last executing test programs: 41.400032881s ago: executing program 3 (id=4781): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x99d4, 0x5, 0x0, 0x0) 40.499024161s ago: executing program 3 (id=4785): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 39.439641148s ago: executing program 3 (id=4793): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000b40)) 38.748450078s ago: executing program 3 (id=4796): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1f, 0x81, 0x8, 0x7}, {0x2, 0x8, 0x3, 0x1}, {0x100, 0x40, 0x6, 0xb1}]}, 0x10) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r2, &(0x7f0000000100)=""/54, 0x36) write$dsp(r1, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$dsp(r2, &(0x7f0000000140)=""/119, 0x77) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x16, 0x0, @val=@tcx={@void, @value}}, 0x40) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$amidi(&(0x7f0000000240), 0x4, 0x20a500) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000011c0), 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 38.343213642s ago: executing program 3 (id=4798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x561, @remote, 0xd}, 0x1c) 22.246244652s ago: executing program 3 (id=4798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x561, @remote, 0xd}, 0x1c) 21.739898838s ago: executing program 2 (id=4866): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x7, 0x0, &(0x7f0000000400)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some'}, 0x2f) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) 20.374382182s ago: executing program 2 (id=4870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xe0742, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80008"], 0x51) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x412003, 0x3c) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cc, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xc2) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r8, 0x26, 0x0) r9 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r9, 0x1) 19.407179562s ago: executing program 2 (id=4875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 19.113276151s ago: executing program 2 (id=4876): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) 18.798816314s ago: executing program 2 (id=4877): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r1) 18.369037081s ago: executing program 2 (id=4878): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 4.736731082s ago: executing program 0 (id=4920): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x6) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.417091153s ago: executing program 0 (id=4922): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffeffff}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x3, 0x60000000, 0x0, &(0x7f0000000400)=""/66, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) syz_emit_vhci(0x0, 0xa8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe57) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) socket$qrtr(0x2a, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0xc, 0x7, 0x8, 0x0, 0x0, 0x10000000000000, 0x0, 0x800058}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x574}, [@generic={0x5a, 0x4, 0x6, 0x5316, 0x10000}, @exit, @jmp={0x5, 0x1, 0xb, 0x4, 0x3, 0xfffffffffffffffe, 0x10}, @ldst={0x3, 0x0, 0x6, 0x3, 0xa, 0x8, 0x8}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.23102963s ago: executing program 1 (id=4924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000005002e000000000005002d000000000008002c000000000008000300", @ANYRES32=r3], 0x34}}, 0x0) 3.967659157s ago: executing program 1 (id=4926): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x20) 3.101290237s ago: executing program 1 (id=4928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) syz_emit_ethernet(0x5e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000600)=ANY=[], 0x0) 2.867005259s ago: executing program 1 (id=4929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.343035599s ago: executing program 1 (id=4930): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x77359400}}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.090224763s ago: executing program 4 (id=4932): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x28, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2.042009188s ago: executing program 1 (id=4933): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000090505020000000010"], 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 1.808556567s ago: executing program 4 (id=4934): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1.649792673s ago: executing program 4 (id=4935): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x1, 0xfffffffffffffffe, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) 1.558869805s ago: executing program 0 (id=4936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000001bc0)) 1.417682318s ago: executing program 4 (id=4937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) 1.177502417s ago: executing program 0 (id=4938): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @local}, 0x10) sendto$packet(r2, &(0x7f0000000040)="0305890200010000060045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 729.275927ms ago: executing program 4 (id=4939): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x38, r2, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a000000950000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) 678.708441ms ago: executing program 0 (id=4940): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000000180)='\x00', 0x1, 0xf7fffffffffffffd}) 208.135511ms ago: executing program 0 (id=4941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2}) 0s ago: executing program 4 (id=4942): r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) ioctl$EVIOCGMASK(r0, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 6081 - 0 [ 2065.533185][T22580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2065.540299][T22580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2065.626916][T22580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.140114][T22519] Bluetooth: hci8: command tx timeout [ 2066.160683][T22578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.189969][T22638] netlink: 'syz.0.4350': attribute type 2 has an invalid length. [ 2066.212320][T22580] hsr_slave_0: entered promiscuous mode [ 2066.219103][T22580] hsr_slave_1: entered promiscuous mode [ 2066.225545][T22580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2066.235018][T22580] Cannot create hsr debugfs directory [ 2066.322425][T22519] Bluetooth: hci9: command tx timeout [ 2066.447851][T22578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.614701][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2066.864600][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.875834][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.920728][ T45] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2066.948711][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.028546][ T45] usb 5-1: config 0 descriptor?? [ 2067.176554][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 2067.215406][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2067.296285][ T45] usb 5-1: USB disconnect, device number 40 [ 2067.779982][T22578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.968698][T13670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.162161][T22519] Bluetooth: hci8: command tx timeout [ 2068.175241][T13670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.399793][T13670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.411820][T22519] Bluetooth: hci9: command tx timeout [ 2068.568771][T13670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2068.874376][ T5298] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2069.059067][T13670] bridge_slave_1: left allmulticast mode [ 2069.063958][ T5298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.080054][ T5298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2069.082620][T13670] bridge_slave_1: left promiscuous mode [ 2069.094140][ T5298] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2069.104374][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2069.113113][ T5298] usb 1-1: SerialNumber: syz [ 2069.123762][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.152391][T13670] bridge_slave_0: left allmulticast mode [ 2069.182453][T13670] bridge_slave_0: left promiscuous mode [ 2069.199800][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.352875][ T5298] usb 1-1: 0:2 : does not exist [ 2069.378840][ T5298] usb 1-1: USB disconnect, device number 44 [ 2069.912702][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2070.031330][T22678] netlink: 'syz.4.4366': attribute type 1 has an invalid length. [ 2070.059807][T22678] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.4366'. [ 2070.080984][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2070.099190][T13670] bond0 (unregistering): Released all slaves [ 2070.282221][T20798] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2070.452998][T20798] usb 1-1: Using ep0 maxpacket: 16 [ 2070.461064][T20798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2070.473399][T20798] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2070.488805][T20798] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2070.509089][T20798] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2070.518716][T20798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.532076][T20798] usb 1-1: Product: syz [ 2070.538908][T20798] usb 1-1: Manufacturer: syz [ 2070.547977][T20798] usb 1-1: SerialNumber: syz [ 2070.741920][T13670] hsr_slave_0: left promiscuous mode [ 2070.747958][T13670] hsr_slave_1: left promiscuous mode [ 2070.770050][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2070.786709][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.822129][T13670] veth1_macvtap: left promiscuous mode [ 2070.830380][T13670] veth0_macvtap: left promiscuous mode [ 2070.839615][T13670] veth1_vlan: left promiscuous mode [ 2070.849343][T13670] veth0_vlan: left promiscuous mode [ 2071.373943][T20798] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 2071.381789][T20798] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 2071.414671][T20798] cdc_ncm 1-1:1.0: bind() failure [ 2071.421587][T20798] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2071.452722][T20798] cdc_ncm 1-1:1.1: bind() failure [ 2071.484289][T20798] usb 1-1: USB disconnect, device number 45 [ 2072.148509][T13670] team0 (unregistering): Port device team_slave_1 removed [ 2072.232781][T13670] team0 (unregistering): Port device team_slave_0 removed [ 2073.461452][ T938] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2073.492980][T22684] netlink: 'syz.4.4369': attribute type 11 has an invalid length. [ 2073.774350][T22580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2073.793768][ T938] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2073.803142][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.811169][ T938] usb 3-1: Product: syz [ 2073.828781][ T938] usb 3-1: Manufacturer: syz [ 2073.834432][ T938] usb 3-1: SerialNumber: syz [ 2073.838730][T22580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2073.874352][T22702] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2073.886116][ T938] usb 3-1: config 0 descriptor?? [ 2073.949926][T22580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2073.994394][T22580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2074.075986][T22580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.105013][T22580] 8021q: adding VLAN 0 to HW filter on device team0 [ 2074.152859][T22578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2074.230108][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 2074.237265][ T5311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2074.258997][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2074.266153][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2074.287863][T22578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2074.297065][T13612] usb 3-1: USB disconnect, device number 36 [ 2074.353531][T22578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2074.381266][T22580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2074.398942][T22580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2074.421198][T22578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2074.472843][T20798] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 2074.565296][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 2074.670682][T13670] bridge_slave_1: left allmulticast mode [ 2074.683056][T13670] bridge_slave_1: left promiscuous mode [ 2074.692306][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 2074.717160][T13670] bridge_slave_0: left allmulticast mode [ 2074.734063][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.784803][T20798] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 2074.794148][T20798] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 2074.802428][T20798] usb 1-1: config 0 has no interface number 0 [ 2074.813959][T20798] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2074.997206][T20798] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2075.048382][T20798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.087575][T20798] usb 1-1: config 0 descriptor?? [ 2075.172052][T22708] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2075.497827][T22726] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 2075.964772][T20798] usb 1-1: USB disconnect, device number 46 [ 2076.061711][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2076.073725][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2076.086063][T13670] bond0 (unregistering): Released all slaves [ 2076.320759][T22580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2076.343253][T22578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.553713][T22578] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.577476][T20889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.584643][T20889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.714985][T22580] veth0_vlan: entered promiscuous mode [ 2076.731237][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.738401][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.805667][T13670] hsr_slave_0: left promiscuous mode [ 2076.823495][T13670] hsr_slave_1: left promiscuous mode [ 2076.842720][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2076.850825][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.863855][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2076.871426][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2076.896626][T13670] veth1_macvtap: left promiscuous mode [ 2076.902590][T13670] veth0_macvtap: left promiscuous mode [ 2076.908289][T13670] veth1_vlan: left promiscuous mode [ 2076.914847][T22740] netlink: 'syz.2.4391': attribute type 1 has an invalid length. [ 2076.924732][T13670] veth0_vlan: left promiscuous mode [ 2076.937949][T22740] netlink: 88156 bytes leftover after parsing attributes in process `syz.2.4391'. [ 2078.020404][T22753] input: syz1 as /devices/virtual/input/input123 [ 2078.079521][T13670] team0 (unregistering): Port device team_slave_1 removed [ 2078.207615][T13670] team0 (unregistering): Port device team_slave_0 removed [ 2079.185835][T22744] netlink: 'syz.4.4394': attribute type 1 has an invalid length. [ 2079.188462][T22580] veth1_vlan: entered promiscuous mode [ 2079.199480][T22744] netlink: 9292 bytes leftover after parsing attributes in process `syz.4.4394'. [ 2079.232169][T22744] netlink: 'syz.4.4394': attribute type 1 has an invalid length. [ 2079.237340][T22751] netlink: 'syz.2.4396': attribute type 10 has an invalid length. [ 2079.383279][ T29] audit: type=1400 audit(1728172509.902:2792): avc: denied { append } for pid=22755 comm="syz.4.4398" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.425244][T20798] kernel write not supported for file /snd/seq (pid: 20798 comm: kworker/0:0) [ 2079.706200][ T29] audit: type=1400 audit(1728172510.222:2793): avc: denied { write } for pid=22763 