [ 2065.225964][ T3684] lock_acquire+0x1ed/0x550 [ 2065.232462][ T3684] _raw_read_lock+0x36/0x50 [ 2065.238962][ T3684] __do_wait+0x12d/0x850 [ 2065.245197][ T3684] do_wait+0x1e9/0x560 [ 2065.251252][ T3684] kernel_wait+0xe9/0x240 [ 2065.257569][ T3684] call_usermodehelper_exec_work+0xbd/0x230 [ 2065.265453][ T3684] process_scheduled_works+0xa63/0x1850 [ 2065.272993][ T3684] worker_thread+0x870/0xd30 [ 2065.279572][ T3684] kthread+0x2f0/0x390 [ 2065.285628][ T3684] ret_from_fork+0x4b/0x80 [ 2065.292039][ T3684] ret_from_fork_asm+0x1a/0x30 [ 2065.298793][ T3684] INITIAL USE at: [ 2065.302855][ T3684] lock_acquire+0x1ed/0x550 [ 2065.309264][ T3684] _raw_write_lock_irq+0xd3/0x120 [ 2065.316193][ T3684] copy_process+0x2267/0x3d50 [ 2065.322775][ T3684] kernel_clone+0x226/0x8f0 [ 2065.329189][ T3684] user_mode_thread+0x132/0x1a0 [ 2065.335947][ T3684] rest_init+0x23/0x300 [ 2065.342007][ T3684] start_kernel+0x47f/0x500 [ 2065.348415][ T3684] x86_64_start_reservations+0x2a/0x30 [ 2065.355781][ T3684] x86_64_start_kernel+0x9f/0xa0 [ 2065.362619][ T3684] common_startup_64+0x13e/0x147 [ 2065.369458][ T3684] INITIAL READ USE at: [ 2065.373951][ T3684] lock_acquire+0x1ed/0x550 [ 2065.380795][ T3684] _raw_read_lock+0x36/0x50 [ 2065.387636][ T3684] __do_wait+0x12d/0x850 [ 2065.394214][ T3684] do_wait+0x1e9/0x560 [ 2065.400618][ T3684] kernel_wait+0xe9/0x240 [ 2065.407281][ T3684] call_usermodehelper_exec_work+0xbd/0x230 [ 2065.415510][ T3684] process_scheduled_works+0xa63/0x1850 [ 2065.423396][ T3684] worker_thread+0x870/0xd30 [ 2065.430327][ T3684] kthread+0x2f0/0x390 [ 2065.436734][ T3684] ret_from_fork+0x4b/0x80 [ 2065.443497][ T3684] ret_from_fork_asm+0x1a/0x30 [ 2065.450603][ T3684] } [ 2065.453266][ T3684] ... key at: [] tasklist_lock+0x18/0x40 [ 2065.461241][ T3684] ... acquired at: [ 2065.465204][ T3684] lock_acquire+0x1ed/0x550 [ 2065.469876][ T3684] _raw_read_lock+0x36/0x50 [ 2065.474550][ T3684] send_sigurg+0x144/0x430 [ 2065.479134][ T3684] sk_send_sigurg+0x6e/0x2f0 [ 2065.483894][ T3684] tcp_check_urg+0x207/0x740 [ 2065.488650][ T3684] tcp_urg+0x15c/0x450 [ 2065.492881][ T3684] tcp_rcv_established+0xfaf/0x2020 [ 2065.498241][ T3684] tcp_v6_do_rcv+0x5c8/0x13a0 [ 2065.503082][ T3684] __release_sock+0x1c8/0x350 [ 2065.507924][ T3684] release_sock+0x61/0x1f0 [ 2065.512509][ T3684] tcp_sendmsg+0x3a/0x50 [ 2065.516915][ T3684] __sock_sendmsg+0xef/0x270 [ 2065.521689][ T3684] __sys_sendto+0x39b/0x4f0 [ 2065.526373][ T3684] __x64_sys_sendto+0xde/0x100 [ 2065.531310][ T3684] do_syscall_64+0xf3/0x230 [ 2065.535985][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.542058][ T3684] [ 2065.544377][ T3684] -> (&f_owner->lock){....}-{2:2} { [ 2065.549684][ T3684] INITIAL USE at: [ 2065.553660][ T3684] lock_acquire+0x1ed/0x550 [ 2065.559914][ T3684] _raw_write_lock_irq+0xd3/0x120 [ 2065.566670][ T3684] __f_setown+0x6b/0x380 [ 2065.572646][ T3684] tty_fasync+0x2e3/0x360 [ 2065.578709][ T3684] do_fcntl+0x1127/0x1a60 [ 2065.584772][ T3684] __se_sys_fcntl+0xd2/0x1e0 [ 2065.591092][ T3684] do_syscall_64+0xf3/0x230 [ 2065.597324][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.604952][ T3684] INITIAL READ USE at: [ 2065.609357][ T3684] lock_acquire+0x1ed/0x550 [ 2065.616029][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2065.623483][ T3684] send_sigio+0x37/0x390 [ 2065.629893][ T3684] kill_fasync+0x256/0x4f0 [ 2065.636477][ T3684] lease_break_callback+0x26/0x30 [ 2065.643670][ T3684] __break_lease+0x6d5/0x1820 [ 2065.650514][ T3684] vfs_truncate+0x26b/0x3b0 [ 2065.657186][ T3684] do_sys_truncate+0xdb/0x190 [ 2065.664026][ T3684] do_syscall_64+0xf3/0x230 [ 2065.670693][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.678757][ T3684] } [ 2065.681331][ T3684] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2065.690259][ T3684] ... acquired at: [ 2065.694135][ T3684] lock_acquire+0x1ed/0x550 [ 2065.698809][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2065.704264][ T3684] send_sigio+0x37/0x390 [ 2065.708673][ T3684] kill_fasync+0x256/0x4f0 [ 2065.713257][ T3684] lease_break_callback+0x26/0x30 [ 2065.718447][ T3684] __break_lease+0x6d5/0x1820 [ 2065.723294][ T3684] vfs_truncate+0x26b/0x3b0 [ 2065.727958][ T3684] do_sys_truncate+0xdb/0x190 [ 2065.732797][ T3684] do_syscall_64+0xf3/0x230 [ 2065.737463][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.743529][ T3684] [ 2065.745839][ T3684] -> (&new->fa_lock){...-}-{2:2} { [ 2065.750961][ T3684] IN-SOFTIRQ-R at: [ 2065.754940][ T3684] lock_acquire+0x1ed/0x550 [ 2065.761092][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2065.768025][ T3684] kill_fasync+0x199/0x4f0 [ 2065.774090][ T3684] sock_wake_async+0x147/0x170 [ 2065.780502][ T3684] sock_def_readable+0x3df/0x5b0 [ 2065.787082][ T3684] tcp_rcv_established+0x1534/0x2020 [ 2065.794008][ T3684] tcp_v4_do_rcv+0x96d/0xc70 [ 2065.800241][ T3684] tcp_v4_rcv+0x2dc0/0x37f0 [ 2065.806386][ T3684] ip_protocol_deliver_rcu+0x22e/0x440 [ 2065.813488][ T3684] ip_local_deliver_finish+0x341/0x5f0 [ 2065.820588][ T3684] NF_HOOK+0x3a4/0x450 [ 2065.826300][ T3684] NF_HOOK+0x3a4/0x450 [ 2065.832010][ T3684] __netif_receive_skb+0x2bf/0x650 [ 2065.838762][ T3684] process_backlog+0x662/0x15b0 [ 2065.845257][ T3684] __napi_poll+0xcb/0x490 [ 2065.851229][ T3684] net_rx_action+0x89b/0x1240 [ 2065.857551][ T3684] handle_softirqs+0x2c5/0x980 [ 2065.863966][ T3684] do_softirq+0x11b/0x1e0 [ 2065.869939][ T3684] __local_bh_enable_ip+0x1bb/0x200 [ 2065.876783][ T3684] sk_stream_wait_memory+0x762/0xfa0 [ 2065.883713][ T3684] tcp_sendmsg_locked+0x14f3/0x50a0 [ 2065.890550][ T3684] tcp_sendmsg+0x30/0x50 [ 2065.896431][ T3684] __sock_sendmsg+0x1a6/0x270 [ 2065.902751][ T3684] __sys_sendto+0x39b/0x4f0 [ 2065.908895][ T3684] __x64_sys_sendto+0xde/0x100 [ 2065.915304][ T3684] do_syscall_64+0xf3/0x230 [ 2065.921449][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.928989][ T3684] INITIAL USE at: [ 2065.932878][ T3684] lock_acquire+0x1ed/0x550 [ 2065.938941][ T3684] _raw_write_lock_irq+0xd3/0x120 [ 2065.945517][ T3684] fasync_remove_entry+0xff/0x1d0 [ 2065.952102][ T3684] __tty_hangup+0x2a1/0x6b0 [ 2065.958167][ T3684] tty_release+0x32a/0x12c0 [ 2065.964228][ T3684] __fput+0x23f/0x880 [ 2065.969766][ T3684] task_work_run+0x24f/0x310 [ 2065.975914][ T3684] syscall_exit_to_user_mode+0x168/0x370 [ 2065.983102][ T3684] do_syscall_64+0x100/0x230 [ 2065.989247][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.996699][ T3684] INITIAL READ USE at: [ 2066.001017][ T3684] lock_acquire+0x1ed/0x550 [ 2066.007511][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2066.014787][ T3684] kill_fasync+0x199/0x4f0 [ 2066.021197][ T3684] sock_wake_async+0x147/0x170 [ 