comm="syz.4.4400" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 2079.729329][ C0] vkms_vblank_simulate: vblank timer overrun [ 2079.745607][T22580] veth0_macvtap: entered promiscuous mode [ 2079.806296][T22580] veth1_macvtap: entered promiscuous mode [ 2079.958900][T22578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.015232][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.028166][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.038284][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.049355][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.059470][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.070351][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.081666][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.092434][ T5298] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2080.103454][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.113568][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.124337][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.135988][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.146753][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.156891][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.167989][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.187290][T22580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2080.251695][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.273705][ T5298] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.325752][ T5298] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2080.336554][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.351667][ T5298] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2080.365862][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.376582][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.386912][ T5298] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2080.393940][ T5298] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2080.404913][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.415620][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.423884][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.444825][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.456588][ T5298] usb 1-1: config 0 descriptor?? [ 2080.461758][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.476683][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.487900][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.498313][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.509984][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.521284][T22580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.532274][T22580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.558653][T22580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2080.674646][T22578] veth0_vlan: entered promiscuous mode [ 2080.697619][T22578] veth1_vlan: entered promiscuous mode [ 2080.761017][T22578] veth0_macvtap: entered promiscuous mode [ 2080.802721][T22580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.813336][T22580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.830448][T22580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.840023][T22580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.867897][T22578] veth1_macvtap: entered promiscuous mode [ 2081.033309][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.045922][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.056331][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.067561][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.079555][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.080139][ T5298] hid (null): report_id 0 is invalid [ 2081.099977][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.105742][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.119562][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.139625][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.142935][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.160253][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.167218][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.171807][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.184928][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.192100][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.198202][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.199044][ T5298] asus 0003:0B05:1ABE.0035: unknown main item tag 0x0 [ 2081.220259][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.227473][ T5298] asus 0003:0B05:1ABE.0035: report_id 0 is invalid [ 2081.241833][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.248747][ T5298] asus 0003:0B05:1ABE.0035: item 0 1 1 8 parsing failed [ 2081.259861][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.270022][ T5298] asus 0003:0B05:1ABE.0035: Asus hid parse failed: -22 [ 2081.279447][ T5298] asus 0003:0B05:1ABE.0035: probe with driver asus failed with error -22 [ 2081.302138][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.302418][ T5298] usb 1-1: USB disconnect, device number 47 [ 2081.346554][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2081.364758][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.399566][T22578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2081.484994][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.507099][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.519680][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.531809][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.542925][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.553947][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.564091][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.574646][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.584599][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.597652][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.618103][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.641873][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.658623][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.679559][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.698379][T22578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.717659][T22578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.756625][T22578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.802311][T13670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2081.810735][T13670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2081.929133][T22578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.950477][T22578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.962070][T22578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.970799][T22578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.007098][ T5572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.037023][ T5572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.802849][ T5507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.810687][ T5507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.938154][ T5572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.971496][ T5572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.082127][ T8783] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2083.214936][T22791] sctp: [Deprecated]: syz.1.4409 (pid 22791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2083.214936][T22791] Use struct sctp_sack_info instead [ 2083.252579][ T8783] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2083.281765][ T8783] usb 5-1: config 0 has no interface number 0 [ 2083.293804][ T8783] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2083.313234][ T8783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.323267][ T8783] usb 5-1: Product: syz [ 2083.327466][ T8783] usb 5-1: Manufacturer: syz [ 2083.340633][ T8783] usb 5-1: SerialNumber: syz [ 2083.361674][ T8783] usb 5-1: config 0 descriptor?? [ 2083.432216][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 2083.591009][ T8783] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2083.619471][ T8783] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2083.653963][ T8783] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2083.689548][ T8783] usb 5-1: media controller created [ 2083.795515][ T8783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2084.161922][T22814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4419'. [ 2084.262726][ T5234] usb 5-1: USB disconnect, device number 41 [ 2084.269775][T22822] netlink: 'syz.0.4421': attribute type 4 has an invalid length. [ 2084.532403][T22833] can0: slcan on ttyS3. [ 2084.684098][T22833] can0 (unregistered): slcan off ttyS3. [ 2084.750960][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 2085.935640][T22863] kernel read not supported for file /eth0 (pid: 22863 comm: syz.1.4440) [ 2086.000245][ T5230] Bluetooth: hci9: command 0x0405 tx timeout [ 2086.020762][ T29] audit: type=1800 audit(1728172516.462:2794): pid=22863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4440" name="eth0" dev="mqueue" ino=116909 res=0 errno=0 [ 2086.044202][ T29] audit: type=1400 audit(1728172516.462:2795): avc: denied { read } for pid=22856 comm="syz.4.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2086.871541][T22878] netlink: 4056 bytes leftover after parsing attributes in process `syz.1.4446'. [ 2086.908590][T22878] openvswitch: netlink: Actions may not be safe on all matching packets [ 2088.202912][T22519] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 2089.178777][T22940] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.194975][T22940] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.203843][T22940] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.213513][T22940] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2089.262209][T22940] vxlan0: entered promiscuous mode [ 2089.267577][T22940] vxlan0: entered allmulticast mode [ 2089.302190][ T5234] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2089.303407][T22940] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2089.320355][T22940] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2089.329328][T22940] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2089.338425][T22940] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2089.465607][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.482552][ T8783] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2089.492053][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.515663][ T5234] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2089.532091][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.556579][ T5234] usb 1-1: config 0 descriptor?? [ 2089.664514][ T8783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.682466][ T8783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.702618][ T8783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2089.736174][ T8783] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.756072][ T8783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.788491][ T8783] usb 4-1: config 0 descriptor?? [ 2089.986297][ T5234] sony 0003:054C:0268.0036: unknown main item tag 0x0 [ 2090.032806][ T5234] sony 0003:054C:0268.0036: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 2090.060972][ T5234] sony 0003:054C:0268.0036: failed to claim input [ 2090.212038][ T938] usb 1-1: USB disconnect, device number 48 [ 2090.285762][ T8783] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 2090.302261][ T8783] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2090.585792][ T5298] usb 4-1: USB disconnect, device number 48 [ 2090.701132][T22955] netlink: 'syz.4.4478': attribute type 21 has an invalid length. [ 2090.724739][T22955] netlink: 'syz.4.4478': attribute type 1 has an invalid length. [ 2090.752087][T22955] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4478'. [ 2091.358776][T22982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4490'. [ 2091.384372][T22982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4490'. [ 2091.613384][T22990] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2092.542292][ T5298] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2092.712624][ T5298] usb 2-1: Using ep0 maxpacket: 16 [ 2092.739079][ T5298] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 2092.749537][ T5298] usb 2-1: config 0 has no interface number 0 [ 2092.766275][ T5298] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2092.786781][ T5298] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2092.824799][ T5298] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2092.843501][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.859347][ T5298] usb 2-1: Product: syz [ 2092.872115][ T5298] usb 2-1: Manufacturer: syz [ 2092.876912][ T5298] usb 2-1: SerialNumber: syz [ 2092.888686][ T5298] usb 2-1: config 0 descriptor?? [ 2092.902707][T23000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2092.910181][T23000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2093.181230][T23000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2093.205093][T23000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2093.441226][ T29] audit: type=1400 audit(1728172523.952:2796): avc: denied { map } for pid=23028 comm="syz.0.4510" path="socket:[117266]" dev="sockfs" ino=117266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2094.089617][ T29] audit: type=1400 audit(1728172523.952:2797): avc: denied { read accept } for pid=23028 comm="syz.0.4510" path="socket:[117266]" dev="sockfs" ino=117266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2094.267636][ T5298] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2094.301521][ T5298] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2094.355282][ T5298] asix 2-1:0.251: probe with driver asix failed with error -71 [ 2094.372605][ T5298] usb 2-1: USB disconnect, device number 35 [ 2095.612082][ T5298] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2095.775213][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2095.799610][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2095.835883][ T5298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2095.892351][ T5298] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2095.906539][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.951023][ T5298] usb 5-1: config 0 descriptor?? [ 2096.687074][ T5298] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 2096.702545][ T5298] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 2096.724047][ T5298] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2096.762476][ T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2096.924391][ T8783] usb 5-1: USB disconnect, device number 42 [ 2096.928947][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2096.962284][T22519] Bluetooth: hci9: unexpected event 0x08 length: 78 > 4 [ 2096.997852][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.087598][ T45] usb 1-1: config 0 descriptor?? [ 2097.174711][ T45] cp210x 1-1:0.0: cp210x converter detected [ 2097.530481][ T45] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2097.879012][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2098.092494][ T45] usb 1-1: USB disconnect, device number 49 [ 2098.100131][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2098.255162][ T45] cp210x 1-1:0.0: device disconnected [ 2098.582161][ T5234] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2098.743623][ T5234] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2098.802054][ T5234] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2099.015089][ T5234] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2099.032015][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.043631][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.093039][T23085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2099.115901][ T5234] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2099.578409][ T5234] usb 5-1: USB disconnect, device number 43 [ 2101.583546][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4541'. [ 2102.265942][ T45] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2102.782117][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 2102.791416][ T45] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2102.802725][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.810749][ T45] usb 5-1: Product: syz [ 2102.828160][ T45] usb 5-1: Manufacturer: syz [ 2102.845848][ T45] usb 5-1: SerialNumber: syz [ 2102.893089][ T45] usb 5-1: config 0 descriptor?? [ 2102.904788][ T45] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2102.914938][T20798] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2102.930803][T20798] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2102.963663][T23132] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2103.558446][ T5234] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2103.718865][ T5234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2103.768624][ T5234] usb 2-1: no configurations [ 2103.782702][ T5234] usb 2-1: can't read configurations, error -22 [ 2104.035186][T23141] vlan2: entered promiscuous mode [ 2104.069986][T23141] gretap0: entered promiscuous mode [ 2104.085259][T23141] vlan2: entered allmulticast mode [ 2104.108688][T23141] gretap0: entered allmulticast mode [ 2104.136396][T23141] gretap0: left allmulticast mode [ 2104.154645][T23141] gretap0: left promiscuous mode [ 2104.381712][ T45] gspca_sonixj: reg_w1 err -71 [ 2104.462132][ T45] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 2104.486012][ T45] usb 5-1: USB disconnect, device number 44 [ 2104.530870][ T29] audit: type=1400 audit(1728172535.032:2798): avc: denied { accept } for pid=23150 comm="syz.1.4555" lport=41865 faddr=::ffff:172.30.