2066.027957][ T3684] sk_wake_async+0x18a/0x290 [ 2066.034545][ T3684] tcp_rcv_state_process+0x1dda/0x4570 [ 2066.041996][ T3684] tcp_v4_do_rcv+0x77d/0xc70 [ 2066.048578][ T3684] __release_sock+0x214/0x350 [ 2066.055250][ T3684] release_sock+0x61/0x1f0 [ 2066.061663][ T3684] __inet_stream_connect+0x8bd/0xf30 [ 2066.068941][ T3684] inet_stream_connect+0x65/0xa0 [ 2066.075871][ T3684] __sys_connect+0x2d1/0x300 [ 2066.082451][ T3684] __x64_sys_connect+0x7a/0x90 [ 2066.089200][ T3684] do_syscall_64+0xf3/0x230 [ 2066.096561][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.104469][ T3684] } [ 2066.106957][ T3684] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2066.115626][ T3684] ... acquired at: [ 2066.119417][ T3684] lock_acquire+0x1ed/0x550 [ 2066.124091][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2066.129547][ T3684] kill_fasync+0x199/0x4f0 [ 2066.134129][ T3684] mousedev_notify_readers+0x719/0xc80 [ 2066.139759][ T3684] mousedev_event+0x5ca/0x1390 [ 2066.144692][ T3684] input_handler_events_default+0x107/0x1c0 [ 2066.150756][ T3684] input_pass_values+0x286/0x860 [ 2066.155858][ T3684] input_event_dispose+0x30f/0x600 [ 2066.161143][ T3684] input_handle_event+0xa71/0xbe0 [ 2066.166340][ T3684] input_inject_event+0x22f/0x340 [ 2066.171533][ T3684] evdev_write+0x5fd/0x790 [ 2066.176111][ T3684] vfs_write+0x29c/0xc90 [ 2066.180521][ T3684] ksys_write+0x183/0x2b0 [ 2066.185018][ T3684] do_syscall_64+0xf3/0x230 [ 2066.189684][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.195748][ T3684] [ 2066.198058][ T3684] [ 2066.198058][ T3684] stack backtrace: [ 2066.203933][ T3684] CPU: 1 UID: 0 PID: 3684 Comm: syz.2.5979 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 2066.214595][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2066.224640][ T3684] Call Trace: [ 2066.227913][ T3684] [ 2066.230835][ T3684] dump_stack_lvl+0x241/0x360 [ 2066.235516][ T3684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2066.240704][ T3684] ? __pfx__printk+0x10/0x10 [ 2066.245285][ T3684] ? print_shortest_lock_dependencies+0xf2/0x160 [ 2066.251612][ T3684] validate_chain+0x4ebd/0x5920 [ 2066.256464][ T3684] ? __pfx_validate_chain+0x10/0x10 [ 2066.261659][ T3684] ? __pfx_validate_chain+0x10/0x10 [ 2066.266853][ T3684] ? register_lock_class+0x102/0x980 [ 2066.272142][ T3684] ? __pfx_register_lock_class+0x10/0x10 [ 2066.277772][ T3684] ? mark_lock+0x9a/0x360 [ 2066.282092][ T3684] __lock_acquire+0x1384/0x2050 [ 2066.286949][ T3684] lock_acquire+0x1ed/0x550 [ 2066.291478][ T3684] ? kill_fasync+0x199/0x4f0 [ 2066.296083][ T3684] ? __pfx_lock_acquire+0x10/0x10 [ 2066.301147][ T3684] ? __pfx_lock_acquire+0x10/0x10 [ 2066.306177][ T3684] _raw_read_lock_irqsave+0xdd/0x130 [ 2066.311469][ T3684] ? kill_fasync+0x199/0x4f0 [ 2066.316066][ T3684] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2066.321968][ T3684] kill_fasync+0x199/0x4f0 [ 2066.326382][ T3684] ? kill_fasync+0x54/0x4f0 [ 2066.330886][ T3684] mousedev_notify_readers+0x719/0xc80 [ 2066.336342][ T3684] ? mousedev_notify_readers+0x2a/0xc80 [ 2066.341890][ T3684] mousedev_event+0x5ca/0x1390 [ 2066.346653][ T3684] ? __pfx_mousedev_event+0x10/0x10 [ 2066.351846][ T3684] input_handler_events_default+0x107/0x1c0 [ 2066.357748][ T3684] input_pass_values+0x286/0x860 [ 2066.362687][ T3684] ? input_pass_values+0x8f/0x860 [ 2066.367705][ T3684] input_event_dispose+0x30f/0x600 [ 2066.372814][ T3684] input_handle_event+0xa71/0xbe0 [ 2066.377837][ T3684] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 2066.383293][ T3684] ? __pfx_input_handle_event+0x10/0x10 [ 2066.388838][ T3684] input_inject_event+0x22f/0x340 [ 2066.393857][ T3684] ? input_inject_event+0xd6/0x340 [ 2066.398964][ T3684] evdev_write+0x5fd/0x790 [ 2066.403373][ T3684] ? __pfx_evdev_write+0x10/0x10 [ 2066.408303][ T3684] ? bpf_lsm_file_permission+0x9/0x10 [ 2066.413669][ T3684] ? security_file_permission+0x74/0x280 [ 2066.419300][ T3684] ? rw_verify_area+0x1c3/0x6f0 [ 2066.424148][ T3684] ? __pfx_evdev_write+0x10/0x10 [ 2066.429081][ T3684] vfs_write+0x29c/0xc90 [ 2066.433317][ T3684] ? kmem_cache_free+0x1a2/0x420 [ 2066.438252][ T3684] ? __pfx_vfs_write+0x10/0x10 [ 2066.443008][ T3684] ? __fget_files+0x29/0x470 [ 2066.447594][ T3684] ? __fget_files+0x3f3/0x470 [ 2066.452261][ T3684] ? __fget_files+0x29/0x470 [ 2066.456848][ T3684] ? fdget_pos+0x19a/0x320 [ 2066.461260][ T3684] ksys_write+0x183/0x2b0 [ 2066.465586][ T3684] ? __pfx_ksys_write+0x10/0x10 [ 2066.470430][ T3684] ? do_syscall_64+0x100/0x230 [ 2066.475190][ T3684] ? do_syscall_64+0xb6/0x230 [ 2066.479881][ T3684] do_syscall_64+0xf3/0x230 [ 2066.484398][ T3684] ? clear_bhb_loop+0x35/0x90 [ 2066.489085][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2066.495001][ T3684] RIP: 0033:0x7f1356d7dff9 [ 2066.499411][ T3684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2066.519014][ T3684] RSP: 002b:00007f1357c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2066.527430][ T3684] RAX: ffffffffffffffda RBX: 00007f1356f35f80 RCX: 00007f1356d7dff9 [ 2066.535396][ T3684] RDX: 0000000000000918 RSI: 0000000020000040 RDI: 0000000000000005 [ 2066.543360][ T3684] RBP: 00007f1356df0296 R08: 0000000000000000 R09: 0000000000000000 [ 2066.551321][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2066.559285][ T3684] R13: 0000000000000000 R14: 00007f1356f35f80 R15: 00007f135705fa28 [ 2066.567255][ T3684] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2066.601990][T27726] Bluetooth: hci0: command tx timeout [ 2066.607588][T27726] Bluetooth: hci1: command tx timeout [ 2067.167719][ T3681] bond0: (slave syz_tun): Releasing backup interface [ 2067.194182][ T3681] bridge_slave_0: left allmulticast mode [ 2067.199857][ T3681] bridge_slave_0: left promiscuous mode [ 2067.208408][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.218062][ T3681] bridge_slave_1: left allmulticast mode [ 2067.227856][ T3681] bridge_slave_1: left promiscuous mode [ 2067.233911][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2067.252687][ T3681] bond0: (slave bond_slave_0): Releasing backup interface [ 2067.271039][ T3681] bond0: (slave bond_slave_1): Releasing backup interface [ 2067.282976][ T3681] team0: Port device team_slave_0 removed [ 2067.290670][ T3681] team0: Port device team_slave_1 removed [ 2067.297086][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2067.304954][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.315707][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2067.323201][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.338524][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'. [ 