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2104.622105][ T29] audit: type=1400 audit(1728172535.032:2799): avc: denied { getopt } for pid=23150 comm="syz.1.4555" lport=41865 faddr=::ffff:172.30.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2105.154055][T22519] Bluetooth: hci9: unexpected event 0x08 length: 78 > 4 [ 2105.906565][ T5234] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2106.590296][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.628825][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2106.873229][ T5234] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2106.893007][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.934208][ T5234] usb 5-1: config 0 descriptor?? [ 2107.286200][T23180] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4565'. [ 2107.352108][ T8761] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2107.363866][ T5234] hid-led 0003:0FC5:B080.003A: unknown main item tag 0x0 [ 2107.533701][ T8761] usb 1-1: Using ep0 maxpacket: 16 [ 2107.586918][ T8761] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2107.611518][ T8761] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 2107.635157][ T8761] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 2107.650871][T23180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.659157][T23180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.660495][ T8761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2107.720851][ T8761] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2107.752119][ T8761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.760148][ T8761] usb 1-1: Product: syz [ 2107.772027][ T8761] usb 1-1: Manufacturer: syz [ 2107.777105][ T8761] usb 1-1: SerialNumber: syz [ 2107.788201][ T5234] hid-led 0003:0FC5:B080.003A: hidraw0: USB HID v0.00 Device [HID 0fc5:b080] on usb-dummy_hcd.4-1/input0 [ 2107.801422][ T8761] usb 1-1: config 0 descriptor?? [ 2107.819965][T23178] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2107.825494][ T5234] hid-led 0003:0FC5:B080.003A: Delcom Visual Signal Indicator G2 initialized [ 2108.016887][T15636] usb 5-1: USB disconnect, device number 45 [ 2108.053732][T23178] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2108.063359][ T8761] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input124 [ 2108.291605][T23180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2108.323057][T23180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2108.360488][T15636] usb 1-1: USB disconnect, device number 50 [ 2108.411134][ T29] audit: type=1400 audit(1728172538.922:2800): avc: denied { bind } for pid=23189 comm="syz.1.4570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2108.430484][ C1] vkms_vblank_simulate: vblank timer overrun [ 2108.540163][T23180] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.550045][T23180] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.559748][T23180] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.571150][T23180] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.803129][T23192] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 2109.023194][ T29] audit: type=1326 audit(1728172539.542:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23200 comm="syz.0.4576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde2817dff9 code=0x0 [ 2110.266870][T23194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.387768][T23194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.436292][T23194] bond0 (unregistering): Released all slaves [ 2110.539383][ T29] audit: type=1400 audit(1728172541.052:2802): avc: denied { unmount } for pid=22578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2110.876212][ T29] audit: type=1400 audit(1728172541.392:2803): avc: denied { read } for pid=23221 comm="syz.3.4582" path="socket:[118881]" dev="sockfs" ino=118881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2110.899856][ C1] vkms_vblank_simulate: vblank timer overrun [ 2111.295880][ T29] audit: type=1400 audit(1728172541.812:2804): avc: denied { mounton } for pid=23226 comm="syz.1.4586" path="/proc/90/cgroup" dev="proc" ino=117582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2111.358911][ T29] audit: type=1400 audit(1728172541.812:2805): avc: denied { remount } for pid=23226 comm="syz.1.4586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2112.192394][ T5297] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2112.352245][ T5297] usb 5-1: Using ep0 maxpacket: 16 [ 2112.367535][ T5297] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2112.377006][ T5297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.512765][ T5297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2112.536415][ T5297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2112.546410][ T5297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.564229][ T5297] usb 5-1: Product: syz [ 2112.568534][ T5297] usb 5-1: Manufacturer: syz [ 2112.574085][ T5297] usb 5-1: SerialNumber: syz [ 2113.107775][ T5297] usb 5-1: 0:2 : does not exist [ 2114.318176][ T5297] usb 5-1: USB disconnect, device number 46 [ 2115.003780][T23274] netlink: 'syz.2.4603': attribute type 10 has an invalid length. [ 2115.197994][T23274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4603'. [ 2115.273581][ T5297] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2115.423759][T23274] input: syz1 as /devices/virtual/input/input125 [ 2117.616793][ T29] audit: type=1400 audit(1728172548.132:2806): avc: denied { read } for pid=23293 comm="syz.4.4611" lport=33906 faddr=2001:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2118.562371][ T5297] usb 2-1: device descriptor read/all, error -71 [ 2120.021822][T22519] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 2121.999798][T22519] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 2122.820086][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2122.850468][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2122.875449][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2122.884702][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2122.895017][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2122.904717][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2122.934627][T23361] ip6gretap0 speed is unknown, defaulting to 1000 [ 2123.057104][T23364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4633'. [ 2123.100055][T23364] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 2123.138514][T23364] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 2123.170853][T23370] batadv_slave_1: entered allmulticast mode [ 2123.180462][T23371] batadv_slave_1: left allmulticast mode [ 2123.231851][T23361] chnl_net:caif_netlink_parms(): no params data found [ 2123.694628][T23386] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2123.708362][T23386] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2123.722287][T23386] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2123.819351][T23386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2123.820251][T23361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.839989][T23386] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2123.877355][T23361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.898926][T23361] bridge_slave_0: entered allmulticast mode [ 2123.914545][T23361] bridge_slave_0: entered promiscuous mode [ 2123.922879][T23386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2123.932220][T23386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2123.949704][T23386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2123.979439][T23386] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2123.994574][T23388] hsr0: entered promiscuous mode [ 2124.000480][T23389] hsr_slave_0: left promiscuous mode [ 2124.006770][T23386] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2124.015452][T23389] hsr_slave_1: left promiscuous mode [ 2124.047734][T23386] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2124.068973][T23386] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2124.078360][T23386] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2124.095850][T23386] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2124.119143][T23386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2124.120623][T23389] hsr0 (unregistering): left promiscuous mode [ 2124.137574][T23386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2124.236989][T23386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2124.252130][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4641'. [ 2124.273355][T23391] tipc: Started in network mode [ 2124.310140][T23391] tipc: Node identity 000076600025e19c6e, cluster identity 8 [ 2124.382344][T23361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.423127][T23361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.430356][T23361] bridge_slave_1: entered allmulticast mode [ 2124.443909][T23361] bridge_slave_1: entered promiscuous mode [ 2124.497242][T23361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2124.868495][T14672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.087392][T23361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.169684][T23361] team0: Port device team_slave_0 added [ 2125.222557][T23361] team0: Port device team_slave_1 added [ 2125.377056][T14672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2125.919124][T22519] Bluetooth: hci6: command 0x0406 tx timeout [ 2125.925226][T22519] Bluetooth: hci5: command 0x0406 tx timeout [ 2125.931214][T22519] Bluetooth: hci2: command 0x0406 tx timeout [ 2126.002290][ T5230] Bluetooth: hci8: command 0x0c1a tx timeout [ 2126.009433][T22519] Bluetooth: hci4: command 0x0c1a tx timeout [ 2126.082830][ T5230] Bluetooth: hci9: command 0x0405 tx timeout [ 2126.103607][T23361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.123553][T23361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.162477][ T5230] Bluetooth: hci1: command 0x041b tx timeout [ 2126.184147][T23361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.188635][ T29] audit: type=1400 audit(1728172556.702:2807): avc: denied { read } for pid=23411 comm="syz.4.4648" laddr=fe80::11 lport=91 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2126.238542][ T5230] Bluetooth: hci9: unexpected event 0x08 length: 78 > 4 [ 2126.348987][T14672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.387131][T23361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.394922][T23361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.422371][T23361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.586441][T14672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.669582][T23361] hsr_slave_0: entered promiscuous mode [ 2126.700448][T23361] hsr_slave_1: entered promiscuous mode [ 2126.716565][T23361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2126.736836][T23361] Cannot create hsr debugfs directory [ 2126.802134][T15636] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2126.975835][T15636] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2127.012053][T15636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2127.043276][T15636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2127.054806][T15636] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2127.110736][T15636] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2127.142292][T15636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.173446][T15636] usb 4-1: config 0 descriptor?? [ 2127.712216][T14672] bridge_slave_1: left allmulticast mode [ 2127.721910][T14672] bridge_slave_1: left promiscuous mode [ 2127.731482][T14672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.758030][T14672] bridge_slave_0: left promiscuous mode [ 2127.776498][T14672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.830373][T14672] bond_slave_0: left promiscuous mode [ 2127.849029][T14672] bond_slave_1: left promiscuous mode [ 2127.939817][T15636] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 2127.969775][T15636] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2128.014742][T22519] Bluetooth: hci6: command 0x0406 tx timeout [ 2128.021604][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 2128.082153][T22519] Bluetooth: hci4: command 0x0c1a tx timeout [ 2128.088319][ T5230] Bluetooth: hci8: command 0x0c1a tx timeout [ 2128.169984][ T5230] Bluetooth: hci9: command 0x0405 tx timeout [ 2128.196598][ T5297] usb 4-1: USB disconnect, device number 49 [ 2128.242328][ T5230] Bluetooth: hci1: command 0x041b tx timeout [ 2128.723222][ T5297] IPVS: starting estimator thread 0... [ 2128.822328][T23436] IPVS: using max 16 ests per chain, 38400 per kthread [ 2129.155162][T14672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2129.206485][T14672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2129.261061][T14672] bond0 (unregistering): Released all slaves [ 2129.523505][T23441] batadv_slave_1: entered promiscuous mode [ 2129.537033][T23437] batadv_slave_1: left promiscuous mode [ 2130.162091][ T5230] Bluetooth: hci8: command 0x0c1a tx timeout [ 2130.162155][T22519] Bluetooth: hci4: command 0x0c1a tx timeout [ 2130.242402][T22519] Bluetooth: hci9: command 0x0405 tx timeout [ 2130.328688][T22519] Bluetooth: hci1: command 0x041b tx timeout [ 2130.542482][T15636] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2130.587465][T14672] hsr_slave_0: left promiscuous mode [ 2130.593811][T14672] hsr_slave_1: left promiscuous mode [ 2130.610703][T14672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2130.620572][T14672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2130.688907][T14672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2130.882923][T15636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2130.964019][T14672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2130.978749][T15636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2131.002687][T15636] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2131.011714][T15636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.027200][T14672] veth1_macvtap: left promiscuous mode [ 2131.034557][T14672] veth0_macvtap: left promiscuous mode [ 2131.042633][T14672] veth1_vlan: left promiscuous mode [ 2131.047974][T14672] veth0_vlan: left promiscuous mode [ 2131.103220][T15636] usb 4-1: config 0 descriptor?? [ 2131.774365][T15636] usb 4-1: string descriptor 0 read error: -22 [ 2132.178420][T15636] uclogic 0003:256C:006D.003C: failed retrieving string descriptor #100: -71 [ 2132.189272][T15636] uclogic 0003:256C:006D.003C: failed retrieving pen parameters: -71 [ 2132.203510][T15636] uclogic 0003:256C:006D.003C: failed probing pen v1 