2068.016781][T10887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.048384][T10887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.118995][T10887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.178564][T10887] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.248473][T10887] bridge_slave_1: left allmulticast mode [ 2068.256810][T10887] bridge_slave_1: left promiscuous mode [ 2068.263158][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.270972][T10887] bridge_slave_0: left allmulticast mode [ 2068.277166][T10887] bridge_slave_0: left promiscuous mode [ 2068.283242][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.291410][T10887] bridge_slave_1: left allmulticast mode [ 2068.297124][T10887] bridge_slave_1: left promiscuous mode [ 2068.303664][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.311598][T10887] bridge_slave_0: left allmulticast mode [ 2068.317426][T10887] bridge_slave_0: left promiscuous mode [ 2068.324699][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.465939][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.475628][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.485331][T10887] bond0 (unregistering): Released all slaves [ 2068.496897][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.507237][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.517231][T10887] bond0 (unregistering): Released all slaves [ 2068.820979][T10887] hsr_slave_0: left promiscuous mode [ 2068.829050][T10887] hsr_slave_1: left promiscuous mode [ 2068.836966][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.844680][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.857197][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2068.864703][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.876692][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2068.884147][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.896024][T10887] veth1_macvtap: left promiscuous mode [ 2068.901546][T10887] veth0_macvtap: left promiscuous mode [ 2068.907427][T10887] veth1_vlan: left promiscuous mode [ 2068.912804][T10887] veth0_vlan: left promiscuous mode [ 2069.038723][T10887] team0 (unregistering): Port device team_slave_1 removed [ 2069.071149][T10887] team0 (unregistering): Port device team_slave_0 removed [ 2069.240154][T10887] team0 (unregistering): Port device team_slave_1 removed [ 2069.270603][T10887] team0 (unregistering): Port device team_slave_0 removed [ 2069.875880][T10887] bridge_slave_1: left allmulticast mode [ 2069.881572][T10887] bridge_slave_1: left promiscuous mode [ 2069.888390][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.896779][T10887] bridge_slave_0: left allmulticast mode [ 2069.902508][T10887] bridge_slave_0: left promiscuous mode [ 2069.908181][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.996480][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.006584][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.016155][T10887] bond0 (unregistering): Released all slaves [ 2070.094874][T10887] hsr_slave_0: left promiscuous mode [ 2070.100539][T10887] hsr_slave_1: left promiscuous mode [ 2070.109034][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2070.116903][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.265861][T10887] team0 (unregistering): Port device team_slave_1 removed [ 2070.304239][T10887] team0 (unregistering): Port device team_slave_0 removed