parameters: -71 [ 2132.211823][T15636] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 2132.220250][T15636] uclogic 0003:256C:006D.003C: probe with driver uclogic failed with error -71 [ 2132.237378][T15636] usb 4-1: USB disconnect, device number 50 [ 2132.405629][T22519] Bluetooth: hci1: command 0x041b tx timeout [ 2132.661146][T14672] team0 (unregistering): Port device team_slave_1 removed [ 2132.758805][T14672] team0 (unregistering): Port device team_slave_0 removed [ 2132.875695][T23471] loop2: detected capacity change from 0 to 7 [ 2132.890132][T23471] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 2132.896719][T23471] loop2: partition table partially beyond EOD, truncated [ 2132.904151][T23471] loop2: p1 size 6333 extends beyond EOD, truncated [ 2133.795860][T23361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2133.874795][T23361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2133.924893][T23361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2134.003004][T23478] batman_adv: batadv0: Adding interface: dummy0 [ 2134.012032][T23478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2134.042670][T23478] batman_adv: batadv0: Interface activated: dummy0 [ 2134.549000][T22519] Bluetooth: hci1: command 0x041b tx timeout [ 2134.674756][T23361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2134.849386][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4676'. [ 2134.870833][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4676'. [ 2135.537896][T23361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2135.567621][T23361] 8021q: adding VLAN 0 to HW filter on device team0 [ 2135.598467][T14672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.605624][T14672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.684278][T20889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.691396][T20889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.743009][ T45] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2135.799680][T23361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2135.933536][ T45] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 2135.957702][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.991011][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.039329][ T45] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2136.085043][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.108465][ T45] usb 5-1: config 0 descriptor?? [ 2136.133048][T15636] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2136.211582][T23361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2136.242622][ T5298] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2136.269044][T23361] veth0_vlan: entered promiscuous mode [ 2136.291421][T15636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.325248][T15636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.337660][T23361] veth1_vlan: entered promiscuous mode [ 2136.355664][T15636] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2136.402217][T15636] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2136.411381][T15636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.412405][ T5298] usb 4-1: Using ep0 maxpacket: 16 [ 2136.420330][ T8783] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2136.437600][T23361] veth0_macvtap: entered promiscuous mode [ 2136.446527][T15636] usb 3-1: config 0 descriptor?? [ 2136.462427][T23361] veth1_macvtap: entered promiscuous mode [ 2136.484343][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.484560][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.495678][ T5298] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2136.521345][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.537179][ T45] corsair 0003:1B1C:1B3E.003D: failed to start in urb: -90 [ 2136.546789][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.557396][ T5298] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2136.557433][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.572070][T22519] Bluetooth: hci1: command 0x041b tx timeout [ 2136.580982][ T45] corsair 0003:1B1C:1B3E.003D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 2136.587866][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.593845][ T5298] usb 4-1: config 0 descriptor?? [ 2136.613177][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.613473][ T8783] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2136.624955][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.645551][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.658434][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.668428][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.676231][ T8783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2136.678914][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.700036][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.710617][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.722532][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2136.730697][ T8783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2136.733030][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.754812][T23361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2136.777822][ T8783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2136.781650][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.801508][ T8783] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2136.818564][T13612] usb 5-1: USB disconnect, device number 47 [ 2136.821780][ T8783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.852138][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.865928][ T8783] usb 2-1: config 0 descriptor?? [ 2136.872660][T23517] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2136.891354][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.922227][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.947956][T15636] acrux 0003:1A34:0802.003E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 2136.962484][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.982153][T15636] acrux 0003:1A34:0802.003E: no inputs found [ 2136.994024][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.012032][T15636] acrux 0003:1A34:0802.003E: Failed to enable force feedback support, error: -19 [ 2137.026751][T23509] raw-gadget.2 gadget.3: fail, usb_ep_set_halt returned -11 [ 2137.031445][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2137.044704][ T5298] usbhid 4-1:0.0: can't add hid device: -71 [ 2137.044807][ T5298] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2137.047910][ T5298] usb 4-1: USB disconnect, device number 51 [ 2137.067249][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.087310][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2137.112006][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.121867][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2137.152030][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.161865][T23361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2137.192092][T23361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2137.200951][ T5234] usb 3-1: USB disconnect, device number 37 [ 2137.222295][T23361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2137.262634][T23361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.271891][T23361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.312227][T23361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.320968][T23361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.336420][ T8783] plantronics 0003:047F:FFFF.003F: unknown main item tag 0xd [ 2137.364039][ T8783] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 2137.391024][ T8783] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2137.465273][ T5572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2137.497538][ T5572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.552255][T14672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2137.561126][T14672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.890299][ T8761] usb 2-1: USB disconnect, device number 40 [ 2138.424100][T23532] netlink: 'syz.3.4690': attribute type 2 has an invalid length. [ 2138.455248][T23532] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4690'. [ 2138.942747][ T8761] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2139.175513][ T8761] usb 1-1: config 0 has no interfaces? [ 2139.240286][T22519] Bluetooth: hci8: unexpected event 0x08 length: 78 > 4 [ 2139.245768][ T8761] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2139.274761][ T8761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.317208][ T8761] usb 1-1: config 0 descriptor?? [ 2139.589407][ T45] usb 1-1: USB disconnect, device number 51 [ 2141.269911][T22519] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 2144.531767][T23647] netlink: 'syz.1.4733': attribute type 10 has an invalid length. [ 2144.692233][T23647] input: syz1 as /devices/virtual/input/input127 [ 2144.778002][T23652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4735'. [ 2148.252150][T20798] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2148.412127][T20798] usb 2-1: Using ep0 maxpacket: 8 [ 2148.421241][T20798] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2148.434500][T20798] usb 2-1: config 179 has no interface number 0 [ 2148.452213][T20798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2148.922174][T20798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2148.963872][T20798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2148.998806][T20798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2149.029629][T20798] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2149.080642][T20798] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2149.102159][T20798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.172214][T23689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2149.496188][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2149.504498][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2149.513314][T20798] usb 2-1: USB disconnect, device number 41 [ 2150.687049][T20798] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2150.862154][T20798] usb 2-1: Using ep0 maxpacket: 32 [ 2150.869026][T20798] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2150.877274][T20798] usb 2-1: config 0 has no interface number 0 [ 2150.900365][T20798] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.920841][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 2150.932145][T20798] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.958451][T20798] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2150.979768][T23721] macsec1: entered allmulticast mode [ 2150.987675][T20798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.018004][T20798] usb 2-1: config 0 descriptor?? [ 2151.023856][T23721] veth1_macvtap: entered allmulticast mode [ 2151.040062][T23722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4760'. [ 2151.153010][T23722] veth1_macvtap (unregistering): left allmulticast mode [ 2151.197639][T23710] input: syz1 as /devices/virtual/input/input128 [ 2151.335514][T23724] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4761'. [ 2151.445119][T20798] ft260 0003:0403:6030.0040: unknown main item tag 0x0 [ 2151.644178][T20798] ft260 0003:0403:6030.0040: chip code: 6424 8183 [ 2151.844835][T20798] ft260 0003:0403:6030.0040: uart interface is not supported [ 2151.917012][T22519] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 2152.091053][T20798] usb 2-1: USB disconnect, device number 42 [ 2153.183036][ T5234] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2153.363342][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.387262][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.417206][ T5234] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2153.447170][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.471373][ T5234] usb 2-1: config 0 descriptor?? [ 2153.912679][ T5234] pyra 0003:1E7D:2CF6.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 2154.924072][ T5234] pyra 0003:1E7D:2CF6.0041: couldn't init struct pyra_device [ 2154.949457][ T5234] pyra 0003:1E7D:2CF6.0041: couldn't install mouse [ 2154.988759][ T5234] pyra 0003:1E7D:2CF6.0041: probe with driver pyra failed with error -71 [ 2155.033019][ T5234] usb 2-1: USB disconnect, device number 43 [ 2155.963975][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2155.979103][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2155.989010][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2156.007844][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2156.017800][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2156.032160][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2156.080522][ T5234] IPVS: starting estimator thread 0... [ 2156.096568][T23782] ip6gretap0 speed is unknown, defaulting to 1000 [ 2156.134247][T23785] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.141552][T23785] tipc: Enabled bearer , priority 10 [ 2156.202085][T23786] IPVS: using max 18 ests per chain, 43200 per kthread [ 2156.274383][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.412063][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.552087][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.692056][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.842046][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2156.982100][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2157.122119][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2157.192240][T23782] chnl_net:caif_netlink_parms(): no params data found [ 2157.303798][ T45] tipc: Node number set to 1847957500 [ 2157.402056][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2157.672055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2158.092066][ T5230] Bluetooth: hci1: command tx timeout [ 2158.250010][T23782] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.355546][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.370276][T23782] bridge_slave_0: entered allmulticast mode [ 2158.387785][T23782] bridge_slave_0: entered promiscuous mode [ 2158.612229][T23782] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.619348][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.651263][T23782] bridge_slave_1: entered allmulticast mode [ 2158.663440][T23782] bridge_slave_1: entered promiscuous mode [ 2158.815545][T23782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2158.838141][T23782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2158.963731][T23782] team0: Port device team_slave_0 added [ 2158.985323][T23782] team0: Port device team_slave_1 added [ 2159.089083][T23782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.104371][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.131901][T23782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.176247][T22519] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2159.189694][T22519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2159.199476][T22519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2159.207932][T22519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2159.222730][T22519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2159.230048][T22519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2159.238096][T23782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.245264][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.332037][T23782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.534452][T23782] hsr_slave_0: entered promiscuous mode [ 2159.552932][T23782] hsr_slave_1: entered promiscuous mode [ 2159.572394][T23782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2159.579980][T23782] Cannot create hsr debugfs directory [ 2159.589497][T23840] ip6gretap0 speed is unknown, defaulting to 1000 [ 2160.162311][T22519] Bluetooth: hci1: command tx timeout [ 2160.385296][T23782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.483937][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.536136][T23782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.690322][T23782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.797763][T23782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.835964][T23840] chnl_net:caif_netlink_parms(): no params data found [ 2161.362057][ C1] net_ratelimit: 3 callbacks suppressed [ 2161.362079][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2161.376560][T22519] Bluetooth: hci3: command tx timeout [ 2161.577491][T23879] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 2161.600056][T23879] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.4815'. [ 2161.624810][T23840] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.632183][T23879] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 2161.640747][T23840] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.739246][T23840] bridge_slave_0: entered allmulticast mode [ 2162.132700][T23840] bridge_slave_0: entered promiscuous mode [ 2162.202485][T23840] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.230807][T23840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.242636][T22519] Bluetooth: hci1: command tx timeout [ 2162.251673][T23840] bridge_slave_1: entered allmulticast mode [ 2162.303280][T23840] bridge_slave_1: entered promiscuous mode [ 2162.400727][T23840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2162.412432][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2162.650002][T23782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2162.687452][T23782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2162.955691][T23840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2163.010042][T23782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2163.070506][T23782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2163.442075][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2163.474977][T22519] Bluetooth: hci3: command tx timeout [ 2163.554756][T23840] team0: Port device team_slave_0 added [ 2164.108284][T23840] team0: Port device team_slave_1 added [ 2164.322826][T22519] Bluetooth: hci1: command tx timeout [ 2164.413839][T23840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2164.420896][T23840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.446975][T23840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2164.448066][T23910] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4825'. [ 2164.459356][T23840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2164.474465][T23840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.500509][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2164.508757][T23840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2164.595581][T23910] netlink: 'syz.4.4825': attribute type 2 has an invalid length. [ 2164.612444][T23910] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4825'. [ 2164.625002][T23782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.641385][T23782] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.741821][ T29] audit: type=1400 audit(1728172595.242:2808): avc: denied { watch_mount } for pid=23913 comm="syz.1.4827" path="/96" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2164.894007][T23840] hsr_slave_0: entered promiscuous mode [ 2164.914897][T23840] hsr_slave_1: entered promiscuous mode [ 2165.036945][T23840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2165.084144][T23840] Cannot create hsr debugfs directory [ 2165.278780][T20889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.285946][T20889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2165.298760][T20889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.305891][T20889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2165.502335][ T29] audit: type=1326 audit(1728172595.992:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.522193][T22519] Bluetooth: hci3: command tx timeout [ 2165.525939][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2165.538555][ T29] audit: type=1326 audit(1728172595.992:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.562176][ T29] audit: type=1326 audit(1728172595.992:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.585779][ T29] audit: type=1326 audit(1728172595.992:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.610871][ T29] audit: type=1326 audit(1728172595.992:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.635080][ T29] audit: type=1326 audit(1728172595.992:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.659213][ T29] audit: type=1326 audit(1728172595.992:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.683925][ T29] audit: type=1326 audit(1728172595.992:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2165.708324][ T29] audit: type=1326 audit(1728172596.042:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.1.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2166.135386][T23840] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.554197][T23782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2166.562044][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2166.674467][T23840] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.720433][T23782] veth0_vlan: entered promiscuous mode [ 2166.740287][T23782] veth1_vlan: entered promiscuous mode [ 2166.789542][T23840] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.914805][T23782] veth0_macvtap: entered promiscuous mode [ 2166.949672][T23782] veth1_macvtap: entered promiscuous mode [ 2167.017591][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.041153][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.082053][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.102432][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.138435][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.169736][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.200298][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.221351][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.252480][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.293014][T20798] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2167.310855][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.348652][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.381789][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.412084][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.432047][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.452541][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2167.464130][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.491702][T23782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2167.602981][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2167.613059][T22519] Bluetooth: hci3: command tx timeout [ 2167.716409][T23840] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.785216][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.821814][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.846987][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.879636][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.904938][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.937514][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.948474][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.959733][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2167.969674][T20798] usb 3-1: Using ep0 maxpacket: 8 [ 2167.975127][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2167.979932][T20798] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 2168.000163][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2168.010836][T20798] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 2168.021164][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2168.032148][T20798] usb 3-1: config 0 has no interface number 0 [ 2168.038813][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2168.051240][T20798] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2168.064236][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2168.075300][T20798] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2168.088528][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2168.100377][T20798] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2168.110516][T23782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2168.121224][T23782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2168.132378][T20798] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2168.142893][T20798] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2168.161155][T23782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2168.169874][T20798] usb 3-1: Product: syz [ 2168.175967][T20798] usb 3-1: config 0 descriptor?? [ 2168.207363][T23782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.223324][T23782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.258527][T23782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.286102][T23782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.533141][T23951] macsec0: entered promiscuous mode [ 2168.633541][T23951] veth1_macvtap: left promiscuous mode [ 2168.642038][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2168.694833][T23951] macsec0 (unregistering): left promiscuous mode [ 2168.733105][T20889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.740960][T20889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2169.245879][T20798] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input129 [ 2169.316018][T13670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2169.331088][T20798] input: failed to attach handler kbd to device input129, error: -5 [ 2169.342562][T20798] usb 3-1: USB disconnect, device number 38 [ 2169.386869][T13670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2169.396815][T23840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2169.437798][T23840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2169.481454][T23840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2169.529686][T23840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2169.682228][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2169.766207][T23965] netlink: 'syz.4.4845': attribute type 10 has an invalid length. [ 2169.803662][T23840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2169.844550][T23840] 8021q: adding VLAN 0 to HW filter on device team0 [ 2169.852030][T23965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4845'. [ 2169.895416][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.902519][ T5507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2169.984083][T20658] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.991186][T20658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2170.007274][T23965] input: syz1 as /devices/virtual/input/input130 [ 2170.037938][T23840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2170.062291][T23840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2170.378086][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 2170.378106][ T29] audit: type=1326 audit(1728172600.892:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2170.501186][ T29] audit: type=1326 audit(1728172600.942:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2170.732535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2171.048616][ T29] audit: type=1326 audit(1728172600.942:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.132203][ T29] audit: type=1326 audit(1728172600.942:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.155659][ C0] vkms_vblank_simulate: vblank timer overrun [ 2171.210207][ T29] audit: type=1326 audit(1728172600.952:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.246139][T23840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2171.313335][ T29] audit: type=1326 audit(1728172600.992:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.355138][T23840] veth0_vlan: entered promiscuous mode [ 2171.369436][T23840] veth1_vlan: entered promiscuous mode [ 2171.378121][ T29] audit: type=1326 audit(1728172600.992:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.410756][T23840] veth0_macvtap: entered promiscuous mode [ 2171.516832][T23840] veth1_macvtap: entered promiscuous mode [ 2171.540904][ T29] audit: type=1326 audit(1728172600.992:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.584094][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.623536][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.662196][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.692454][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.715425][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.751786][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.762092][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2171.780117][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.812070][ T29] audit: type=1326 audit(1728172600.992:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.819085][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.856720][ T29] audit: type=1326 audit(1728172600.992:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.1.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cce57dff9 code=0x7ff00000 [ 2171.910507][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.979704][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.994040][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.006129][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.016760][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.027985][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.039333][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.057135][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.069222][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.081250][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.099209][T23840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2172.166403][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.188396][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.213379][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.241261][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.281884][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.302091][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.327856][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.348671][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.389227][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.425417][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.454491][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.479793][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.515043][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.535894][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.556017][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.579230][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.598469][T23840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.620631][T23840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.654074][T23840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2172.709282][T23840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.745721][T23840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.780990][T23840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.802044][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2172.809173][T23840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.080123][ T5507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.118439][ T5507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.189507][ T5507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.217836][ T5507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.852078][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2174.484080][ T6971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.816677][ T6971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.882234][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2175.154720][ T6971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.469842][T24035] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.4868'. [ 2175.540862][ T6971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.694770][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2175.710241][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2175.722420][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2175.882595][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2175.889959][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2175.902384][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2175.922119][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2175.936045][T24036] ip6gretap0 speed is unknown, defaulting to 1000 [ 2176.009787][ T6971] bridge_slave_1: left allmulticast mode [ 2176.015641][ T6971] bridge_slave_1: left promiscuous mode [ 2176.021323][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.029646][ T6971] bridge_slave_0: left allmulticast mode [ 2176.036234][ T6971] bridge_slave_0: left promiscuous mode [ 2176.042833][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.060461][T24039] netlink: 'syz.0.4869': attribute type 9 has an invalid length. [ 2176.069303][T24039] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4869'. [ 2176.493740][T22519] Bluetooth: hci4: unexpected event 0x08 length: 78 > 4 [ 2176.972147][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2177.242086][ T8761] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2177.262404][T13612] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2177.329034][ T6971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2177.388420][ T6971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2177.403224][ T8761] usb 2-1: Using ep0 maxpacket: 8 [ 2177.413213][ T6971] bond0 (unregistering): Released all slaves [ 2177.413533][ T8761] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2177.434774][T13612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.452115][T13612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2177.461180][ T8761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.481551][T13612] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2177.492995][ T8761] usb 2-1: Product: syz [ 2177.497189][ T8761] usb 2-1: Manufacturer: syz [ 2177.501806][ T8761] usb 2-1: SerialNumber: syz [ 2177.522267][T13612] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2177.530035][T24041] netlink: 'syz.0.4869': attribute type 9 has an invalid length. [ 2177.539218][T13612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.555453][ T8761] usb 2-1: config 0 descriptor?? [ 2177.555596][T24041] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4869'. [ 2177.574202][ T8761] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2177.584343][T24054] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2177.614730][T13612] hub 5-1:1.0: bad descriptor, ignoring hub [ 2177.620706][T13612] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2177.630827][T13612] cdc_wdm 5-1:1.0: skipping garbage [ 2177.636252][T13612] cdc_wdm 5-1:1.0: skipping garbage [ 2177.686140][T13612] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2177.692374][T13612] cdc_wdm 5-1:1.0: Unknown control protocol [ 2178.002160][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2178.010811][T22519] Bluetooth: hci3: command tx timeout [ 2178.045077][T24036] chnl_net:caif_netlink_parms(): no params data found [ 2178.094206][T13612] usb 5-1: USB disconnect, device number 48 [ 2178.405048][ T6971] hsr_slave_0: left promiscuous mode [ 2178.431709][ T6971] hsr_slave_1: left promiscuous mode [ 2178.462299][ T5298] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2178.470160][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2178.483131][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2178.508965][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2178.528741][T24063] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4879'. [ 2178.538399][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2178.545424][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 2178.555705][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2178.575905][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2178.584264][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2178.597859][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2178.607219][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2178.614812][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2178.658657][ T6971] veth1_macvtap: left promiscuous mode [ 2178.664333][ T6971] veth0_macvtap: left promiscuous mode [ 2178.669930][ T6971] veth1_vlan: left promiscuous mode [ 2178.675333][ T6971] veth0_vlan: left promiscuous mode [ 2178.752069][ T5298] usb 5-1: Using ep0 maxpacket: 8 [ 2178.757264][ T8761] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 2178.772086][ T8761] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 2179.052175][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2179.444903][ T8761] usb 2-1: USB disconnect, device number 44 [ 2179.454971][ T5298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.465276][ T5298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2179.474258][ T5298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2179.485505][ T5298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2179.502307][ T5298] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2179.511375][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.540777][ T5298] hub 5-1:1.0: bad descriptor, ignoring hub [ 2179.552812][ T5298] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2179.560990][ T5298] cdc_wdm 5-1:1.0: skipping garbage [ 2179.582593][ T5298] cdc_wdm 5-1:1.0: skipping garbage [ 2179.592754][ T5298] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2179.598687][ T5298] cdc_wdm 5-1:1.0: Unknown control protocol [ 2179.966954][T20798] usb 5-1: USB disconnect, device number 49 [ 2180.082050][T22519] Bluetooth: hci3: command tx timeout [ 2180.092057][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2180.596615][ T6971] team0 (unregistering): Port device team_slave_1 removed [ 2180.686262][ T6971] team0 (unregistering): Port device team_slave_0 removed [ 2180.729229][T22519] Bluetooth: hci4: command tx timeout [ 2180.792809][T24079] input: syz1 as /devices/virtual/input/input131 [ 2181.122038][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2182.181880][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2182.190568][T22519] Bluetooth: hci3: command tx timeout [ 2182.478655][T24077] netlink: 'syz.4.4883': attribute type 10 has an invalid length. [ 2182.487015][T24078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4883'. [ 2182.668351][T24065] ip6gretap0 speed is unknown, defaulting to 1000 [ 2182.694516][T22519] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 2182.700687][T24036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.762116][T24036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.773368][T24036] bridge_slave_0: entered allmulticast mode [ 2182.799711][T24036] bridge_slave_0: entered promiscuous mode [ 2182.808432][T22519] Bluetooth: hci4: command tx timeout [ 2182.824398][T24036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.841770][T24036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.850133][T24036] bridge_slave_1: entered allmulticast mode [ 2182.885567][T24036] bridge_slave_1: entered promiscuous mode [ 2183.177080][T24036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2183.202045][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2183.236326][T24036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2183.479434][T24036] team0: Port device team_slave_0 added [ 2183.548722][T24036] team0: Port device team_slave_1 added [ 2183.678433][T24036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2183.697450][T24036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2183.796387][T24036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2183.850454][T24036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2183.870641][T24036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2183.906046][T24105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4891'. [ 2183.914701][T24036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2184.032129][ T45] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2184.121422][T24036] hsr_slave_0: entered promiscuous mode [ 2184.159529][T24036] hsr_slave_1: entered promiscuous mode [ 2184.182102][T24036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2184.193558][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 2184.212932][T24036] Cannot create hsr debugfs directory [ 2184.248512][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2184.257695][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2184.265294][T22519] Bluetooth: hci3: command tx timeout [ 2184.700583][ T45] usb 2-1: New USB device strings: Mfr=1, Product=80, SerialNumber=233 [ 2184.744194][ T45] usb 2-1: Product: syz [ 2184.762611][ T45] usb 2-1: Manufacturer: syz [ 2184.767335][ T45] usb 2-1: SerialNumber: syz [ 2184.795326][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2184.801607][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 2184.828548][T24065] chnl_net:caif_netlink_parms(): no params data found [ 2184.892365][T22519] Bluetooth: hci4: command tx timeout [ 2185.190302][T24065] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.213212][T24065] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.230648][T24065] bridge_slave_0: entered allmulticast mode [ 2185.247345][T24065] bridge_slave_0: entered promiscuous mode [ 2185.272171][T24065] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.292039][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2185.299307][T24065] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.309214][T24065] bridge_slave_1: entered allmulticast mode [ 2185.356028][T20798] r8152-cfgselector 2-1: USB disconnect, device number 45 [ 2185.376668][T24065] bridge_slave_1: entered promiscuous mode [ 2185.555651][T22519] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 2185.804479][T24065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.885102][T24065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.072957][T24065] team0: Port device team_slave_0 added [ 2186.111396][T24065] team0: Port device team_slave_1 added [ 2186.264898][T24065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.272709][T24065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.322139][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2186.332081][T24065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.355770][T24065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.369230][T24065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.427189][T24065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.458639][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'. [ 2186.469780][T24143] netlink: 'syz.0.4903': attribute type 9 has an invalid length. [ 2186.502712][T24143] netlink: 134712 bytes leftover after parsing attributes in process `syz.0.4903'. [ 2186.964477][T22519] Bluetooth: hci4: command tx timeout [ 2187.179409][T24065] hsr_slave_0: entered promiscuous mode [ 2187.188046][T24065] hsr_slave_1: entered promiscuous mode [ 2187.248701][T24065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2187.272208][T24065] Cannot create hsr debugfs directory [ 2187.372153][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2187.772187][ T5298] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2187.988363][ T5298] usb 1-1: Using ep0 maxpacket: 8 [ 2188.005875][ T5298] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2188.029621][ T5298] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2188.052174][ T5298] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2188.077348][ T5298] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2188.088765][ T5298] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.102268][ T5298] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2188.111362][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.412065][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2188.496617][ T5298] usb 1-1: usb_control_msg returned -32 [ 2188.505846][ T5298] usbtmc 1-1:16.0: can't read capabilities [ 2188.909359][T24036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2188.956874][T24036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2189.023844][T24036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2189.119999][T24036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2189.443683][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2189.791651][T24036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2189.817808][T24178] netlink: 'syz.1.4914': attribute type 10 has an invalid length. [ 2189.926436][T24036] 8021q: adding VLAN 0 to HW filter on device team0 [ 2189.973787][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.980884][ T5507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.028582][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.035692][ T5507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.120754][T24036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2190.148239][T24036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2190.191087][T24065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2190.230338][T24065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2190.234141][T24178] input: syz1 as /devices/virtual/input/input132 [ 2190.281111][T24065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2190.310039][T24065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2190.446138][ T5298] usb 1-1: USB disconnect, device number 52 [ 2190.482168][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2190.601156][T24065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2191.205944][T24036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2191.234372][T24065] 8021q: adding VLAN 0 to HW filter on device team0 [ 2191.532246][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2191.688146][T20658] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.695295][T20658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.784611][T20658] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.791712][T20658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2191.982615][T24036] veth0_vlan: entered promiscuous mode [ 2192.045767][T24036] veth1_vlan: entered promiscuous mode [ 2192.155615][T24036] veth0_macvtap: entered promiscuous mode [ 2192.175233][T24036] veth1_macvtap: entered promiscuous mode [ 2192.244229][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.312831][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.352226][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.392258][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.423018][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 2192.423037][ T29] audit: type=1326 audit(1728172622.902:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.462113][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.478324][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.502271][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.516992][ T29] audit: type=1326 audit(1728172622.932:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.544144][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.554388][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.564882][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2192.573242][ T29] audit: type=1326 audit(1728172622.942:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.597202][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.607412][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.618447][ T29] audit: type=1326 audit(1728172622.942:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.654197][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.665358][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.676532][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.687137][ T29] audit: type=1326 audit(1728172622.942:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.718819][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.729869][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.741634][ T29] audit: type=1326 audit(1728172622.942:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.768549][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.799515][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.822301][ T29] audit: type=1326 audit(1728172622.942:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2192.859777][T24036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2192.938926][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.970862][ T29] audit: type=1326 audit(1728172622.942:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2193.009839][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.043472][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.083392][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.103536][ T29] audit: type=1326 audit(1728172622.942:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2193.141187][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.155783][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.177029][ T29] audit: type=1326 audit(1728172622.942:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24204 comm="syz.0.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf337dff9 code=0x7ff00000 [ 2193.211230][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.232161][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.273236][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.389091][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.428545][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.489619][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.527816][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.570173][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.607094][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.617808][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2193.724905][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.790812][T24036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.860740][T24036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.925333][T24036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2193.954792][T24036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.996269][T24036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.014762][T24036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.029407][T24036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.071792][T24222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4927'. [ 2194.277785][T24065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2194.348797][T24065] veth0_vlan: entered promiscuous mode [ 2194.418513][T24065] veth1_vlan: entered promiscuous mode [ 2194.547152][T24065] veth0_macvtap: entered promiscuous mode [ 2194.559724][T20889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.568123][T20889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.633569][T24065] veth1_macvtap: entered promiscuous mode [ 2194.642041][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2194.664065][ T8781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.705853][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2194.732152][ T8781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.743371][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.770480][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2194.796609][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.829928][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2194.842119][T15636] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2194.861689][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.892734][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2194.919680][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.962956][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2194.985406][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.012077][T15636] usb 2-1: Using ep0 maxpacket: 8 [ 2195.019914][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.023752][T15636] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.052063][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.061894][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.083474][T15636] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2195.107189][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.114703][T15636] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2195.134175][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.152087][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.152118][T15636] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2195.161891][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.161912][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.161928][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.161946][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.206030][T15636] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2195.251512][T15636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.255107][T24065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2195.307655][T15636] usbtmc 2-1:16.0: bulk endpoints not found [ 2195.315134][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.362875][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.376946][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.401556][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.414150][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.426020][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.436687][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.465909][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.490838][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.504369][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.514405][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.525109][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.555950][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.575201][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.586140][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.596830][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.609255][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.620035][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.652026][T24065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.663411][T24065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.677182][ T45] usb 2-1: USB disconnect, device number 46 [ 2195.683407][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2195.724000][T24065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2195.785429][T24065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.802089][T24065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.820623][T24065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.842576][T24065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.674189][T24257] [ 2196.676550][T24257] ===================================================== [ 2196.683486][T24257] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2196.690941][T24257] 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 Not tainted [ 2196.698051][T24257] ----------------------------------------------------- [ 2196.704980][T24257] syz.4.4942/24257 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2196.712713][T24257] ffff88805c8282b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x138/0x520 [ 2196.721457][T24257] [ 2196.721457][T24257] and this task is already holding: [ 2196.728825][T24257] ffff8880512c4028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0x10e/0x9b0 [ 2196.732107][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2196.738692][T24257] which would create a new lock dependency: [ 2196.738702][T24257] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 2196.759556][T24257] [ 2196.759556][T24257] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2196.769008][T24257] (&dev->event_lock#2){..-.}-{2:2} [ 2196.769055][T24257] [ 2196.769055][T24257] ... which became SOFTIRQ-irq-safe at: [ 2196.781950][T24257] lock_acquire.part.0+0x11b/0x380 [ 2196.787159][T24257] _raw_spin_lock_irqsave+0x3a/0x60 [ 2196.792465][T24257] input_inject_event+0xa4/0x370 [ 2196.797509][T24257] led_set_brightness+0x211/0x290 [ 2196.802644][T24257] led_trigger_event+0xda/0x270 [ 2196.807599][T24257] kbd_bh+0x21b/0x300 [ 2196.811682][T24257] tasklet_action_common+0x24c/0x3e0 [ 2196.817069][T24257] handle_softirqs+0x213/0x8f0 [ 2196.821930][T24257] run_ksoftirqd+0x3a/0x60 [ 2196.826444][T24257] smpboot_thread_fn+0x661/0xa30 [ 2196.831486][T24257] kthread+0x2c1/0x3a0 [ 2196.835666][T24257] ret_from_fork+0x45/0x80 [ 2196.840181][T24257] ret_from_fork_asm+0x1a/0x30 [ 2196.845050][T24257] [ 2196.845050][T24257] to a SOFTIRQ-irq-unsafe lock: [ 2196.852068][T24257] (tasklist_lock){.+.+}-{2:2} [ 2196.852105][T24257] [ 2196.852105][T24257] ... which became SOFTIRQ-irq-unsafe at: [ 2196.864736][T24257] ... [ 2196.864746][T24257] lock_acquire.part.0+0x11b/0x380 [ 2196.872534][T24257] _raw_read_lock+0x5f/0x70 [ 2196.877134][T24257] __do_wait+0x105/0x890 [ 2196.881479][T24257] do_wait+0x219/0x570 [ 2196.885740][T24257] kernel_wait+0xa0/0x160 [ 2196.890174][T24257] call_usermodehelper_exec_work+0xf1/0x170 [ 2196.896168][T24257] process_one_work+0x9c5/0x1ba0 [ 2196.901202][T24257] worker_thread+0x6c8/0xf00 [ 2196.905893][T24257] kthread+0x2c1/0x3a0 [ 2196.910066][T24257] ret_from_fork+0x45/0x80 [ 2196.914577][T24257] ret_from_fork_asm+0x1a/0x30 [ 2196.919445][T24257] [ 2196.919445][T24257] other info that might help us debug this: [ 2196.919445][T24257] [ 2196.929677][T24257] Chain exists of: [ 2196.929677][T24257] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2196.929677][T24257] [ 2196.943273][T24257] Possible interrupt unsafe locking scenario: [ 2196.943273][T24257] [ 2196.951589][T24257] CPU0 CPU1 [ 2196.956953][T24257] ---- ---- [ 2196.962317][T24257] lock(tasklist_lock); [ 2196.966569][T24257] local_irq_disable(); [ 2196.973325][T24257] lock(&dev->event_lock#2); [ 2196.980540][T24257] lock(&client->buffer_lock); [ 2196.987923][T24257] [ 2196.991375][T24257] lock(&dev->event_lock#2); [ 2196.996251][T24257] [ 2196.996251][T24257] *** DEADLOCK *** [ 2196.996251][T24257] [ 2197.004391][T24257] 7 locks held by syz.4.4942/24257: [ 2197.009595][T24257] #0: ffff888029368110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x207/0x750 [ 2197.018788][T24257] #1: ffff888146aab230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xa4/0x370 [ 2197.028937][T24257] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xca/0x370 [ 2197.038647][T24257] #3: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8b/0x8e0 [ 2197.048265][T24257] #4: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x86/0x390 [ 2197.057444][T24257] #5: ffff8880512c4028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0x10e/0x9b0 [ 2197.067754][T24257] #6: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x6d/0x520 [ 2197.076843][T24257] [ 2197.076843][T24257] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2197.087262][T24257] -> (&dev->event_lock#2){..-.}-{2:2} { [ 2197.092942][T24257] IN-SOFTIRQ-W at: [ 2197.097015][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.103962][T24257] _raw_spin_lock_irqsave+0x3a/0x60 [ 2197.110995][T24257] input_inject_event+0xa4/0x370 [ 2197.117777][T24257] led_set_brightness+0x211/0x290 [ 2197.124652][T24257] led_trigger_event+0xda/0x270 [ 2197.131340][T24257] kbd_bh+0x21b/0x300 [ 2197.137157][T24257] tasklet_action_common+0x24c/0x3e0 [ 2197.144287][T24257] handle_softirqs+0x213/0x8f0 [ 2197.150890][T24257] run_ksoftirqd+0x3a/0x60 [ 2197.157141][T24257] smpboot_thread_fn+0x661/0xa30 [ 2197.163919][T24257] kthread+0x2c1/0x3a0 [ 2197.169826][T24257] ret_from_fork+0x45/0x80 [ 2197.176075][T24257] ret_from_fork_asm+0x1a/0x30 [ 2197.182686][T24257] INITIAL USE at: [ 2197.186673][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.193531][T24257] _raw_spin_lock_irqsave+0x3a/0x60 [ 2197.200483][T24257] input_inject_event+0xa4/0x370 [ 2197.207176][T24257] led_set_brightness+0x211/0x290 [ 2197.213972][T24257] kbd_led_trigger_activate+0xcb/0x110 [ 2197.221195][T24257] led_trigger_set+0x59a/0xc60 [ 2197.227712][T24257] led_trigger_set_default+0x1bd/0x2a0 [ 2197.234920][T24257] led_classdev_register_ext+0x78c/0x9e0 [ 2197.242305][T24257] input_leds_connect+0x552/0x8e0 [ 2197.249085][T24257] input_attach_handler.isra.0+0x181/0x260 [ 2197.256655][T24257] input_register_device+0xa84/0x1110 [ 2197.263781][T24257] atkbd_connect+0x5e2/0xa20 [ 2197.270121][T24257] serio_driver_probe+0x74/0xa0 [ 2197.275211][T24065] ieee80211 phy177: Selected rate control algorithm 'minstrel_ht' [ 2197.276715][T24257] really_probe+0x23e/0xa90 [ 2197.288329][T20889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.290701][T24257] __driver_probe_device+0x1de/0x440 [ 2197.305525][T24257] driver_probe_device+0x4c/0x1b0 [ 2197.312301][T24257] __driver_attach+0x283/0x580 [ 2197.318112][T20889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.318801][T24257] bus_for_each_dev+0x13c/0x1d0 [ 2197.332653][T24257] serio_handle_event+0x2bb/0xa90 [ 2197.339439][T24257] process_one_work+0x9c5/0x1ba0 [ 2197.346128][T24257] worker_thread+0x6c8/0xf00 [ 2197.352482][T24257] kthread+0x2c1/0x3a0 [ 2197.358312][T24257] ret_from_fork+0x45/0x80 [ 2197.364478][T24257] ret_from_fork_asm+0x1a/0x30 [ 2197.371003][T24257] } [ 2197.373593][T24257] ... key at: [] __key.7+0x0/0x40 [ 2197.380814][T24257] -> (&client->buffer_lock){....}-{2:2} { [ 2197.386579][T24257] INITIAL USE at: [ 2197.390488][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.397179][T24257] _raw_spin_lock_irqsave+0x3a/0x60 [ 2197.403958][T24257] evdev_do_ioctl+0x34a/0x1ad0 [ 2197.410309][T24257] evdev_ioctl+0x16a/0x1a0 [ 2197.416309][T24257] __x64_sys_ioctl+0x18f/0x220 [ 2197.422661][T24257] do_syscall_64+0xcd/0x250 [ 2197.428750][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.436225][T24257] } [ 2197.438725][T24257] ... key at: [] __key.1+0x0/0x40 [ 2197.445862][T24257] ... acquired at: [ 2197.449669][T24257] _raw_spin_lock+0x2e/0x40 [ 2197.454362][T24257] evdev_pass_values+0x10e/0x9b0 [ 2197.459494][T24257] evdev_events+0x1bb/0x390 [ 2197.464363][T24257] input_pass_values+0x777/0x8e0 [ 2197.469496][T24257] input_handle_event+0xf0b/0x14d0 [ 2197.474805][T24257] input_inject_event+0x1bb/0x370 [ 2197.480027][T24257] evdev_write+0x44f/0x750 [ 2197.484638][T24257] vfs_write+0x28e/0x1140 [ 2197.489161][T24257] ksys_write+0x1fa/0x260 [ 2197.493684][T24257] do_syscall_64+0xcd/0x250 [ 2197.498398][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.504490][T24257] [ 2197.507262][T24257] [ 2197.507262][T24257] the dependencies between the lock to be acquired [ 2197.507273][T24257] and SOFTIRQ-irq-unsafe lock: [ 2197.520793][T24257] -> (tasklist_lock){.+.+}-{2:2} { [ 2197.526117][T24257] HARDIRQ-ON-R at: [ 2197.530279][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.537404][T24257] _raw_read_lock+0x5f/0x70 [ 2197.543934][T24257] __do_wait+0x105/0x890 [ 2197.550207][T24257] do_wait+0x219/0x570 [ 2197.556300][T24257] kernel_wait+0xa0/0x160 [ 2197.562649][T24257] call_usermodehelper_exec_work+0xf1/0x170 [ 2197.570552][T24257] process_one_work+0x9c5/0x1ba0 [ 2197.577510][T24257] worker_thread+0x6c8/0xf00 [ 2197.584111][T24257] kthread+0x2c1/0x3a0 [ 2197.590196][T24257] ret_from_fork+0x45/0x80 [ 2197.596620][T24257] ret_from_fork_asm+0x1a/0x30 [ 2197.603401][T24257] SOFTIRQ-ON-R at: [ 2197.607562][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.614688][T24257] _raw_read_lock+0x5f/0x70 [ 2197.621201][T24257] __do_wait+0x105/0x890 [ 2197.627460][T24257] do_wait+0x219/0x570 [ 2197.633551][T24257] kernel_wait+0xa0/0x160 [ 2197.639905][T24257] call_usermodehelper_exec_work+0xf1/0x170 [ 2197.647816][T24257] process_one_work+0x9c5/0x1ba0 [ 2197.654765][T24257] worker_thread+0x6c8/0xf00 [ 2197.661365][T24257] kthread+0x2c1/0x3a0 [ 2197.667446][T24257] ret_from_fork+0x45/0x80 [ 2197.673130][T14672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2197.673941][T24257] ret_from_fork_asm+0x1a/0x30 [ 2197.688491][T24257] INITIAL USE at: [ 2197.691984][T14672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2197.692551][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.706835][T24257] _raw_write_lock_irq+0x36/0x50 [ 2197.713697][T24257] copy_process+0x3fe6/0x8db0 [ 2197.720301][T24257] kernel_clone+0xfd/0x960 [ 2197.726645][T24257] user_mode_thread+0xb4/0xf0 [ 2197.733252][T24257] rest_init+0x23/0x2b0 [ 2197.739346][T24257] start_kernel+0x3e4/0x4d0 [ 2197.745794][T24257] x86_64_start_reservations+0x18/0x30 [ 2197.753188][T24257] x86_64_start_kernel+0xb2/0xc0 [ 2197.760055][T24257] common_startup_64+0x13e/0x148 [ 2197.767006][T24257] INITIAL READ USE at: [ 2197.771520][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.778989][T24257] _raw_read_lock+0x5f/0x70 [ 2197.782049][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2197.785833][T24257] __do_wait+0x105/0x890 [ 2197.799263][T24257] do_wait+0x219/0x570 [ 2197.805698][T24257] kernel_wait+0xa0/0x160 [ 2197.812395][T24257] call_usermodehelper_exec_work+0xf1/0x170 [ 2197.820741][T24257] process_one_work+0x9c5/0x1ba0 [ 2197.828034][T24257] worker_thread+0x6c8/0xf00 [ 2197.834983][T24257] kthread+0x2c1/0x3a0 [ 2197.841414][T24257] ret_from_fork+0x45/0x80 [ 2197.848186][T24257] ret_from_fork_asm+0x1a/0x30 [ 2197.855403][T24257] } [ 2197.858077][T24257] ... key at: [] tasklist_lock+0x18/0x40 [ 2197.865987][T24257] ... acquired at: [ 2197.869966][T24257] _raw_read_lock+0x5f/0x70 [ 2197.874656][T24257] send_sigurg+0xf3/0xc80 [ 2197.879173][T24257] sk_send_sigurg+0x76/0x360 [ 2197.883957][T24257] tcp_urg+0x343/0xb80 [ 2197.888211][T24257] tcp_rcv_established+0x8a6/0x21c0 [ 2197.893602][T24257] tcp_v6_do_rcv+0x83c/0x16e0 [ 2197.898471][T24257] __release_sock+0x14c/0x400 [ 2197.903345][T24257] release_sock+0x5a/0x220 [ 2197.907953][T24257] sk_stream_wait_memory+0x65e/0x10e0 [ 2197.913515][T24257] tcp_sendmsg_locked+0xa65/0x3750 [ 2197.918819][T24257] tcp_sendmsg+0x2e/0x50 [ 2197.923251][T24257] inet6_sendmsg+0xb9/0x140 [ 2197.927946][T24257] __sys_sendto+0x36b/0x4d0 [ 2197.932640][T24257] __x64_sys_sendto+0xe0/0x1c0 [ 2197.937597][T24257] do_syscall_64+0xcd/0x250 [ 2197.942294][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.948378][T24257] [ 2197.950700][T24257] -> (&f_owner->lock){....}-{2:2} { [ 2197.956029][T24257] INITIAL USE at: [ 2197.960015][T24257] lock_acquire.part.0+0x11b/0x380 [ 2197.966874][T24257] _raw_write_lock_irq+0x36/0x50 [ 2197.973567][T24257] __f_setown+0x67/0x3c0 [ 2197.979560][T24257] f_setown+0x122/0x290 [ 2197.985465][T24257] do_fcntl+0xf44/0x1510 [ 2197.991457][T24257] __x64_sys_fcntl+0x176/0x210 [ 2197.997971][T24257] do_syscall_64+0xcd/0x250 [ 2198.004227][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.011874][T24257] INITIAL READ USE at: [ 2198.016293][T24257] lock_acquire.part.0+0x11b/0x380 [ 2198.023588][T24257] _raw_read_lock_irq+0x67/0x80 [ 2198.030629][T24257] do_fcntl+0x45b/0x1510 [ 2198.037055][T24257] __x64_sys_fcntl+0x176/0x210 [ 2198.044004][T24257] do_syscall_64+0xcd/0x250 [ 2198.050696][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.058775][T24257] } [ 2198.061364][T24257] ... key at: [] __key.1+0x0/0x40 [ 2198.068584][T24257] ... acquired at: [ 2198.072473][T24257] _raw_read_lock_irqsave+0x74/0x90 [ 2198.077855][T24257] send_sigio+0x31/0x3e0 [ 2198.082289][T24257] kill_fasync+0x21a/0x520 [ 2198.086891][T24257] lease_break_callback+0x23/0x30 [ 2198.092108][T24257] __break_lease+0x67c/0x17d0 [ 2198.096967][T24257] do_dentry_open+0x665/0x1530 [ 2198.101925][T24257] vfs_open+0x82/0x3f0 [ 2198.106177][T24257] path_openat+0x1e6a/0x2d60 [ 2198.110958][T24257] do_filp_open+0x1dc/0x430 [ 2198.115639][T24257] do_sys_openat2+0x17a/0x1e0 [ 2198.120501][T24257] __x64_sys_open+0x154/0x1e0 [ 2198.125371][T24257] do_syscall_64+0xcd/0x250 [ 2198.130061][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.136142][T24257] [ 2198.138464][T24257] -> (&new->fa_lock){....}-{2:2} { [ 2198.143618][T24257] INITIAL USE at: [ 2198.147522][T24257] lock_acquire.part.0+0x11b/0x380 [ 2198.154647][T24257] _raw_write_lock_irq+0x36/0x50 [ 2198.161165][T24257] fasync_remove_entry+0xb9/0x1e0 [ 2198.167768][T24257] fasync_helper+0xaf/0xd0 [ 2198.173761][T24257] __tty_fasync+0x1e4/0x300 [ 2198.179848][T24257] tty_fasync+0x9e/0xe0 [ 2198.185584][T24257] __fput+0x958/0xb60 [ 2198.191140][T24257] task_work_run+0x14e/0x250 [ 2198.197304][T24257] syscall_exit_to_user_mode+0x27b/0x2a0 [ 2198.204515][T24257] do_syscall_64+0xda/0x250 [ 2198.210603][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.218074][T24257] INITIAL READ USE at: [ 2198.222409][T24257] lock_acquire.part.0+0x11b/0x380 [ 2198.229531][T24257] _raw_read_lock_irqsave+0x74/0x90 [ 2198.236741][T24257] kill_fasync+0x138/0x520 [ 2198.243171][T24257] pipe_read+0xcc1/0x13f0 [ 2198.249505][T24257] aio_read+0x313/0x4e0 [ 2198.255671][T24257] io_submit_one+0x1580/0x1da0 [ 2198.262449][T24257] __x64_sys_io_submit+0x19d/0x330 [ 2198.269573][T24257] do_syscall_64+0xcd/0x250 [ 2198.276095][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.284003][T24257] } [ 2198.286503][T24257] ... key at: [] __key.0+0x0/0x40 [ 2198.293641][T24257] ... acquired at: [ 2198.297450][T24257] lock_acquire.part.0+0x11b/0x380 [ 2198.302745][T24257] _raw_read_lock_irqsave+0x74/0x90 [ 2198.308135][T24257] kill_fasync+0x138/0x520 [ 2198.312736][T24257] evdev_pass_values+0x619/0x9b0 [ 2198.317866][T24257] evdev_events+0x1bb/0x390 [ 2198.322561][T24257] input_pass_values+0x777/0x8e0 [ 2198.327693][T24257] input_handle_event+0xf0b/0x14d0 [ 2198.332997][T24257] input_inject_event+0x1bb/0x370 [ 2198.338217][T24257] evdev_write+0x44f/0x750 [ 2198.342827][T24257] vfs_write+0x28e/0x1140 [ 2198.347347][T24257] ksys_write+0x1fa/0x260 [ 2198.351869][T24257] do_syscall_64+0xcd/0x250 [ 2198.356561][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.362644][T24257] [ 2198.364969][T24257] [ 2198.364969][T24257] stack backtrace: [ 2198.370861][T24257] CPU: 0 UID: 0 PID: 24257 Comm: syz.4.4942 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 2198.381642][T24257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2198.391706][T24257] Call Trace: [ 2198.394990][T24257] [ 2198.397930][T24257] dump_stack_lvl+0x116/0x1f0 [ 2198.402633][T24257] check_irq_usage+0xf22/0x1290 [ 2198.407516][T24257] ? __pfx_check_irq_usage+0x10/0x10 [ 2198.412831][T24257] ? hlock_conflict+0x58/0x200 [ 2198.417617][T24257] ? __bfs+0x2fa/0x670 [ 2198.421702][T24257] ? __pfx_hlock_conflict+0x10/0x10 [ 2198.426934][T24257] ? lockdep_lock+0xc6/0x200 [ 2198.431544][T24257] ? __pfx_lockdep_lock+0x10/0x10 [ 2198.436585][T24257] ? try_to_wake_up+0x5d7/0x1440 [ 2198.441542][T24257] ? __lock_acquire+0x2521/0x3ce0 [ 2198.446576][T24257] __lock_acquire+0x2521/0x3ce0 [ 2198.451450][T24257] ? __pfx___lock_acquire+0x10/0x10 [ 2198.456660][T24257] ? __pfx___lock_acquire+0x10/0x10 [ 2198.461868][T24257] ? hlock_class+0x4e/0x130 [ 2198.466392][T24257] lock_acquire.part.0+0x11b/0x380 [ 2198.471518][T24257] ? kill_fasync+0x138/0x520 [ 2198.476136][T24257] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2198.481784][T24257] ? rcu_is_watching+0x12/0xc0 [ 2198.486574][T24257] ? trace_lock_acquire+0x14a/0x1d0 [ 2198.491801][T24257] ? kill_fasync+0x138/0x520 [ 2198.496417][T24257] ? lock_acquire+0x2f/0xb0 [ 2198.500940][T24257] ? kill_fasync+0x138/0x520 [ 2198.505563][T24257] _raw_read_lock_irqsave+0x74/0x90 [ 2198.510788][T24257] ? kill_fasync+0x138/0x520 [ 2198.515393][T24257] kill_fasync+0x138/0x520 [ 2198.519830][T24257] evdev_pass_values+0x619/0x9b0 [ 2198.524796][T24257] evdev_events+0x1bb/0x390 [ 2198.529322][T24257] input_pass_values+0x777/0x8e0 [ 2198.534288][T24257] input_handle_event+0xf0b/0x14d0 [ 2198.539431][T24257] input_inject_event+0x1bb/0x370 [ 2198.544486][T24257] evdev_write+0x44f/0x750 [ 2198.548932][T24257] ? __pfx_evdev_write+0x10/0x10 [ 2198.553898][T24257] ? bpf_lsm_file_permission+0x9/0x10 [ 2198.559289][T24257] ? security_file_permission+0x71/0x210 [ 2198.564941][T24257] ? __pfx_evdev_write+0x10/0x10 [ 2198.569900][T24257] vfs_write+0x28e/0x1140 [ 2198.574258][T24257] ? __fget_files+0x23a/0x3f0 [ 2198.578958][T24257] ? __pfx_lock_release+0x10/0x10 [ 2198.583992][T24257] ? trace_lock_acquire+0x14a/0x1d0 [ 2198.589212][T24257] ? __pfx_vfs_write+0x10/0x10 [ 2198.594005][T24257] ? lock_acquire+0x2f/0xb0 [ 2198.598523][T24257] ? __fget_files+0x40/0x3f0 [ 2198.603136][T24257] ? __fget_files+0x244/0x3f0 [ 2198.607834][T24257] ksys_write+0x1fa/0x260 [ 2198.612184][T24257] ? __pfx_ksys_write+0x10/0x10 [ 2198.617058][T24257] do_syscall_64+0xcd/0x250 [ 2198.621585][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.627501][T24257] RIP: 0033:0x7fe064b7dff9 [ 2198.631926][T24257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.651544][T24257] RSP: 002b:00007fe0659d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2198.659970][T24257] RAX: ffffffffffffffda RBX: 00007fe064d35f80 RCX: 00007fe064b7dff9 [ 2198.667955][T24257] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2198.675943][T24257] RBP: 00007fe064bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 2198.683923][T24257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2198.691902][T24257] R13: 0000000000000000 R14: 00007fe064d35f80 R15: 00007ffeb4e377e8 [ 2198.699890][T24257] [ 2198.702929][ C0] vkms_vblank_simulate: vblank timer overrun [ 2198.802059][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2199.106935][T20658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.372622][T20658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.494212][T20658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.577759][T20658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.667285][T20658] bridge_slave_1: left allmulticast mode [ 2199.676981][T20658] bridge_slave_1: left promiscuous mode [ 2199.683696][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.693145][T20658] bridge_slave_0: left allmulticast mode [ 2199.700636][T20658] bridge_slave_0: left promiscuous mode [ 2199.706360][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.852097][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2200.017440][T20658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.027844][T20658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.038239][T20658] bond0 (unregistering): Released all slaves [ 2200.277395][T20658] hsr_slave_0: left promiscuous mode [ 2200.283329][T20658] hsr_slave_1: left promiscuous mode [ 2200.295390][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2200.304542][T20658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2200.314238][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2200.321641][T20658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2200.331792][T20658] veth1_macvtap: left promiscuous mode [ 2200.337346][T20658] veth0_macvtap: left promiscuous mode [ 2200.347027][T20658] veth1_vlan: left promiscuous mode [ 2200.352788][T20658] veth0_vlan: left promiscuous mode [ 2200.607768][T20658] team0 (unregistering): Port device team_slave_1 removed [ 2200.628011][T20658] team0 (unregistering): Port device team_slave_0 removed [ 2200.882136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2201.113503][T20658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.170152][T20658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.238763][T20658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.311418][T20658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.416749][T20658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.476787][T20658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.527245][T20658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.569736][T20658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.650629][T20658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.726434][T20658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.768397][T20658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.807692][T20658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.885115][T20658] bridge_slave_1: left allmulticast mode [ 2201.890782][T20658] bridge_slave_1: left promiscuous mode [ 2201.896657][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.905121][T20658] bridge_slave_0: left allmulticast mode [ 2201.910773][T20658] bridge_slave_0: left promiscuous mode [ 2201.916601][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.925951][T20658] bridge_slave_1: left allmulticast mode [ 2201.931600][T20658] bridge_slave_1: left promiscuous mode [ 2201.932055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2201.944370][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.956513][T20658] bridge_slave_0: left allmulticast mode [ 2201.962856][T20658] bridge_slave_0: left promiscuous mode [ 2201.968502][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.980852][T20658] bridge_slave_1: left allmulticast mode [ 2201.986791][T20658] bridge_slave_1: left promiscuous mode [ 2201.993041][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.001278][T20658] bridge_slave_0: left allmulticast mode [ 2202.007206][T20658] bridge_slave_0: left promiscuous mode [ 2202.013800][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.367685][T20658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.381491][T20658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.391499][T20658] bond0 (unregistering): Released all slaves [ 2202.409529][T20658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.424300][T20658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.436706][T20658] bond0 (unregistering): Released all slaves [ 2202.921115][T20658] hsr_slave_0: left promiscuous mode [ 2202.930536][T20658] hsr_slave_1: left promiscuous mode [ 2202.936480][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2202.947501][T20658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2202.960980][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2202.968528][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2202.981836][T20658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2202.995673][T20658] hsr_slave_0: left promiscuous mode [ 2203.001403][T20658] hsr_slave_1: left promiscuous mode [ 2203.007860][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2203.018853][T20658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.026547][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.037565][T20658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.048647][T20658] hsr_slave_0: left promiscuous mode [ 2203.058003][T20658] hsr_slave_1: left promiscuous mode [ 2203.063970][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2203.071365][T20658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.084386][T20658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.091784][T20658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.105353][T20658] veth1_macvtap: left promiscuous mode [ 2203.111293][T20658] veth0_macvtap: left promiscuous mode [ 2203.116927][T20658] veth1_vlan: left promiscuous mode [ 2203.122425][T20658] veth0_vlan: left promiscuous mode [ 2203.128635][T20658] veth1_macvtap: left promiscuous mode [ 2203.134215][T20658] veth0_macvtap: left promiscuous mode [ 2203.139760][T20658] veth1_vlan: left promiscuous mode [ 2203.145180][T20658] veth0_vlan: left promiscuous mode [ 2203.151019][T20658] veth0_macvtap: left promiscuous mode [ 2203.156668][T20658] veth1_vlan: left promiscuous mode [ 2203.161933][T20658] veth0_vlan: left promiscuous mode [ 2203.499052][T20658] team0 (unregistering): Port device team_slave_1 removed [ 2203.538255][T20658] team0 (unregistering): Port device team_slave_0 removed [ 2203.817973][T20658] team0 (unregistering): Port device team_slave_1 removed [ 2203.855229][T20658] team0 (unregistering): Port device team_slave_0 removed [ 2204.002122][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2204.136490][T20658] team0 (unregistering): Port device team_slave_1 removed [ 2204.168300][T20658] team0 (unregistering): Port device team_slave_0 removed [ 2205.042071][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2206.082094][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2206.576139][T20658] bridge_slave_1: left allmulticast mode [ 2206.581809][T20658] bridge_slave_1: left promiscuous mode [ 2206.590091][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.598639][T20658] bridge_slave_0: left allmulticast mode [ 2206.604919][T20658] bridge_slave_0: left promiscuous mode [ 2206.610586][T20658] bridge0: port 1(bridge_slave_0) entered disabled state